last executing test programs: 4.900190621s ago: executing program 2 (id=380): openat$filemon(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmdt(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) fork() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = socket(0x26, 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x101, &(0x7f0000000380)=0x1f, 0x4) freebsd11_fhstatfs(&(0x7f0000000100)={{[0x5c8951ac, 0x3bea9983]}, {0x1, 0xfe, "a90000004000000094d200004000"}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x2, 0x0, @rand_addr="65cb30df0200000000382100002f69f4"}}, {{0x1c, 0x1c, 0x1, 0x3, @mcast2}}}, 0xfc) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags}) 4.573635019s ago: executing program 2 (id=383): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ftruncate(r0, 0x80002) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x39, 0x0, 0x0) r4 = socket(0x2, 0x1, 0x0) fstat(r2, &(0x7f0000000340)) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000000180)={'rack\x00', 0xc}, 0x24) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r4, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r4, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b5c422ca65675e274c429d4ecb6043c5c10548af3499af18ae3b738b9b6b5428e18e8a6f70a1fad05f03388e5d7fcc796fa874a4c850fc114d59d7d095f07c3338b7653ed757e08fc8325e69831de6411138839053b1a7b32636f2e05fcbcada2375bde92ed0ac706042efe8a3bcd095a7ab57ac9ddbdc94f1545f59d15ada6e76061b7834beac7d501f26c2752d451ca96b5f61b24c88865cfe25dfb939a9fcbb9146239110e08576b3ec84e75714e740034e78dba801094faa3edb5774e0c58a39e0a1439a32fb837000000000000800108fcaeec67663ce77bfbc50affa69135c9385cd6d36ff365039a3c5a89a24e3fed7dee1a35513534f7173d892afd3b73f76a08af4f857a1f2674d9ace7647aace412d13afc1ac098fe6f86bfdef411248be5e096c4e747bfdc32a173cf9cdba48cc36819787fb0c8664abba4c4b89301778de04ce18308", 0x14b}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000000000)={'freebsd\x00'}, 0x24) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r5 = kqueue() kevent(r5, &(0x7f00000001c0), 0x800e4a, 0x0, 0xa9fa, 0x0) mincore(&(0x7f0000156000/0xc00000)=nil, 0xc00000, &(0x7f0000001640)=""/4096) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r6, &(0x7f0000000300)={0x1c, 0x1c, 0x2, 0xfffffffe, @loopback, 0x8be}, 0x1c) pipe2(&(0x7f0000000080), 0x100004) sendmsg$inet6_sctp(r1, &(0x7f0000001a80)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, 0xc}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000240)="c1", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="300000008400000009000000ac1400bb100000008400000009000000e0000002100000008400000009000000e00000021c"], 0x4c, 0x185}, 0x4) rfork(0x85000) 3.292659418s ago: executing program 2 (id=391): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r2 = accept$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r2, 0x16, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 2.526720889s ago: executing program 1 (id=395): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x44, &(0x7f0000000000)=0x40, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x10, 0x2, 0x2, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x4b, 0x0, 0x0) r3 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x6, 0xe739}}}}}) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) open(&(0x7f0000000480)='./file0\x00', 0x0, 0xe) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="4b00000000000000f0d0092a78e8bfc4e5a1488f80298906704676d2be441a965268331f98b186e51bb38578619a0165e6d463fc3e525ec9c20adab5acb53529706779b8480845997a38c11738d3a6f97a1b2517ff46cff9123153c67680191aa8b91c255089284dd7bc73d942868698baba4a0d596365f4461720671058e973606f413973162d7f4fda6fa589e225d2d18c2782406bc91456"], 0x8) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) mkdir(0x0, 0x0) setreuid(0xee00, 0x0) r4 = getuid() setreuid(0x0, r4) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x13, 0x0, &(0x7f0000000080)) 2.337964787s ago: executing program 2 (id=396): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) setregid(0x0, 0x0) mount(&(0x7f0000000000)='hammer2\x00', 0x0, 0x40000002, &(0x7f0000000240)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) thr_self(&(0x7f0000000040)=0x0) sigtimedwait(&(0x7f0000000540)={[0x1ff, 0x8, 0x4, 0xa2]}, 0x0, 0x0) thr_set_name(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00', 0x80}, 0x24) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r2, 0x0, 0x20104) r3 = kqueue() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(r3, &(0x7f0000000000), 0x100f2, 0x0, 0xfc, 0x0) 2.177574631s ago: executing program 1 (id=398): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x47, &(0x7f0000000000)={@multicast2, @broadcast, @remote={0xac, 0x14, 0x0}}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10001000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2c000000ffff000004"], 0x8c}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @random="c61800b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @udp={{0x0, 0x2, 0x8}}}}}}) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) symlinkat(&(0x7f0000000dc0)='./file0\x00', r2, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@empty}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) r5 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet_mreqn(r4, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x2e, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, r6}, 0x14) sync() sync() 2.140390114s ago: executing program 0 (id=399): extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000040)='%[\x00', 0x0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000100)={@multicast1, @rand_addr=0x8, @rand_addr=0x2}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr, @multicast1}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000400)={@multicast1, @rand_addr=0x9}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000080)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f00000001c0)={@multicast1, @loopback, @broadcast}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0xd, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast2}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x7e, {0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0xf, 0x0, [@local={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0xf, 0x0, [@rand_addr, @local={0xac, 0x14, 0x0}, @multicast2]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @rand_addr, @multicast2]}]}}}}}}}) poll(&(0x7f0000000240)=[{r2, 0x2000}, {r1, 0x10}], 0x2, 0xfffffffc) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getgid() ioctl$EVIOCGABS(0xffffffffffffffff, 0x2000004218456b, 0x0) dup(r1) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DIOCSETIFFLAG(r3, 0xc0284459, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}) extattr_delete_file(&(0x7f0000000300)='./file0\x00', 0x2, &(0x7f0000000380)='%[\x00') 1.836380317s ago: executing program 0 (id=400): r0 = getsid(0xffffffffffffffff) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x8) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) procctl$PROC_TRACE_CTL(0x0, r0, 0x7, &(0x7f0000000000)=0x2) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) socket(0x1c, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4, 0x0) r2 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000000c0)={'bbr\x00'}, 0x24) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x1ff, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) sendto(r2, &(0x7f0000000500)="b9d5cf29033fda9f0d47f14a5babefe85e2f1027c0bb21378a3d78aef12d04ee87a68f", 0x23, 0x100, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x2006}, 0x1c) mount(&(0x7f0000000740)='ext2fs\x00', 0x0, 0x10, &(0x7f0000000680)="ade842ebae21f7633aca48499e99749030ddbd9e14874ce6a586d90a306cb74264626630e10532de6c39d4332680bcfd0f4d702e0d69a62e7d5efef16b33148f") open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x5) syz_emit_ethernet(0x684, 0x0) openat(0xffffffffffffff9c, 0x0, 0x308202, 0x100) aio_write(&(0x7f0000000240)={r1, 0x80000001, 0x0, 0x0, [0x3], 0x200000000000000, 0x8, 0x5c0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @spare=[0x3, 0x1, 0x5, 0x10, 0xa, 0x9, 0x5252eadb, 0x4]}}) aio_mlock(&(0x7f0000000580)={r2, 0x1000, 0x0, 0x0, [0x8, 0x2], 0x1, 0x8, 0x9, {0xae, 0x3, 0x0}, {0x1, 0xd, @sival_int=0x5, @thr={0x0, 0x0}}}) 1.670861878s ago: executing program 1 (id=401): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r1, 0x3) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000740)="b100050390000000030008000700ca900f0e08fecea11ea8fef968f3c73fd3357aa0eb2c0900852e126336acf00b7804be781e4991f7addf5f882b2b7be1aa7923ed00f4c8b2ca3ebbc259699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb77008f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c5000000020000000000000f0200a371a3f80000feffffffffffff010000000000000000", 0xb1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) syz_emit_ethernet(0x66, &(0x7f00000025c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x3, 0x0, 0x6, '\x00', {0x5, 0x6, "ad526c", 0x8d9, 0x15, 0x1, @empty, @rand_addr="bf7be6b9fa06f549927f5637d5bf4695"}}}}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) extattr_set_file(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000140)='\x00\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file/file0\x00', 0x4, 0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) renameat(r0, 0x0, r4, &(0x7f0000000280)='./file0\x00') r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) flock(r3, 0x3) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000000040)="01000000", 0x4) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000000180)="86021543", 0x4) flock(r5, 0x2) faccessat(0xffffffffffffffff, 0x0, 0x4, 0x400) r7 = dup2(r5, r1) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x2, 0x3, 0x8}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x2f9, 0x0) rfork(0x85000) 1.377119241s ago: executing program 2 (id=404): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r2 = accept$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r2, 0x16, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 1.275443705s ago: executing program 3 (id=405): r0 = kqueue() syz_emit_ethernet(0x66, &(0x7f0000000480)={@local, @random='p\a\x00', [], {@ipv6={0x86dd, {0x0, 0x6, "d900", 0x30, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cf1404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0x0, 0x6, 0x0, @rand_addr="44ed2a0b262183ab75d7354883e7b9bd", @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) freebsd11_fhstatfs(0xffffffffffffffff, 0x0) r1 = kqueue() rmdir(0x0) kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40000) syz_emit_ethernet(0x17, 0x0) socket(0x1c, 0x3, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = socket(0x1b, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="02fc1dd56d0131fd8c68dfd48fc30d4e", 0xb68, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) access(&(0x7f0000000680)='./file0\x00', 0x0) kqueue() shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000f40)=""/218) syz_emit_ethernet(0x0, 0x0) close(0xffffffffffffffff) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, 0x0) r3 = setsid() ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, &(0x7f00000002c0)=r3) syz_emit_ethernet(0x5e, &(0x7f0000000380)={@random="73b9ccc300", @random="00f7000400", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @rand_addr="00f0372e0865911feb7ee80000008000", @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @loopback}}}}}}) 1.115599621s ago: executing program 3 (id=406): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) setregid(0x0, 0x0) mount(&(0x7f0000000000)='hammer2\x00', 0x0, 0x40000002, &(0x7f0000000240)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) thr_self(&(0x7f0000000040)=0x0) sigtimedwait(&(0x7f0000000540)={[0x1ff, 0x8, 0x4, 0xa2]}, 0x0, 0x0) thr_set_name(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00', 0x80}, 0x24) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r2, 0x0, 0x20104) r3 = kqueue() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(r3, &(0x7f0000000000), 0x100f2, 0x0, 0xfc, 0x0) 1.100200257s ago: executing program 1 (id=407): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x44, &(0x7f0000000000)=0x40, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x4b, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) r3 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x6, 0xe739}}}}}) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) open(&(0x7f0000000480)='./file0\x00', 0x0, 0xe) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="4b00000000000000f0d0092a78e8bfc4e5a1488f80298906704676d2be441a965268331f98b186e51bb38578619a0165e6d463fc3e525ec9c20adab5acb53529706779b8480845997a38c11738d3a6f97a1b2517ff46cff9123153c67680191aa8b91c255089284dd7bc73d942868698baba4a0d596365f4461720671058e973606f413973162d7f4fda6fa589e225d2d18c2782406bc91456"], 0x8) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) mkdir(0x0, 0x0) setreuid(0xee00, 0x0) r4 = getuid() setreuid(0x0, r4) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x13, 0x0, &(0x7f0000000080)) 1.034271474s ago: executing program 1 (id=408): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x6, 0xe739}}}}}) openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0x20000e8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}, {0x53, 0xfffffffffffffff9, 0x20, 0x400, 0x4, 0xfffffffffffffffe, [0xb4, 0x5, 0xffffffffffff7fff, 0x8000000000000001]}], 0x2, 0x0, 0x0, 0x0) r2 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmdt(r2) ktimer_create(0x0, &(0x7f0000000700)={0x3, 0x1d, @sigval_ptr=0x5, @spare=[0x7, 0xf81, 0x1f2a9c89, 0xf54d, 0x800, 0x0, 0x0, 0x453f]}, &(0x7f0000000400)) r3 = socket(0x1c, 0x3, 0x0) getsockopt$sock_timeval(r3, 0xffff, 0x1009, &(0x7f0000000000), &(0x7f0000001840)=0x10) r4 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0) ioctl$MDIOCATTACH(r4, 0xc1c06d00, 0x0) openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) kmq_timedreceive(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x6000) r6 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r6, 0xc040636a, &(0x7f0000000040)={0x19, 0x0, 0x12, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7db", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x0, 0x1]}) ioctl$CIOCCRYPT(r6, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x0, 0xffe, &(0x7f0000000100)="1eb0a1091ec2a5d961de2b62d7f6993ab29966c160a74af17b1c18d0372a5c5ed2c0a0e44185052766460f9b8fa4afe16dec42f17af258c2adf03e333b152f000000000000020ef3717c", 0x0, 0x0, &(0x7f0000000200)}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x176) 849.72693ms ago: executing program 0 (id=409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) socket$inet6_sctp(0x1c, 0x1, 0x84) ktimer_create(0x4, 0x0, &(0x7f0000000100)) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000100)='cd9660\x00', &(0x7f0000000000)='./file0\x00', 0x100000, &(0x7f00000001c0)) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ktimer_create(0x4, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "004ce5", 0x28, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr="ddbcd6d351ce5ce9db90fcbbe8adb0df", @loopback={0x1000000, 0x89}}}}}}}) kqueue() r3 = socket(0x1c, 0x1, 0x0) aio_error(0x0) open(0x0, 0x0, 0xe) setuid(0xee01) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/251) procctl$PROC_TRAPCAP_CTL(0x2, 0x0, 0x9, &(0x7f0000001780)=0x4) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, 0x0, 0x0) freebsd10_pipe(0x0) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x8}, 0x1c) 673.770478ms ago: executing program 1 (id=410): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) setregid(0x0, 0x0) mount(&(0x7f0000000000)='hammer2\x00', 0x0, 0x40000002, &(0x7f0000000240)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) thr_self(&(0x7f0000000040)=0x0) sigtimedwait(&(0x7f0000000540)={[0x1ff, 0x8, 0x4, 0xa2]}, 0x0, 0x0) thr_set_name(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00', 0x80}, 0x24) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r2, 0x0, 0x20104) r3 = kqueue() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) kevent(r3, &(0x7f0000000000), 0x100f2, 0x0, 0xfc, 0x0) aio_suspend(0x0, 0x0, &(0x7f0000000e40)={0x0, 0xa99c}) 525.879666ms ago: executing program 0 (id=411): freebsd11_kevent(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x0, @rand_addr="000000000000000b0500", 0x2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x7, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}}, {{0x1c, 0x1c, 0x2, 0x4, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x53, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0xfffffffc, @local={0xfe, 0x80, '\x00', 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="fefcb1235ed191d855d55a61f51d8fea"}}}, 0x108) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) getsockopt$inet6_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) clock_nanosleep(0xf, 0x0, &(0x7f0000000180)={0x4, 0x401}, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00', 0x8001}, 0x24) pipe2(&(0x7f0000000080), 0x100004) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x4) rfork(0x85000) 454.373409ms ago: executing program 2 (id=412): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) setregid(0x0, 0x0) mount(&(0x7f0000000000)='hammer2\x00', 0x0, 0x40000002, &(0x7f0000000240)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) thr_self(&(0x7f0000000040)=0x0) sigtimedwait(&(0x7f0000000540)={[0x1ff, 0x8, 0x4, 0xa2]}, 0x0, 0x0) thr_set_name(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00', 0x80}, 0x24) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r2, 0x0, 0x20104) kqueue() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) aio_suspend(0x0, 0x0, &(0x7f0000000e40)={0x0, 0xa99c}) 453.638081ms ago: executing program 0 (id=413): openat$filemon(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmdt(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB='o'], 0x8) sendto$inet6(r1, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) kmq_notify(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) thr_new(0x0, 0x0) fork() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r2 = socket(0x26, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x101, &(0x7f0000000380)=0x1f, 0x4) freebsd11_fhstatfs(&(0x7f0000000100)={{[0x5c8951ac, 0x3bea9983]}, {0x1, 0xfe, "a90000004000000094d200004000"}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x2, 0x0, @rand_addr="65cb30df0200000000382100002f69f4"}}, {{0x1c, 0x1c, 0x1, 0x3, @mcast2}}}, 0xfc) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags}) 360.16367ms ago: executing program 0 (id=414): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) freebsd11_getdents(r1, &(0x7f0000000080)=""/64, 0x40) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r2, 0x3862) r3 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r3, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r5, r4) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r6, r4, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) kqueue() r7 = kqueue() kevent(r7, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, [0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x800, 0x20) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) 217.888588ms ago: executing program 3 (id=415): r0 = kqueue() syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB]) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x8]}], 0x1, 0x0, 0x0, 0x0) freebsd11_fhstatfs(0x0, 0x0) r1 = getpid() rtprio(0x1, r1, &(0x7f0000000580)={0x2, 0x4}) shmctl$IPC_STAT(0x0, 0x2, 0x0) freebsd11_lstat(&(0x7f0000000500)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0xee00) open$dir(&(0x7f0000000040)='./file0\x00', 0x110206, 0x0) setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) setgroups(0x0, 0x0) rfork(0x96014) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x40005aa8, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x3863) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0, &(0x7f0000000140)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f81", 0x49) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x54, &(0x7f0000000900)={0x6, {{0x10, 0x2, 0x1}}, {{0x10, 0x2, 0x1, @multicast1}}}, 0x108) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 77.522662ms ago: executing program 3 (id=416): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x44, &(0x7f0000000000)=0x40, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x10, 0x2, 0x2, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x4b, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) r3 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x6, 0xe739}}}}}) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) open(&(0x7f0000000480)='./file0\x00', 0x0, 0xe) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="4b00000000000000f0d0092a78e8bfc4e5a1488f80298906704676d2be441a965268331f98b186e51bb38578619a0165e6d463fc3e525ec9c20adab5acb53529706779b8480845997a38c11738d3a6f97a1b2517ff46cff9123153c67680191aa8b91c255089284dd7bc73d942868698baba4a0d596365f4461720671058e973606f413973162d7f4fda6fa589e225d2d18c2782406bc91456"], 0x8) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) mkdir(0x0, 0x0) setreuid(0xee00, 0x0) r4 = getuid() setreuid(0x0, r4) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x13, 0x0, &(0x7f0000000080)) 69.268213ms ago: executing program 3 (id=417): symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x900205, 0x100) open(&(0x7f00000003c0)='./file0\x00', 0x80000, 0x105) rfork(0x83000) freebsd10_pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) aio_write(0x0) socket$inet6_udp(0x1c, 0x2, 0x0) socket$inet6_sctp(0x1c, 0x800000000000005, 0x84) ksem_open(0x0, 0x0, 0xa00, 0x1e7, 0x3) freebsd10_pipe(0x0) ktimer_create(0x4, 0x0, 0x0) socket$inet6(0x1c, 0x3, 0x0) openat$bpf(0xffffff9c, 0x0, 0x1, 0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) kmq_timedreceive(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$DIOCRADDADDRS(r2, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x14, 0x200000000000000, 0x0, 0x20000002, 0xb, 0x0, 0xfffffffffffffffe}) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) fork() 0s ago: executing program 3 (id=418): openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x800a, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) freebsd11_fhstatfs(&(0x7f00000000c0)={{[0x7, 0x1f149f5f]}, {0x9, 0x100, "69e75a746cdece4d916efb8f54177bc4"}}, &(0x7f0000000540)) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0xd2) fchownat(r4, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') setsockopt$inet_mreqsrc(r2, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r5 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r5}) wait4(r5, 0x0, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000140)={@rand_addr=0xa, @remote={0xac, 0x14, 0x0}, @loopback}, 0xc) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x20088, 0x0, 0x0) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fhlinkat(&(0x7f0000000280)={{[0x2, 0x3]}, {0x5, 0x2, "b45300"}}, r6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 WARNING pid 845 (syz-executor): ioctl sign-extension ioctl 2000004218456b Jan 1 00:00:08 ci-freebsd-main-9 kernel: arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.1.187 on tap1 vnode_pager_putpages: zero-length write at 4096 resid 8192 0xfffffe006e401898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 4, writecount 4, refcount 21 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0054120aa8 ref 3 pages 152 cleanbuf 18 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe0054125780 (pid 862, syz-executor, tid 100215) with exclusive waiters pending with shared waiters pending nlink=1, effnlink=1, size=589824, extsize 0 generation=ba4ac1ff, uid=0, gid=0, flags=0x20006 ino 81, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 Jan 1 00:00:11 ci-freebsd-main-9 kernel: arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.0.187 on tap0 if_delmulti_locked: detaching ifnet instance 0xfffffe006e483800 WARNING pid 891 (syz-executor): ioctl sign-extension ioctl 2000004218456b vnode_pager_putpages: zero-length write at 0 resid 14434 0xfffffe006e401370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 6, writecount 4, refcount 2 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe005410fba0 ref 1 pages 4 cleanbuf 0 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0054115780 (pid 903, syz-executor, tid 100286) nlink=1, effnlink=1, size=14434, extsize 0 generation=4280a788, uid=0, gid=0, flags=0x40008 ino 94, on dev gpt/rootfs Warning! syz-executor[914] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe006e483800 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 Expensive callout(9) function: 0xffffffff8146b400(0xfffffe006e52fe60) 0.004183955 s Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 if_delmulti_locked: detaching ifnet instance 0xfffffe006e483800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe006e483800 vnode_pager_putpages: zero-length write at 4096 resid 8192 0xfffffe0077b96898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 4, writecount 4, refcount 21 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005415e7c0 ref 3 pages 152 cleanbuf 18 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005416b000 (pid 1052, syz-executor, tid 100548) with exclusive waiters pending nlink=1, effnlink=1, size=589824, extsize 0 generation=b76bab22, uid=0, gid=0, flags=0x20006 ino 122, on dev gpt/rootfs md1: truncating fractional last sector by 1 bytes vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e4031b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 8, writecount 6, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0054161c98 ref 1 pages 544 cleanbuf 63 dirtybuf 5 lock type ufs: EXCL by thread 0xfffffe0054149780 (pid 1095, syz-executor, tid 100616) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=10869681, uid=0, gid=0, flags=0x40008 ino 116, on dev gpt/rootfs Jan 1 00:00:09 ci-freebsd-main-9 kernel: arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.3.187 on tap3 lock order reversal: 1st 0xfffffe006ddff598 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3384 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:185 lock order proctree -> ufs established at: #0 0xffffffff81653331 at witness_checkorder+0x781 #1 0xffffffff814bb286 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81d92e3b at ffs_lock+0x18b #3 0xffffffff822f83e7 at VOP_LOCK1_APV+0x57 #4 0xffffffff817c34be at _vn_lock+0x14e #5 0xffffffff817c3d68 at vn_close1+0x1e8 #6 0xffffffff814acb7a at ktrops+0x41a #7 0xffffffff814ac2ed at sys_ktrace+0xaed #8 0xffffffff82133662 at amd64_syscall+0x4e2 #9 0xffffffff820d86fb at fast_syscall_common+0xf8 lock order ufs -> proctree attempted at: #0 0xffffffff81654202 at witness_checkorder+0x1652 #1 0xffffffff81544fbf at _sx_slock_int+0x13f #2 0xffffffff81610b2d at uprintf+0x14d #3 0xffffffff81dbf0df at ufs_rmdir+0xdf #4 0xffffffff822f708d at VOP_RMDIR_APV+0xcd #5 0xffffffff817b80fa at kern_frmdirat+0x87a #6 0xffffffff82133662 at amd64_syscall+0x4e2 #7 0xffffffff820d86fb at fast_syscall_common+0xf8 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0077b95528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 8, writecount 6, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541792e8 ref 1 pages 544 cleanbuf 63 dirtybuf 5 lock type ufs: EXCL by thread 0xfffffe0054181000 (pid 1134, syz-executor, tid 100683) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=2e42e483, uid=0, gid=0, flags=0x40008 ino 143, on dev gpt/rootfs Jan 1 00:00:05 ci-freebsd-main-9 kernel: arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.1.187 on tap1 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 WARNING pid 1186 (syz-executor): ioctl sign-extension ioctl 2000004218456b md58027: truncating fractional last sector by 4 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 md4: truncating fractional last sector by 1 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 FreeBSD/amd64vnode_pager_putpages: zero-length write at 0 resid 131072 (ci-freebsd-mai0xfffffe0077b97a50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 n-9.us-central1- usecount 7, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST)b.c.syzkaller.internal) (ttyu0) login: v_object 0xfffffe00541851f0 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe005417a780 (pid 1226, syz-executor, tid 100846) nlink=1, effnlink=1, size=1048576, extsize 0 generation=aae812ca, uid=0, gid=0, flags=0x40008 ino 144, on dev gpt/rootfs WARNING pid 1275 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 WARNING pid 1300 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 WARNING pid 1326 (syz-executor): ioctl sign-extension ioctl 2000004218456b md6: truncating fractional last sector by 1 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 FreeBSD/amd64 (ci-freebsd-main-9.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe00598e91b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 7, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00541716c8 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe005417a000 (pid 1337, syz-executor, tid 100979) nlink=1, effnlink=1, size=1048576, extsize 0 generation=159a1fd1, uid=0, gid=0, flags=0x40008 ino 119, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 WARNING pid 1362 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005813e000 panic: handle_workitem_remove: bad file delta cpuid = 0 time = 14 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c4b690 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c4b7f0 vpanic() at vpanic+0x257/frame 0xfffffe0056c4b9b0 panic() at panic+0xb5/frame 0xfffffe0056c4ba70 handle_workitem_remove() at handle_workitem_remove+0xedf/frame 0xfffffe0056c4bbb0 handle_workitem_remove() at handle_workitem_remove+0xc0f/frame 0xfffffe0056c4bcf0 process_worklist_item() at process_worklist_item+0x525/frame 0xfffffe0056c4be40 softdep_process_worklist() at softdep_process_worklist+0xfd/frame 0xfffffe0056c4be90 softdep_flush() at softdep_flush+0x1a4/frame 0xfffffe0056c4bef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c4bf30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c4bf30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 14 tid 100094 ] Stopped at kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827cb4c0 .str.27 rsp 0xfffffe0056c4b7d0 rbp 0xfffffe0056c4b7f0 rsi 0 rdi 0xffffffff81614a99 printf+0x149 r8 0 r9 0xffffffff r10 0x1000000001011 r11 0xb r12 0xfffffe00540ba780 r13 0xfffffffffffffffe r14 0xffffffff827cb4c0 .str.27 r15 0 rip 0xffffffff815fe5ce kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> show proc Process 14 (bufdaemon) at 0xfffffe00540055c0: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b4d060 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b4d060 reapsubtree: 14 sigparent: 20 vmspace: 0xffffffff83b4e040 (map 0xffffffff83b4e040) (map.pmap 0xffffffff83b4e0e0) (pmap 0xffffffff83b4e150) threads: 3 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 Run CPU 0 [/ worker] db> ps pid ppid pgrp uid state wmesg wchan cmd 1390 766 766 0 S (threaded) syz-executor 101030 S nanslp 0xffffffff83ba3c41 syz-executor 101046 S connec 0xfffffe00598c84da syz-executor 101047 S uwait 0xfffffe0078e20200 syz-executor 1389 1 766 0 S uwait 0xfffffe0078e1fa80 syz-executor 1384 1380 765 0 S uwait 0xfffffe0078e1f700 syz-executor 1383 763 763 0 S (threaded) syz-executor 101037 S nanslp 0xffffffff83ba3c41 syz-executor 101038 S sbwait 0xfffffe00598c060c syz-executor 101041 S uwait 0xfffffe0078e1f600 syz-executor 1382 1 763 0 S uwait 0xfffffe0078e1fe80 syz-executor 1380 765 765 0 S (threaded) syz-executor 100102 S nanslp 0xffffffff83ba3c40 syz-executor 101034 S sigwait 0xfffffe00540ca0d0 syz-executor 101039 S uwait 0xfffffe0058258d80 syz-executor 101042 S uwait 0xfffffe0078e1f800 syz-executor 1378 1377 764 0 S uwait 0xfffffe00584ec800 syz-executor 1377 764 764 0 S (threaded) syz-executor 100089 S nanslp 0xffffffff83ba3c41 syz-executor 101026 S sigwait 0xfffffe0054003b90 syz-executor 101028 S uwait 0xfffffe0078e1f300 syz-executor 101032 S uwait 0xfffffe0078e20000 syz-executor 1375 1 766 0 S uwait 0xfffffe005968fe80 syz-executor 1363 1 765 0 S uwait 0xfffffe0058259300 syz-executor 1355 1 764 0 S uwait 0xfffffe00584eca00 syz-executor 1347 1 1347 0 Ss+ ttyin 0xfffffe00585cc4b0 getty 1346 1 1346 0 Ss+ ttyin 0xfffffe00582904b0 getty 1345 1 1345 0 Ss+ ttyin 0xfffffe00585cc8b0 getty 1344 1 1344 0 Ss+ ttyin 0xfffffe00585cccb0 getty 1343 1 1343 0 Ss+ ttyin 0xfffffe00585cd0b0 getty 1342 1 1342 0 Ss+ ttyin 0xfffffe00585cd4b0 getty 1341 1 1341 0 Ss+ ttyin 0xfffffe00585cd8b0 getty 1340 1 1340 0 Ss+ ttyin 0xfffffe00585cdcb0 getty 1339 1 1339 0 Ss+ ttyin 0xfffffe00585ce0b0 getty 1338 0 0 0 DL mdwait 0xfffffe007a380000 [md7] 1331 1 765 0 S uwait 0xfffffe0058259000 syz-executor 1327 0 0 0 DL mdwait 0xfffffe007a37e000 [md6] 1319 1 764 0 S uwait 0xfffffe00584ee900 syz-executor 1316 1 765 0 S uwait 0xfffffe0078e1f500 syz-executor 1296 1 763 0 S uwait 0xfffffe0078e1f400 syz-executor 1290 1 764 0 S uwait 0xfffffe0058259100 syz-executor 1282 1 765 0 S uwait 0xfffffe005825a280 syz-executor 1281 1 764 0 S uwait 0xfffffe0059690c00 syz-executor 1277 1 763 0 S uwait 0xfffffe0058258e80 syz-executor 1267 1 765 0 S uwait 0xfffffe0059691a00 syz-executor 1266 1 766 0 S uwait 0xfffffe0059691b00 syz-executor 1257 1 766 0 S uwait 0xfffffe0059690f00 syz-executor 1251 1 766 0 S uwait 0xfffffe0059691600 syz-executor 1249 1 763 0 S uwait 0xfffffe005968f680 syz-executor 1242 1 765 0 S uwait 0xfffffe0059691500 syz-executor 1229 1 765 0 S uwait 0xfffffe0059691900 syz-executor 1227 0 0 0 DL mdwait 0xfffffe0078e2c000 [md5] 1211 0 0 0 DL mdwait 0xfffffe0078e2d000 [md4] 1210 1 764 0 S uwait 0xfffffe0078e20100 syz-executor 1205 1 766 0 S uwait 0xfffffe00584eef00 syz-executor 1201 1 766 0 S uwait 0xfffffe00584ecc00 syz-executor 1197 0 0 0 DL mdwait 0xfffffe0078ec8000 [md3] 1196 0 0 0 DL mdwait 0xfffffe0059b63000 [md58027] 1182 1 763 0 S uwait 0xfffffe0078e1fc80 syz-executor 1179 1 765 0 S uwait 0xfffffe0078e1fb80 syz-executor 1175 1 766 0 S uwait 0xfffffe005825ab80 syz-executor 1156 1 764 0 S uwait 0xfffffe00584eb900 syz-executor 1126 1 766 0 S uwait 0xfffffe00584ec100 syz-executor 1122 1 765 0 S uwait 0xfffffe00584ee800 syz-executor 1119 1 763 0 S uwait 0xfffffe00584ec300 syz-executor 1112 1 766 0 S uwait 0xfffffe00584ece00 syz-executor 1106 1 763 0 S uwait 0xfffffe0059690100 syz-executor 1102 0 0 0 DL mdwait 0xfffffe00779fe000 [md2] 1101 1 766 0 S uwait 0xfffffe005968f080 syz-executor 1090 1 764 0 S uwait 0xfffffe00584ee400 syz-executor 1088 1 764 0 S uwait 0xfffffe00584ee500 syz-executor 1079 1 765 0 S uwait 0xfffffe005968f380 syz-executor 1077 0 0 0 DL mdwait 0xfffffe0078ec7000 [md1] 1069 1 763 0 S uwait 0xfffffe00584ec700 syz-executor 1063 1 764 0 S uwait 0xfffffe00584ebc00 syz-executor 1059 1 766 0 S uwait 0xfffffe0059690280 syz-executor 1056 1 766 0 S uwait 0xfffffe00584ec900 syz-executor 1046 1 1042 0 S uwait 0xfffffe00584ee600 syz-executor 1039 1 765 0 S uwait 0xfffffe00584ec200 syz-executor 1037 1 764 0 S uwait 0xfffffe00584ec600 syz-executor 1030 1 766 0 S uwait 0xfffffe005968f580 syz-executor 1028 1 764 0 S uwait 0xfffffe005968f280 syz-executor 1021 1 766 0 S uwait 0xfffffe005968f780 syz-executor 1017 1 765 0 S uwait 0xfffffe00584ec400 syz-executor 1014 1 765 0 S uwait 0xfffffe00584eeb00 syz-executor 1011 1 763 0 S uwait 0xfffffe00584ebd00 syz-executor 1006 1 763 0 S uwait 0xfffffe0078e20400 syz-executor 1000 1 764 0 S uwait 0xfffffe00584eed00 syz-executor 998 1 765 0 S uwait 0xfffffe0059690980 syz-executor 990 1 763 0 S uwait 0xfffffe005968fb80 syz-executor 989 1 765 0 S uwait 0xfffffe0059690580 syz-executor 982 1 765 0 S uwait 0xfffffe0059690b00 syz-executor 981 1 765 0 S uwait 0xfffffe0058259b00 syz-executor 976 1 764 0 S uwait 0xfffffe0059690880 syz-executor 960 1 766 0 S uwait 0xfffffe0059690000 syz-executor 948 1 763 0 S uwait 0xfffffe0059690780 syz-executor 942 1 766 0 S uwait 0xfffffe00584eec00 syz-executor 938 1 766 0 S uwait 0xfffffe00584eea00 syz-executor 916 1 766 0 S uwait 0xfffffe005968f980 syz-executor 904 0 0 0 DL mdwait 0xfffffe00779ff000 [md0] 901 1 765 0 S uwait 0xfffffe005968fd80 syz-executor 894 1 765 0 S uwait 0xfffffe005968f880 syz-executor 882 1 766 0 S uwait 0xfffffe0058259900 syz-executor 878 0 0 0 DL - 0xffffffff83cb3e00 [soaiod4] 877 0 0 0 DL - 0xffffffff83cb3e00 [soaiod3] 876 0 0 0 DL - 0xffffffff83cb3e00 [soaiod2] 875 0 0 0 DL - 0xffffffff83cb3e00 [soaiod1] 860 1 763 0 S uwait 0xfffffe005825ae80 syz-executor 856 0 0 0 DL (threaded) [KTLS] 100205 D - 0xfffffe0058568200 [thr_0] 100206 D - 0xfffffe0058568280 [thr_1] 100207 D - 0xffffffff83cb5628 [reclaim_0] 852 1 763 0 S uwait 0xfffffe00584ebe00 syz-executor 850 0 0 0 DL (threaded) [so_splice] 100190 D - 0xfffffe00584ebf00 [thr_0] 100191 D - 0xfffffe00584ebf40 [thr_1] 843 1 764 0 S uwait 0xfffffe005825a680 syz-executor 839 1 765 0 S uwait 0xfffffe0058259a00 syz-executor 832 1 763 0 S uwait 0xfffffe0059691180 syz-executor 827 1 763 0 S uwait 0xfffffe0059690480 syz-executor 817 806 817 0 Ss select 0xfffffe00593ec240 dhclient 806 1 423 65 S select 0xfffffe00593eca40 dhclient 799 0 0 0 DL aiordy 0xfffffe0054107040 [aiod4] 798 0 0 0 DL aiordy 0xfffffe00540fb5a0 [aiod3] 797 0 0 0 DL aiordy 0xfffffe00540fb040 [aiod2] 796 0 0 0 DL aiordy 0xfffffe00541075a0 [aiod1] 766 762 766 0 S nanslp 0xffffffff83ba3c40 syz-executor 765 762 765 0 S nanslp 0xffffffff83ba3c40 syz-executor 764 762 764 0 S nanslp 0xffffffff83ba3c40 syz-executor 763 762 763 0 S nanslp 0xffffffff83ba3c40 syz-executor 762 760 760 0 S select 0xfffffe0053ffb3c0 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00540cbbb0 csh 758 681 758 0 Ss select 0xfffffe0057d668c0 sshd 681 1 681 0 Ss select 0xfffffe0053ffb440 sshd 16 0 0 0 DL syncer 0xffffffff83cc1820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0054002560 [vnlru] 14 0 0 0 RL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 Run CPU 0 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0acc0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf0d88 [dom0] 100080 D launds 0xffffffff83cf0d94 [laundry: dom0] 100081 D umarcl 0xffffffff81de0e10 [uma] 7 0 0 0 DL - 0xffffffff8391c5d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff847d99e0 [pf purge] 5 0 0 0 DL waiting 0xffffffff8450f700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e6340 [doneq0] 100046 D - 0xffffffff838e62c0 [async] 100075 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cec640 [crypto] 100043 D crypto_ 0xfffffe0057d43030 [crypto returns 0] 100044 D crypto_ 0xfffffe0057d43080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b4c620 [g_event] 100038 D - 0xffffffff83b4c640 [g_up] 100039 D - 0xffffffff83b4c660 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 Run CPU 1 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ced0e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c3dff0 [swapper] 100005 D - 0xfffffe0007768d00 [softirq_0] 100006 D - 0xfffffe0007768b00 [softirq_1] 100007 D - 0xfffffe0007768900 [if_io_tqg_0] 100008 D - 0xfffffe0007768700 [if_io_tqg_1] 100009 D - 0xfffffe0007768500 [if_config_tqg_0] 100010 D - 0xfffffe00083db100 [kqueue_ctx taskq] 100011 D - 0xfffffe00083db000 [jail_remove taskq] 100012 D - 0xfffffe00083dae00 [bus taskq] 100015 D - 0xfffffe00083da900 [thread taskq] 100017 D - 0xfffffe00083da600 [aiod_kick taskq] 100018 D - 0xfffffe00083da500 [deferred_unmount ta] 100019 D - 0xfffffe00083da400 [inm_free taskq] 100020 D - 0xfffffe00083da300 [in6m_free taskq] 100021 D - 0xfffffe00083da200 [linuxkpi_irq_wq] 100022 D - 0xfffffe00083da100 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00083da100 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00083da100 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00083da100 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00083da000 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00083da000 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00083da000 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00083da000 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00083d9900 [firmware taskq] 100040 D - 0xfffffe0057d47300 [crypto_0] 100041 D - 0xfffffe0057d47300 [crypto_1] 100056 D - 0xfffffe00083dd200 [vtnet0 rxq 0] 100057 D - 0xfffffe0058145500 [vtnet0 txq 0] 100058 D - 0xfffffe0058145400 [vtnet0 rxq 1] 100059 D - 0xfffffe0058145300 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057d67400 [virtio_balloon] 100065 D - 0xffffffff827cfba0 [deadlkres] 100069 D - 0xfffffe0057d46e00 [acpi_task_0] 100070 D - 0xfffffe0057d46e00 [acpi_task_1] 100071 D - 0xfffffe0057d46e00 [acpi_task_2] 100073 D - 0xfffffe00083dca00 [mca taskq] 100074 D - 0xfffffe0057d46b00 [CAM taskq] 100076 D - 0xfffffe0058142300 [ipsec_offload] db> show all locks Process 1383 (syz-executor) thread 0xfffffe0054180000 (101038) exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe0059b0dd80) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4833 Process 14 (bufdaemon) thread 0xfffffe00540ba780 (100094) exclusive rw SUrw (SUrw) r = 0 (0xfffffe005828dc00) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_softdep.c:10022 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0077b98070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3384 db> show malloc Type InUse MemUse Requests sctp_stro 10 23045K 12 pf_hash 6 12804K 6 linker 400 5474K 1224 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4224 sysctloid 35572 2096K 35647 vtbuf 24 1968K 46 kobj 330 1320K 589 filedesc 155 1239K 1085 newblk 10 1027K 5914 vfscache 3 1025K 3 pcb 96 718K 530 subproc 287 587K 1541 inodedep 21 520K 1348 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 vmem 5 272K 8 vnet_data 2 224K 2 acpitask 1 224K 1 md_sectors 51 204K 51 KTRACE 102 201K 48656 acpica 1674 184K 54468 tidhash 3 141K 3 pagedep 14 132K 595 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 115 115K 132 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1014 83K 5122 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 522 66K 540 ddb_capture 1 64K 1 kdtrace 348 63K 2446 umtx 448 56K 448 md_disk 60 38K 76 shm 3 36K 26 DEVFS3 135 34K 145 hostcache 1 32K 1 msg 4 30K 4 kbdmux 6 28K 6 temp 33 23K 2375 DEVFS_RULE 56 20K 56 GEOM 94 20K 665 routetbl 141 19K 446 ifaddr 67 19K 72 BPF 15 19K 64 LRO 18 19K 18 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 lltable 49 16K 67 kqueue 160 15K 2438 ithread 90 15K 90 bus-sc 34 15K 1668 eventhandler 163 14K 163 sctp_atcl 35 14K 192 ether_multi 159 13K 305 ifnet 7 13K 7 devstat 6 13K 6 kenv 95 12K 95 shmfd 7 11K 19 CAM queue 5 11K 1528 rman 82 10K 507 cred 36 9K 321 rpc 8 9K 8 in6_multi 65 9K 86 bmsafemap 2 9K 1063 pwddesc 132 9K 1449 UART 12 9K 12 ksem 1 8K 3 filemon 1 8K 15 pfs_vncache 1 8K 1 audit_evclass 240 8K 303 taskqueue 69 8K 138 plimit 18 7K 634 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ip6opt 38 6K 132 CC Mem 40 5K 422 pf_ifnet 13 5K 29 ufs_dirhash 24 5K 45 UMA 272 5K 272 vt 11 5K 11 pf_table 2 4K 6 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 crypto 12 4K 78 acpisem 28 4K 28 proc-args 133 4K 2446 DEVFSP 48 3K 184 terminal 11 3K 11 inpcbpolicy 81 3K 880 uidinfo 5 3K 38 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 kcovinfo 36 3K 36 iov 2 3K 21187 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 in_multi 8 2K 17 selfd 32 2K 112235 session 16 2K 58 lockf 17 2K 355 ip6ndp 12 2K 13 sctp_atky 45 2K 207 Unitno 30 2K 411 sctp_ifa 13 2K 14 CAM XPT 22 2K 543 sctp_stri 3 2K 6 dirrem 6 2K 936 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 frag6 16 2K 34 mkdir 10 2K 1020 osd 45 2K 439 msi 9 2K 9 newdirblk 9 2K 510 netlink 2 2K 119 softdep 1 1K 1 diradd 8 1K 955 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 106 NFSD session 1 1K 1 mount 19 1K 1554 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 20 pci_link 10 1K 10 encap_export_host 12 1K 12 select 5 1K 100 ip_msource 9 1K 49 sctp_athm 35 1K 194 sctp_timw 2 1K 2 freefile 4 1K 776 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 chacha20random 1 1K 1 biobuf 1 1K 1 eventfd 3 1K 4 sctp_map 20 1K 24 ip6_msource 5 1K 48 ktls 5 1K 30 vnodes 2 1K 9 freework 2 1K 1742 DEVFS 10 1K 11 cryptodev 4 1K 243 freeblks 1 1K 688 ktls_ocf 2 1K 7 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 CAM SIM 2 1K 2 feeder 7 1K 7 ip6_moptions 6 1K 42 tcpfunc 3 1K 3 in_mfilter 4 1K 85 loginclass 3 1K 5 prison 6 1K 6 pf_rule 1 1K 3 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 VN POLL 1 1K 5 aio 4 1K 10 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 ip_moptions 1 1K 34 vnet 1 1K 1 fadvise 2 1K 13 pmc 1 1K 1 sigio 1 1K 6 filedesc_to_leader 1 1K 9 entropy 2 1K 33 acpiintr 1 1K 1 DEVFS4 2 1K 2 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 soname 1 1K 3834 p1003.1b 1 1K 1 filecaps 1 1K 108 ext2_mount 0 0K 0 ext2_node 0 0K 0 ext2_extents 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 tcp_pcm_rack 0 0K 2 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 4 sctp_mcore 0 0K 0 sctp_socko 0 0K 38 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 12 sctp_aadr 0 0K 0 mqdata 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 1 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 614 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 56 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 583 allocindir 0 0K 0 indirdep 0 0K 623 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 in6_mfilter 0 0K 86 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 38 statfs 0 0K 205 namei_tracker 0 0K 10 inotify 0 0K 3 export_host 0 0K 0 cl_savebuf 0 0K 335 lio 0 0K 25 acl 0 0K 0 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 8 ioctlops 0 0K 181 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 574 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 685 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 6 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 126 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 5 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 700 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8333 1065 44101 0 254 38494208 0 tcp_log 416 7755 5457 97427 0 254 5496192 0 mbuf 256 10492 685 110142 0 254 2861312 0 malloc-4096 4096 462 4 1964 0 2 1908736 0 BUF TRIE 152 267 11537 4837 0 62 1794208 0 malloc-384 384 4121 49 4487 0 30 1601280 0 RADIX NODE 152 9864 271 53196 0 62 1540520 0 malloc-128 128 11696 177 13025 0 126 1519744 0 malloc-16384 16384 78 3 541 0 1 1327104 0 UMA Slabs 0 112 11279 19 11279 0 126 1265376 0 vmem btag 56 22056 87 22056 0 254 1240008 0 sctp_asoc 2256 10 500 12 0 254 1150560 0 malloc-64 64 566 15751 113836 0 254 1044288 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 malloc-65536 65536 10 2 17 0 1 786432 0 FFS inode 1168 626 25 1469 0 8 760368 0 sctp_ep 1152 22 489 175 0 254 588672 0 256 Bucket 2048 251 21 2103 0 8 557056 0 socket 1024 105 403 2501 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 178 0 0 2 467072 0 VM OBJECT 248 1761 111 20149 0 62 464256 0 THREAD 1860 215 9 1048 0 8 416640 0 malloc-65536 65536 4 2 134 0 1 393216 0 malloc-32768 32768 4 8 474 0 1 393216 0 sctp_raddr 736 16 501 18 0 254 380512 0 malloc-2048 2048 106 70 830 0 8 360448 0 VNODE 440 666 90 1512 0 30 332640 0 malloc-32768 32768 4 6 34 0 1 327680 0 MAP ENTRY 96 3107 169 72394 0 126 314496 0 malloc-64 64 4400 451 7063 0 254 310464 0 malloc-65536 65536 0 4 72 0 1 262144 0 ertt_txseginfo 40 14 6349 35257 0 254 254520 0 malloc-16 16 14693 307 14879 0 254 240000 0 malloc-4096 4096 53 3 106 0 2 229376 0 DEVCTL 1024 39 181 166 0 0 225280 0 PROC 1376 131 23 1396 0 8 211904 0 malloc-256 256 357 453 7572 0 62 207360 0 FPU_save_area 832 217 26 1592 0 16 202176 0 UMA Zones 768 244 0 244 0 16 187392 0 malloc-32 32 5476 194 5871 0 254 181440 0 malloc-128 128 1249 146 25858 0 126 178560 0 FFS2 dinode 256 626 64 1469 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 7 509 1351 0 254 165120 0 filedesc0 1072 132 22 1449 0 8 165088 0 malloc-1024 1024 133 27 913 0 16 163840 0 S VFS Cache 104 1041 363 1987 0 126 146016 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-16384 16384 3 5 25 0 1 131072 0 tcp_bbr_map 128 27 996 3110 0 126 130944 0 malloc-256 256 266 244 3620 0 62 130560 0 mbuf_packet 256 234 274 1576 0 254 130048 0 malloc-8192 8192 8 7 34 0 1 122880 0 ksiginfo 112 126 918 433 0 126 116928 0 malloc-128 128 523 252 4450 0 126 99200 0 malloc-4096 4096 19 5 125 0 2 98304 0 UMA Kegs 384 230 3 230 0 30 89472 0 syncache 168 0 528 5 0 254 88704 0 128 Bucket 1024 62 21 314 0 16 84992 0 malloc-128 128 451 200 2614 0 126 83328 0 malloc-128 128 470 181 1360 0 126 83328 0 malloc-8192 8192 5 5 198 0 1 81920 0 64 Bucket 512 103 57 3104 0 30 81920 0 malloc-384 384 181 29 201 0 30 80640 0 sctp_chunk 152 62 458 67 0 254 79040 0 tcp_inpcb 1304 41 16 422 0 8 74328 0 malloc-4096 4096 13 5 31 0 2 73728 0 g_bio 408 0 180 19812 0 30 73440 0 malloc-64 64 735 336 3736 0 254 68544 0 md6 8 8192 192 8192 0 254 67072 0 md4 8 8192 192 8192 0 254 67072 0 md1 8 8192 192 8192 0 254 67072 0 malloc-65536 65536 0 1 1 0 1 65536 0 malloc-32768 32768 0 2 121 0 1 65536 0 malloc-16384 16384 3 1 193 0 1 65536 0 malloc-4096 4096 8 8 24 0 2 65536 0 malloc-2048 2048 25 7 905 0 8 65536 0 VMSPACE 584 97 15 1343 0 16 65408 0 32 Bucket 256 85 170 790 0 62 65280 0 sctp_stream_msg_out 112 0 540 3 0 254 60480 0 malloc-8192 8192 7 0 7 0 1 57344 0 malloc-128 128 160 243 1227 0 126 51584 0 malloc-256 256 0 195 1270 0 62 49920 0 malloc-256 256 110 85 1683 0 62 49920 0 malloc-256 256 43 152 2721 0 62 49920 0 DIRHASH 1024 34 14 48 0 16 49152 0 NAMEI 1024 1 47 18329 0 16 49152 0 malloc-2048 2048 7 17 107 0 8 49152 0 malloc-2048 2048 14 10 90 0 8 49152 0 malloc-1024 1024 28 20 3483 0 16 49152 0 malloc-384 384 26 94 1354 0 30 46080 0 ripcb 376 31 89 146 0 30 45120 0 Files 80 293 257 10604 0 126 44000 0 TURNSTILE 136 225 90 225 0 62 42840 0 clpbuf 2624 0 16 361 0 4 41984 0 vnpbuf 2624 0 16 2 0 16 41984 0 malloc-4096 4096 5 5 579 0 2 40960 0 pcpu-8 8 4848 272 5440 0 254 40960 0 ttyinq 160 135 115 840 0 62 40000 0 sctp_readq 152 0 260 1 0 254 39520 0 cpuset 200 44 148 340 0 62 38400 0 da_ccb 544 0 70 5156 0 16 38080 0 udp_inpcb 408 10 80 285 0 30 36720 0 hostcache 64 4 563 4 0 254 36288 0 malloc-64 64 70 497 20768 0 254 36288 0 malloc-64 64 171 396 449 0 254 36288 0 malloc-64 64 12 555 7708 0 254 36288 0 malloc-64 64 14 553 41 0 254 36288 0 malloc-128 128 77 202 1002 0 126 35712 0 ktls_session 256 2 133 7 0 62 34560 0 routing nhops 256 28 107 43 0 62 34560 0 ttyoutq 256 72 63 448 0 62 34560 0 malloc-384 384 52 38 60 0 30 34560 0 malloc-384 384 29 61 95 0 30 34560 0 malloc-256 256 18 117 84 0 62 34560 0 malloc-256 256 30 105 64 0 62 34560 0 malloc-256 256 31 104 622 0 62 34560 0 SLEEPQUEUE 88 225 159 225 0 126 33792 0 malloc-8192 8192 3 1 5 0 1 32768 0 malloc-4096 4096 4 4 772 0 2 32768 0 malloc-2048 2048 2 14 2 0 8 32768 0 malloc-2048 2048 10 6 13 0 8 32768 0 malloc-2048 2048 4 12 106 0 8 32768 0 malloc-1024 1024 0 32 4 0 16 32768 0 malloc-1024 1024 11 21 35 0 16 32768 0 malloc-1024 1024 9 23 40 0 16 32768 0 malloc-1024 1024 9 23 23 0 16 32768 0 malloc-1024 1024 0 32 1086 0 16 32768 0 malloc-512 512 4 60 191 0 30 32768 0 malloc-512 512 6 58 69 0 30 32768 0 malloc-512 512 1 63 53 0 30 32768 0 malloc-512 512 5 59 113 0 30 32768 0 malloc-512 512 7 57 304 0 30 32768 0 malloc-512 512 11 53 71 0 30 32768 0 pcpu-64 64 501 11 501 0 254 32768 0 PWD 40 84 724 520 0 254 32320 0 tcp_bbr_pcb 896 9 27 38 0 16 32256 0 tcp_log_id_node 120 1 263 8 0 126 31680 0 PGRP 120 20 244 65 0 126 31680 0 sctp_laddr 48 27 561 40 0 254 28224 0 rl_entry 48 14 574 29 0 254 28224 0 malloc-32 32 399 483 3861 0 254 28224 0 16 Bucket 144 69 127 574 0 62 28224 0 4 Bucket 48 7 581 31 0 254 28224 0 AIO 208 0 133 104 0 62 27664 0 udplite_inpcb 408 0 63 27 0 30 25704 0 malloc-8192 8192 1 2 3 0 1 24576 0 malloc-8192 8192 1 2 39 0 1 24576 0 malloc-4096 4096 0 6 16 0 2 24576 0 tcp_log_id_bucket 176 1 137 4 0 62 24288 0 pipe 736 22 11 391 0 16 24288 0 rtentry 168 31 113 43 0 62 24192 0 8 Bucket 80 57 243 605 0 126 24000 0 itimer 352 0 66 13 0 30 23232 0 malloc-384 384 20 40 22 0 30 23040 0 malloc-384 384 32 28 707 0 30 23040 0 malloc-384 384 37 23 218 0 30 23040 0 domainset 40 1 566 360 0 254 22680 0 Mountpoints 2816 2 6 9 0 4 22528 0 ertt 72 40 240 422 0 126 20160 0 malloc-64 64 3 312 3 0 254 20160 0 malloc-32 32 46 584 499 0 254 20160 0 malloc-32 32 93 537 622 0 254 20160 0 malloc-32 32 147 483 1519 0 254 20160 0 malloc-32 32 226 404 21721 0 254 20160 0 malloc-32 32 29 601 1114 0 254 20160 0 2 Bucket 32 83 547 671 0 254 20160 0 KNOTE 160 40 85 388 0 62 20000 0 tcp_rack_map 128 0 155 3 0 126 19840 0 malloc-128 128 2 153 9 0 126 19840 0 cryptop 280 0 70 26 0 30 19600 0 AIOCB 552 0 35 128 0 16 19320 0 L VFS Cache 320 0 60 58 0 30 19200 0 AIOLIO 272 0 70 25 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-2048 2048 5 3 5 0 8 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 0 288 1 0 254 16128 0 vtnet_tx_hdr 24 0 668 18696 0 254 16032 0 malloc-16 16 490 510 4163 0 254 16000 0 kenv 258 17 43 1066 0 30 15480 0 tcp_rack_pcb 1088 0 14 2 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 7 371 7 0 254 12096 0 malloc-16 16 98 652 2425 0 254 12000 0 malloc-16 16 23 727 565 0 254 12000 0 malloc-16 16 18 732 15623 0 254 12000 0 malloc-16 16 75 675 25328 0 254 12000 0 malloc-16 16 11 739 12 0 254 12000 0 malloc-16 16 104 646 526 0 254 12000 0 splice 184 0 63 1 0 62 11592 0 malloc-8192 8192 0 1 1 0 1 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 15 24 87 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-1024 1024 0 0 0 0 16 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl