last executing test programs: 19.465235076s ago: executing program 0 (id=46): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 18.339935501s ago: executing program 3 (id=47): socket(0x10, 0x0, 0xfe) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x77) ppoll(0x0, 0x0, 0x0, &(0x7f0000000000)={[0x5000861b, 0x2, 0x3, 0x81]}, 0x10) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000540)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3}, 0x1c) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) r1 = socket(0x1c, 0x20000000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000200)=@in={0x10, 0x2, 0xffffffffffffffff, @loopback}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000000f00)=""/24, 0x18}, {&(0x7f0000000f40)=""/174, 0xae}], 0x7, &(0x7f0000001040)=""/182, 0xb6}, 0x3) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000180)=0xfa, 0x4) 17.850591131s ago: executing program 2 (id=48): openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() getpgrp(0x0) open(0x0, 0x80400000000206, 0x4) aio_waitcomplete(0x0, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0) extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0) setegid(0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) socket$bt_l2cap(0x24, 0x3, 0x87) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) 17.842990905s ago: executing program 1 (id=49): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000580)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr="3bcc3f0600000058ff2ea13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffa, {0x0, 0x6, "0663be", 0xffff, 0x1c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r3 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) 16.162395646s ago: executing program 0 (id=50): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000580)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r3 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) 14.862835687s ago: executing program 3 (id=51): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000580)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr="3bcc3f0600000058ff2ea13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffa, {0x0, 0x6, "0663be", 0xffff, 0x1c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r3 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xffff0000, 0x0, 0x0) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) 14.673303362s ago: executing program 1 (id=52): openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() getpgrp(0x0) open(0x0, 0x80400000000206, 0x4) aio_waitcomplete(0x0, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0) extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0) setegid(0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) socket$bt_l2cap(0x24, 0x3, 0x87) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}}}}}) recvfrom$inet(r1, 0x0, 0x0, 0x81, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14.651228987s ago: executing program 2 (id=53): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) socket$inet6(0x1c, 0x3, 0x7) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r2, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) 12.08698259s ago: executing program 0 (id=54): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000580)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr="3bcc3f0600000058ff2ea13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffa, {0x0, 0x6, "0663be", 0xffff, 0x1c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(0x0, 0x488200, 0x176) r3 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) 11.931199665s ago: executing program 1 (id=55): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b5c422ca65675e274c429d4ecb6043c5c10548af3499af18ae3b738b9b6b5428e18e8a6f70a1fad05f03388e5d7fcc796fa874a4c850fc114d59d7d095f07c3338b7653ed757e08fc8325e69831de6411138839053b1a7b32636f2e05fcbcada2375bde92ed0ac706042efe8a3bcd095a7ab57ac9ddbdc94f1545f59d15ada6e76061b7834beac7d501f26c2752d451ca96b5f61b24c88865cfe25dfb939a9fcbb9146239110e08576b3ec84e75714e740034e78dba801094faa3edb5774e0c58a39e0a1439a32fb837000000000000800108fcaeec67663ce77bfbc50affa69135c9385cd6d36ff365039a3c5a89a24e3fed7dee1a35513534f7173d892afd3b73f76a08af4f857a1f2674d9ace7647aace412d13afc1ac098fe6f86bfdef411248be5e096c4e747bfdc32a173cf9cdba48cc368", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 11.928598168s ago: executing program 3 (id=56): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 10.77888634s ago: executing program 2 (id=57): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 9.464493124s ago: executing program 3 (id=58): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 8.311089551s ago: executing program 1 (id=59): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r2, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 8.307767545s ago: executing program 2 (id=60): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000580)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr="3bcc3f0600000058ff2ea13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffa, {0x0, 0x6, "0663be", 0xffff, 0x1c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(0x0, 0x488200, 0x176) r3 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) 8.306082173s ago: executing program 0 (id=61): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r2, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b5c422ca65675e274c429d4ecb6043c5c10548af3499af18ae3b738b9b6b5428e18e8a6f70a1fad05f03388e5d7fcc796fa874a4c850fc114d59d7d095f07c3338b7653ed757e08fc8325e69831de6411138839053b1a7b32636f2e05fcbcada2375bde92ed0ac706042efe8a3bcd095a7ab57ac9ddbdc94f1545f59d15ada6e76061b7834beac7d501f26c2752d451ca96b5f61b24c88865cfe25dfb939a9fcbb9146239110e08576b3ec84e75714e740034e78dba801094faa3edb5774e0c58a39e0a1439a32fb837000000000000800108fcaeec67663ce77bfbc50affa69135c9385cd6d36ff365039a3c5a89a24e3fed7dee1a35513534f7173d892afd3b73f76a08af4f857a1f2674d9ace7647aace412d13afc1ac098fe6f86bfdef411248be5e096c4e747bfdc32a173cf9cdba48cc368", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 5.443587123s ago: executing program 3 (id=62): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 5.440612785s ago: executing program 2 (id=63): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 5.363964133s ago: executing program 1 (id=64): openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() getpgrp(0x0) open(0x0, 0x80400000000206, 0x4) aio_waitcomplete(0x0, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0) extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0) setegid(0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) socket$bt_l2cap(0x24, 0x3, 0x87) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}}}}}) recvfrom$inet(r1, 0x0, 0x0, 0x81, 0x0, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) 5.203350572s ago: executing program 0 (id=65): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000580)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr="3bcc3f0600000058ff2ea13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffa, {0x0, 0x6, "0663be", 0xffff, 0x1c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r3 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x9, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) 3.397246266s ago: executing program 3 (id=66): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) 1.28056656s ago: executing program 0 (id=67): socket(0x10, 0x0, 0xfe) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x77) ppoll(0x0, 0x0, 0x0, &(0x7f0000000000)={[0x5000861b, 0x2, 0x3, 0x81]}, 0x10) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000540)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r1 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3}, 0x1c) socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) r2 = socket(0x1c, 0x20000000, 0x0) recvmsg(r0, &(0x7f0000001100)={&(0x7f0000000200)=@in={0x10, 0x2, 0xffffffffffffffff, @loopback}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000000f00)=""/24, 0x18}, {&(0x7f0000000f40)=""/174, 0xae}], 0x7, &(0x7f0000001040)=""/182, 0xb6}, 0x3) setsockopt$sock_int(r2, 0xffff, 0x4, &(0x7f0000000180)=0xfa, 0x4) 792.403185ms ago: executing program 2 (id=68): openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() getpgrp(0x0) open(0x0, 0x80400000000206, 0x4) aio_waitcomplete(0x0, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0) extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0) setegid(0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) socket$bt_l2cap(0x24, 0x3, 0x87) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}}}}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) 0s ago: executing program 1 (id=69): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x14040000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0xa7}}}}}}) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(r0, &(0x7f0000000240)=[0x20000207fffffdc, 0x6]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b5c422ca65675e274c429d4ecb6043c5c10548af3499af18ae3b738b9b6b5428e18e8a6f70a1fad05f03388e5d7fcc796fa874a4c850fc114d59d7d095f07c3338b7653ed757e08fc8325e69831de6411138839053b1a7b32636f2e05fcbcada2375bde92ed0ac706042efe8a3bcd095a7ab57ac9ddbdc94f1545f59d15ada6e76061b7834beac7d501f26c2752d451ca96b5f61b24c88865cfe25dfb939a9fcbb9146239110e08576b3ec84e75714e740034e78dba801094faa3edb5774e0c58a39e0a1439a32fb837000000000000800108fcaeec67663ce77bfbc50affa69135c9385cd6d36ff365039a3c5a89a24e3fed7dee1a35513534f7173d892afd3b73f76a08af4f857a1f2674d9ace7647aace412d13afc1ac098fe6f86bfdef411248be5e096c4e747bfdc32a173cf9cdba48cc368", 0x137}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts. panic: pmap_remove_all: page 0xfffffe00022427b0 is not managed cpuid = 0 time = 1759888713 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056f1c4d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056f1c630 vpanic() at vpanic+0x257/frame 0xfffffe0056f1c7f0 panic() at panic+0xb5/frame 0xfffffe0056f1c8b0 pmap_remove_all() at pmap_remove_all+0xc32/frame 0xfffffe0056f1c9f0 vm_fault_copy_entry() at vm_fault_copy_entry+0x733/frame 0xfffffe0056f1cb50 vm_map_protect() at vm_map_protect+0xfed/frame 0xfffffe0056f1ccc0 kern_mprotect() at kern_mprotect+0x178/frame 0xfffffe0056f1cd10 ia32_syscall() at ia32_syscall+0x4d2/frame 0xfffffe0056f1cf30 int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xffffdacc KDB: enter: panic [ thread pid 943 tid 100382 ] Stopped at kdb_enter+0x6e: movq $0,0x259eb77(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff8280ab60 .str.27 rsp 0xfffffe0056f1c610 rbp 0xfffffe0056f1c630 rsi 0 rdi 0xffffffff81644c39 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0xfffffe005411e550 r12 0xfffffe005411e000 r13 0xfffffffffffffffe r14 0xffffffff8280ab60 .str.27 r15 0 rip 0xffffffff8162e01e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x259eb77(%rip) db> show proc Process 943 (syz-executor) at 0xfffffe0054177ab0: state: NORMAL uid: 0 gid: 0 supp gids: 0, 5 parent: pid 764 at 0xfffffe00540d0010 ABI: FreeBSD ELF32 flag: 0x10000080 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0007809010 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe0054149920 (map 0xfffffe0054149920) (map.pmap 0xfffffe00541499c0) (pmap 0xfffffe0054149a30) threads: 8 100382 Run CPU 0 syz-executor 100455 S lockf 0xfffffe005865a480 syz-executor 100456 S select 0xfffffe006dc1fac0 syz-executor 100457 S aiowc 0xfffffe0054177e38 syz-executor 100458 S uwait 0xfffffe0077402c80 syz-executor 100461 S connec 0xfffffe0059b4f0da syz-executor 100462 S uwait 0xfffffe0077402100 syz-executor 100463 S uwait 0xfffffe0077402200 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 946 941 765 0 S uwait 0xfffffe0077402300 syz-executor 945 943 764 0 S uwait 0xfffffe005851ae80 syz-executor 944 940 763 0 S uwait 0xfffffe0058519400 syz-executor 943 764 764 0 R (threaded) syz-executor 100382 Run CPU 0 syz-executor 100455 S lockf 0xfffffe005865a480 syz-executor 100456 S select 0xfffffe006dc1fac0 syz-executor 100457 S aiowc 0xfffffe0054177e38 syz-executor 100458 S uwait 0xfffffe0077402c80 syz-executor 100461 S connec 0xfffffe0059b4f0da syz-executor 100462 S uwait 0xfffffe0077402100 syz-executor 100463 S uwait 0xfffffe0077402200 syz-executor 942 1 766 0 S uwait 0xfffffe0077402880 syz-executor 941 765 765 0 RE CPU 1 syz-executor 940 763 763 0 RE syz-executor 939 1 765 0 S uwait 0xfffffe0077402780 syz-executor 938 1 763 0 S uwait 0xfffffe0077402680 syz-executor 936 1 764 0 S uwait 0xfffffe00582d0780 syz-executor 935 1 766 0 S uwait 0xfffffe0077403b00 syz-executor 929 1 763 0 S uwait 0xfffffe0058517080 syz-executor 928 1 764 0 S uwait 0xfffffe00582d2b80 syz-executor 927 1 765 0 S uwait 0xfffffe0077402d80 syz-executor 926 1 766 0 S uwait 0xfffffe0077a6d200 syz-executor 921 1 765 0 S uwait 0xfffffe0077403c00 syz-executor 920 1 764 0 S uwait 0xfffffe00582d2d00 syz-executor 919 1 763 0 S uwait 0xfffffe0077403d00 syz-executor 918 1 766 0 S uwait 0xfffffe00582d1e00 syz-executor 913 1 765 0 S uwait 0xfffffe0058519300 syz-executor 912 1 766 0 S uwait 0xfffffe0077403400 syz-executor 911 1 764 0 S uwait 0xfffffe00582d1280 syz-executor 910 1 763 0 S uwait 0xfffffe0077403280 syz-executor 905 1 765 0 S uwait 0xfffffe0077a6d600 syz-executor 904 1 764 0 S uwait 0xfffffe0077403800 syz-executor 903 1 766 0 S uwait 0xfffffe0077a6d800 syz-executor 900 1 763 0 S uwait 0xfffffe0058517180 syz-executor 897 1 766 0 S uwait 0xfffffe0077a6d300 syz-executor 896 1 765 0 S uwait 0xfffffe0058519200 syz-executor 893 1 764 0 S uwait 0xfffffe0077a6d700 syz-executor 892 1 763 0 S uwait 0xfffffe00582d0b80 syz-executor 888 1 766 0 S uwait 0xfffffe0077a6d100 syz-executor 887 1 765 0 S uwait 0xfffffe0077404e80 syz-executor 884 1 763 0 S uwait 0xfffffe0077403480 syz-executor 883 1 764 0 S uwait 0xfffffe0077404700 syz-executor 882 1 766 0 S uwait 0xfffffe0058517e80 syz-executor 878 1 763 0 S uwait 0xfffffe00582d2f00 syz-executor 876 1 764 0 S uwait 0xfffffe0058517680 syz-executor 875 1 765 0 S uwait 0xfffffe0058517c80 syz-executor 873 1 766 0 S uwait 0xfffffe0058517580 syz-executor 869 1 764 0 S uwait 0xfffffe0077404200 syz-executor 866 1 765 0 S uwait 0xfffffe0077404500 syz-executor 865 1 766 0 S uwait 0xfffffe0077404600 syz-executor 864 1 764 0 S uwait 0xfffffe0077404400 syz-executor 863 1 763 0 S uwait 0xfffffe0077403700 syz-executor 858 1 763 0 S uwait 0xfffffe0077403600 syz-executor 857 1 766 0 S uwait 0xfffffe00582d2e00 syz-executor 856 1 765 0 S uwait 0xfffffe0058517600 syz-executor 855 1 764 0 S uwait 0xfffffe0058519100 syz-executor 851 1 763 0 S uwait 0xfffffe0058517f00 syz-executor 849 1 766 0 S uwait 0xfffffe0057dc8b00 syz-executor 848 1 765 0 S uwait 0xfffffe0058517b80 syz-executor 846 1 764 0 S uwait 0xfffffe0077404c80 syz-executor 842 1 763 0 S uwait 0xfffffe0077405000 syz-executor 840 1 765 0 S uwait 0xfffffe0057dc8f00 syz-executor 839 1 764 0 S uwait 0xfffffe0077405200 syz-executor 838 1 766 0 S uwait 0xfffffe0058517d80 syz-executor 833 0 0 0 DL (threaded) [so_splice] 100162 D - 0xfffffe0077404880 [thr_0] 100163 D - 0xfffffe00774048c0 [thr_1] 831 1 765 0 S uwait 0xfffffe0077405100 syz-executor 830 1 766 0 S uwait 0xfffffe0057dc8e00 syz-executor 824 1 766 0 S uwait 0xfffffe0058517980 syz-executor 823 1 763 0 S uwait 0xfffffe00582d0680 syz-executor 822 0 0 0 DL aiordy 0xfffffe00540e8010 [aiod4] 821 0 0 0 DL aiordy 0xfffffe00540e8568 [aiod3] 820 0 0 0 DL aiordy 0xfffffe005410a568 [aiod2] 819 0 0 0 DL aiordy 0xfffffe005410aac0 [aiod1] 818 1 765 0 S uwait 0xfffffe0058519500 syz-executor 816 803 816 0 Ss select 0xfffffe0058500640 dhclient 810 1 810 0 Ss select 0xfffffe0058500740 dhclient 803 784 423 65 S select 0xfffffe0058500940 dhclient 784 423 423 0 S wait 0xfffffe00540e9018 sh 766 762 766 0 R syz-executor 765 762 765 0 S wait 0xfffffe00540d0568 syz-executor 764 762 764 0 R syz-executor 763 762 763 0 R syz-executor 762 760 760 0 S select 0xfffffe006dc201c0 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe005400ab60 csh 758 681 758 0 Ss select 0xfffffe0058500b40 sshd 747 1 747 0 Ss+ ttyin 0xfffffe00582b80b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00594ac0b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00594ac8b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00594ad0b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe00594ad8b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0053f670b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0053f678b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0053f680b0 getty 739 1 739 0 Ss+ ttyin 0xfffffe0053f688b0 getty 685 1 685 0 Ss nanslp 0xffffffff83badc40 cron 681 1 681 0 Ss select 0xfffffe006dc20240 sshd 494 1 494 0 Ss select 0xfffffe006dc205c0 syslogd 423 1 423 0 Ss wait 0xfffffe005400c568 devd 422 1 422 65 Ss select 0xfffffe006dc203c0 dhclient 337 1 337 0 Ss select 0xfffffe006dc20440 dhclient 334 1 334 0 Ss select 0xfffffe006dc204c0 dhclient 16 0 0 0 DL syncer 0xffffffff83cdb820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0054002558 [vnlru] 14 0 0 0 RL (threaded) [bufdaemon] 100079 RunQ [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0059943ce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d24cc0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83d0ad88 [dom0] 100080 D launds 0xffffffff83d0ad94 [laundry: dom0] 100081 D umarcl 0xffffffff81e15880 [uma] 7 0 0 0 DL - 0xffffffff839265f8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84866f20 [pf purge] 5 0 0 0 DL waiting 0xffffffff84735700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f0340 [doneq0] 100046 D - 0xffffffff838f02c0 [async] 100075 D - 0xffffffff838f0140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83d06660 [crypto] 100043 D crypto_ 0xfffffe0057d60030 [crypto returns 0] 100044 D crypto_ 0xfffffe0057d60080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b56640 [g_event] 100038 D - 0xffffffff83b56660 [g_up] 100039 D - 0xffffffff83b56680 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83d07100 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c55ff0 [swapper] 100005 D - 0xfffffe0053ebf100 [softirq_0] 100006 D - 0xfffffe0053ebf000 [softirq_1] 100007 D - 0xfffffe0053ebee00 [if_io_tqg_0] 100008 D - 0xfffffe0053ebed00 [if_io_tqg_1] 100009 D - 0xfffffe0053ebec00 [if_config_tqg_0] 100010 D - 0xfffffe00077dc700 [kqueue_ctx taskq] 100011 D - 0xfffffe00077dc600 [jail_remove taskq] 100012 D - 0xfffffe00077dc500 [bus taskq] 100015 D - 0xfffffe00077dc000 [thread taskq] 100017 D - 0xfffffe00077dbc00 [aiod_kick taskq] 100018 D - 0xfffffe00077dbb00 [deferred_unmount ta] 100019 D - 0xfffffe00077dba00 [inm_free taskq] 100020 D - 0xfffffe00077db900 [in6m_free taskq] 100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq] 100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00077db100 [firmware taskq] 100040 D - 0xfffffe00083ff600 [crypto_0] 100041 D - 0xfffffe00083ff600 [crypto_1] 100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0] 100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0] 100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1] 100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon] 100065 D - 0xffffffff8280f241 [deadlkres] 100069 D - 0xfffffe00083ff200 [acpi_task_0] 100070 D - 0xfffffe00083ff200 [acpi_task_1] 100071 D - 0xfffffe00083ff200 [acpi_task_2] 100073 D - 0xfffffe00077de100 [mca taskq] 100074 D - 0xfffffe00083ff000 [CAM taskq] 100076 D - 0xfffffe0057e08300 [ipsec_offload] db> show all locks Process 943 (syz-executor) thread 0xfffffe005411e000 (100382) shared rw vmobject (vmobject) r = 0 (0xfffffe00541037c0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_fault.c:2355 exclusive rw vmobject (vmobject) r = 0 (0xfffffe00541ad1f0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_fault.c:2430 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe0054149980) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:2813 Process 941 (syz-executor) thread 0xfffffe00540b9780 (100096) exclusive rw vmobject (vmobject) r = 0 (0xfffffe005418cd90) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:3960 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe0054107738) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4099 Process 940 (syz-executor) thread 0xfffffe0054180000 (100407) exclusive rw vmobject (vmobject) r = 0 (0xfffffe00541917c0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_object.c:647 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 384 5188K 498 tcp_hpts 7 4801K 7 devbuf 4187 4324K 4215 sysctloid 35242 2077K 35317 vtbuf 24 1968K 46 kobj 331 1324K 495 newblk 339 1109K 567 filedesc 130 1034K 317 vfscache 3 1025K 3 pcb 84 671K 179 inodedep 74 540K 228 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 subproc 233 490K 1073 intr 4 472K 4 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54444 vmem 5 144K 7 pagedep 63 144K 93 tidhash 3 141K 3 tfo_ccache 1 128K 1 IP reass 1 128K 1 sem 4 106K 4 DEVFS1 106 106K 123 gtaskqueue 18 98K 18 LRO 22 85K 22 bus 1000 82K 5086 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 523 66K 523 ddb_capture 1 64K 1 kdtrace 301 55K 1412 umtx 432 54K 432 BPF 24 37K 93 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 125 32K 135 plimit 81 31K 393 msg 4 30K 4 kbdmux 6 28K 6 temp 32 21K 1835 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 130 16K 410 ithread 90 15K 90 bus-sc 34 15K 1657 lltable 44 14K 44 eventhandler 163 14K 163 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 GEOM 49 11K 431 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 cred 23 9K 196 in6_multi 65 9K 65 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 bmsafemap 1 8K 204 shmfd 1 8K 1 pfs_vncache 1 8K 1 newdirblk 60 8K 82 audit_evclass 240 8K 306 taskqueue 69 8K 99 kqueue 112 7K 984 pwddesc 109 7K 947 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 UMA 269 5K 269 pf_ifnet 10 5K 19 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 acpisem 28 4K 28 proc-args 134 4K 1996 selfd 48 3K 9391 DEVFSP 48 3K 133 terminal 11 3K 11 lockf 28 3K 665 inpcbpolicy 86 3K 401 session 21 3K 33 acpidev 20 3K 20 hhook 8 3K 10 CC Mem 18 3K 122 clone 9 3K 9 uidinfo 3 3K 6 kcovinfo 36 3K 36 netlink 2 3K 88 local_apic 1 2K 1 io_apic 1 2K 1 diradd 16 2K 192 ipsec-saq 2 2K 2 ip6ndp 12 2K 13 Unitno 30 2K 50 sctp_ifa 13 2K 14 CAM XPT 22 2K 543 mkdir 12 2K 164 in_multi 6 2K 8 tun 4 2K 4 select 12 2K 95 toponodes 6 2K 6 ipsecpolicy 2 2K 2 indirdep 5 2K 102 msi 9 2K 9 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 14 NFSD session 1 1K 1 CAM periph 4 1K 271 osd 23 1K 145 sctp_ifn 6 1K 14 ipsec 3 1K 3 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 17 encap_export_host 12 1K 12 dirrem 2 1K 172 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 1 1K 1 procdesc 2 1K 8 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 cryptodev 2 1K 76 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 soname 5 1K 3447 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 freework 1 1K 93 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 33 acpiintr 1 1K 1 cpus 2 1K 2 ip6_moptions 1 1K 37 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 filecaps 2 1K 72 p1003.1b 1 1K 1 pf_table 0 0K 0 pf 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 11 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 5 sctp_atky 0 0K 5 sctp_atcl 0 0K 5 sctp_a_it 0 0K 11 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 mqdata 0 0K 0 filemon 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 133 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 5 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefile 0 0K 51 freeblks 0 0K 44 freefrag 0 0K 5 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 3 ip6_msource 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 5 in_mfilter 0 0K 5 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 20 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 196 namei_tracker 0 0K 0 inotify 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 7 lio 0 0K 8 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 13560 ioctlops 0 0K 96 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 190 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 653 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 20724 0 254 38494208 0 tcp_log 416 8978 3217 70269 0 254 5073120 0 RADIX NODE 152 28088 871 87911 0 62 4401768 0 mbuf 256 9108 554 52584 0 254 2473472 0 BUF TRIE 152 362 11442 804 0 62 1794208 0 malloc-384 384 4187 73 4342 0 30 1635840 0 malloc-128 128 11583 135 11852 0 126 1499904 0 malloc-4096 4096 333 3 502 0 2 1376256 0 UMA Slabs 0 112 11076 6 11076 0 126 1241184 0 malloc-16384 16384 65 2 157 0 1 1097728 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 vmem btag 56 17870 25 17870 0 254 1002120 0 FFS inode 1168 632 19 684 0 8 760368 0 malloc-65536 65536 9 1 12 0 1 655360 0 VM OBJECT 248 2497 111 16185 0 62 646784 0 sctp_ep 1152 0 511 5 0 254 588672 0 malloc-65536 65536 6 2 10 0 1 524288 0 socket 1024 99 409 1607 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 malloc-4096 4096 120 2 963 0 2 499712 0 THREAD 1860 189 27 464 0 8 401760 0 256 Bucket 2048 138 54 1475 0 8 393216 0 MAP ENTRY 96 3527 127 47808 0 126 350784 0 VNODE 440 667 53 721 0 30 316800 0 malloc-64 64 3870 225 3881 0 254 262080 0 ertt_txseginfo 40 5797 364 25959 0 254 246440 0 malloc-16 16 14543 207 14723 0 254 236000 0 malloc-32768 32768 2 5 78 0 1 229376 0 malloc-2048 2048 103 9 161 0 8 229376 0 DEVCTL 1024 21 199 148 0 0 225280 0 malloc-256 256 559 191 917 0 62 192000 0 UMA Zones 768 241 3 241 0 16 187392 0 FPU_save_area 832 191 34 539 0 16 187200 0 malloc-32 32 5434 236 5765 0 254 181440 0 malloc-128 128 1188 207 25350 0 126 178560 0 FFS2 dinode 256 632 58 683 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 PROC 1368 110 11 946 0 8 165528 0 unpcb 320 11 505 1165 0 254 165120 0 malloc-1024 1024 133 27 150 0 16 163840 0 malloc-128 128 1163 108 5464 0 126 162688 0 S VFS Cache 104 1002 402 1260 0 126 146016 0 filedesc0 1072 109 17 947 0 8 135072 0 malloc-65536 65536 0 2 60 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 mbuf_packet 256 6 502 291 0 254 130048 0 ksiginfo 112 104 940 187 0 126 116928 0 tcp_bbr_map 128 314 585 4094 0 126 115072 0 malloc-2048 2048 7 49 514 0 8 114688 0 malloc-32768 32768 3 0 3 0 1 98304 0 malloc-256 256 224 151 982 0 62 96000 0 syncache 176 0 529 56 0 254 93104 0 malloc-384 384 210 30 397 0 30 92160 0 UMA Kegs 384 228 5 228 0 30 89472 0 g_bio 408 0 210 6541 0 30 85680 0 128 Bucket 1024 52 31 306 0 16 84992 0 malloc-128 128 419 232 752 0 126 83328 0 malloc-8192 8192 9 1 12 0 1 81920 0 malloc-64 64 623 448 2511 0 254 68544 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-32768 32768 0 2 11 0 1 65536 0 malloc-4096 4096 14 2 26 0 2 65536 0 VMSPACE 584 90 8 928 0 16 57232 0 ripcb 376 62 88 121 0 30 56400 0 tcp_inpcb 1304 18 24 122 0 8 54768 0 malloc-64 64 345 474 11943 0 254 52416 0 malloc-64 64 517 302 973 0 254 52416 0 malloc-128 128 62 341 318 0 126 51584 0 malloc-256 256 100 95 457 0 62 49920 0 malloc-256 256 55 140 224 0 62 49920 0 32 Bucket 256 69 126 118695 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 1 47 13452 0 16 49152 0 malloc-16384 16384 3 0 3 0 1 49152 0 malloc-2048 2048 12 12 36 0 8 49152 0 malloc-2048 2048 0 24 573 0 8 49152 0 malloc-1024 1024 5 43 1538 0 16 49152 0 64 Bucket 512 85 11 15080 0 30 49152 0 malloc-384 384 95 25 412 0 30 46080 0 Files 80 306 244 7436 0 126 44000 0 TURNSTILE 136 217 98 217 0 62 42840 0 malloc-8192 8192 3 2 23 0 1 40960 0 malloc-4096 4096 10 0 10 0 2 40960 0 pcpu-8 8 4791 329 5430 0 254 40960 0 udp_inpcb 408 6 84 158 0 30 36720 0 hostcache 64 2 565 2 0 254 36288 0 malloc-64 64 63 504 729 0 254 36288 0 malloc-64 64 8 559 13235 0 254 36288 0 malloc-64 64 231 336 269 0 254 36288 0 malloc-64 64 168 399 258 0 254 36288 0 malloc-128 128 38 241 237 0 126 35712 0 malloc-128 128 30 249 62 0 126 35712 0 malloc-128 128 29 250 193 0 126 35712 0 routing nhops 256 27 108 34 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 52 38 58 0 30 34560 0 malloc-256 256 7 128 170 0 62 34560 0 malloc-256 256 26 109 339 0 62 34560 0 malloc-256 256 80 55 115 0 62 34560 0 malloc-256 256 13 122 1099 0 62 34560 0 SLEEPQUEUE 88 217 167 217 0 126 33792 0 malloc-16384 16384 0 2 190 0 1 32768 0 malloc-4096 4096 2 6 47 0 2 32768 0 malloc-2048 2048 10 6 10 0 8 32768 0 malloc-2048 2048 7 9 29 0 8 32768 0 malloc-2048 2048 4 12 195 0 8 32768 0 malloc-1024 1024 4 28 20 0 16 32768 0 malloc-1024 1024 12 20 13 0 16 32768 0 malloc-1024 1024 3 29 3 0 16 32768 0 malloc-1024 1024 3 29 170 0 16 32768 0 malloc-1024 1024 11 21 15 0 16 32768 0 malloc-1024 1024 1 31 16 0 16 32768 0 malloc-512 512 2 62 23 0 30 32768 0 malloc-512 512 16 48 85 0 30 32768 0 malloc-512 512 0 64 134 0 30 32768 0 malloc-512 512 2 62 49 0 30 32768 0 malloc-512 512 6 58 23 0 30 32768 0 malloc-512 512 8 56 9 0 30 32768 0 pcpu-64 64 501 11 501 0 254 32768 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 25 239 37 0 126 31680 0 clpbuf 2624 0 12 16 0 4 31488 0 sctp_laddr 48 0 588 12 0 254 28224 0 malloc-32 32 178 704 720 0 254 28224 0 malloc-32 32 377 505 4258 0 254 28224 0 16 Bucket 144 57 139 421 0 62 28224 0 4 Bucket 48 5 583 6 0 254 28224 0 AIO 208 1 132 57 0 62 27664 0 da_ccb 544 0 49 1726 0 16 26656 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 3 0 29 0 1 24576 0 malloc-8192 8192 2 1 83 0 1 24576 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-4096 4096 5 1 9 0 2 24576 0 malloc-4096 4096 2 4 752 0 2 24576 0 pipe 736 19 14 304 0 16 24288 0 PWD 40 74 532 165 0 254 24240 0 rtentry 168 30 114 34 0 62 24192 0 8 Bucket 80 56 244 396 0 126 24000 0 itimer 352 0 66 4 0 30 23232 0 splice 184 0 126 3 0 62 23184 0 malloc-384 384 1 59 26 0 30 23040 0 malloc-384 384 0 60 343 0 30 23040 0 malloc-384 384 7 53 7 0 30 23040 0 ertt 72 18 262 122 0 126 20160 0 malloc-32 32 111 519 211 0 254 20160 0 malloc-32 32 17 613 56 0 254 20160 0 malloc-32 32 61 569 930 0 254 20160 0 malloc-32 32 113 517 206 0 254 20160 0 malloc-32 32 21 609 26 0 254 20160 0 2 Bucket 32 62 568 433 0 254 20160 0 cryptop 280 0 70 7 0 30 19600 0 L VFS Cache 320 0 60 10 0 30 19200 0 AIOLIO 272 0 70 4 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 3 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-2048 2048 2 6 4 0 8 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 tcp_bbr_pcb 896 1 17 17 0 16 16128 0 vtnet_tx_hdr 24 1 667 26816 0 254 16032 0 kenv 258 17 43 1067 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 KNOTE 160 0 75 18 0 62 12000 0 malloc-16 16 19 731 66 0 254 12000 0 malloc-16 16 7 743 89 0 254 12000 0 malloc-16 16 78 672 338 0 254 12000 0 malloc-16 16 283 467 4495 0 254 12000 0 malloc-16 16 37 713 120 0 254 12000 0 malloc-16 16 276 474 25076 0 254 12000 0 malloc-16 16 11 739 15 0 254 12000 0 malloc-384 384 1 29 1 0 30 11520 0 Mountpoints 2816 2 2 2 0 4 11264 0 malloc-8192 8192 1 0 1 0 1 8192 0 pcpu-16 16 4 252 4 0 254 4096 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf anchors 1664 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 udplite_inpcb 408 0 0 0 0 30 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 AIOCB 552 0 0 0 0 16 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl