last executing test programs: 7.120183793s ago: executing program 2 (id=52): socket$inet6_sctp(0x1c, 0x5, 0x84) r0 = kqueue() socket$inet6_icmp(0x1c, 0x2, 0x3a) socket(0x1c, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x18004) recvfrom(r1, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "004ce5", 0x28, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr="ddbcd6d351ce5ce9db90fcbbe8adb0df", @loopback}}}}}}) sendto(r2, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) msgget$private(0x0, 0x0) socket(0x1f, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x49, &(0x7f0000000200)={@local={0xac, 0x14, 0x0}, @multicast1, @rand_addr=0x8}, 0xc) r3 = kqueue() kevent(r3, &(0x7f0000000000)=[{0x7, 0xfffffffffffffffe, 0xc0a0, 0x2, 0x8000, 0x3140000000000000, [0x7, 0xe2e, 0x3, 0x3]}], 0x1, &(0x7f0000000240)=[{}], 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x100, 0x0, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x17, 0x0, 0xb, &(0x7f0000000080)="3c022e61792eecb07f8aee", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x0, 0x40]}) socket(0x1c, 0x1, 0x0) 6.46009499s ago: executing program 1 (id=57): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000000)=r0) (async) r2 = setsid() ioctl$FILEMON_SET_PID(r1, 0xc0045302, &(0x7f00000002c0)=r2) (async) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = kqueue() kevent(r5, &(0x7f0000000140)=[{0x5, 0xfffffffffffffff9, 0x9, 0x8, 0x7, 0x0, [0x0, 0x0, 0x7, 0xe7d]}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket(0x17, 0x1, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r6, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0) (async) r7 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x47, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet_tcp_buf(r7, 0x6, 0x401, &(0x7f0000000240)="b852cd44", 0x4) (async) connect$inet(r7, &(0x7f00000000c0)={0x10, 0x2, 0x2, @loopback}, 0x10) (async) kqueue() (async) kevent(r3, &(0x7f0000000040)=[{0xffffffffffff4eff, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x31, [0x0, 0x0, 0x7, 0x3]}], 0x1, 0x0, 0x0, 0x0) (async) r8 = semget$private(0x0, 0x7, 0x3c0) (async) r9 = socket$inet6(0x1c, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x1010, r5, 0x0) (async) setsockopt(r9, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) (async) fork() fork() (async) semop(r8, &(0x7f0000000180), 0x0) 5.940052866s ago: executing program 2 (id=60): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) (async) ftruncate(r0, 0x80002) (async) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) (async) connect$inet(r2, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) (async) lgetfh(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) (async) sendmsg$inet6_sctp(r2, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x14b}], 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x26, 0x2, 0x0) (async) r4 = socket(0x26, 0x2, 0x0) bind(r4, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x300, @mcast1}, 0xc) bind(r3, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) (async, rerun: 64) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, 0x0) (rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffc0182fc53df077d7b170ffff6dffffaaaaaaaaaaaa08060001080006040001aaaaaaaaaaffffffffbeb24d491400dbee000000"]) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) (async, rerun: 32) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) (rerun: 32) connect$inet6(r5, &(0x7f0000000300)={0x1c, 0x1c, 0x2, 0xfffffffe, @loopback, 0x8be}, 0x1c) r6 = socket(0x2, 0x1, 0x0) getsockopt$inet6_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x901, &(0x7f0000000340)={0x0, 0x40, 0x1, [0xf821]}, &(0x7f0000000380)=0xa) (async) connect$inet(r6, &(0x7f0000000240)={0x10, 0x2, 0x1, @rand_addr=0x9}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000140)=0xffffffff, 0x4) pipe2(&(0x7f0000000080), 0x100004) (async) sendmsg$inet6_sctp(r1, &(0x7f0000001a80)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, 0xc}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000240)="c1", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="300000008400000009000000ac1400bb100000008400000009000000e0000002100000008400000009000000e00000021c"], 0x4c, 0x185}, 0x4) (async) openat$kbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64) rfork(0x85000) (rerun: 64) 5.620117112s ago: executing program 1 (id=65): connect$inet6(0xffffffffffffffff, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) open(0x0, 0x80400000000206, 0x0) fspacectl(r0, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x3, 0xffffffff], 0x0, 0x0, 0x0, {0x0, 0x8, 0x0}, {0x0, 0x0, @sigval_ptr=0x2, @ke_flags=0xc020}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x4a) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) mprotect(&(0x7f0000513000/0x2000)=nil, 0x2000, 0x5) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sync() open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) 3.40772163s ago: executing program 2 (id=66): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) ioctl$PIO_DEADKEYMAP(r1, 0x20006b09, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) kevent(r0, &(0x7f0000000300), 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x5, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000015", 0x78, 0x2c, 0xff, @rand_addr="e1aaa2241dc0fb000000000000000178", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6, {0x7, 0x6, "18deb3", 0x0, 0x71, 0x1, @loopback, @empty, [@routing={0x6, 0x6, 0x0, 0x4, 0x0, [@loopback, @loopback, @mcast1]}, @hopopts={0x70, 0x0, '\x00', [@enc_lim]}]}}}}}}}) linkat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f00000003c0), 0x0, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r3, 0x29, 0x44, 0x0, &(0x7f0000001e00)) posix_fallocate(r2, 0x0, 0x8) posix_fallocate(r2, 0x0, 0x10007) r4 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x31, &(0x7f0000001e40)={0x24}, 0x8) getpid() setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) sendto(r4, &(0x7f0000000e40)="b9d5cf29033fda9f0d47f14a030000005e2f1027c01466b7a90116180f8365ae6047308780f3f80890af100e69002e57a9e620e17489f5763edb6df4781e510cbe9f1bb7f218f4c42a4ed5bc6103931b9ea542386dc931527f97c0104772813d513c", 0x62, 0x100, &(0x7f0000000040)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) 2.480073893s ago: executing program 0 (id=67): r0 = kqueue() syz_emit_ethernet(0x6e, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x1) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000dc0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setresuid(0x0, 0xee01, 0xee00) setresuid(0xffffffffffffffff, 0xee01, 0x0) mkdirat(r2, &(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) nanosleep(&(0x7f0000000480)={0x0, 0x3}, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet6_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x108, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x2, 0x2}, &(0x7f0000000300)=0x18) open$dir(0x0, 0x80200, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x110) write$bt_hci(r4, &(0x7f0000000100)="35fc8604", 0x4) write(r4, 0x0, 0x0) symlinkat(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setgroups(0x0, 0x0) kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x8]}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x110206, 0x0) setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) 2.199950767s ago: executing program 0 (id=68): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) ioctl$PIO_DEADKEYMAP(r2, 0x20006b09, 0x0) aio_fsync(0x4fb6c9497fdf3192, &(0x7f00000001c0)={0xffffffffffffffff, 0xfff, 0x0, 0x0, [0xc, 0x2], 0xa, 0x8, 0x2, {0x92, 0xbac7, &(0x7f0000000100)="6f3ff43c7a16a74d1458064d0a9bea2054e66a56c02b2c22b79531a85bb5caff7bcb67fd4b0b86517f1f0cd8b1668dd2516aa56914da6b3b9b81afdf52035772a5c1ac5a186b0bc2024cdae5d15371eb98f58c4f1ae59a3410c5004ab788c449462e3a24141b2c1d1dedd9aabdaa07b93659e52c4ca6eb70058495f60e9182787f86a405f549fa2459868264f3"}, {0x4, 0xc, @sival_int=0x32bc3360, @spare=[0x5, 0x1, 0xffff, 0x8, 0x5be4d9a9, 0x100000000, 0x7, 0x6]}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0x0) aio_read(&(0x7f0000001080)={r3, 0x1, 0x0, 0x0, [0x2f53, 0x4], 0x5, 0x2, 0x4, {0x9, 0x8, 0x0}, {0x0, 0x18, @sival_int=0x9}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) kevent(r1, &(0x7f0000000300)=[{0x6, 0xfffffffffffffff3, 0x0, 0x1, 0x7ff, 0xcb, [0x7, 0x10001, 0x49, 0x4]}, {0x1, 0xfffffffffffffffa, 0x0, 0x8, 0x5f08, 0x81, [0x7ff, 0x1, 0x3, 0xffffffffffff8001]}, {0x1, 0xb21043f46ccb19b7, 0x30, 0x8, 0xc, 0x6, [0x4, 0x7, 0x6, 0x6]}, {0x2, 0xffffffffffffffff, 0xc0e0, 0x10, 0x2, 0x5, [0xd, 0xff, 0x1, 0xfffffffffffffff9]}, {0x4c81ecea, 0xfffffffffffffff5, 0xc0a3, 0x0, 0x7, 0x8, [0x10, 0x5, 0xffff, 0x5]}, {0x81, 0xfffffffffffffff5, 0x0, 0x40000000, 0x7, 0xfffffffffffffffa, [0x7, 0x7, 0x2, 0xffffffff]}, {0x7, 0xfffffffffffffff9, 0x20, 0x8, 0x80000000, 0x9, [0x401, 0x1ff, 0x0, 0x100000000]}], 0x7, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00B1', 0xa0, 0x2c, 0xff, @rand_addr="e1aaa2241dc0fb000000000000000178", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6, {0x7, 0x6, "18deb3", 0x0, 0x71, 0x1, @loopback, @empty, [@routing={0x6, 0x6, 0x0, 0x4, 0x0, [@loopback, @loopback, @mcast1]}, @hopopts={0x70, 0x0, '\x00', [@enc_lim]}, @routing={0x4b, 0x4, 0x0, 0x5, 0x0, [@loopback, @mcast1]}]}}}}}}}) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) dup2(r5, 0xffffffffffffffff) poll(&(0x7f00000003c0), 0x0, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r6, 0x29, 0x44, 0x0, &(0x7f0000001e00)) posix_fallocate(r4, 0x0, 0x8) posix_fallocate(r4, 0x0, 0x10007) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80, 0xfffffffffffffffe, 0x5c) r8 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x31, &(0x7f0000000100)={0x24, 0x6, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @pad1, @generic={0x8}, @generic={0x6, 0x22, "61a9c7a8385991ee71817500fe55ebd00ffb78bb5ff2eb7dcd505b17c46968ab99b6"}, @enc_lim={0x4, 0x1, 0xfd}]}, 0x40) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2000) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r8, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) syz_emit_ethernet(0x62, &(0x7f0000000480)={@random="79ecd3b4d711", @local, [], {@ipv6={0x86dd, {0x1, 0x6, "e36c71", 0x2c, 0x0, 0x2, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@routing={0x3a, 0x2, 0x0, 0x4, 0x0, [@rand_addr="9c9960f6730a9f1de3d39141e123b987"]}], @tcp={{0x1, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x3, 0x0, 0x6}}}}}}}) connect$inet6(r8, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) sendto(r8, &(0x7f0000000e40)="b9d5cf29033fda9f0d47f14a030000005e2f1027c01466b7a90116180f8365ae6047308780f3f80890af100e69002e57a9e620e17489f5763edb6df4781e510cbe9f1bb7f218f4c42a4ed5bc6103931b9ea542386dc931527f97c0104772813d513c", 0x62, 0x100, &(0x7f0000000040)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) 2.180950638s ago: executing program 1 (id=69): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) setitimer(0x1, &(0x7f00000000c0)={{0x2003, 0xffffffff7ffffffd}, {0xffffffffffffffff, 0x10100000000}}, 0x0) r3 = dup2(r0, r1) setsockopt$inet6_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x1f, &(0x7f0000000000)=0x850, 0x4) r4 = socket(0x1c, 0x1, 0x0) select(0x40, &(0x7f0000000d00)={0x1, 0x1, 0x103, 0x77b, 0x2, 0x3, 0x7}, &(0x7f0000000d40)={0x5, 0x20, 0x8, 0x7, 0xfffffffffffffffd, 0x0, 0x6cf0, 0x5}, 0x0, &(0x7f0000000dc0)={0x100000001, 0x100}) connect$inet6(r4, &(0x7f0000000040)={0x12, 0x1c, 0x2, 0x1ff, @mcast1, 0x2}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x80, &(0x7f0000000080)=0xb, 0x4) 1.690250239s ago: executing program 2 (id=71): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200201, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000040)='./file\x00', 0x30) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') sync() semget(0x2, 0x2, 0x151) sync() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200201, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdir(&(0x7f0000000040)='./file\x00', 0x30) (async) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') (async) sync() (async) semget(0x2, 0x2, 0x151) (async) sync() (async) 1.570074345s ago: executing program 3 (id=72): r0 = kqueue() clock_settime(0x0, &(0x7f0000000000)) clock_settime(0x4, &(0x7f0000000280)={0xca9a3c, 0xd}) kevent(r0, &(0x7f0000000040)=[{0x100000000, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1, [0x0, 0x0, 0x1000, 0x9]}], 0x1, 0x0, 0xfffffffffffffdc3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESDEC=r0]) kqueue() r1 = open(0x0, 0x0, 0xe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x3a, 0x0, @rand_addr="3bcc2629a17a6c58afb8877c8be162e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x11, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setreuid(0xee00, 0x0) r2 = getuid() socket$unix(0x1, 0x2, 0x0) ktimer_create(0x0, 0x0, &(0x7f0000000100)=0x0) ktimer_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x2, 0x6}}, 0x0) setreuid(0x0, r2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r4 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1018, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) readlinkat(r1, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1.250255922s ago: executing program 2 (id=73): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ftruncate(r1, 0x10000) fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x1010, r1, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) 1.112058615s ago: executing program 3 (id=74): kevent(0xffffffffffffffff, &(0x7f00000002c0)=[{0x11, 0xfffffffffffffffe, 0x41, 0x40000000, 0x3, 0xffffffff, [0x81, 0xe, 0x1e4, 0x2]}], 0x1, 0x0, 0x0, 0x0) kqueue() (async) fork() openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) aio_waitcomplete(0x0, 0x0) (async) aio_waitcomplete(0x0, 0x0) r0 = shmget(0x1, 0x1000, 0x50, &(0x7f0000ffd000/0x1000)=nil) (async) freebsd11_getfsstat(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x121, 0x1) (async) setresgid(0xee00, 0xee01, 0x0) (async) r2 = getgid() setregid(0x0, r2) (async) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0xfffffffffffffe85, 0x3) r4 = shmget(0x3, 0x3000, 0x544, &(0x7f0000ffb000/0x3000)=nil) (async) r5 = socket$inet6_udplite(0x1c, 0x2, 0x88) cpuset_setaffinity(0x3, 0x7, 0x9, 0x8, &(0x7f0000000000)={[0x2]}) (async) sendmsg(r5, 0x0, 0x0) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{r6, r7, r6, 0x0, 0xc1, 0xab8e, 0x0, 0x81}, 0x9bc, 0x2, 0xe, 0x1, 0x1, 0x1000, 0x0, r8}) (async) r9 = getpid() rtprio(0x1, r9, &(0x7f0000000000)={0x4, 0x20}) (async) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000200)={{r3, r7, r3, 0xffffffffffffffff, 0x80, 0x2}, 0x1, 0x5, 0x2, 0x3, r8, r9, 0x5}) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) (async) r10 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r10, 0x0, 0x0) (async) setrlimit(0x3, &(0x7f0000000280)={0xfffffffffffffffd, 0xffffffffffffbfff}) (async) fstat(r5, &(0x7f0000000700)) (async) procctl$PROC_REAP_KILL(0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x4c5ba421, 0x786b76aa, 0xffffffffffffffff, 0x1}) shmctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{r1, 0x0, r3, 0xffffffffffffffff, 0x82, 0x8, 0x0, 0xfffffffffffffff9}, 0xfffffffd, 0x2, 0x400000, 0x5, 0x0, r11, 0x19e}) 1.11149231s ago: executing program 1 (id=75): r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x8000080000001, &(0x7f0000000300)="e2", 0x1, [0x100002, 0xffffffff], 0x7, 0x6, 0x0, {0x0, 0x0, 0x0}, {0x1, 0x1d, @sival_int=0x8000000, @ke_flags=0x8005}}) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x4080001, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x4c) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@redirect={0x5, 0x3, 0x0, @empty=0x7e, {0x15, 0x4, 0x2, 0x32, 0x6, 0x67, 0x3, 0x4, 0x32, 0x4, @broadcast, @broadcast, {[@rr={0x7, 0xf, 0xfe, [@broadcast, @rand_addr=0xf, @local={0xac, 0x14, 0x0}]}, @timestamp={0x44, 0x10, 0x45, 0x0, 0x9, [{[], 0xa93}, {[@rand_addr=0x7fff], 0x10}]}, @noop, @lsrr={0x83, 0x17, 0xfb, [@multicast2, @multicast2, @loopback, @multicast1, @multicast2]}, @ra={0x94, 0x6, 0x74e}]}}}}}}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r3, 0x0, 0x4b, 0x0, &(0x7f0000000800)=0xffffffffffffff35) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0xa9c) ioctl$MDIOCATTACH(r4, 0xc1c06d00, &(0x7f0000000140)={0x6, 0x80000001, 0x4, 0x0, 0x444a, 0x1, 0x7, 0x0, 0x1, 0x8, &(0x7f0000000040)='}\x00', [0x10001, 0x0, 0x8, 0x8, 0x2, 0x2, 0x1000, 0x81, 0x400, 0x2, 0x7fff, 0x3, 0x13, 0x6, 0x93, 0x6, 0x400, 0x5, 0xf498, 0xe1a2, 0x101, 0x1, 0x0, 0x8001, 0x3, 0xba6f, 0x2, 0x2, 0x1c91, 0x1000, 0xa2c, 0x3, 0xfffffffa, 0x1e, 0x7f, 0x5, 0x8, 0x9, 0xa, 0x0, 0x6, 0xbff, 0x0, 0x10, 0xe, 0x69a, 0x9, 0xb, 0xffffffff, 0x7, 0x2, 0x1, 0x7fffffff, 0x8, 0x3, 0x3, 0x5cbb, 0x7f, 0xa2c4, 0x5, 0xe4d, 0x3eb, 0x1, 0x80000000, 0x200, 0x6, 0x1ff, 0x5, 0x40000000, 0xe, 0x7, 0x8, 0x7, 0x1000, 0x81, 0x1, 0x7, 0x5, 0x7ff, 0x1, 0xe2800000, 0xeb12, 0x2, 0x6, 0x7, 0xfffffffc, 0x9dc, 0x9, 0x7, 0xe, 0x9, 0x7, 0xfffffff9, 0xa3c, 0x0, 0x8]}) fspacectl(r4, 0x1, &(0x7f0000000100)={0x0, 0xffff}, 0x0, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x4000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) freebsd11_fstatfs(r6, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r7 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) fdatasync(r7) ioctl$DIOCBEGINADDRS(r5, 0x20004416, 0x0) 1.110225003s ago: executing program 0 (id=76): open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x65) r0 = getpid() r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x200, r0) setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f0000000080), 0x4) bind$inet6(r1, &(0x7f0000000100)={0x1c, 0x1c, 0x0, 0xffffffff, @loopback={0x0, 0xfffffffffffffffe}, 0x2}, 0x1c) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x500, r0) kqueue() setitimer(0x1, &(0x7f00000000c0)={{0x2003, 0xffffffff7ffffffd}, {0xffffffffffffffff, 0x10100000000}}, 0x0) 969.969361ms ago: executing program 0 (id=77): setsockopt$inet6_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xf6, 0x10, 0x80000001, 0x8, 0x10001, 0x7ffd, 0x1}, 0x20) fork() (async) open$dir(&(0x7f0000000100)='./file0/../file0\x00', 0x2, 0x8) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd}) (async) fcntl$getown(0xffffffffffffffff, 0x5) (async) socket$inet6_sctp(0x1c, 0x5, 0x84) (async) kmq_setattr(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x7, 0xfffffffffffffbff, 0x9}, &(0x7f0000000380)) (async) r0 = socket(0x1c, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2000, 0x0, &(0x7f00000000c0)) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) (async) clock_settime(0x0, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, &(0x7f00000002c0)=0x4, 0x4) (async) r2 = open$dir(0x0, 0x1, 0x20) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) (async) r3 = open$dir(&(0x7f0000000240)='./file1\x00', 0x40000400000002c2, 0x1) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) thr_new(0x0, 0x0) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mount(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000300)='./file0\x00', 0x1000000, &(0x7f0000000140)) sendfile(r1, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x15) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x52, &(0x7f0000000140)={0x1, {{0xffffffffffffff6d, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x2, @multicast2}}}, 0x108) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_group_source_req(r4, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) (async) rfork(0x11000) wait4(0x0, 0x0, 0x0, 0x0) (async) setresuid(0xee00, 0xee01, 0xffffffffffffffff) (async) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x10000, &(0x7f0000000140)=0xb, 0x4) socket(0x1c, 0x1, 0x0) 920.048373ms ago: executing program 0 (id=78): syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x80, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r3 = open(0x0, 0x80400000000206, 0x0) mlockall(0x2) unlink(0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r4, 0x3862) open$dir(&(0x7f0000000040)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x19, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f00000000c0)={r5, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x2, 0x1ff], 0x0, 0x20, 0x0, {0x0, 0x7, 0x0}, {0x0, 0xfffffffe, @sigval_int=0x4003e, @ke_flags=0x9fc040a3bd859cca}}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r6, 0x0) msync(&(0x7f00001e6000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) fchflags(r2, 0x40008) sync() syz_emit_ethernet(0x2a, &(0x7f0000000500)={@broadcast, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="4c6fa57c306b", @remote={0xac, 0x14, 0x0}, @random="128767a9aced"}}}}) sync() ioctl$MDIOCRESIZE(0xffffffffffffffff, 0xc1c06d04, 0x0) kmq_unlink(0x0) syz_emit_ethernet(0x209, &(0x7f0000000240)={@local, @random="dc407ad3ac6a", [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x6, 0x1fb, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1, {[@generic={0x82, 0x9, "c2519f21a4b212"}]}}, @tcp={{0x0, 0x2, r0, r1, 0x1, 0x0, 0x8, 0x2, 0x7, 0x0, 0x3, {[@nop, @fastopen={0x22, 0xb, "2d6723d805fabc4727"}]}}, {"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"}}}}}}) 860.10009ms ago: executing program 3 (id=79): r0 = kqueue() syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000383a00fe8000000000000000000000000000bbff0200000000000000000000000000010200907800000000609a8cace8fffffffe8000000000000000000000000000bb00000f000000000000000000000000406200000000000000cbf5413d966322e6742c2aa6d27105df57f9340043423e1b461283d5e06b3486152bbfb97170e916c9daba938eb22081f5525e673d08ba8799742930c3bbfc40342446459f06dc68dbe1fb996285d3a503d15c08c7837f53463ee37425e413ca7992a33aea0fd02a867aa10e"]) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x800, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_sctp_SCTP_GET_LOCAL_ADDRESSES(0xffffffffffffffff, 0x84, 0x8004, &(0x7f0000000540)={r1, &(0x7f00000005c0)=[@in={0x10}, @in={0x10}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @empty}, @in={0x10}, @in={0x10, 0x2, 0xffffffffffffffff, @local}, @in={0x10, 0x2, 0xffffffffffffffff, @broadcast}]}, &(0x7f0000000640)=0x10) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) setgroups(0x0, 0x0) kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x8]}], 0x1, 0x0, 0x0, 0x0) freebsd11_fhstatfs(0x0, 0x0) r2 = getpid() rtprio(0x1, r2, &(0x7f00000006c0)={0x2, 0x4}) shmctl$IPC_STAT(0x0, 0x2, 0x0) freebsd11_lstat(&(0x7f0000000500)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0xee00) open$dir(&(0x7f0000000680)='./file0\x00', 0x110206, 0x3f) setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) setgroups(0x0, 0x0) rfork(0x96014) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x40005aa8, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x3863) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', &(0x7f0000000140)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f81", 0xff22) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x54, &(0x7f0000000900)={0x6, {{0x10, 0x2, 0x1}}, {{0x10, 0x2, 0x1, @multicast1}}}, 0x108) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)) extattr_delete_link(&(0x7f0000000580)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00\x02=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\x95\xe8X\xb6\x17\x99\xa6\xe4\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\x9c\x14\xecRRn\ab\xe2\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6\xcf\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\x1eq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4') r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 563.628093ms ago: executing program 3 (id=80): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) fspacectl(r0, 0x0, &(0x7f0000000080)={0x9, 0xa9d}, 0x0, &(0x7f00000000c0)) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x2000000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0xfffffffffffffddb, 0x180}, 0x100) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) aio_readv(&(0x7f0000000140)={r1, 0xffffffffffffffff, 0x0, 0x0, [0xfffffffd], 0x0, 0x8, 0x9, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_ptr=0x1fd}}) sync() 552.778469ms ago: executing program 2 (id=81): r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2, @multicast2}, 0x10) syz_emit_ethernet(0x0, 0x0) shutdown(r0, 0x1) freebsd10_pipe(0x0) close(0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x1, 0x0) fork() r1 = open$dir(0x0, 0x4, 0x2) getdirentries(r1, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r5, 0x8201, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r6, 0x0) sync() sendmsg$unix(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="10000000ffff000006"], 0x10}, 0x0) recvmsg(r4, &(0x7f0000000380)={&(0x7f0000000280)=@in={0x10, 0x2, 0xffffffffffffffff, @multicast1}, 0x57, 0x0, 0x0, &(0x7f0000002400)=""/103, 0x67}, 0x0) ioctl$MDIOCATTACH(r2, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x1800000000000, 0x0, 0x3d, 0x0, 0x1, 0x49, 0x0, [0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x712, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3651, 0x0, 0x0, 0x3, 0x7, 0x80000000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x40000, 0x80000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf752, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x2000, &(0x7f00000002c0)="8c1e62b3349bdf58f3cded1d5d52b0af570180d7312d52384d1f35d76134eedd05a22ba5222285f1f82b2cdd4f8d9600c89156f9ae70302d7307c523db1734ec757877afe3860cd3d7b59fa9409fd6c7c3fbfefd077c8b90e8", 0x59) r7 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r7, 0xc040636a, &(0x7f00000000c0)={0xb, 0x0, 0x18, &(0x7f00000001c0)="0000ac4103f48e8d7b066db952c14a4908afe5de03000000", 0x0, 0x0, 0x1000, 0x7d86699a}) ioctl$CIOCCRYPT(r7, 0xc0306367, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x10000, &(0x7f0000000a00), 0x0, 0x0, 0x0}) 411.678102ms ago: executing program 0 (id=82): ktimer_create(0x0, 0x0, &(0x7f0000000440)) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000440), 0x1) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2, 0x0, @loopback}, 0x1c) sendmsg$inet6_sctp(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)='6', 0x1}], 0x1, 0x0, 0x0, 0x104}, 0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000002480)="fab1f71b", 0x4}], 0x1) ktimer_create(0x0, 0x0, &(0x7f0000000200)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xe, 0x0, 0x0) ktimer_create(0x0, 0x0, &(0x7f0000000080)) ktimer_create(0x0, 0x0, &(0x7f0000000140)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) r2 = socket$inet6(0x1c, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) ktimer_create(0x4, 0x0, &(0x7f0000000240)) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000400)="b10005039000000005b108000720ca900f0e576e1b3208fecea11ea8fef968f3c73fd3357afdeb2c0900852e126336acf00b7804be781e4991f7addf5f882b2b7be1aa7923ed8ff4c8b2ca3ebbc259699a1f132e272cb5d60200d7750d7d026ba8af63ff372807d92934e4fd89720fd3872babfbb77008f5a872c881ff7cc53c894303b22f310b404336a00f90006ee01be657aea8c5000002020000000000000f0200ffffffff010000", 0xb1, 0x20000, 0x0, 0xa38c75ff819e41a8) ktimer_create(0x0, &(0x7f0000000100)={0x0, 0x0, @sigval_ptr, @ke_flags=0x4040}, &(0x7f00000000c0)) 341.993265ms ago: executing program 3 (id=83): ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000080)={0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7d86619b, [0x0, 0x9, 0xc]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) setrlimit(0x4, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) freebsd11_mknod(&(0x7f0000000000)='./file0\x00', 0x672cda28f543e327, 0x0) (async, rerun: 64) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) (async) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x8110, 0x100) (async) r0 = socket(0x1, 0x1, 0x0) ioctl$SMB_SENDB(r0, 0xc0106924, &(0x7f0000000080)={0x6, 0x0, 0x0, @byte, @byte=0xaa, 0x0, 0x0, 0x0, 0x0}) 182.787959ms ago: executing program 1 (id=84): openat$filemon(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) accept4$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x10000000) __specialfd$eventfd(0x1, &(0x7f0000000040)={0xa00, 0x800002}, 0x8) r1 = socket$inet6_icmp(0x1c, 0x2, 0x3a) ftruncate(r1, 0x18000) ioctl$DIOCRSETTFLAGS(0xffffffffffffffff, 0xc450444a, 0xffffffffffffffff) 181.719666ms ago: executing program 3 (id=85): r0 = socket(0x10, 0x3, 0x4) listen(r0, 0x4) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r1, &(0x7f00000002c0)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa) setsockopt$inet6_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x12, &(0x7f0000000440), 0x1) connect$inet6(r1, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2, 0x0, @loopback}, 0x1c) sendmsg$inet6_sctp(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)='6', 0x1}], 0x1, 0x0, 0x0, 0x104}, 0xd) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000002480)="fab1f71b", 0x4}, {&(0x7f0000000540)="e6d35710599aeb7dcfc90efe46774d0aa0b37080788d035aaba5b56ee6d03702a563fdb6ce1e53144721b5f1ac6d273e5de54789082446a35bb15fda9f410879470d4b96c8817471c90095a2d7bfb4a7492332e9e59649b9f46de06c28914d1e042fdcfc51764e596ee01d8f61e0ee4d4a12b0885ee116fc29fefc7fbb44fb0e6f0931beef52100baa0b5bac7ae85a03c0d28ae2747db36e176f36b7a53f0a6e92cec3f94a580cbaf944817aba6c9cc246649b04440d6f8535a4aaf1dc40c47795afd1e4362c19c26fb423c068e8533388c77c7d3c324ee7883c5023c91b37eb1779e421", 0xe4}, {&(0x7f0000000640)="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", 0xfb}], 0x3) shutdown(r0, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x8) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) acct(&(0x7f00000000c0)='./file0\x00') openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r6 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) mprotect(&(0x7f000016d000/0x1000)=nil, 0x1000, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pwritev(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f00000001c0)="f7411cb2f0a338adf30b1bc3727b0bd9025fd136f139e29c7e534962e6d1a728aabd554d35e3d29beb71d7cdf4bc300442a9ed47bd9dcbd4565bf1eaa5821a3363a1dc957f5e42294b69378a51c1175492d08021ab554f281a7ed025d31a01d7abb536749b5bfea86393f09c74831bfd83239bf504e2a65960bb4cba2b4eab22f237ad795dc898026183eb83e5ebbd07d4c52f2b3b416014d3b83b1b334912675b0a63666bb1e76721488468fe", 0xad}, {&(0x7f0000000280)="f18e25267666818d80974606068fc686ee490a8009cdd0df134a", 0x1a}, {0x0}, {&(0x7f0000000480)="8abd119dd24172a1b1fd96d29efa654246f8e1b85ac021119a206036e4caa92864db4202072e24e3aa4e94f8856239da7b077720fa182e6be4c7d7c31cbf5719c0d44caa982915e37c912191ba967a2b47b58c09027213c49a8803ae9981c1222da518dda94a9cd79f39595743f5b1abf1bf4a88ab0a75fcc88b9e4f1a03cac602bdca23c9102a52bb", 0xffffffea}], 0x5, 0x472) r7 = socket(0x1c, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0x1c, 0x1c, 0x3, 0xfffffffc, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="7103000000000000c20480148df772525a9d5f8164ea000001c204"], 0x20) sendfile(r3, r7, 0x4, 0x0, 0x0, 0x0, 0x11) rfork(0x3040) 0s ago: executing program 1 (id=86): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x7ffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) fcntl$setstatus(r0, 0x4, 0x4c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={@in6={{0x1c, 0x1c, 0x0, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3ff}}, 0x0, 0xfffffff9, 0x0, 0x112, 0x8, 0x10}, 0x98) socket$inet6_sctp(0x1c, 0x5, 0x84) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1b, 0x0, 0x0) r2 = kqueue() bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) r3 = socket(0x1c, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x8, 0x1}, 0x8) kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0xfffffffffffffffe, 0x0) r4 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1001, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getgid() __semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f18b63d2000800450000300000000000009078ac1400bbe0000001030390780005000145510081006500080213000f7f000001ac1400aabac6a3d829088d337e4f83fbfcbd9fab53f9352f8b8b2d8c55312b102fc5fb05840a13dce57a1b00"/116]) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) fhstat(&(0x7f0000000040)={{[0x7fffffff, 0x7]}, {0x3, 0x6, "98780c8c2187db5bc475cbcc65c6b8c4"}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$CIOCGSESSION2(r6, 0xc040636a, &(0x7f00000000c0)={0x17, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d86699a, [0x0, 0x0, 0x3]}) ioctl$CIOCCRYPT(r6, 0xc0306367, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x67, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000400)}) fstatat(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r5, r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0058134800 if_delmulti_locked: detaching ifnet instance 0xfffffe005856a800 if_delmulti_locked: detaching ifnet instance 0xfffffe005856a000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058134800 FreeBSD/amd64 (ci-freebsd-main-7.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e43f6e0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83717f20 usecount 8, writecount 6, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00540c83e0 ref 2 pages 544 cleanbuf 60 dirtybuf 8 lock type ufs: EXCL by thread 0xfffffe005413b780 (pid 939, syz-executor, tid 100328) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=99de3150, uid=0, gid=0, flags=0x40008 ino 102, on dev gpt/rootfs arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.0.187 on tap0 pid 943 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore Accounting enabled panic: tcp_do_segment: sent too much: 1632>1396 cpuid = 0 time = 2 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056ba9bb0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056ba9d10 vpanic() at vpanic+0x257/frame 0xfffffe0056ba9ed0 panic() at panic+0xb5/frame 0xfffffe0056ba9f90 tcp_do_segment() at tcp_do_segment+0x8ccf/frame 0xfffffe0056baa270 tcp_input_with_port() at tcp_input_with_port+0x2214/frame 0xfffffe0056baa530 tcp_input() at tcp_input+0x1f/frame 0xfffffe0056baa550 ip_input() at ip_input+0xaa2/frame 0xfffffe0056baa670 netisr_dispatch_src() at netisr_dispatch_src+0x219/frame 0xfffffe0056baa750 ether_demux() at ether_demux+0x447/frame 0xfffffe0056baa810 ether_nh_input() at ether_nh_input+0xb61/frame 0xfffffe0056baa8f0 netisr_dispatch_src() at netisr_dispatch_src+0x219/frame 0xfffffe0056baa9d0 ether_input() at ether_input+0x1db/frame 0xfffffe0056baaab0 vtnet_rxq_eof() at vtnet_rxq_eof+0x16d2/frame 0xfffffe0056baacd0 vtnet_rx_vq_process() at vtnet_rx_vq_process+0x189/frame 0xfffffe0056baad90 ithread_loop() at ithread_loop+0x4ec/frame 0xfffffe0056baaef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056baaf30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056baaf30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 12 tid 100053 ] Stopped at kdb_enter+0x6e: movq $0,0x25bfc87(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827b75e0 .str.27 rsp 0xfffffe0056ba9cf0 rbp 0xfffffe0056ba9d10 rsi 0 rdi 0xffffffff81615369 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x33 r12 0xfffffe000782c000 r13 0xfffffffffffffffe r14 0xffffffff827b75e0 .str.27 r15 0 rip 0xffffffff815ff50e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25bfc87(%rip) db> show proc Process 12 (intr) at 0xfffffe0007808580: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b498e0 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b498e0 reapsubtree: 12 sigparent: 20 vmspace: 0xffffffff83b4a8c0 (map 0xffffffff83b4a8c0) (map.pmap 0xffffffff83b4a960) (pmap 0xffffffff83b4a9d0) threads: 20 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 RunQ [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 Run CPU 0 [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] db> ps pid ppid pgrp uid state wmesg wchan cmd 954 0 0 0 DL - 0xffffffff83b4ad80 [accounting] 953 766 766 60929 R (threaded) syz-executor 100216 RunQ syz-executor 100355 RunQ syz-executor 100356 S uwait 0xfffffe006e53b380 syz-executor 100358 S uwait 0xfffffe006e44e800 syz-executor 952 764 764 0 R (threaded) syz-executor 100109 RunQ syz-executor 100359 S uwait 0xfffffe006e53b080 syz-executor 950 0 0 0 DL mdwait 0xfffffe0059691000 [md0] 949 765 765 0 R (threaded) syz-executor 100096 RunQ syz-executor 100345 S uwait 0xfffffe00584e6280 syz-executor 100357 S uwait 0xfffffe0058251680 syz-executor 948 767 767 0 R (threaded) syz-executor 100193 RunQ syz-executor 100344 S uwait 0xfffffe00584e5700 syz-executor 100346 S uwait 0xfffffe006e44ec00 syz-executor 100349 S uwait 0xfffffe00584e5600 syz-executor 100352 S uwait 0xfffffe0058255680 syz-executor 100353 S uwait 0xfffffe0058252280 syz-executor 100354 S uwait 0xfffffe006e44f080 syz-executor 946 1 766 0 S uwait 0xfffffe00584e5400 syz-executor 936 1 767 0 S uwait 0xfffffe0058252780 syz-executor 930 1 767 0 S uwait 0xfffffe006e44e600 syz-executor 924 1 765 0 S uwait 0xfffffe0058251d00 syz-executor 919 1 907 0 S uwait 0xfffffe00584e5200 syz-executor 918 1 907 0 S uwait 0xfffffe0058251580 syz-executor 913 0 0 0 DL - 0xffffffff83cb0400 [soaiod4] 912 0 0 0 DL - 0xffffffff83cb0400 [soaiod3] 911 0 0 0 DL - 0xffffffff83cb0400 [soaiod2] 910 0 0 0 DL - 0xffffffff83cb0400 [soaiod1] 903 1 767 0 S uwait 0xfffffe000778a880 syz-executor 899 1 767 0 S uwait 0xfffffe0058251700 syz-executor 898 1 765 0 S uwait 0xfffffe006e450680 syz-executor 889 1 889 0 Ss+ ttyin 0xfffffe00587380b0 getty 888 1 764 0 SV uwait 0xfffffe00584e5300 syz-executor 887 1 887 0 Ss+ ttyin 0xfffffe0058737cb0 getty 886 1 764 0 S uwait 0xfffffe0058252c00 syz-executor 885 1 885 0 Ss+ ttyin 0xfffffe00587388b0 getty 884 1 884 0 Ss+ ttyin 0xfffffe00587384b0 getty 883 1 883 0 Ss+ ttyin 0xfffffe00587378b0 getty 882 1 882 0 Ss+ ttyin 0xfffffe00587374b0 getty 881 1 881 0 Ss+ ttyin 0xfffffe00587370b0 getty 880 1 880 0 Ss+ ttyin 0xfffffe0058736cb0 getty 879 1 879 0 Ss+ ttyin 0xfffffe0007a728b0 getty 878 1 764 0 S uwait 0xfffffe006e44eb00 syz-executor 877 1 766 0 T uwait 0xfffffe0058251300 syz-executor 876 0 0 0 DL (threaded) [so_splice] 100126 D - 0xfffffe005857e700 [thr_0] 100237 D - 0xfffffe005857e740 [thr_1] 833 0 0 0 DL aiordy 0xfffffe0054121ae0 [aiod4] 832 0 0 0 DL aiordy 0xfffffe0007826ac0 [aiod3] 831 0 0 0 DL aiordy 0xfffffe0007826560 [aiod2] 830 0 0 0 DL aiordy 0xfffffe0007809b00 [aiod1] 821 0 0 0 DL (threaded) [KTLS] 100091 D - 0xfffffe006e472d00 [thr_0] 100137 D - 0xfffffe006e472d80 [thr_1] 100138 D - 0xffffffff83cb1c28 [reclaim_0] 817 803 817 0 Ss select 0xfffffe0057ffd4c0 dhclient 803 787 424 65 S select 0xfffffe0057ffd6c0 dhclient 787 1 424 0 S wait 0xfffffe00540ef5a0 sh 767 763 767 0 S nanslp 0xffffffff83ba0541 syz-executor 766 763 766 0 S nanslp 0xffffffff83ba0540 syz-executor 765 763 765 0 S nanslp 0xffffffff83ba0540 syz-executor 764 763 764 0 S nanslp 0xffffffff83ba0541 syz-executor 763 761 761 0 S select 0xfffffe0057ffd8c0 syz-executor 761 759 761 0 Ss sigsusp 0xfffffe00540cebb0 csh 759 1 759 0 Ss select 0xfffffe0057ffdb40 sshd 737 1 18 0 S+ nanslp 0xffffffff83ba0541 sleep 17 0 0 0 DL syncer 0xffffffff83cbdda0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0007828040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cbc360 [bufdaemon] 100083 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0057e90ce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d07180 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83ced288 [dom0] 100081 D launds 0xffffffff83ced294 [laundry: dom0] 100082 D umarcl 0xffffffff81dd4e00 [uma] 7 0 0 0 DL - 0xffffffff8391dcd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff847ba850 [pf purge] 5 0 0 0 DL waiting 0xffffffff84499700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e8340 [doneq0] 100047 D - 0xffffffff838e82c0 [async] 100076 D - 0xffffffff838e8140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce8b40 [crypto] 100044 D crypto_ 0xfffffe0007a89e30 [crypto returns 0] 100045 D crypto_ 0xfffffe0007a89e80 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0007766c88 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b48f00 [g_event] 100038 D - 0xffffffff83b48f20 [g_up] 100039 D - 0xffffffff83b48f40 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 RunQ [clock (0)] 100032 I [clock (1)] 12 0 0 0 RL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 RunQ [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 Run CPU 0 [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce95e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c33ff0 [swapper] 100005 D - 0xfffffe0007773900 [softirq_0] 100006 D - 0xfffffe0007773800 [softirq_1] 100007 D - 0xfffffe0007773700 [if_io_tqg_0] 100008 D - 0xfffffe0007773600 [if_io_tqg_1] 100009 D - 0xfffffe0007773500 [if_config_tqg_0] 100010 D - 0xfffffe0007773400 [kqueue_ctx taskq] 100011 D - 0xfffffe0007773300 [jail_remove taskq] 100012 D - 0xfffffe0007773200 [bus taskq] 100015 D - 0xfffffe0007772e00 [thread taskq] 100017 D - 0xfffffe0007772c00 [aiod_kick taskq] 100018 D - 0xfffffe0007772b00 [deferred_unmount ta] 100019 D - 0xfffffe0007772a00 [inm_free taskq] 100020 D - 0xfffffe0007772900 [in6m_free taskq] 100021 D - 0xfffffe0007772800 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007772700 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007772700 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007772700 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007772700 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007772600 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007772600 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007772600 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007772600 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007772400 [firmware taskq] 100041 D - 0xfffffe0007772100 [crypto_0] 100042 D - 0xfffffe0007772100 [crypto_1] 100057 D - 0xfffffe0057fe9500 [vtnet0 rxq 0] 100058 D - 0xfffffe0057fe9400 [vtnet0 txq 0] 100059 D - 0xfffffe0057fe9300 [vtnet0 rxq 1] 100060 D - 0xfffffe0057fe9200 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0057fe0580 [virtio_balloon] 100066 D - 0xffffffff827bc921 [deadlkres] 100070 D - 0xfffffe00593ce400 [acpi_task_0] 100071 D - 0xfffffe00593ce400 [acpi_task_1] 100072 D - 0xfffffe00593ce400 [acpi_task_2] 100074 D - 0xfffffe0007773c00 [mca taskq] 100075 D - 0xfffffe0007771e00 [CAM taskq] 100077 D - 0xfffffe005843c000 [ipsec_offload] db> show all locks Process 949 (syz-executor) thread 0xfffffe00540bc780 (100096) exclusive sx ktrace_sx (ktrace_sx) r = 0 (0xffffffff83b4cf00) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_ktrace.c:718 Process 12 (intr) thread 0xfffffe000782c000 (100053) exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe006e424020) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1487 exclusive sleep mutex vtnet0-rx0 (vtnet0-rx0) r = 0 (0xfffffe0007765800) locked @ /syzkaller/managers/main/kernel/sys/dev/virtio/network/if_vtnet.c:2213 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 400 5466K 661 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4214 sysctloid 35221 2075K 35296 vtbuf 24 1968K 46 kobj 331 1324K 506 newblk 60 1039K 1426 vfscache 3 1025K 3 pcb 33 680K 141 inodedep 15 518K 351 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 filedesc 43 341K 299 subproc 156 302K 1043 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 102 201K 6285 acpica 1674 184K 54432 vmem 5 144K 6 tidhash 3 141K 3 pagedep 10 131K 149 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 110 110K 127 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1002 82K 5074 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 522 66K 526 ddb_capture 1 64K 1 kdtrace 224 44K 1316 umtx 336 42K 336 temp 37 40K 1974 DEVFS3 129 33K 139 filemon 4 32K 6 hostcache 1 32K 1 shm 1 32K 5 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 routetbl 143 19K 437 ifaddr 67 19K 69 LRO 18 19K 18 BPF 14 19K 24 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1650 lltable 45 14K 46 eventhandler 163 14K 163 ifnet 7 13K 7 ether_multi 152 13K 175 kenv 95 12K 95 GEOM 68 12K 522 CAM queue 5 11K 1528 rman 82 10K 447 CC Mem 75 10K 159 rpc 8 9K 8 in6_multi 65 9K 65 bmsafemap 2 9K 258 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 2 shmfd 1 8K 5 pfs_vncache 1 8K 1 plimit 21 8K 551 audit_evclass 239 8K 301 taskqueue 69 8K 75 cred 28 7K 270 kqueue 75 7K 1122 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 pf_ifnet 12 5K 21 UMA 269 5K 269 pwddesc 67 5K 960 vt 11 5K 11 pf_table 2 4K 3 memdesc 1 4K 1 MCA 32 4K 32 md_disk 1 4K 2 evdev 4 4K 4 acpisem 28 4K 28 DEVFSP 49 4K 73 terminal 11 3K 11 inpcbpolicy 86 3K 357 uidinfo 5 3K 18 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 kcovinfo 36 3K 36 proc-args 75 3K 2009 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 session 16 2K 47 sctp_atcl 5 2K 35 ip6ndp 12 2K 13 selfd 29 2K 29919 osd 80 2K 175 Unitno 28 2K 54 sctp_ifa 13 2K 14 crypto 5 2K 13 CAM XPT 22 2K 543 in_multi 6 2K 12 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 lockf 12 2K 84 indirdep 5 2K 187 msi 9 2K 9 netlink 2 2K 77 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 44 NFSD session 1 1K 1 mount 19 1K 594 diradd 7 1K 221 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 dirrem 3 1K 202 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 8 pci_link 10 1K 10 freefrag 5 1K 70 encap_export_host 12 1K 12 frag6 6 1K 6 sctp_timw 2 1K 2 newdirblk 4 1K 114 mkdir 4 1K 228 select 4 1K 39 cdev 2 1K 2 lkpikmalloc 8 1K 9 chacha20random 1 1K 1 biobuf 1 1K 1 cryptodev 5 1K 63 ip6opt 1 1K 17 vnodes 1 1K 2 ktls 1 1K 9 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 ip_msource 3 1K 6 loginclass 3 1K 5 prison 6 1K 6 sctp_atky 5 1K 40 pf_rule 1 1K 1 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 filecaps 4 1K 73 sctp_athm 5 1K 36 sctp_vrf 1 1K 1 vnet 1 1K 1 sendfile 1 1K 2 pmc 1 1K 1 sigio 1 1K 2 entropy 2 1K 33 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 294 p1003.1b 1 1K 1 ext2_mount 0 0K 0 ext2_node 0 0K 0 ext2_extents 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 mqdata 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 tcp_pcm_rack 0 0K 1 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 2 sctp_mcore 0 0K 0 sctp_socko 0 0K 8 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 12 sctp_aadr 0 0K 0 sctp_stro 0 0K 2 sctp_stri 0 0K 2 sctp_map 0 0K 4 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 1 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 209 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 21 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefile 0 0K 170 freeblks 0 0K 155 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 1 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 4 in_mfilter 0 0K 11 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 24 fadvise 0 0K 1 VN POLL 0 0K 2 statfs 0 0K 187 namei_tracker 0 0K 4 export_host 0 0K 0 cl_savebuf 0 0K 35 lio 0 0K 3 acl 0 0K 0 soname 0 0K 3417 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 8 iov 0 0K 13958 ioctlops 0 0K 113 eventfd 0 0K 2 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 362 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 668 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 78 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 2 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 175 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8321 1077 14197 0 254 38494208 0 tcp_log 416 2293 8381 22618 0 254 4440384 0 mbuf 256 8689 973 23195 0 254 2473472 0 BUF TRIE 152 248 11556 1304 0 62 1794208 0 malloc-4096 4096 399 3 1457 0 2 1646592 0 malloc-384 384 4165 95 4525 0 30 1635840 0 malloc-128 128 11605 268 12040 0 126 1519744 0 UMA Slabs 0 112 11026 20 11026 0 126 1237152 0 malloc-64 64 910 17171 32546 0 254 1157184 0 malloc-65536 65536 14 3 91 0 1 1114112 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 RADIX NODE 152 6447 386 31814 0 62 1038616 0 vmem btag 56 17738 85 17738 0 254 998088 0 FFS inode 1168 542 18 716 0 8 654080 0 sctp_ep 1152 5 506 32 0 254 588672 0 sctp_asoc 2256 0 255 2 0 254 575280 0 256 Bucket 2048 246 12 1358 0 8 528384 0 socket 1024 98 410 1636 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 194 0 0 2 509056 0 malloc-16384 16384 22 4 338 0 1 425984 0 malloc-32768 32768 4 7 158 0 1 360448 0 VM OBJECT 248 1066 246 14939 0 62 325376 0 THREAD 1872 156 12 359 0 8 314496 0 VNODE 440 580 86 757 0 30 293040 0 malloc-2048 2048 112 16 386 0 8 262144 0 malloc-64 64 3863 232 3866 0 254 262080 0 malloc-16 16 14511 239 14589 0 254 236000 0 DEVCTL 1024 23 197 150 0 0 225280 0 malloc-256 256 309 501 1973 0 62 207360 0 sctp_raddr 736 0 264 2 0 254 194304 0 UMA Zones 768 241 3 241 0 16 187392 0 malloc-32 32 5341 329 5351 0 254 181440 0 malloc-128 128 1198 197 25774 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 MAP ENTRY 96 1252 512 47898 0 126 169344 0 unpcb 320 6 510 1205 0 254 165120 0 FFS2 dinode 256 542 88 716 0 62 161280 0 FPU_save_area 832 158 22 454 0 16 149760 0 malloc-16384 16384 7 2 11 0 1 147456 0 malloc-1024 1024 121 23 296 0 16 147456 0 malloc-128 128 950 197 1486 0 126 146816 0 S VFS Cache 104 1014 273 1227 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 mbuf_packet 256 9 499 245 0 254 130048 0 tcp_inpcb 1304 75 21 159 0 8 125184 0 malloc-8192 8192 12 3 20 0 1 122880 0 PROC 1376 66 22 955 0 8 121088 0 ksiginfo 112 64 980 125 0 126 116928 0 malloc-2048 2048 16 40 1132 0 8 114688 0 ertt_txseginfo 40 3 2825 4955 0 254 113120 0 malloc-32768 32768 2 1 122 0 1 98304 0 malloc-4096 4096 16 8 514 0 2 98304 0 filedesc0 1072 67 17 960 0 8 90048 0 UMA Kegs 384 227 6 227 0 30 89472 0 128 Bucket 1024 49 34 261 0 16 84992 0 malloc-128 128 468 183 4861 0 126 83328 0 64 Bucket 512 98 62 1957 0 30 81920 0 malloc-256 256 189 126 1752 0 62 80640 0 sctp_readq 152 0 520 2 0 254 79040 0 g_bio 408 0 180 8675 0 30 73440 0 malloc-384 384 142 38 143 0 30 69120 0 malloc-64 64 566 505 5988 0 254 68544 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-4096 4096 13 3 68 0 2 65536 0 malloc-256 256 145 110 490 0 62 65280 0 sctp_stream_msg_out 112 0 540 2 0 254 60480 0 malloc-8192 8192 5 2 86 0 1 57344 0 tcp_bbr_map 128 0 403 628 0 126 51584 0 ttyoutq 256 72 123 304 0 62 49920 0 malloc-256 256 0 195 209 0 62 49920 0 malloc-256 256 11 184 623 0 62 49920 0 32 Bucket 256 77 118 462 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 13851 0 16 49152 0 malloc-8192 8192 4 2 6 0 1 49152 0 malloc-4096 4096 6 6 14 0 2 49152 0 malloc-1024 1024 16 32 1569 0 16 49152 0 malloc-1024 1024 19 29 22 0 16 49152 0 pcpu-64 64 499 269 499 0 254 49152 0 syncache 168 0 264 3 0 254 44352 0 Files 80 225 325 7797 0 126 44000 0 malloc-8192 8192 3 2 37 0 1 40960 0 pcpu-8 8 4759 361 4958 0 254 40960 0 VMSPACE 584 38 32 925 0 16 40880 0 pipe 736 20 35 306 0 16 40480 0 sctp_chunk 152 0 260 2 0 254 39520 0 da_ccb 544 0 70 2285 0 16 38080 0 udp_inpcb 408 9 81 162 0 30 36720 0 malloc-64 64 27 540 14085 0 254 36288 0 malloc-64 64 69 498 73 0 254 36288 0 malloc-64 64 214 353 2035 0 254 36288 0 malloc-64 64 15 552 78 0 254 36288 0 malloc-64 64 6 561 26 0 254 36288 0 malloc-128 128 32 247 239 0 126 35712 0 malloc-128 128 29 250 38 0 126 35712 0 malloc-128 128 20 259 166 0 126 35712 0 malloc-128 128 88 191 93 0 126 35712 0 routing nhops 256 28 107 36 0 62 34560 0 malloc-256 256 36 99 638 0 62 34560 0 malloc-256 256 12 123 268 0 62 34560 0 malloc-256 256 52 83 129 0 62 34560 0 TURNSTILE 136 169 83 169 0 62 34272 0 SLEEPQUEUE 88 169 215 169 0 126 33792 0 malloc-4096 4096 3 5 90 0 2 32768 0 malloc-2048 2048 4 12 31 0 8 32768 0 malloc-2048 2048 6 10 6 0 8 32768 0 malloc-2048 2048 4 12 5 0 8 32768 0 malloc-2048 2048 10 6 35 0 8 32768 0 malloc-2048 2048 0 16 10 0 8 32768 0 malloc-1024 1024 3 29 50 0 16 32768 0 malloc-1024 1024 10 22 16 0 16 32768 0 malloc-1024 1024 0 32 9 0 16 32768 0 malloc-512 512 1 63 135 0 30 32768 0 malloc-512 512 9 55 106 0 30 32768 0 malloc-512 512 10 54 61 0 30 32768 0 malloc-512 512 6 58 32 0 30 32768 0 malloc-512 512 3 61 14 0 30 32768 0 tcp_bbr_pcb 896 0 36 7 0 16 32256 0 ttyinq 160 135 65 570 0 62 32000 0 PGRP 120 20 244 53 0 126 31680 0 clpbuf 2624 0 12 53 0 4 31488 0 sctp_laddr 48 0 588 12 0 254 28224 0 rl_entry 48 5 583 8 0 254 28224 0 16 Bucket 144 62 134 324 0 62 28224 0 4 Bucket 48 8 580 11 0 254 28224 0 AIO 208 0 133 26 0 62 27664 0 udplite_inpcb 408 1 62 4 0 30 25704 0 cpuset 200 8 120 10 0 62 25600 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-8192 8192 1 2 25 0 1 24576 0 malloc-4096 4096 2 4 190 0 2 24576 0 PWD 40 24 582 186 0 254 24240 0 rtentry 168 30 114 35 0 62 24192 0 8 Bucket 80 51 249 343 0 126 24000 0 itimer 352 0 66 15 0 30 23232 0 malloc-384 384 0 60 18 0 30 23040 0 malloc-384 384 41 19 45 0 30 23040 0 malloc-384 384 8 52 382 0 30 23040 0 malloc-384 384 22 38 552 0 30 23040 0 malloc-384 384 6 54 30 0 30 23040 0 ripcb 376 1 59 32 0 30 22560 0 Mountpoints 2816 2 6 7 0 4 22528 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 75 205 159 0 126 20160 0 malloc-32 32 35 595 227 0 254 20160 0 malloc-32 32 78 552 104 0 254 20160 0 malloc-32 32 146 484 1489 0 254 20160 0 malloc-32 32 317 313 1437 0 254 20160 0 malloc-32 32 151 479 4444 0 254 20160 0 malloc-32 32 102 528 104 0 254 20160 0 malloc-32 32 25 605 71 0 254 20160 0 2 Bucket 32 59 571 426 0 254 20160 0 KNOTE 160 2 123 86 0 62 20000 0 AIOCB 552 0 35 25 0 16 19320 0 ktls_session 256 0 75 2 0 62 19200 0 L VFS Cache 320 0 60 10 0 30 19200 0 AIOLIO 272 0 70 3 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 7 0 2 16384 0 malloc-2048 2048 1 7 1 0 8 16384 0 malloc-1024 1024 5 11 5 0 16 16384 0 malloc-1024 1024 4 12 4 0 16 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 1 287 1 0 254 16128 0 malloc-16 16 539 461 3702 0 254 16000 0 kenv 258 17 43 1066 0 30 15480 0 tcp_rack_pcb 1088 0 14 1 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 domainset 40 0 315 1 0 254 12600 0 SMR SHARED 24 8 503 8 0 254 12264 0 vtnet_tx_hdr 24 0 501 2394 0 254 12024 0 malloc-16 16 66 684 1883 0 254 12000 0 malloc-16 16 14 736 28 0 254 12000 0 malloc-16 16 109 641 25888 0 254 12000 0 malloc-16 16 14 736 16 0 254 12000 0 malloc-16 16 6 744 49 0 254 12000 0 cryptop 280 0 42 2 0 30 11760 0 splice 184 0 63 1 0 62 11592 0 malloc-384 384 11 19 11 0 30 11520 0 swrbuf 2624 0 4 11 0 4 10496 0 malloc-4096 4096 0 2 1 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 malloc-16 16 15 485 15 0 254 8000 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 15 24 33 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/l tcpcb at 0xfffffe006e424000 t_segq first: 0 t_segqlen: 0 t_dupacks: 1 t_callout: 0xfffffe006e424188 t_timers: 0xfffffe006e4241c8 t_state: 4 (TCPS_ESTABLISHED) t_flags: 0x110023e0 (TF_REQ_SCALE, TF_RECVD_SCALE, TF_REQ_TSTMP, TF_RCVD_TSTMP, TF_SACK_PERMIT, TF_PREVVALID, TF_TSO, TF_LRD) t_flags2: 0x40e (TF2_PLPMTU_PMTUD, TF2_PLPMTU_MAXSEGSNT, TF2_LOG_AUTO, TF2_FBYTES_COMPLETE) snd_una: 0xf9118577 snd_max: 0xf9118c07 snd_nxt: 0xf9118c07 snd_up: 0xf9118577 snd_wl1: 0x2b27bd3d snd_wl2: 0xf9118577 iss: 0xf8ee26de irs: 0x2b0a74bc rcv_nxt: 0x2b27bd7d rcv_adv: 0x2b2ce57d rcv_wnd: 337870 rcv_up: 0x2b27bd7d snd_wnd: 506816 snd_cwnd: 2804 snd_ssthresh: 2816 snd_recover: 0xf91185a7 t_rcvtime: 2147429979 t_startime: 2147427663 t_rttime: 2147429979 t_rtsq: 0xf91185a7 t_rxtcur: 40 t_maxseg: 1420 t_srtt: 66 t_rttvar: 32 t_rxtshift: 1 t_rttmin: 3 t_rttupdated: 216 max_sndwnd: 506816 t_softerror: 0 t_oobflags: 0x0 () t_iobc: 0x00 snd_scale: 6 rcv_scale: 6 request_r_scale: 6 ts_recent: 534028696 ts_recent_age: 64282 ts_offset: 576685717 last_ack_sent: 0x2b27bd7d snd_cwnd_prev: 41320 snd_ssthresh_prev: 1073725440 snd_recover_prev: 0xf91181a7 t_badrxtwin: 64312 snd_numholes: 0 snd_holes first: 0 snd_fack: 0xf9118577 rcv_numsacks: 0 t_rttlow: 10 rfbuf_ts: 64312 rfbuf_cnt: 0 t_fb.tfb_tcp_block_name: freebsd t_cc.name: cubic _t_logstate: 1 (TCP_LOG_STATE_TAIL) t_lognum: 2068 t_loglimit: 5000 t_logsn: 2068