last executing test programs: 11.188578609s ago: executing program 0 (id=18): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000140)="e2", 0x1, [0x7fff], 0xc0, 0x8, 0x0, {0x6, 0x7, 0x0}, {0x0, 0x3, @sigval_int=0x13ef, @spare=[0x800000000001000, 0xf, 0x9, 0x0, 0x7, 0x2, 0x6, 0x9]}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) posix_fadvise(r2, 0x0, 0x800000006, 0x5) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x80, 0x1, 0x0, {0x15, 0x4, 0x3, 0x8, 0x21bf, 0x67, 0x1, 0x3, 0x51, 0x3, @loopback, @empty, {[@ssrr={0x89, 0x23, 0x0, [@multicast1, @empty, @multicast1, @multicast1, @remote={0xac, 0x14, 0x0}, @rand_addr=0x5, @multicast2, @multicast1]}, @timestamp={0x44, 0x1c, 0xe, 0x1, 0x6, [{[], 0x1}, {[], 0x4}, {[], 0xffffffcd}, {[], 0xd}, {[], 0x10001}, {[], 0x4}]}]}}}}}}}) r3 = openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000000, 0x0) ioctl$MDIOCRESIZE(r3, 0xc1c06d04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000001, 0x0, [0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff, 0x40009, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x176a6, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x403, 0x5, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x401, 0xfffffc01, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d3133fa]}) r4 = kqueue() symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') r5 = socket$unix(0x1, 0x5, 0x0) listen(r5, 0x2) kevent(r4, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000015", 0x38, 0x2c, 0xff, @rand_addr="e1aaa2241dc0fb000000000000000178", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6, {0x7, 0x6, "18deb3", 0x400, 0x2b, 0x1, @loopback, @empty, [@hopopts={0x70}]}}}}}}}) r6 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x31, &(0x7f0000000100)={0x24}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x14, 0x3a, 0xff, @rand_addr="000000000000600000000000ee00", @empty, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}) rtprio(0x0, 0x0, &(0x7f0000000080)={0x4, 0x9}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) procctl$PROC_ASLR_STATUS(0x0, 0x0, 0xe, &(0x7f0000000440)) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) r7 = socket$inet6_sctp(0x1c, 0x5, 0x84) r8 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1b, &(0x7f00000001c0), 0x4) r9 = dup(r8) sendmsg$inet6_sctp(r9, &(0x7f0000001480)={&(0x7f0000000240)=@in6={0x1c, 0x1c, 0x3, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYRES16=r7], 0x74, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0) poll(0xffffffffffffffff, 0x2000, 0x3) 10.222414582s ago: executing program 0 (id=22): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ftruncate(r0, 0x80002) (async, rerun: 32) socket$inet6_sctp(0x1c, 0x1, 0x84) (async, rerun: 32) socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f00000000c0)={0xb, 0xe, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e8090000005a", 0x0, 0x0, 0x0, 0x7d86699a, [0x1000009, 0x0, 0x0, 0x1]}) (async, rerun: 64) connect$inet(r1, &(0x7f00000000c0)={0x10, 0x2, 0x2, @rand_addr}, 0x10) (async, rerun: 64) aio_error(&(0x7f0000000440)={r0, 0x6, &(0x7f0000000340)="85459704950212c688348d0e9ac5a0674809c3d0b58df7fa07a2545428897492360f88f405faae9e2c6427de24ca7214639f08e38de491e63af9bf3d91e752c57fc144a3bd78d3445f915ee49935c4256c21f151ee8584a64084274a5ce260a09a8edf7b212c17553764fd1b3c8003cda87b65182fda5667bb4f0fec76c2666933b0b99db7d6f2fefe2a4e2d2cca413f9ed62ce96a8b99f885d76f37f8c8cec5c1a65db4c03718e7bb7fa99b5d751d7271591cbbd033ce9f8d7a48441c194cfe7c6df6e3d4f095bf1e7c75a9895f4f26bea275fc912ac0b7bcd2314701089f4f3cfe029c8d4dbe", 0xe7, [0x2, 0xffffa063], 0x5, 0x8, 0x101, {0x3, 0x1, &(0x7f0000000180)="da3e2ac2926825d0d43d2c2735807bc21cc03dcbc7f1f18048f32a3b6e7a5f413f74f4bbf3b63b359bf9e3efcc0d7b755afa64244b615ded0b8afcd136f42e28fa4bac05b939bbd8fe89e89c8d17572fba92c101a5c7acc3a5f06949e9"}, {0x0, 0xa, @sigval_ptr=0x8000000000000000, @ke_flags=0x2}}) setsockopt$inet_tcp_buf(r1, 0x6, 0x401, &(0x7f0000000200), 0x0) (async) getpid() sendmsg$inet6_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x149}], 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24) (async, rerun: 64) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) (async, rerun: 32) r4 = open(&(0x7f0000000040)='./file0\x00', 0x300, 0x0) (async, rerun: 32) r5 = getpgid(0x0) fcntl$lock(r4, 0xe, &(0x7f0000000100)={0x3, 0x3, 0x9, 0x100000001, r5}) (async) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xd8, 0x1000301010005, r5}) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) (async, rerun: 64) r7 = socket(0x1c, 0x10000000000003, 0x8) setsockopt$sock_int(r7, 0xffff, 0x1017, &(0x7f0000000040), 0x4) r8 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r8, &(0x7f0000000300)={0x1c, 0x1c, 0x2, 0xfffffffe, @loopback, 0x8be}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x12, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x5}}}}}) (async, rerun: 32) pipe2(&(0x7f0000000080), 0x100004) (rerun: 32) 9.442149153s ago: executing program 0 (id=30): r0 = socket(0x2, 0x1, 0x0) r1 = kqueue() cpuset_getdomain(0xb07d6eb2b3a5c28, 0x6, 0x7, 0x20, &(0x7f0000000000), 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x14000000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="00000200", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x6, 0x0, @multicast2, @multicast2}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0xa7, 0x0, 0x406, {[@sack_perm={0x4, 0x2}, @generic={0x2, 0x2}, @window={0x3, 0x3, 0x1}, @nop]}}}}}}}) kevent(r1, &(0x7f00000001c0)=[{0x3, 0xfffffffffffffff3, 0x1, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x802, 0x1, &(0x7f0000000040), 0x10) sendto$inet(0xffffffffffffff9c, 0x0, 0x0, 0x20000, &(0x7f0000000200)={0x10, 0x2, 0x1, @rand_addr=0x37d86a57}, 0x10) shutdown(r0, 0x1) 9.242608631s ago: executing program 0 (id=31): r0 = msgget$private(0x0, 0x790) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/227) r1 = msgget(0x3, 0x4b4) rfork(0x1000) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/143) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYRES8=0xffffffffffffffff], 0x401, 0x0) msgsnd(r0, &(0x7f0000001a40)=ANY=[@ANYRES8=r2], 0x401, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000) msgrcv(r0, 0x0, 0x0, 0x0, 0x1800) 9.17916711s ago: executing program 0 (id=34): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0xd) rmdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b2, 0x1000381210089}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x300, 0x0) r2 = getpgid(0x0) fcntl$lock(r1, 0xe, &(0x7f0000000100)={0x3, 0x3, 0x4000000009, 0x100000001, r2}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xd8, 0x9, r2}) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) symlink(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) chroot(&(0x7f0000000000)='./file0\x00') __realpathat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)=""/17, 0x11, 0x0) open(0x0, 0x0, 0x0) setuid(0xee01) kqueue() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) truncate(0x0, 0x4677) openat$evdev(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') socket$inet_sctp(0x2, 0x5, 0x84) bind(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r7, 0x1, 0x400000000000, 0x0, 0x0, 0xf) rfork(0x83000) 8.867995879s ago: executing program 0 (id=37): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) profil(&(0x7f0000000740)="bc35255503809b24cec7cfb46eb5e86d4eabc6bd134990c806afe805f481dd47db71000545b6841a77757ba8d90499b56adf78a8a7ada658fff8748972f755bea2600869a92453335ec48e32a70940db3596a4e2d2a04a641467c06d22a6a1e72805b8343c0996c7bf21ab2121a2cfd280e4645d883869a31edbefe514866ac4631cadecda93456115582130e0e36ffad8fb40bbcf367dcf150b939e21c7080ee8a8efd61be6bab01b3cdb345f45117b0ad6ebf362a1d90178633ee941e92585513e5cb7e4e4", 0xc6, 0x2, 0x2) pwritev(r0, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffff702abf8e720800480000280000000000009078ac1400aaac1400aa01830b08ac141aaa000000084e214e2100089078"]) ftruncate(r0, 0x80002) socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) mount(&(0x7f0000000500)='zfs\x00', &(0x7f0000000540)='./file0\x00', 0x3000886, &(0x7f0000001ac0)="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") setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) aio_error(0x0) sendmsg$inet6_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@in6={0x0, 0x1c, 0x0, 0xfff, @local={0xfe, 0x80, '\x00', 0x0}, 0xe}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000840)="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", 0x14b}], 0x1, 0x0, 0x30, 0x81}, 0x1) kqueue() kevent(0xffffffffffffffff, &(0x7f0000000000)=[{0x7, 0xfffffffffffffff9, 0x8009, 0x8, 0xf8c5, 0x0, [0x0, 0x100000001, 0x2000000000, 0xfffffffffffffffc]}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr}}, 0x1c) setresuid(0xffffffffffffffff, 0xee01, 0x0) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) access(0x0, 0x0) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, &(0x7f0000000cc0)) kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) setreuid(0xee00, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @broadcast, @local={0xac, 0x14, 0x0}}, 0xc) 7.46938338s ago: executing program 1 (id=45): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rfork(0x85000) execve(0x0, &(0x7f0000000380)=[&(0x7f00000005c0)='.(\x00'], 0x0) ioctl$MDIOCATTACH(r0, 0xc1c06d00, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x80008, 0x8000, 0x6, 0xf2, 0xfffffffd, 0x10, 0x0, [0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0xfffffffc, 0x20, 0x0, 0x1, 0x2, 0x80002, 0x0, 0x40000, 0x0, 0x3, 0xfffffffe, 0x4, 0x57, 0x0, 0xffffffff, 0x0, 0x3, 0x1, 0x8, 0x80000003, 0x0, 0x0, 0x2ffffff, 0x800000, 0x0, 0x0, 0x0, 0x60d6, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xc7d8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xc, 0x0, 0x3, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x800, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x2, 0x20000003, 0x7]}) 7.338712874s ago: executing program 1 (id=49): mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x0) openat$bpf(0xffffff9c, 0x0, 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000005, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x20, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={0x0, 0x0}}}) setresgid(0xee00, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r3 = socket$inet6(0x1c, 0x2, 0x0) fcntl$lock(r3, 0x16, &(0x7f0000000000)={0x570}) setsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, 0xfffffefa) kevent(r2, &(0x7f0000000300)=[{0x20003, 0xfffffffffffffff5, 0xc0c3, 0x80, 0x0, 0x5, [0x0, 0x0, 0xfffffffffffffffe, 0x100000000]}, {0x18c, 0xfffffffffffffff9, 0x2080, 0x1, 0x98, 0x96, [0xd1e, 0xed, 0xb76, 0x6]}, {0x10000, 0xffffffffffffffff, 0x4, 0x80000000, 0x7, 0x7, [0x118, 0x2, 0x3f, 0x6]}, {0x40, 0xfffffffffffffff5, 0x4062, 0x1000000, 0x4, 0x4, [0x4, 0x100, 0x7, 0xc23]}], 0x4, 0x0, 0x0, 0x0) mlockall(0x2) r4 = open(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x60000000) munlockall() mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x20000000, &(0x7f0000000140)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) fdatasync(r5) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x3ffffffffffffd]}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x1c, 0x1, 0x0) select(0x40, &(0x7f0000000040)={0x9}, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 6.209921043s ago: executing program 1 (id=53): r0 = kqueue() mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) cap_fcntls_limit(0xffffffffffffffff, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080600010800060000046e74e235c8b8000000000000324c10449a2c75e156495cd94f453037"]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x10, 0x2, 0x1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1018, 0x0, 0x0) accept4(r1, 0x0, &(0x7f0000000280), 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) r5 = fork() wait4(r5, 0x0, 0x1, &(0x7f00000000c0)) open$dir(0x0, 0x40000400000002c2, 0x0) pathconf(&(0x7f00000001c0)='./file0\x00', 0x35) r6 = socket$inet6(0x1c, 0x20000000, 0x0) setsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f00000001c0)=0xa, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd60c3200000283c00feffffff000000000000000000000002ff0200000000000000000000000000012b"]) chroot(&(0x7f0000000080)='./file0/file0/..\x00') rmdir(&(0x7f00000002c0)='./file0/file0/..\x00') kevent(r0, &(0x7f0000000040)=[{0x80000001, 0xfffffffffffffff9, 0x1, 0x8, 0xe8c5}], 0x1, 0x0, 0x60, 0x0) r7 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="19fdb123c091ae3db1f1c5f51d8be800"}}}, 0x108) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) posix_fallocate(r8, 0x9, 0xd) setsockopt$inet6_group_source_req(r7, 0x29, 0x50, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x80000000, @mcast1, 0xf}}, {{0x1c, 0x1c, 0x1, 0x0, @empty}}}, 0x108) socket$inet_udp(0x2, 0x2, 0x0) 2.199916404s ago: executing program 2 (id=59): mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) (async) socket$inet6_udp(0x1c, 0x2, 0x0) rfork(0x85000) (async) r0 = socket(0x1, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x300, @mcast1}, 0xc) (async) syz_emit_ethernet(0x2a, &(0x7f0000001940)=ANY=[@ANYBLOB]) (async) recvmsg(r1, 0x0, 0x2) (async) aio_write(&(0x7f0000000340)={0xffffffffffffffff, 0x80000001, &(0x7f00000000c0)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0xb, 0x0}, {0x0, 0x2000, @sival_int, @spare=[0xd, 0x1, 0x1, 0x101, 0xb27, 0x8000000000000000, 0x1000, 0x8000000000000001]}}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x46, 0x0, 0x0) (async) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) kevent(0xffffffffffffffff, &(0x7f0000000200)=[{0x2, 0xfffffffffffffffe, 0xc0a1, 0x8, 0x8000, 0x4, [0x7, 0x8, 0x3, 0x3]}], 0x1, &(0x7f0000000940)=[{}], 0x1, &(0x7f0000000280)={0x9, 0x4}) (async) sendto(0xffffffffffffffff, &(0x7f0000000200)="f69471b0bc5e66a942979a2692bf5d84412ddda124db6bf7c319f79194fb8aa794db7482ce3e91abb35d25fb4924c1fc5551f7566ff4935d83a65079a483e6ebf3a79ea480808846ff4c346090d2765455b9e1856258b4c14602671832338058f2e0c0830f09bb7250e36a07489fb6f14562f07e528b7a8b7f6017f159bf051b25a40eace7263ab3d74a3aac73aa1fe1e1fdbb5189b757b6cee9aa9253cd6d7e8c311857", 0xa4, 0x100, 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000140)={0x15, 0x8, 0x0, 0x0, 0x59, &(0x7f0000000040)="d024da87ec8bd0d834c727977133b4375d5f72b0af6100b6621c4f63c4e19dcb1561e2a4b25e81a6c0807caae6314393a11cfe6f60cdf1d90a5a1e3f10455d96d42072f8f40f6a9f6c5221270e3ebef4621cb2f2a933c82cc9", 0x8, 0x1000, [0x9, 0x2, 0x6, 0x1e19]}) (async) setsockopt$inet_sctp_SCTP_BINDX_REM_ADDR(r2, 0x84, 0x8002, &(0x7f0000000340)=@in6={0x1c, 0x1c, 0x0, 0x7, @local={0xfe, 0x80, '\x00', 0x0}, 0x598eac86}, 0x0) kqueue() r3 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200201, 0x0) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x100) fcntl$lock(r5, 0xe, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffff, 0x100000006}) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x300, 0x0) (async) r7 = getpgid(0x0) fcntl$lock(r6, 0xc, &(0x7f0000000100)={0x3, 0x3, 0x9, 0x100000001, r7}) 1.998445365s ago: executing program 3 (id=61): r0 = kqueue() r1 = socket$inet(0x2, 0x4, 0xfd) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4) r4 = kqueue() kevent(r4, &(0x7f0000000300)=[{0x4, 0xfffffffffffffffe, 0x1d35f0197bd87fb1, 0x0, 0x0, 0x0, [0x1000000, 0x0, 0x2, 0xfffffffffffffffe]}], 0x1, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4) bind$inet(r5, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) rfork(0x1040) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2, 0x1, 0x0) symlink(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000180)='./file1\x00', 0x0) chdir(&(0x7f0000000040)='./file1\x00') renameat(r6, &(0x7f0000000200)='./file1\x00', r6, &(0x7f0000000140)='./file0/file0\x00') fchdir(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) r7 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r7, 0x29, 0x25, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='/,&-,\x00'], 0x0) 1.939971387s ago: executing program 3 (id=62): open$dir(&(0x7f0000000000)='./file0\x00', 0x601, 0x0) (async) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000000)={0x0, 0x26, 0x0, 0x0, 0x1, &(0x7f00000003c0)='p', 0x10000, 0xbdfffffd, [0x0, 0x3]}) (async) openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 32) freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x20) (async) r1 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @ipv4}, 0x1c) (async) r2 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r2, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, 0x0) (async, rerun: 32) r3 = open(&(0x7f0000000040)='./file0\x00', 0x8381, 0x20) ftruncate(r3, 0x58400) (async) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) (async, rerun: 64) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB]) (async, rerun: 64) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x138, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r5 = socket(0x2, 0x1, 0x0) bind(r5, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) (async, rerun: 32) setsockopt(r5, 0x6, 0x8, &(0x7f0000000100)="77b3d8fa", 0x4) (async, rerun: 32) bind$inet6(r2, 0x0, 0x0) shm_unlink(&(0x7f0000000000)='./file0\x00') rfork(0x3060) 1.939470901s ago: executing program 3 (id=63): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) getresuid(0x0, 0x0, &(0x7f0000000080)) aio_write(&(0x7f0000000340)={r1, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}}) mlockall(0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x80) sync() aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, &(0x7f00000004c0)='M', 0x1, [0x3, 0x20000000], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @spare=[0x7f, 0x0, 0xc, 0xa, 0x0, 0x0, 0x9, 0x38fa]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10080410, 0xffffffffffffffff, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = kqueue() socketpair$unix(0x1, 0x5, 0x0, 0x0) kevent(r3, &(0x7f0000000280)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x1, 0x8, 0x9]}], 0x1, 0x0, 0x0, 0x0) ktimer_create(0x4, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r4, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1, [0x0, 0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000100)='}/./%*})/%^$^,\xc5/\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',@,', &(0x7f0000000200)='\x00', &(0x7f0000000400)=').\x00', &(0x7f0000000440)=')$\x00'], &(0x7f00000006c0)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='{)\x00', &(0x7f0000000600)='!\x00', &(0x7f0000000640)='\\\\#\x00', &(0x7f0000000680)='\'+@\x00']) semop(0x0, &(0x7f0000000080)=[{0x2, 0xa, 0x800}], 0x1) link(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') aio_writev(&(0x7f0000001200)={0xffffffffffffffff, 0x8, 0x0, 0x0, [0x8, 0x1ff], 0x8, 0x5, 0x3, {0x4, 0x6, 0x0}, {0x3, 0x40020, @sigval_ptr=0x7ff}}) 1.439992325s ago: executing program 1 (id=64): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r1) ioctl$DIOCCHANGERULE(r2, 0x8048756d, &(0x7f00000000c0)="eac9e749df4966312bd14e1a6e1c8adaf8e3e9cf8daefbc33e8511de0f6c7513beb3df2affe7") fchmod(r0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) (async) socket$inet6_sctp(0x1c, 0x1, 0x84) (async) dup2(r1, r1) (async) ioctl$DIOCCHANGERULE(r2, 0x8048756d, &(0x7f00000000c0)="eac9e749df4966312bd14e1a6e1c8adaf8e3e9cf8daefbc33e8511de0f6c7513beb3df2affe7") (async) fchmod(r0, 0x0) (async) 1.389986326s ago: executing program 1 (id=65): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8a, 0x0) symlink(0x0, 0x0) r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2a, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20005, &(0x7f0000000040)={0x1c, 0x1c, 0x1, 0x0, @empty, 0x400008}, 0x1c) execve(0x0, &(0x7f0000000180), 0x0) r1 = open(0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x71) openat$evdev(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000001c0)=0xc) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_buf(r3, 0x29, 0x19, 0xfffffffffffffffe, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) lio_listio(0x1, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x4014, @sival_int=0x4, @spare=[0xffffffffffffffff, 0xffffffffffffc53a, 0xfffffffffffffffa, 0x2, 0x1, 0x9, 0x81, 0x4]}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) rtprio_thread(0x1, 0xffffffffffffffff, 0x0) fhstatfs(&(0x7f00000000c0)={{[0x1, 0xd]}, {0x8, 0x9, "43976e3c8e2d55daca4a356146c5f7cf"}}, &(0x7f0000000100)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002f00)={0x5, {{0x1c, 0x1c, 0x2, 0x10000, @ipv4, 0x7}}, {{0x1c, 0x1c, 0x3, 0x4, @loopback, 0x210001}}}, 0x108) 1.339918531s ago: executing program 3 (id=66): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket(0x26, 0x2, 0x0) kqueue() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000000, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x0, 0x1]}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r1, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="20bb689a5bbd0fb67341431826000000000000000401010000000000"], 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x16, &(0x7f00000000c0)={0x0, 0x6}, 0x8) setsockopt$inet6_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xd, &(0x7f0000000200)=0xa, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x20) freebsd11_fstat(r4, &(0x7f00000008c0)) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, 0x0) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1001d, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000001040)}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) r7 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r8 = fcntl$dupfd(r7, 0x3, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000100)={'freebsd\x00', 0x7fff}, 0x24) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2}) fork() writev(r8, &(0x7f0000000280), 0x26) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0xd2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)="221ea8ee0b43fffbd5b64651b4d4ea6062f7a9b484d2d3846f990979ba7d3b8a8330786927be8b6db577773ec901abcd9d1cd1d13ea5e5ce6d6d1831377b8659620e45106444398c596fa0b31142662e367418e39f146797a8e60f4a714e6ac6ba6b55dc861f9fa4c9d27c929819729084bdab2430e07c0a716c83660a9019504897ccc810cf6cc11a3e9e572f03e72bb929a1be8070cce4a5e5162285449908baeff81ac53849b9d69dae3933e522b678a7d862e4ce97cc33312487e6801bdca406dbeb712a35ebdc7bea3f"}, {&(0x7f00000001c0)="939a9a14f386486a5ab5e78e6a802926ac4824a7"}], 0x1128, 0x0) 1.169883625s ago: executing program 2 (id=67): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) (async) ftruncate(r0, 0x3862) setfib(0xffffff00) fhopen(&(0x7f0000000000)={{[0x5c8951ac, 0x3bea9983]}, {0x0, 0x1, "0a0000009a165d590600"}}, 0x400000) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) (async) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) (async) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @broadcast, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2, {[@ra={0x94, 0x6, 0x5}, @timestamp={0x44, 0xc, 0x8, 0x2c5dc33797744fae, 0x5, [{[], 0x1}, {[], 0x7}]}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x8715, 0x32, 0x4, 0x1, 0x4}}}}}) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) (async) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) (async) mlockall(0x2) r3 = socket(0x1c, 0x1, 0x0) dup(0xffffffffffffffff) sendto(r3, 0x0, 0x0, 0x20001, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) fchflags(r1, 0x40008) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) sync() 999.8508ms ago: executing program 2 (id=68): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x4b, &(0x7f0000000080)=0x2, 0x4) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) (async) r2 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="ff01000000000000000000df87004500001c000000000e019078acfdffbbe00000010f0090780006e739"]) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) kqueue() (async) r3 = open(0x0, 0x0, 0xe) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x1, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x8) (async) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setreuid(0xee00, 0x0) (async) r4 = getuid() setreuid(0x0, r4) (async) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_buf(r5, 0x29, 0x65, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x2, 0x3c0) __semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000340)=&(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x18f, 0x0, 0x0, 0x1000000000004}, 0x6, 0xfffe, 0x0, 0x0, 0xc237, 0xc}) __semctl$GETALL(r6, 0x0, 0x6, &(0x7f0000000100)) __semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f00000001c0)=&(0x7f0000000100)) semop(r6, &(0x7f0000000240)=[{0x0, 0x1fda, 0x800}], 0x2aaaaaaaaaaaac77) (async) getresgid(&(0x7f0000000000), &(0x7f0000000100)=0x0, &(0x7f00000001c0)) __semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000280)=&(0x7f0000000240)={{r4, r7, r4, 0xffffffffffffffff, 0x3b1, 0x3, 0x0, 0x42}, 0x2, 0x80, 0x0, 0x0, 0x3449, 0x81}) readlinkat(r3, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 460.049015ms ago: executing program 2 (id=69): open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2000000, 0x80) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="487144b406fb358813e44eb15c64ae3dac08ee4b2f4dd116409403b2ef5f59690717b2b471cb5d58001695ebf6620c30a20ba399df040000004b717fe79a158f688267b0f403a75f5cf0287732aee1539a62e073f1db2f13639aa24ca34c6c8fb160f76b44b6c51489e952549821227f9606decdee85ea5883069cc387941c84", 0x80}], 0x1000000000000107, 0xfffffffffffffffc) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x53, &(0x7f0000002f00)={0x8, {{0x1c, 0x1c, 0x2, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff7fffff}}, {{0x19, 0x1c, 0x1, 0x406, @empty, 0x210001}}}, 0x108) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x3, 0xfffffffffffffffe, 0x1c103, 0x0, 0x4, 0x2000000800000000, [0x0, 0x0, 0xfffffffffffffffc]}], 0x1, 0x0, 0x0, 0x0) close(r2) socket(0x2, 0x1, 0x0) 457.614401ms ago: executing program 2 (id=70): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x62, 0x1c, 0x3, 0xfffffffb, @loopback}, 0x1c) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x107d2) fspacectl(r1, 0x1, &(0x7f0000000100)={0x0, 0xffff}, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) mount(&(0x7f0000000040)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) (async) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x166) sendto$inet6(r0, &(0x7f0000000280)="5a4f42c8d1e1d67e0d408ac98b3e3f0d1a029b3a77a09a3dcdeb9f17172836e87ece61171d8bef4e772a1428b4a7d75ccd6c16531a03eaa815500033c9ea65f410d8afb01fc56c2265369f39fb4debde3c5d2a4723fa88", 0x57, 0x20001, 0x0, 0x0) (async) sendfile(r2, r0, 0x1, 0x0, 0x0, 0x0, 0x19) 379.996056ms ago: executing program 1 (id=71): r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r1, 0xb7c5) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff}) close(r2) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "9f0962", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@ndisc_ra={0x86, 0x5}}}}}}) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) socket$inet(0x2, 0x1, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x8, 0x3ffffffffffffd]}], 0x1, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000e40)="b9d5cf29033fda9f0d47f14a030000005e2f1027c01466b7a90116180f8365ae6047308780f3f80890af100e69002e57a9e620e17489f5763edb6df4781e510cbe9f1bb7f218f4c42a4ed5bc6103931b9ea542386dc931527f", 0x59, 0x100, &(0x7f0000000040)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) 368.29227ms ago: executing program 3 (id=72): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) (async) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0xbc0, @loopback, 0x7}, 0x1c) r3 = getppid() wait4(r3, &(0x7f0000000100), 0x69d569a267eccac9, 0x0) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) (async) sendfile(r0, r2, 0x4, 0x10000, 0x0, 0x0, 0x0) (async) setsockopt$sock_splice(r2, 0xffff, 0x1023, &(0x7f0000000040)={r2, 0x0, {0x1, 0x4}}, 0x20) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) fork() (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x47, &(0x7f0000000040)=0xde03, 0x4) (async) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, 0x10) sendto$inet(r5, &(0x7f0000000340)="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", 0x55d, 0x20081, &(0x7f0000000000)={0x10, 0x2, 0x0, @loopback}, 0x10) (async) fcntl$setflags(r4, 0x2, 0x0) 119.98107ms ago: executing program 2 (id=73): r0 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = kmq_open(&(0x7f0000000080)='./file0\x00', 0x200, 0x102, 0x0) kmq_notify(r1, &(0x7f0000000240)={0x4, 0xd, @sival_int=0x9, @spare=[0x6, 0x0, 0xffffffff, 0x4, 0x3, 0xffffffff, 0xc, 0x800]}) (async) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) rfork(0x10) (async) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) (async) fcntl$lock(r2, 0x0, &(0x7f0000000180)={0x3, 0x2, 0x2000000000000201, 0xfffffffffffffffd}) (async) rfork(0x3060) 0s ago: executing program 3 (id=74): procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) fork() r0 = fork() symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) r3 = fork() syz_emit_ethernet(0x46, &(0x7f0000000300)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x6, 0x9, @multicast1, @remote={0xac, 0x14, 0x0}}, "a5a6416aa895f596"}}}}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) fork() procctl$PROC_WXMAP_STATUS(0x0, r3, 0x16, &(0x7f0000000140)) fhstat(0x0, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x47, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) cap_enter() inotify_add_watch_at(r1, 0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x42) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000240)={0x1, 0xfffffffe, r0, 0x4}) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="570010000001aaaaaaaaaaaa0800460000200065000001029078ac1400bbe00000010100000022029078a759442b"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe00077e8800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077e8800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077e9000 Out of ktrace request objects. Warning! syz-executor[881] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 if_delmulti_locked: detaching ifnet instance 0xfffffe00077e8800 lock order reversal: 1st 0xfffffe006e56ce30 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3380 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:185 lock order proctree -> ufs established at: #0 0xffffffff81664981 at witness_checkorder+0x781 #1 0xffffffff814cc276 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81da46bb at ffs_lock+0x18b #3 0xffffffff8230a487 at VOP_LOCK1_APV+0x57 #4 0xffffffff817d5b3e at _vn_lock+0x14e #5 0xffffffff817d63e8 at vn_close1+0x1e8 #6 0xffffffff814bdb6a at ktrops+0x41a #7 0xffffffff814bd2dd at sys_ktrace+0xaed #8 0xffffffff82145702 at amd64_syscall+0x4e2 #9 0xffffffff820ea3eb at fast_syscall_common+0xf8 lock order ufs -> proctree attempted at: #0 0xffffffff81665852 at witness_checkorder+0x1652 #1 0xffffffff8155661f at _sx_slock_int+0x13f #2 0xffffffff8162217d at uprintf+0x14d #3 0xffffffff81dd0a1f at ufs_rmdir+0xdf #4 0xffffffff8230912d at VOP_RMDIR_APV+0xcd #5 0xffffffff817ca63a at kern_frmdirat+0x87a #6 0xffffffff82145702 at amd64_syscall+0x4e2 #7 0xffffffff820ea3eb at fast_syscall_common+0xf8 vnode_pager_putpages: zero-length write at 0 resid 14434 0xfffffe006dfeb370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83716b20 usecount 7, writecount 6, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541543e0 ref 1 pages 4 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0054151780 (pid 939, syz-executor, tid 100352) nlink=1, effnlink=1, size=14434, extsize 0 generation=a31cd3aa, uid=0, gid=0, flags=0x40008 ino 92, on dev gpt/rootfs ZFS filesystem version: 5 ZFS storage pool version: features support (5000) panic: mq notifiers left cpuid = 0 time = 1756127887 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056d1d810 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056d1d970 vpanic() at vpanic+0x257/frame 0xfffffe0056d1db30 panic() at panic+0xb5/frame 0xfffffe0056d1dc00 mq_proc_exit() at mq_proc_exit+0x1cc/frame 0xfffffe0056d1dc50 exit1() at exit1+0x62b/frame 0xfffffe0056d1dcf0 sys__exit() at sys__exit+0x28/frame 0xfffffe0056d1dd10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056d1df30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056d1df30 --- syscall (1, FreeBSD ELF64, _exit), rip = 0x3a1f2a, rsp = 0x820c7af28, rbp = 0x820c7af30 --- KDB: enter: panic [ thread pid 949 tid 100146 ] Stopped at kdb_enter+0x6e: movq $0,0x25b6f77(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827e1820 .str.27 rsp 0xfffffe0056d1d950 rbp 0xfffffe0056d1d970 rsi 0 rdi 0xffffffff816260e9 printf+0x149 r8 0 r9 0xffffffff r10 0x1 r11 0x17 r12 0xfffffe0054118780 r13 0xfffffffffffffffe r14 0xffffffff827e1820 .str.27 r15 0 rip 0xffffffff8160fc1e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25b6f77(%rip) db> show proc Process 949 (syz-executor) at 0xfffffe00540f4568: state: NORMAL uid: 0 gids: 0, 5 parent: pid 765 at 0xfffffe00540f2558 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor exec reaper: 0xfffffe0007809010 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe00078116d8 (map 0xfffffe00078116d8) (map.pmap 0xfffffe0007811778) (pmap 0xfffffe00078117e8) threads: 1 100146 Run CPU 0 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 951 766 766 0 R syz-executor 950 949 765 0 S uwait 0xfffffe006de1fc80 syz-executor 949 765 765 0 RE CPU 0 syz-executor 947 783 423 0 S nanslp 0xffffffff83ba7c40 sleep 945 764 764 0 R (threaded) syz-executor 100318 RunQ syz-executor 100362 S connec 0xfffffe00598c3cda syz-executor 100365 RunQ syz-executor 100371 RunQ syz-executor 938 1 766 0 S uwait 0xfffffe00596dd280 syz-executor 925 1 764 0 S uwait 0xfffffe00596de580 syz-executor 924 0 0 0 DL - 0xffffffff83b52520 [accounting] 905 1 766 60928 S uwait 0xfffffe006de1ea00 syz-executor 903 763 763 0 RE syz-executor 902 1 766 0 S uwait 0xfffffe006de1dd80 syz-executor 899 1 764 0 SV uwait 0xfffffe006de1e580 syz-executor 897 1 764 0 S uwait 0xfffffe006de1e380 syz-executor 888 1 766 0 SV uwait 0xfffffe006de1e280 syz-executor 886 1 764 0 S uwait 0xfffffe00596dde80 syz-executor 882 1 765 0 S uwait 0xfffffe00596de480 syz-executor 868 1 766 0 S uwait 0xfffffe00596de280 syz-executor 843 0 0 0 DL aiordy 0xfffffe00540f4ac0 [aiod4] 842 0 0 0 DL aiordy 0xfffffe000780a018 [aiod3] 841 0 0 0 DL aiordy 0xfffffe00540d1018 [aiod2] 840 0 0 0 DL aiordy 0xfffffe005410b568 [aiod1] 783 772 423 0 S wait 0xfffffe0054109000 sh 772 423 423 0 S wait 0xfffffe00540d0ac0 sh 766 762 766 0 S nanslp 0xffffffff83ba7c41 syz-executor 765 762 765 0 R syz-executor 764 762 764 0 R syz-executor 763 762 763 0 S wait 0xfffffe00540f2ab0 syz-executor 762 1 760 0 S select 0xfffffe006de1f5c0 syz-executor 758 681 758 0 Ss select 0xfffffe006de21340 sshd 747 1 747 0 Ss+ ttyin 0xfffffe00077fd8b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00585bccb0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00585bd0b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00585bd4b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe00585bd8b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe00585bdcb0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00585be0b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00585be4b0 getty 739 1 739 0 Ss+ ttyin 0xfffffe00585be8b0 getty 737 1 17 0 S+ piperd 0xfffffe0059827cc0 logger 736 735 17 0 S+ nanslp 0xffffffff83ba7c40 sleep 735 1 17 0 S+ wait 0xfffffe005400aab0 sh 685 1 685 0 Ss nanslp 0xffffffff83ba7c40 cron 681 1 681 0 Ss select 0xfffffe006de1ff40 sshd 494 1 494 0 Ss select 0xfffffe006de214c0 syslogd 423 1 423 0 Ss wait 0xfffffe005400bab8 devd 422 1 422 65 Ss select 0xfffffe00596ddf40 dhclient 337 1 337 0 Ss select 0xfffffe00596de8c0 dhclient 334 1 334 0 Ss select 0xfffffe006de21540 dhclient 16 0 0 0 DL syncer 0xffffffff83cc5820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0054002558 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cc3d60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100093 D sdflush 0xfffffe0053fe08e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0ec80 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf4d48 [dom0] 100080 D launds 0xffffffff83cf4d54 [laundry: dom0] 100081 D umarcl 0xffffffff81df2890 [uma] 7 0 0 0 DL - 0xffffffff839205d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff846c6c30 [pf purge] 5 0 0 0 DL waiting 0xffffffff844ad700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838ea340 [doneq0] 100046 D - 0xffffffff838ea2c0 [async] 100075 D - 0xffffffff838ea140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cf0640 [crypto] 100043 D crypto_ 0xfffffe0007a95c30 [crypto returns 0] 100044 D crypto_ 0xfffffe0007a95c80 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b50640 [g_event] 100038 D - 0xffffffff83b50660 [g_up] 100039 D - 0xffffffff83b50680 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 RL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 Run CPU 1 [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83cf10e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c43ff0 [swapper] 100005 D - 0xfffffe0007a98b00 [softirq_0] 100006 D - 0xfffffe0007a98900 [softirq_1] 100007 D - 0xfffffe0007a98700 [if_io_tqg_0] 100008 D - 0xfffffe0007a98500 [if_io_tqg_1] 100009 D - 0xfffffe0007a98300 [if_config_tqg_0] 100010 D - 0xfffffe00083f9700 [kqueue_ctx taskq] 100011 D - 0xfffffe00083f9600 [jail_remove taskq] 100012 D - 0xfffffe00083f9500 [bus taskq] 100015 D - 0xfffffe00083f9000 [thread taskq] 100017 D - 0xfffffe00083f8c00 [aiod_kick taskq] 100018 D - 0xfffffe00083f8b00 [deferred_unmount ta] 100019 D - 0xfffffe00083f8a00 [inm_free taskq] 100020 D - 0xfffffe00083f8900 [in6m_free taskq] 100021 D - 0xfffffe00083f8800 [linuxkpi_irq_wq] 100022 D - 0xfffffe00083f8700 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00083f8700 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00083f8700 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00083f8700 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00083f8600 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00083f8600 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00083f8600 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00083f8600 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00083f8100 [firmware taskq] 100040 D - 0xfffffe00083f7e00 [crypto_0] 100041 D - 0xfffffe00083f7e00 [crypto_1] 100056 D - 0xfffffe00083f7700 [vtnet0 rxq 0] 100057 D - 0xfffffe00083f7600 [vtnet0 txq 0] 100058 D - 0xfffffe00083f7500 [vtnet0 rxq 1] 100059 D - 0xfffffe00083f7400 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057d76f00 [virtio_balloon] 100065 D - 0xffffffff827e5f00 [deadlkres] 100069 D - 0xfffffe00593db000 [acpi_task_0] 100070 D - 0xfffffe00593db000 [acpi_task_1] 100071 D - 0xfffffe00593db000 [acpi_task_2] 100073 D - 0xfffffe00083fb100 [mca taskq] 100074 D - 0xfffffe00083f7d00 [CAM taskq] 100076 D - 0xfffffe005825fe00 [ipsec_offload] 100218 D - 0xfffffe005825f500 [netlink_socket (PID] 100258 D - 0xfffffe00083fbb00 [system_taskq_0] 100259 D - 0xfffffe00083fbb00 [system_taskq_1] 100260 D - 0xfffffe0077dad800 [system_delay_taskq_] 100261 D - 0xfffffe0077dad800 [system_delay_taskq_] 100262 D - 0xfffffe0077dad500 [zvol_tq-0_0] 100263 D - 0xfffffe0077dad500 [zvol_tq-0_1] 100264 D - 0xfffffe0077dad500 [zvol_tq-0_2] 100265 D - 0xfffffe0077dad500 [zvol_tq-0_3] 100266 D - 0xfffffe0077dad500 [zvol_tq-0_4] 100267 D - 0xfffffe0077dad500 [zvol_tq-0_5] 100268 D - 0xfffffe0077dad500 [zvol_tq-0_6] 100269 D - 0xfffffe0077dad500 [zvol_tq-0_7] 100270 D - 0xfffffe0077dad500 [zvol_tq-0_8] 100271 D - 0xfffffe0077dad500 [zvol_tq-0_9] 100272 D - 0xfffffe0077dad500 [zvol_tq-0_10] 100273 D - 0xfffffe0077dad500 [zvol_tq-0_11] 100274 D - 0xfffffe0077dad500 [zvol_tq-0_12] 100275 D - 0xfffffe0077dad500 [zvol_tq-0_13] 100276 D - 0xfffffe0077dad500 [zvol_tq-0_14] 100277 D - 0xfffffe0077dad500 [zvol_tq-0_15] 100278 D - 0xfffffe0077dad500 [zvol_tq-0_16] 100279 D - 0xfffffe0077dad500 [zvol_tq-0_17] 100280 D - 0xfffffe0077dad500 [zvol_tq-0_18] 100281 D - 0xfffffe0077dad500 [zvol_tq-0_19] 100282 D - 0xfffffe0077dad500 [zvol_tq-0_20] 100283 D - 0xfffffe0077dad500 [zvol_tq-0_21] 100284 D - 0xfffffe0077dad500 [zvol_tq-0_22] 100285 D - 0xfffffe0077dad500 [zvol_tq-0_23] 100286 D - 0xfffffe0077dad500 [zvol_tq-0_24] 100287 D - 0xfffffe0077dad500 [zvol_tq-0_25] 100288 D - 0xfffffe0077dad500 [zvol_tq-0_26] 100289 D - 0xfffffe0077dad500 [zvol_tq-0_27] 100290 D - 0xfffffe0077dad500 [zvol_tq-0_28] 100291 D - 0xfffffe0077dad500 [zvol_tq-0_29] 100292 D - 0xfffffe0077dad500 [zvol_tq-0_30] 100293 D - 0xfffffe0077dad500 [zvol_tq-0_31] 100296 D - 0xfffffe005825f100 [arc_prune] 100297 D - 0xfffffe00593da400 [arc_flush_0] 100298 D - 0xfffffe00593da400 [arc_flush_1] 100310 D - 0xfffffe0077dad700 [dbu_evict] 100324 D - 0xfffffe0077dadb00 [z_vdev_file_0] 100325 D - 0xfffffe0077dadb00 [z_vdev_file_1] 100326 D - 0xfffffe0077dadb00 [z_vdev_file_2] 100327 D - 0xfffffe0077dadb00 [z_vdev_file_3] 100328 D - 0xfffffe0077dadb00 [z_vdev_file_4] 100329 D - 0xfffffe0077dadb00 [z_vdev_file_5] 100330 D - 0xfffffe0077dadb00 [z_vdev_file_6] 100331 D - 0xfffffe0077dadb00 [z_vdev_file_7] 100332 D - 0xfffffe0077dadb00 [z_vdev_file_8] 100333 D - 0xfffffe0077dadb00 [z_vdev_file_9] 100334 D - 0xfffffe0077dadb00 [z_vdev_file_10] 100335 D - 0xfffffe0077dadb00 [z_vdev_file_11] 100336 D - 0xfffffe0077dadb00 [z_vdev_file_12] 100337 D - 0xfffffe0077dadb00 [z_vdev_file_13] 100338 D - 0xfffffe0077dadb00 [z_vdev_file_14] 100339 D - 0xfffffe0077dadb00 [z_vdev_file_15] 100349 D - 0xfffffe00083fbd00 [netlink_socket (PID] 100357 D - 0xfffffe00593dac00 [zfsvfs] 847 1 764 0 Z syz-executor db> show all locks Process 945 (syz-executor) thread 0xfffffe005415c000 (100365) exclusive sleep mutex so_snd (so_snd) r = 0 (0xfffffe00598c41a0) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4442 exclusive sleep mutex socket (socket) r = 0 (0xfffffe00598c4000) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4428 Process 12 (intr) thread 0xfffffe0007821000 (100034) exclusive sleep mutex tcp_hpts_lck (hpts) r = 0 (0xfffffe0053ef7100) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_hpts.c:1444 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 402 12350K 524 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4213 solaris 2247 3597K 4473 sysctloid 44701 2626K 44813 vtbuf 24 1968K 46 kobj 331 1324K 495 newblk 50 1037K 989 vfscache 3 1025K 3 pcb 40 685K 121 inodedep 18 519K 256 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 155 298K 1044 filedesc 34 265K 229 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 8357 acpica 1674 184K 54444 vmem 5 144K 7 tidhash 3 141K 3 pagedep 10 131K 116 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 107 107K 124 sem 4 106K 4 gtaskqueue 18 98K 18 temp 32 89K 1892 bus 1000 82K 5086 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 527 66K 527 ddb_capture 1 64K 1 kdtrace 270 56K 1325 umtx 416 52K 416 shm 2 34K 4 hostcache 1 32K 1 DEVFS3 126 32K 136 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 kstat_data 19 19K 19 ifaddr 66 19K 68 BPF 14 19K 21 ufs_mount 4 17K 5 proc 3 17K 3 LRO 16 17K 16 tty 16 16K 16 routetbl 129 16K 409 ithread 90 15K 90 bus-sc 34 15K 1657 eventhandler 166 14K 166 lltable 44 14K 47 ifnet 7 13K 7 ether_multi 152 13K 180 kenv 95 12K 95 cred 28 11K 212 taskqueue 99 11K 105 GEOM 49 11K 435 CAM queue 5 11K 1528 rman 82 10K 437 shmfd 4 10K 73 rpc 8 9K 8 plimit 23 9K 324 in6_multi 65 9K 68 bmsafemap 2 9K 215 ksem 2 9K 4 devstat 4 9K 4 UART 12 9K 12 pfs_vncache 1 8K 1 audit_evclass 240 8K 304 UMA 338 7K 338 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 kqueue 71 6K 1106 ufs_dirhash 24 5K 27 pf_ifnet 11 5K 20 freework 18 5K 263 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 pwddesc 64 4K 965 evdev 4 4K 4 acpisem 28 4K 28 selfd 45 3K 15487 DEVFSP 45 3K 71 terminal 11 3K 11 sctp_atcl 7 3K 27 uidinfo 6 3K 12 proc-args 89 3K 1992 session 20 3K 34 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 kcovinfo 36 3K 36 netlink 2 3K 76 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 lockf 19 2K 68 ip6ndp 12 2K 14 osd 73 2K 266 Unitno 29 2K 54 sctp_ifa 13 2K 14 CAM XPT 22 2K 543 in_multi 6 2K 9 tun 4 2K 4 vnodemarker 3 2K 23 toponodes 6 2K 6 ipsecpolicy 2 2K 2 CC Mem 11 2K 185 freeblks 5 2K 137 select 10 2K 40 msi 9 2K 9 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 NFSD session 1 1K 1 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 diradd 6 1K 194 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 164 pci_link 10 1K 10 inpcbpolicy 22 1K 474 newdirblk 5 1K 102 mkdir 5 1K 204 freefile 5 1K 148 crypto 4 1K 8 encap_export_host 12 1K 12 dirrem 2 1K 177 freefrag 4 1K 22 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 frag6 4 1K 4 chacha20random 1 1K 1 biobuf 1 1K 1 DEVFS 10 1K 11 sctp_timw 1 1K 1 indirdep 1 1K 211 ip6opt 1 1K 17 ip_msource 4 1K 9 inotify 1 1K 3 vnodes 1 1K 2 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 CAM SIM 2 1K 2 prison 8 1K 8 sctp_atky 7 1K 30 feeder 7 1K 7 filecaps 7 1K 85 taskq 2 1K 2 cryptodev 3 1K 53 tcpfunc 3 1K 3 loginclass 3 1K 5 soname 5 1K 3466 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 103 procdesc 1 1K 10 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_athm 7 1K 27 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 sigio 1 1K 5 filedesc_to_leader 1 1K 2 entropy 2 1K 33 acpiintr 1 1K 1 DEVFS4 2 1K 2 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 sfs_nodes 0 0K 0 zones_data 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 tcp_pcm_rack 0 0K 1 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 2 mqdata 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 filemon 0 0K 3 sctp_mcore 0 0K 0 sctp_socko 0 0K 16 sctp_iter 0 0K 11 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 11 sctp_aadr 0 0K 0 sctp_stro 0 0K 1 sctp_stri 0 0K 0 sctp_map 0 0K 2 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 159 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 10 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_msource 0 0K 5 ip6_moptions 0 0K 6 in6_mfilter 0 0K 11 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 6 in_mfilter 0 0K 14 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 20 fadvise 0 0K 1 VN POLL 0 0K 3 statfs 0 0K 193 namei_tracker 0 0K 3 export_host 0 0K 0 cl_savebuf 0 0K 11 lio 0 0K 2 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 14579 ioctlops 0 0K 106 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 635 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 1 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 1 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8336 1062 12470 0 254 38494208 0 mbuf 256 8655 1007 15369 0 254 2473472 0 malloc-128 128 15545 79 15949 0 126 1999872 0 BUF TRIE 152 250 11554 1046 0 62 1794208 0 malloc-4096 4096 410 6 1490 0 2 1703936 0 malloc-384 384 4212 48 4228 0 30 1635840 0 tcp_log 416 1583 1981 6932 0 254 1482624 0 UMA Slabs 0 112 10968 6 10968 0 126 1229088 0 RADIX NODE 152 6855 342 30153 0 62 1093944 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 vmem btag 56 16929 102 16929 0 254 953736 0 malloc-65536 65536 13 1 16 0 1 917504 0 FFS inode 1168 532 28 683 0 8 654080 0 sctp_ep 1152 7 504 26 0 254 588672 0 malloc-256 256 2194 101 2806 0 62 587520 0 sctp_asoc 2256 0 255 1 0 254 575280 0 socket 1024 43 465 1744 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 THREAD 1860 203 5 371 0 8 386880 0 VM OBJECT 248 1174 202 14830 0 62 341248 0 malloc-16384 16384 16 4 302 0 1 327680 0 malloc-64 64 4821 282 20277 0 254 326592 0 malloc-16 16 18307 443 18589 0 254 300000 0 256 Bucket 2048 135 11 1084 0 8 299008 0 VNODE 440 572 94 725 0 30 293040 0 zio_buf_comb_262144 262144 0 1 15 0 1 262144 0 malloc-2048 2048 113 7 186 0 8 245760 0 UMA Zones 768 310 4 310 0 16 241152 0 malloc-32 32 7160 274 8223 0 254 237888 0 malloc-32768 32768 1 6 180 0 1 229376 0 DEVCTL 1024 23 197 148 0 0 225280 0 malloc-128 128 1140 379 25702 0 126 194432 0 sctp_raddr 736 0 264 1 0 254 194304 0 FPU_save_area 832 205 20 451 0 16 187200 0 lkpimm 56 1 3095 1 0 254 173376 0 MAP ENTRY 96 1476 288 47203 0 126 169344 0 unpcb 320 11 505 1205 0 254 165120 0 FFS2 dinode 256 532 98 683 0 62 161280 0 malloc-256 256 111 519 1207 0 62 161280 0 S VFS Cache 104 995 292 1184 0 126 133848 0 zio_buf_comb_131072 131072 0 1 1 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 65 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-32768 32768 4 0 4 0 1 131072 0 malloc-1024 1024 120 8 144 0 16 131072 0 mbuf_packet 256 3 505 257 0 254 130048 0 PROC 1368 65 23 952 0 8 120384 0 tcp_inpcb 1304 11 79 185 0 8 117360 0 ksiginfo 112 61 983 93 0 126 116928 0 UMA Kegs 384 297 6 297 0 30 116352 0 malloc-2048 2048 7 49 514 0 8 114688 0 malloc-32768 32768 2 1 122 0 1 98304 0 filedesc0 1072 64 20 965 0 8 90048 0 syncache 168 0 528 4 0 254 88704 0 g_bio 408 0 210 8403 0 30 85680 0 128 Bucket 1024 48 35 281 0 16 84992 0 malloc-16384 16384 5 0 6 0 1 81920 0 malloc-256 256 157 158 757 0 62 80640 0 malloc-8192 8192 8 1 10 0 1 73728 0 malloc-8192 8192 5 4 10 0 1 73728 0 malloc-64 64 512 559 1562 0 254 68544 0 malloc-128 128 339 188 442 0 126 67456 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-32768 32768 0 2 11 0 1 65536 0 malloc-8192 8192 7 1 33 0 1 65536 0 malloc-4096 4096 15 1 23 0 2 65536 0 64 Bucket 512 90 38 1821 0 30 65536 0 malloc-256 256 127 128 795 0 62 65280 0 malloc-256 256 236 19 471 0 62 65280 0 malloc-384 384 46 104 464 0 30 57600 0 malloc-64 64 321 498 14459 0 254 52416 0 malloc-64 64 467 352 689 0 254 52416 0 Files 80 187 463 8006 0 126 52000 0 malloc-128 128 164 239 634 0 126 51584 0 udplite_inpcb 408 0 126 70 0 30 51408 0 udp_inpcb 408 9 117 188 0 30 51408 0 malloc-256 256 74 121 308 0 62 49920 0 32 Bucket 256 78 117 1001 0 62 49920 0 zio_data_buf_16384 16384 0 3 9 0 1 49152 0 DIRHASH 1024 34 14 36 0 16 49152 0 NAMEI 1024 0 48 13727 0 16 49152 0 malloc-2048 2048 14 10 30 0 8 49152 0 malloc-2048 2048 1 23 574 0 8 49152 0 malloc-1024 1024 6 42 1578 0 16 49152 0 malloc-1024 1024 25 23 40 0 16 49152 0 pcpu-64 64 504 264 504 0 254 49152 0 AIOCB 552 0 84 150 0 16 46368 0 malloc-384 384 110 10 133 0 30 46080 0 da_ccb 544 0 84 2244 0 16 45696 0 pcpu-8 8 5213 419 5411 0 254 45056 0 malloc-4096 4096 5 5 562 0 2 40960 0 VMSPACE 584 44 26 929 0 16 40880 0 malloc-64 64 17 550 133 0 254 36288 0 malloc-64 64 318 249 2738 0 254 36288 0 malloc-64 64 76 491 3591 0 254 36288 0 malloc-64 64 127 440 1276 0 254 36288 0 tcp_bbr_map 128 3 276 93 0 126 35712 0 malloc-128 128 24 255 81 0 126 35712 0 malloc-128 128 66 213 3312 0 126 35712 0 malloc-128 128 152 127 910 0 126 35712 0 malloc-128 128 48 231 492 0 126 35712 0 routing nhops 256 27 108 34 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-256 256 18 117 790 0 62 34560 0 TURNSTILE 136 209 43 209 0 62 34272 0 zio_buf_16384 16384 0 2 10 0 1 32768 0 malloc-4096 4096 5 3 13 0 2 32768 0 malloc-2048 2048 10 6 22 0 8 32768 0 malloc-2048 2048 5 11 71 0 8 32768 0 malloc-1024 1024 2 30 42 0 16 32768 0 malloc-1024 1024 3 29 171 0 16 32768 0 malloc-1024 1024 18 14 2571 0 16 32768 0 malloc-1024 1024 18 14 18 0 16 32768 0 malloc-1024 1024 1 31 6 0 16 32768 0 malloc-512 512 10 54 121 0 30 32768 0 malloc-512 512 6 58 17 0 30 32768 0 malloc-512 512 1 63 39 0 30 32768 0 malloc-512 512 4 60 24 0 30 32768 0 malloc-512 512 2 62 49 0 30 32768 0 malloc-512 512 4 60 35 0 30 32768 0 tcp_bbr_pcb 896 1 35 4 0 16 32256 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 24 240 38 0 126 31680 0 clpbuf 2624 0 12 44 0 4 31488 0 sctp_laddr 48 1 587 13 0 254 28224 0 rl_entry 48 3 585 3 0 254 28224 0 16 Bucket 144 71 125 351 0 62 28224 0 4 Bucket 48 5 583 8 0 254 28224 0 AIO 208 0 133 15 0 62 27664 0 mqnode 416 4 59 4 0 30 26208 0 cpuset 200 7 121 11 0 62 25600 0 malloc-8192 8192 1 2 82 0 1 24576 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-4096 4096 1 5 235 0 2 24576 0 pipe 736 22 11 338 0 16 24288 0 ertt_txseginfo 40 1 605 678 0 254 24240 0 PWD 40 25 581 171 0 254 24240 0 rtentry 168 30 114 34 0 62 24192 0 8 Bucket 80 61 239 352 0 126 24000 0 malloc-384 384 7 53 7 0 30 23040 0 malloc-384 384 1 59 2 0 30 23040 0 malloc-384 384 0 60 343 0 30 23040 0 malloc-384 384 49 11 373 0 30 23040 0 malloc-384 384 2 58 30 0 30 23040 0 ripcb 376 2 58 31 0 30 22560 0 SLEEPQUEUE 88 209 47 209 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 11 269 185 0 126 20160 0 malloc-32 32 258 372 482 0 254 20160 0 malloc-32 32 125 505 213 0 254 20160 0 malloc-32 32 144 486 676 0 254 20160 0 malloc-32 32 72 558 1360 0 254 20160 0 malloc-32 32 99 531 2486 0 254 20160 0 malloc-32 32 118 512 289 0 254 20160 0 malloc-32 32 41 589 2713 0 254 20160 0 2 Bucket 32 71 559 405 0 254 20160 0 KNOTE 160 1 124 154 0 62 20000 0 L VFS Cache 320 0 60 10 0 30 19200 0 malloc-256 256 4 71 330 0 62 19200 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 0 2 20 0 1 16384 0 malloc-4096 4096 1 3 9 0 2 16384 0 malloc-4096 4096 2 2 3 0 2 16384 0 malloc-2048 2048 4 4 4 0 8 16384 0 malloc-2048 2048 2 6 200 0 8 16384 0 malloc-512 512 1 31 6 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 malloc-16 16 353 647 1807 0 254 16000 0 mqueue 248 1 63 1 0 62 15872 0 mqnotifier 216 1 71 1 0 62 15552 0 kenv 258 17 43 1074 0 30 15480 0 tcp_rack_pcb 1088 0 14 1 0 8 15232 0 SMR SHARED 24 8 503 8 0 254 12264 0 arc_buf_hdr_t_full 368 4 29 4 0 30 12144 0 malloc-16 16 15 735 33 0 254 12000 0 malloc-16 16 60 690 341 0 254 12000 0 malloc-16 16 78 672 342 0 254 12000 0 malloc-16 16 185 565 3024 0 254 12000 0 malloc-16 16 19 731 1915 0 254 12000 0 malloc-16 16 15 735 24812 0 254 12000 0 itimer 352 0 33 3 0 30 11616 0 AIOLIO 272 0 42 2 0 30 11424 0 Mountpoints 2816 2 2 2 0 4 11264 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 0 2 1 0 2 8192 0 vtnet_tx_hdr 24 0 334 892 0 254 8016 0 pcpu-16 16 4 252 4 0 254 4096 0 UMA Slabs 1 176 10 12 10 0 62 3872 0 KMAP ENTRY 96 15 24 25 0 0 3744 0 zfs_znode_cache 456 0 0 0 0 30 0 0 zap_attr_long_cache 1056 0 0 0 0 8 0 0 zap_name_long 1096 0 0 0 0 8 0 0 zap_attr_cache 288 0 0 0 0 30 0 0 zap_name 328 0 0 0 0 30 0 0 sio_cache_2 168 0 0 0 0 62 0 0 sio_cache_1 152 0 0 0 0 62 0 0 sio_cache_0 136 0 0 0 0 62 0 0 zil_zcw_cache 80 0 0 0 0 126 0 0 zil_lwb_cache 376 0 0 0 0 30 0 0 dbuf_dirty_record_t 376 0 0 0 0 30 0 0 dmu_buf_impl_t 376 0 0 0 0 30 0 0 arc_buf_t 32 0 0 0 0 254 0 0 arc_buf_hdr_t_l2only 96 0 0 0 0 126 0 0 dnode_t 968 0 0 0 0 16 0 0 sa_cache 272 0 0 0 0 30 0 0 abd_chunk 4096 0 0 0 0 2 0 0 zio_buf_comb_16777216 16777216 0 0 0 0 1 0 0 zio_buf_comb_12582912 12582912 0 0 0 0 1 0 0 zio_buf_comb_8388608 8388608 0 0 0 0 1 0 0 zio_buf_comb_6291456 6291456 0 0 0 0 1 0 0 zio_buf_comb_4194304 4194304 0 0 0 0 1 0 0 zio_buf_comb_3145728 3145728 0 0 0 0 1 0 0 zio_buf_comb_2097152 2097152 0 0 0 0 1 0 0 zio_buf_comb_1572864 1572864 0 0 0 0 1 0 0 zio_buf_comb_1048576 1048576 0 0 0 0 1 0 0 zio_buf_comb_786432 786432 0 0 0 0 1 0 0 zio_buf_comb_524288 524288 0 0 0 0 1 0 0 zio_buf_comb_393216 393216 0 0 0 0 1 0 0 zio_buf_comb_196608 196608 0 0 0 0 1 0 0 zio_buf_comb_98304 98304 0 0 0 0 1 0 0 zio_buf_comb_65536 65536 0 0 0 0 1 0 0 zio_buf_comb_49152 49152 0 0 0 0 1 0 0 zio_buf_comb_32768 32768 0 0 0 0 1 0 0 zio_buf_comb_24576 24576 0 0 0 0 1 0 0 zio_data_buf_12288 12288 0 0 0 0 1 0 0 zio_buf_12288 12288 0 0 0 0 1 0 0 zio_data_buf_8192 8192 0 0 0 0 1 0 0 zio_buf_8192 8192 0 0 0 0 1 0 0 zio_data_buf_6144 6144 0 0 0 0 1 0 0 zio_buf_6144 6144 0 0 0 0 1 0 0 zio_data_buf_4096 4096 0 0 0 0 2 0 0 zio_buf_4096 4096 0 0 0 0 2 0 0 zio_data_buf_3072 3072 0 0 0 0 4 0 0 zio_buf_3072 3072 0 0 0 0 4 0 0 zio_data_buf_2048 2048 0 0 0 0 8 0 0 zio_buf_2048 2048 0 0 0 0 8 0 0 zio_data_buf_1536 1536 0 0 0 0 8 0 0 zio_buf_1536 1536 0 0 0 0 8 0 0 zio_data_buf_1024 1024 0 0 0 0 16 0 0 zio_buf_1024 1024 0 0 0 0 16 0 0 zio_data_buf_512 512 0 0 0 0 30 0 0 zio_buf_512 512 0 0 0 0 30 0 0 zio_link_cache 48 0 0 0 0 254 0 0 zio_cache 1216 0 0 0 0 8 0 0 ddt_log_entry_trad_cache 328 0 0 0 0 30 0 0 ddt_log_entry_flat_cache 144 0 0 0 0 62 0 0 ddt_entry_trad_cache 368 0 0 0 0 30 0 0 ddt_entry_flat_cache 184 0 0 0 0 62 0 0 ddt_cache 29240 0 0 0 0 1 0 0 brt_entry_cache 168 0 0 0 0 62 0 0 metaslab_alloc_trace_cache 72 0 0 0 0 126 0 0 zfs_btree_leaf_cache 4096 0 0 0 0 2 0 0 reference_cache 48 0 0 0 0 254 0 0 taskq_zone 160 0 0 0 0 62 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf anchors 1664 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mvdata 64 0 0 0 0 254 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl