last executing test programs: 3.999573386s ago: executing program 0 (id=253): r0 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f00000008c0)="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", 0xfb3}], 0x1, 0x0) r3 = socket(0x1c, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="7103000000000000c2"], 0x20) sendfile(r1, r3, 0xeba, 0x20000000000, 0x0, 0x0, 0x11) rfork(0x1040) 3.797101112s ago: executing program 0 (id=255): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [0xfffffffe, 0xffffffff], 0x0, 0x0, 0xf, {0x5, 0x7, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x9, 0x9, 0xf, 0x2, 0x100000000, 0xd24, 0x10000, 0x6b]}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) sync() r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0xf000000) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x30) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf1999}], 0x1, 0x0) 3.632111327s ago: executing program 1 (id=259): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) chdir(&(0x7f0000000040)='./file1\x00') r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) chdir(&(0x7f0000000040)='./file1\x00') renameat(r1, &(0x7f00000000c0)='./file1\x00', r1, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) rfork(0x3060) setresuid(0x0, 0xee01, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='/,&-,\x00'], 0x0) 3.607741998s ago: executing program 3 (id=260): socket(0x1c, 0x1, 0x0) r0 = fork() getsid(r0) open$dir(&(0x7f0000000700)='./file1\x00', 0x202, 0x4) kqueue() freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000000000fffd, 0x400000000000001]) fchmodat(r2, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x52, 0x2200) __specialfd$eventfd(0x1, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) 3.44293251s ago: executing program 1 (id=261): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x480) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r5, 0x3862) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 3.423188411s ago: executing program 3 (id=262): open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) setresuid(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = fork() rfork(0x4040) sigqueue(r2, 0xf, @sival_int=0x8000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) freebsd11_lstat(&(0x7f0000000300)='./file0\x00', 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 3.13869676s ago: executing program 0 (id=264): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc2629a17a6c58afb8877c8be162e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x7e00, {0x0, 0x6, "06c33e", 0x0, 0x11, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}]}}}}}}}) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) 3.073530836s ago: executing program 1 (id=265): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x800000000, 0x7, 0x0}, {0x0, 0x8, @sival_int=0xe, @thr={0x0, 0x0}}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r3 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000080)=0x101, 0x4) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) sendfile(r4, r3, 0x0, 0x400000000000, 0x0, 0x0, 0x2d) 2.493305629s ago: executing program 2 (id=267): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0x1) mlockall(0x2) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r4, 0x4) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) sync() 2.237061016s ago: executing program 3 (id=268): socket$inet6(0x1c, 0x3, 0x5) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f0000000000)={@loopback, @multicast2}, 0x0) open$dir(0x0, 0x2000000, 0x93) vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1, 0x9, @sigval_ptr=0x2, @thr={0x0, 0x0}}) socket$inet(0x2, 0x2, 0x0) profil(&(0x7f00000006c0)="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", 0x1b9, 0x401, 0x5) fork() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 2.232028592s ago: executing program 2 (id=269): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2}, 0x10) shutdown(r2, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x200, &(0x7f00000000c0)=0x68a, 0x4) 2.162362695s ago: executing program 2 (id=270): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x60100, 0x0, 0x0) sync() pipe2(&(0x7f0000000000), 0x100004) profil(0x0, 0x0, 0x0, 0xd6) rmdir(&(0x7f0000000300)='./file0/../file0\x00') cpuset_setaffinity(0x3, 0x9, 0x5000000, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001480)=""/171, 0xab}, {&(0x7f0000001440)=""/15, 0xf}], 0x3, 0xfffffffc) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, 0x0, 0x0, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) mount(0x0, 0x0, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x1c, 0x0, 0x1, @rand_addr="fe010000000000000060c8a1fabed6de", 0x40}, 0x1c) 1.883044102s ago: executing program 2 (id=271): r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r1, 0x80000001, &(0x7f0000000080)="e2", 0x1, [0x2], 0xc0, 0x8, 0x0, {0x6, 0x7, 0x0}, {0x0, 0x3, @sigval_int=0x13ef, @spare=[0x1200, 0xf, 0x9, 0x0, 0x7, 0x2, 0x6, 0x9]}}) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) open$dir(0x0, 0x1, 0x0) r3 = fork() sigqueue(r3, 0xf, @sival_int=0x8000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) freebsd11_lstat(&(0x7f0000000340)='./file0\x00', 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 1.599690445s ago: executing program 3 (id=272): mkdir(&(0x7f00000003c0)='./file1\x00', 0x39) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x180) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000040)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f00000001c0)='./file0/file0\x00') rmdir(&(0x7f0000000280)='./file0/file0\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) connectat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket(0x1c, 0x1, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 1.536402772s ago: executing program 1 (id=273): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) pathconf(&(0x7f0000000180)='./file0\x00', 0x5) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x74) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0\x00') unmount(&(0x7f00000000c0)='./file0\x00', 0x180244) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) chflags(&(0x7f0000000300)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) 1.530336719s ago: executing program 0 (id=274): r0 = socket(0x1c, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x12) ftruncate(r1, 0x107d2) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x11, 0x3, 0x0) close(r2) socketpair(0x1, 0x20000001, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r4, &(0x7f0000000000)="ad", 0x1, 0x20000, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f00000002c0)=0x7, 0x3f) r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x126) sendfile(r5, r0, 0x1, 0x0, 0x0, 0x0, 0x19) 1.268626676s ago: executing program 0 (id=275): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000300)="58a9d8", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x2ac8000, @ke_flags=0x8010}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0x0) sync() mmap(&(0x7f00001d8000/0x1000)=nil, 0x1000, 0x4, 0x80010, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) select(0x0, 0x0, &(0x7f0000000380)={0x7d6, 0x1, 0x8000, 0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) 1.263004076s ago: executing program 1 (id=276): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) socket(0x1, 0x5, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$CIOCGSESSION2(r1, 0xc030636a, &(0x7f0000000000)={0x28, 0x0, 0x10, &(0x7f0000000040)="72e8789fa2e77d9bcf47eaa3c96be443", 0x0, 0x0, 0x0, 0x7d32559c, [0x7, 0x0, 0x0, 0x60]}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') readlink(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$CIOCCRYPT(r1, 0xc01c6367, &(0x7f0000000700)={0x0, 0x1, 0x0, 0x10004, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000008c0)}) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2002, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) 1.197549925s ago: executing program 3 (id=277): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x42) r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet6(0x1c, 0x10000003, 0x0) r2 = socket(0x1b, 0x3, 0x0) shutdown(r2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20000, &(0x7f0000000100)=0x80000001, 0x4) sendto$inet6(r2, &(0x7f0000000000)="59fc1dd56d0131fd8c68dfd48fc30d4e", 0xb68, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000140)=""/194, 0xc2) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f0000000400)=ANY=[@ANYBLOB='c^'], 0x2f8) sendto$inet6(r1, 0x0, 0x0, 0x60040, &(0x7f00000012c0)={0x1c, 0x1c, 0x0, 0x4, @mcast2, 0x6}, 0x1c) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 881.75739ms ago: executing program 2 (id=278): aio_waitcomplete(0x0, 0x0) truncate(0x0, 0xaa480) truncate(0x0, 0x8000) r0 = open$dir(0x0, 0x40000400000002c2, 0x1) pwritev(r0, 0x0, 0x0, 0x0) ioctl$DIOCRADDADDRS(0xffffffffffffffff, 0xc0184415, 0x0) socket(0x1c, 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = openat$bpf(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$BIOCSETF(r2, 0x80084267, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e80000) 381.591109ms ago: executing program 1 (id=279): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) select(0x40, &(0x7f0000000000)={0x5, 0x2, 0x0, 0x10, 0x8, 0x87e, 0x1, 0x7fffffffffffffff}, 0x0, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x400000, 0x0) writev(r1, &(0x7f0000000280), 0x26) r2 = getpid() rtprio(0x1, r2, &(0x7f0000000000)={0x4, 0x16}) execve(0x0, 0x0, 0x0) rename(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 350.488041ms ago: executing program 0 (id=280): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xd2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) fork() preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x28) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) fork() preadv(r4, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x28) 236.743287ms ago: executing program 3 (id=281): open(&(0x7f0000000000)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0x1c, 0x2, 0x0) sendmsg$inet6_sctp(r3, &(0x7f00000001c0)={&(0x7f0000000080)=@in={0x10, 0x2, 0x1, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000290000", @ANYRES64=r3, @ANYRESOCT, @ANYRES8=r2], 0x14}, 0x20105) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$sock_splice(r3, 0xffff, 0x1023, &(0x7f0000000240)={r1, 0x40, {0x4}}, 0x14) ioctl$CIOCGSESSION2(r4, 0xc030636a, &(0x7f00000000c0)={0x10, 0x14, 0x1, &(0x7f0000000340)="14", 0x15, &(0x7f00000003c0)="f33b0b3a59777736e5ba25b0a7b8aa8df24fb37be3", 0xffffffff, 0x4d46b770, [0x0, 0x3, 0x3ff]}) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x6, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x149}, 0x0) ppoll(&(0x7f0000000480)=[{r1, 0x1}, {r4, 0x2000}, {r0, 0x10}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x182}], 0x6, &(0x7f0000000500)={0x10, 0x10001}, &(0x7f0000000540)={[0x3, 0x7, 0x20b7abaf, 0x3]}, 0x10) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) 0s ago: executing program 2 (id=282): open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getuid() r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = fork() sigqueue(r2, 0xf, @sival_int=0x8000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) freebsd11_lstat(&(0x7f0000000300)='./file0\x00', 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff816707a0(0xfffffe00586dc000) 0.003749675 s md2147483519: truncating fractional last sector by 3 bytes Expensive callout(9) function: 0xffffffff81a79020(0xfffffe006dfc0000) 0.004433907 s Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800 Dec 2 13:25:36 ci-freebsd-i386-3 kernel: arp: 8a:e9:77:b3:ea:2e attempts to modify permanent entry for 172.20.3.187 on tap3 syz-executor uses obsolete way to create divert(4) socket vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006de8d000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371ebc0 usecount 5, writecount 4, refcount 69 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005874daa8 ref 1 pages 536 cleanbuf 64 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe0058713000 (pid 1060, syz-executor, tid 100390) nlink=1, effnlink=1, size=2147483650, extsize=0 generation=6c474fa1, uid=0, gid=0, flags=0x48008 ino 104, on dev gpt/rootfs vnode_pager_putpages: zero-length write at 0 resid 12288 0xfffffe00598876e0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371ebc0 usecount 3, writecount 3, refcount 4 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005870e5d0 ref 2 pages 16 cleanbuf 2 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0058749000 (pid 1082, syz-executor, tid 100417) with exclusive waiters pending nlink=1, effnlink=1, size=65536, extsize=0 generation=fb084bf8, uid=0, gid=-2086816849, flags=0x119304 ino 117, on dev gpt/rootfs vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe00776a21b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371ebc0 usecount 0, writecount 0, refcount 4 seqc users 0 hold count flags () flags (VIRF_PGREAD|VI_DOINGINACT|VMP_LAZYLIST) v_object 0xfffffe00587410f8 ref 0 pages 9 cleanbuf 2 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0058722000 (pid 1093, syz-executor, tid 100180) nlink=1, effnlink=1, size=67538, extsize=0 generation=d15db102, uid=0, gid=0, flags=0x160000 ino 105, on dev gpt/rootfs vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe007767e528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371ebc0 usecount 5, writecount 4, refcount 69 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00587545d0 ref 1 pages 536 cleanbuf 64 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe0058758780 (pid 1122, syz-executor, tid 100480) nlink=1, effnlink=1, size=2147483650, extsize=0 generation=c2b5368e, uid=0, gid=0, flags=0x48008 ino 128, on dev gpt/rootfs md1: truncating fractional last sector by 129 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0077f2fa50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371ebc0 usecount 5, writecount 4, refcount 69 seqc users 0 hold count flags () flags (VIRF_PGREAD|VIRF(0x100)|VMP_LAZYLIST) v_object 0xfffffe005874f4d8 ref 1 pages 536 cleanbuf 65 dirtybuf 2 lock type ufs: EXCL by thread 0xfffffe0058749000 (pid 1183, syz-executor, tid 100574) nlink=1, effnlink=1, size=2147483650, extsize=0 generation=766a773, uid=0, gid=0, flags=0x48008 ino 131, on dev gpt/rootfs panic: vm_object_terminate_single_page: page 0xfffffe000092fc98 does not belong to a queue cpuid = 1 time = 1764681966 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056fc44f0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056fc4650 vpanic() at vpanic+0x257/frame 0xfffffe0056fc4810 panic() at panic+0xb5/frame 0xfffffe0056fc48d0 vm_object_terminate_single_page() at vm_object_terminate_single_page+0x210/frame 0xfffffe0056fc4910 pctrie_reclaim_resume_cb() at pctrie_reclaim_resume_cb+0xf5/frame 0xfffffe0056fc4970 vm_object_terminate() at vm_object_terminate+0x232/frame 0xfffffe0056fc4a30 vm_object_deallocate() at vm_object_deallocate+0x617/frame 0xfffffe0056fc4b10 vm_map_process_deferred() at vm_map_process_deferred+0x1a0/frame 0xfffffe0056fc4b50 vmspace_dofree() at vmspace_dofree+0xfd/frame 0xfffffe0056fc4b90 vmspace_exit() at vmspace_exit+0x278/frame 0xfffffe0056fc4c50 exit1() at exit1+0x99b/frame 0xfffffe0056fc4cf0 sys__exit() at sys__exit+0x28/frame 0xfffffe0056fc4d10 ia32_syscall() at ia32_syscall+0x4d2/frame 0xfffffe0056fc4f30 int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xffffdc90 KDB: enter: panic [ thread pid 1238 tid 100644 ] Stopped at kdb_enter+0x6e: movq $0,0x258c577(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff82832f20 .str.27 rsp 0xfffffe0056fc4630 rbp 0xfffffe0056fc4650 rsi 0 rdi 0xffffffff8165c639 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x3f r12 0xfffffe0058759780 r13 0xfffffffffffffffd r14 0xffffffff82832f20 .str.27 r15 0 rip 0xffffffff81645a1e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x258c577(%rip) db> show proc Process 1238 (syz-executor) at 0xfffffe0058769000: state: NORMAL uid: 0 gid: 0 supp gids: 0, 5 parent: pid 763 at 0xfffffe005860cac0 ABI: FreeBSD ELF32 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor exec reaper: 0xfffffe0007809010 reapsubtree: 1 sigparent: 20 vmspace: 0xffffffff83b5d000 (map 0xffffffff83b5d000) (map.pmap 0xffffffff83b5d0a0) (pmap 0xffffffff83b5d110) threads: 1 100644 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1242 765 765 0 R (threaded) syz-executor 100579 RunQ syz-executor 100660 D biowr 0xfffffe0007ec5680 syz-executor 100661 S uwait 0xfffffe005858f480 syz-executor 100663 D ranged1 0xfffffe0077f2cbe0 syz-executor 1241 1238 763 0 S uwait 0xfffffe005858ec80 syz-executor 1240 1238 763 0 S uwait 0xfffffe005858e580 syz-executor 1239 766 766 0 R (threaded) syz-executor 100423 RunQ syz-executor 100657 S lockf 0xfffffe0007673880 syz-executor 100658 S uwait 0xfffffe00084f7700 syz-executor 1238 763 763 0 RE CPU 1 syz-executor 1237 764 764 0 R (threaded) syz-executor 100638 Run CPU 0 syz-executor 100653 S uwait 0xfffffe005858eb80 syz-executor 100655 S uwait 0xfffffe005830c880 syz-executor 100656 S uwait 0xfffffe005830ca80 syz-executor 100664 S uwait 0xfffffe005858ea80 syz-executor 1227 1 766 0 S uwait 0xfffffe005830cb80 syz-executor 1222 1 763 0 S uwait 0xfffffe00084f7880 syz-executor 1213 1 766 0 S uwait 0xfffffe0058309b80 syz-executor 1189 1 765 0 S uwait 0xfffffe005858e480 syz-executor 1169 1 764 0 S uwait 0xfffffe005858e380 syz-executor 1159 1 764 0 S uwait 0xfffffe00777ee280 syz-executor 1153 1 765 0 S uwait 0xfffffe00777eee00 syz-executor 1152 1 764 0 S uwait 0xfffffe005858e180 syz-executor 1150 0 0 0 DL mdwait 0xfffffe006e5fa000 [md1] 1131 1 766 0 S uwait 0xfffffe005858e080 syz-executor 1130 1 763 0 S uwait 0xfffffe005830cf00 syz-executor 1129 1 763 0 S uwait 0xfffffe00084f7b80 syz-executor 1119 1 763 0 S uwait 0xfffffe005858e980 syz-executor 1115 0 0 0 DL mdwait 0xfffffe0077784000 [md0] 1113 1 766 0 S uwait 0xfffffe00777ee480 syz-executor 1111 1 765 0 S uwait 0xfffffe00777ef280 syz-executor 1104 1 764 0 S uwait 0xfffffe005858f380 syz-executor 1098 1 765 0 S uwait 0xfffffe00777ef080 syz-executor 1094 1 765 0 S uwait 0xfffffe005830a180 syz-executor 1085 1 764 0 S uwait 0xfffffe00777ee580 syz-executor 1080 1 764 0 S uwait 0xfffffe0058309100 syz-executor 1079 1 765 0 S uwait 0xfffffe005858f880 syz-executor 1075 1 766 0 S uwait 0xfffffe005830a580 syz-executor 1063 1 766 0 S uwait 0xfffffe005858f780 syz-executor 1058 0 0 0 DL - 0xffffffff83b5d4c0 [accounting] 1057 1 766 0 S uwait 0xfffffe00777ee980 syz-executor 1055 1 763 0 S uwait 0xfffffe00777ee780 syz-executor 1051 1 764 0 S umtxn 0xfffffe005858fa00 syz-executor 1038 1 766 0 S uwait 0xfffffe0058590780 syz-executor 1037 1 764 0 S uwait 0xfffffe005858f500 syz-executor 1032 1031 765 0 S uwait 0xfffffe00777ee880 syz-executor 1031 1 765 0 SV wait 0xfffffe005872aab0 syz-executor 1029 1 766 0 S uwait 0xfffffe00777ee680 syz-executor 1026 1 765 0 S uwait 0xfffffe0058309a00 syz-executor 1024 1 765 0 S uwait 0xfffffe00084f7500 syz-executor 1017 1 765 0 S uwait 0xfffffe005858f680 syz-executor 1000 1 765 0 S uwait 0xfffffe00777ef180 syz-executor 993 985 993 0 Ss select 0xfffffe0054236b40 dhclient 988 1 988 0 Ss select 0xfffffe0054236d40 dhclient 985 977 423 65 S select 0xfffffe0054236bc0 dhclient 977 423 423 0 S wait 0xfffffe00586e5018 sh 958 1 764 0 S uwait 0xfffffe00777ee380 syz-executor 950 1 763 0 S uwait 0xfffffe00777ef380 syz-executor 949 1 766 0 S uwait 0xfffffe00777eed00 syz-executor 928 1 763 0 S uwait 0xfffffe00084f7d80 syz-executor 925 1 766 60928 S uwait 0xfffffe0058309200 syz-executor 922 1 764 0 S uwait 0xfffffe005830b500 syz-executor 904 1 763 0 S uwait 0xfffffe0058309500 syz-executor 887 0 0 0 DL mdwait 0xfffffe00077fe000 [md2147483519] 885 0 0 0 DL (threaded) [so_splice] 100143 D - 0xfffffe0007788c00 [thr_0] 100168 D - 0xfffffe0007788c40 [thr_1] 866 1 763 0 S uwait 0xfffffe00084f7300 syz-executor 864 0 0 0 DL aiordy 0xfffffe00586e4568 [aiod4] 863 0 0 0 DL aiordy 0xfffffe00586cc570 [aiod3] 862 0 0 0 DL aiordy 0xfffffe005860b008 [aiod2] 861 0 0 0 DL aiordy 0xfffffe00586e4ac0 [aiod1] 766 762 766 0 S nanslp 0xffffffff83bb3000 syz-executor 765 762 765 0 S nanslp 0xffffffff83bb3000 syz-executor 764 762 764 0 S nanslp 0xffffffff83bb3000 syz-executor 763 762 763 0 S nanslp 0xffffffff83bb3000 syz-executor 762 760 760 0 S select 0xfffffe0007787c40 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe005860c618 csh 758 681 758 0 Ss select 0xfffffe0007787cc0 sshd 747 1 747 0 Ss+ ttyin 0xfffffe0058328cb0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0054265cb0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00542660b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00542664b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe00542668b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0054266cb0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00542670b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00542674b0 getty 739 1 739 0 Ss+ ttyin 0xfffffe00542678b0 getty 737 1 17 0 S+ piperd 0xfffffe0059820420 logger 736 735 17 0 S+ nanslp 0xffffffff83bb3001 sleep 735 1 17 0 S+ wait 0xfffffe0058603ab8 sh 685 1 685 0 Ss nanslp 0xffffffff83bb3001 cron 681 1 681 0 Ss select 0xfffffe0054236dc0 sshd 494 1 494 0 Ss select 0xfffffe0007787d40 syslogd 423 1 423 0 Ss wait 0xfffffe005860aab0 devd 422 1 422 65 Ss select 0xfffffe0007787ec0 dhclient 337 1 337 0 Ss select 0xfffffe0007787dc0 dhclient 334 1 334 0 Ss select 0xfffffe00077881c0 dhclient 16 0 0 0 DL syncer 0xffffffff83ce0c20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0058602558 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cdf160 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100095 D sdflush 0xfffffe005808e0e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d204c0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83d06588 [dom0] 100080 D launds 0xffffffff83d06594 [laundry: dom0] 100081 D umarcl 0xffffffff81e2fcf0 [uma] 7 0 0 0 DL - 0xffffffff8392b5b0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff844d8f60 [pf purge] 5 0 0 0 DL waiting 0xffffffff848bb700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f5340 [doneq0] 100046 D - 0xffffffff838f52c0 [async] 100075 D - 0xffffffff838f5140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83d01e20 [crypto] 100043 D crypto_ 0xfffffe0007b17030 [crypto returns 0] 100044 D crypto_ 0xfffffe0007b17080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b5b5e0 [g_event] 100038 D - 0xffffffff83b5b600 [g_up] 100039 D - 0xffffffff83b5b620 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83d028c0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c57ff0 [swapper] 100005 D - 0xfffffe00077f7a00 [softirq_0] 100006 D - 0xfffffe00077f7800 [softirq_1] 100007 D - 0xfffffe00077f7600 [if_io_tqg_0] 100008 D - 0xfffffe00077f7400 [if_io_tqg_1] 100009 D - 0xfffffe00077f7200 [if_config_tqg_0] 100010 D - 0xfffffe00077f7000 [kqueue_ctx taskq] 100011 D - 0xfffffe00077f6d00 [jail_remove taskq] 100012 D - 0xfffffe00077f6b00 [bus taskq] 100015 D - 0xfffffe00077f6500 [thread taskq] 100017 D - 0xfffffe00077f6100 [aiod_kick taskq] 100018 D - 0xfffffe00077f5e00 [deferred_unmount ta] 100019 D - 0xfffffe00077f5c00 [inm_free taskq] 100020 D - 0xfffffe00077f5a00 [in6m_free taskq] 100021 D - 0xfffffe00077f5800 [linuxkpi_irq_wq] 100022 D - 0xfffffe00077f5600 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00077f5600 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00077f5600 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00077f5600 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00077f5100 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00077f5100 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00077f5100 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00077f5100 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00077f4400 [firmware taskq] 100040 D - 0xfffffe0007bcc100 [crypto_0] 100041 D - 0xfffffe0007bcc100 [crypto_1] 100056 D - 0xfffffe00077f8200 [vtnet0 rxq 0] 100057 D - 0xfffffe00541f6500 [vtnet0 txq 0] 100058 D - 0xfffffe00541f6400 [vtnet0 rxq 1] 100059 D - 0xfffffe00541f6300 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe00580bf000 [virtio_balloon] 100065 D - 0xffffffff82837600 [deadlkres] 100069 D - 0xfffffe0058595000 [acpi_task_0] 100070 D - 0xfffffe0058595000 [acpi_task_1] 100071 D - 0xfffffe0058595000 [acpi_task_2] 100073 D - 0xfffffe00077f8100 [mca taskq] 100074 D - 0xfffffe0007bcba00 [CAM taskq] 100076 D - 0xfffffe0007bcc800 [ipsec_offload] 1243 1242 765 0 Z syz-executor db> show all locks Process 1242 (syz-executor) thread 0xfffffe005877b780 (100660) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007dedfe0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:1754 exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007ec5700) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:4024 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0077f2cac0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_vnops.c:1315 Process 1238 (syz-executor) thread 0xfffffe0058759780 (100644) exclusive rw vmobject (vmobject) r = 0 (0xfffffe005877d9b0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_object.c:647 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 408 5602K 539 tcp_hpts 8 4865K 8 devbuf 4187 4324K 4215 sysctloid 35408 2086K 35483 vtbuf 24 1968K 46 kobj 335 1340K 526 newblk 135 1058K 2706 vfscache 3 1025K 3 filedesc 104 826K 731 pcb 34 674K 163 inodedep 25 521K 837 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 227 466K 1372 vmem 5 272K 8 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 35713 acpica 1674 184K 56977 tidhash 3 141K 3 pagedep 11 131K 410 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 109 109K 126 sem 4 106K 4 gtaskqueue 18 98K 18 LRO 22 85K 22 bus 1011 83K 5163 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 528 66K 528 ddb_capture 1 64K 1 kdtrace 291 54K 1909 umtx 384 48K 384 BPF 23 36K 39 indirdep 8 34K 452 hostcache 1 32K 1 shm 1 32K 5 DEVFS3 128 32K 138 msg 4 30K 4 kbdmux 6 28K 6 temp 32 21K 2616 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 130 16K 410 ithread 90 15K 90 bus-sc 34 15K 1690 eventhandler 163 14K 163 lltable 43 14K 44 GEOM 64 14K 534 ether_multi 157 13K 177 plimit 33 13K 352 ifnet 7 13K 7 md_disk 5 13K 8 kenv 95 12K 95 cred 28 11K 231 CAM queue 5 11K 1528 rman 82 10K 437 shmfd 4 10K 6 rpc 8 9K 8 in6_multi 65 9K 65 bmsafemap 2 9K 697 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 2 filemon 1 8K 5 pfs_vncache 1 8K 1 md_sectors 2 8K 2 audit_evclass 240 8K 306 taskqueue 69 8K 84 kqueue 106 7K 1439 pwddesc 103 7K 1271 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 72 freework 19 5K 824 pf_ifnet 11 5K 20 UMA 271 5K 271 iov 3 5K 15866 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 lockf 38 4K 95 acpisem 28 4K 28 proc-args 126 4K 2345 selfd 50 4K 78792 DEVFSP 49 4K 91 terminal 11 3K 11 session 22 3K 42 acpidev 20 3K 20 uidinfo 4 3K 16 hhook 8 3K 10 sctp_atcl 6 3K 30 clone 9 3K 9 kcovinfo 36 3K 36 netlink 2 3K 83 sctp_stro 2 2K 4 pf_rule 1 2K 1 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K 13 Unitno 31 2K 60 CC Mem 14 2K 227 in_multi 7 2K 11 sctp_ifa 13 2K 14 select 13 2K 75 CAM XPT 22 2K 543 dirrem 6 2K 653 tun 4 2K 4 toponodes 6 2K 6 crypto 7 2K 19 ipsecpolicy 2 2K 2 ip6opt 9 2K 38 freeblks 5 2K 417 inpcbpolicy 39 2K 521 msi 9 2K 9 freefile 9 2K 529 sctp_stri 2 1K 4 softdep 1 1K 1 mkdir 8 1K 724 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 78 NFSD session 1 1K 1 diradd 7 1K 672 CAM periph 4 1K 271 sctp_ifn 6 1K 14 ipsec 3 1K 3 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 osd 19 1K 245 isadev 6 1K 6 mount 16 1K 473 pci_link 10 1K 10 newdirblk 5 1K 365 encap_export_host 12 1K 12 ip_msource 10 1K 46 sctp_timw 2 1K 2 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 sctp_atky 8 1K 36 chacha20random 1 1K 1 biobuf 1 1K 1 cryptodev 6 1K 92 vnodes 1 1K 6 procdesc 2 1K 12 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 VN POLL 1 1K 20 aio 4 1K 4 soname 5 1K 3463 pmchooks 1 1K 1 filecaps 5 1K 94 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_athm 6 1K 32 in_mfilter 2 1K 70 sctp_vrf 1 1K 1 sctp_map 4 1K 8 ip_moptions 1 1K 24 vnet 1 1K 1 pmc 1 1K 1 filedesc_to_leader 1 1K 2 entropy 2 1K 34 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 pf 1 1K 1 p1003.1b 1 1K 1 ext2_mount 0 0K 0 ext2_node 0 0K 0 ext2_extents 0 0K 0 mqdata 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 1 sctp_iter 0 0K 11 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 11 sctp_aadr 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 pf_table 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 tcp_pcm_rack 0 0K 1 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 2 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 542 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 36 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 105 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_msource 0 0K 0 ip6_moptions 0 0K 1 in6_mfilter 0 0K 0 frag6 0 0K 24 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 21 fadvise 0 0K 0 statfs 0 0K 199 namei_tracker 0 0K 2 inotify 0 0K 44 export_host 0 0K 0 cl_savebuf 0 0K 44 lio 0 0K 18 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 ioctlops 0 0K 111 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 210 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 652 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 416 rctl 0 0K 0 cache 0 0K 0 kexec 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 7 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 90 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tpm_buffer 0 0K 0 tcp_log_dev 0 0K 1 midi buffers 0 0K 0 mixer 0 0K 0 feeder 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 350 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8336 1316 25545 0 254 39534592 0 tcp_log 416 5228 3664 26033 0 254 3699072 0 mbuf 256 9264 908 81400 0 254 2604032 0 RADIX NODE 152 12941 782 57849 0 62 2085896 0 mbuf_cluster 2048 508 508 572 0 254 2080768 0 malloc-4096 4096 442 2 2330 0 2 1818624 0 BUF TRIE 152 396 11408 2524 0 62 1794208 0 malloc-384 384 4162 38 4181 0 30 1612800 0 malloc-128 128 11923 198 12378 0 126 1551488 0 UMA Slabs 0 112 11608 14 11608 0 126 1301664 0 sctp_asoc 2256 2 508 4 0 254 1150560 0 malloc-64 64 183 17142 79126 0 254 1108800 0 vmem btag 56 18408 135 18408 0 254 1038408 0 malloc-16384 16384 54 3 367 0 1 933888 0 malloc-65536 65536 14 0 17 0 1 917504 0 FFS inode 1168 578 24 1116 0 8 703136 0 sctp_ep 1152 2 509 24 0 254 588672 0 socket 1024 61 447 1870 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 256 Bucket 2048 225 23 1433 0 8 507904 0 VM OBJECT 248 1733 139 18982 0 62 464256 0 pbuf 2664 0 166 0 0 2 442224 0 sctp_raddr 736 2 515 4 0 254 380512 0 THREAD 1860 185 7 664 0 8 357120 0 VNODE 440 688 95 1228 0 30 344520 0 malloc-64 64 4479 120 5933 0 254 294336 0 MAP ENTRY 96 2618 154 60193 0 126 266112 0 malloc-2048 2048 104 16 144 0 8 245760 0 malloc-16 16 14844 406 17878 0 254 244000 0 DEVCTL 1024 27 193 154 0 0 225280 0 malloc-32768 32768 4 2 124 0 1 196608 0 malloc-32768 32768 1 5 352 0 1 196608 0 malloc-32 32 5508 414 6380 0 254 189504 0 UMA Zones 768 243 1 243 0 16 187392 0 FPU_save_area 832 187 29 957 0 16 179712 0 malloc-128 128 1147 248 26704 0 126 178560 0 FFS2 dinode 256 578 112 1116 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 PROC 1368 104 17 1243 0 8 165528 0 unpcb 320 19 497 1278 0 254 165120 0 malloc-32768 32768 2 3 16 0 1 163840 0 malloc-4096 4096 33 3 114 0 2 147456 0 malloc-1024 1024 128 16 159 0 16 147456 0 S VFS Cache 104 1005 399 1595 0 126 146016 0 filedesc0 1072 103 23 1271 0 8 135072 0 malloc-65536 65536 0 2 81 0 1 131072 0 malloc-65536 65536 0 2 118 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 mbuf_packet 256 21 487 2591 0 254 130048 0 ksiginfo 112 97 947 186 0 126 116928 0 malloc-2048 2048 3 53 1089 0 8 114688 0 malloc-256 256 184 251 3707 0 62 111360 0 malloc-256 256 313 122 2524 0 62 111360 0 malloc-128 128 607 168 1387 0 126 99200 0 syncache 176 0 529 16 0 254 93104 0 malloc-384 384 209 31 777 0 30 92160 0 UMA Kegs 384 230 3 230 0 30 89472 0 64 Bucket 512 100 68 3258 0 30 86016 0 vnpbuf 2664 0 32 8 0 16 85248 0 128 Bucket 1024 53 30 276 0 16 84992 0 malloc-16384 16384 5 0 8 0 1 81920 0 malloc-8192 8192 8 2 13 0 1 81920 0 g_bio 440 4 176 13908 0 30 79200 0 sctp_chunk 152 149 371 149 0 254 79040 0 malloc-64 64 619 452 2858 0 254 68544 0 malloc-128 128 405 122 573 0 126 67456 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-32768 32768 1 1 13 0 1 65536 0 malloc-32768 32768 0 2 2 0 1 65536 0 malloc-8192 8192 6 2 89 0 1 65536 0 VMSPACE 584 79 33 1216 0 16 65408 0 malloc-256 256 193 62 808 0 62 65280 0 32 Bucket 256 85 170 874 0 62 65280 0 sctp_stream_msg_out 112 1 539 2 0 254 60480 0 tcp_inpcb 1304 15 27 227 0 8 54768 0 malloc-64 64 301 518 16001 0 254 52416 0 malloc-128 128 91 312 1894 0 126 51584 0 malloc-128 128 203 200 242 0 126 51584 0 malloc-256 256 29 166 1228 0 62 49920 0 DIRHASH 1024 34 14 69 0 16 49152 0 NAMEI 1024 1 47 15979 0 16 49152 0 malloc-2048 2048 10 14 23 0 8 49152 0 malloc-2048 2048 11 13 84 0 8 49152 0 malloc-1024 1024 12 36 524 0 16 49152 0 pipe 736 21 45 379 0 16 48576 0 malloc-384 384 25 95 838 0 30 46080 0 ripcb 376 11 109 87 0 30 45120 0 malloc-4096 4096 9 1 17 0 2 40960 0 malloc-4096 4096 6 4 14 0 2 40960 0 pcpu-8 8 4797 323 5059 0 254 40960 0 da_ccb 544 1 69 3613 0 16 38080 0 udp_inpcb 408 13 77 197 0 30 36720 0 hostcache 64 3 564 3 0 254 36288 0 malloc-64 64 24 543 315 0 254 36288 0 malloc-64 64 113 454 1955 0 254 36288 0 malloc-64 64 0 567 17893 0 254 36288 0 malloc-64 64 137 430 213 0 254 36288 0 tcp_bbr_map 128 0 279 12 0 126 35712 0 malloc-128 128 49 230 564 0 126 35712 0 malloc-128 128 67 212 4026 0 126 35712 0 routing nhops 256 27 108 35 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-256 256 20 115 172 0 62 34560 0 malloc-256 256 21 114 1464 0 62 34560 0 malloc-256 256 70 65 163 0 62 34560 0 malloc-256 256 22 113 678 0 62 34560 0 TURNSTILE 136 193 59 193 0 62 34272 0 SLEEPQUEUE 88 193 191 193 0 126 33792 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 1 1 2 0 1 32768 0 malloc-16384 16384 0 2 190 0 1 32768 0 malloc-16384 16384 0 2 3 0 1 32768 0 malloc-8192 8192 2 2 23 0 1 32768 0 malloc-8192 8192 4 0 4 0 1 32768 0 malloc-2048 2048 11 5 29 0 8 32768 0 malloc-2048 2048 3 13 47 0 8 32768 0 malloc-2048 2048 2 14 5 0 8 32768 0 malloc-2048 2048 5 11 196 0 8 32768 0 malloc-1024 1024 4 28 56 0 16 32768 0 malloc-1024 1024 5 27 1084 0 16 32768 0 malloc-1024 1024 7 25 190 0 16 32768 0 malloc-1024 1024 8 24 79 0 16 32768 0 malloc-1024 1024 17 15 21 0 16 32768 0 malloc-512 512 18 46 38 0 30 32768 0 malloc-512 512 2 62 68 0 30 32768 0 malloc-512 512 2 62 29 0 30 32768 0 malloc-512 512 2 62 121 0 30 32768 0 malloc-512 512 9 55 25 0 30 32768 0 pcpu-64 64 506 6 506 0 254 32768 0 ipq 56 1 575 3 0 254 32256 0 ttyinq 160 135 65 300 0 62 32000 0 Files 80 233 167 8735 0 126 32000 0 clpbuf 2664 0 12 135 0 4 31968 0 tcp_log_id_node 120 2 262 4 0 126 31680 0 PGRP 120 26 238 46 0 126 31680 0 L VFS Cache 320 0 96 88 0 30 30720 0 rl_entry 48 4 584 15 0 254 28224 0 malloc-32 32 361 521 993 0 254 28224 0 16 Bucket 144 65 131 564 0 62 28224 0 4 Bucket 48 7 581 19 0 254 28224 0 AIO 208 0 133 77 0 62 27664 0 udplite_inpcb 408 1 62 10 0 30 25704 0 cpuset 200 7 121 202 0 62 25600 0 malloc-8192 8192 1 2 51 0 1 24576 0 malloc-4096 4096 1 5 21 0 2 24576 0 tcp_log_id_bucket 176 2 136 4 0 62 24288 0 ertt_txseginfo 40 8 598 8093 0 254 24240 0 PWD 40 58 548 388 0 254 24240 0 rtentry 168 30 114 35 0 62 24192 0 8 Bucket 80 53 247 444 0 126 24000 0 itimer 352 0 66 55 0 30 23232 0 splice 184 0 126 3 0 62 23184 0 malloc-384 384 27 33 91 0 30 23040 0 malloc-384 384 54 6 376 0 30 23040 0 domainset 40 0 567 195 0 254 22680 0 Mountpoints 2816 2 6 8 0 4 22528 0 ertt 72 14 266 227 0 126 20160 0 malloc-32 32 36 594 192 0 254 20160 0 malloc-32 32 93 537 278 0 254 20160 0 malloc-32 32 101 529 498 0 254 20160 0 malloc-32 32 61 569 528 0 254 20160 0 malloc-32 32 28 602 7753 0 254 20160 0 malloc-32 32 31 599 3799 0 254 20160 0 2 Bucket 32 67 563 524 0 254 20160 0 KNOTE 160 0 125 94 0 62 20000 0 cryptop 280 0 70 8 0 30 19600 0 AIOCB 552 0 35 33 0 16 19320 0 AIOLIO 272 0 70 9 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 0 4 206 0 2 16384 0 malloc-4096 4096 1 3 200 0 2 16384 0 malloc-1024 1024 1 15 1 0 16 16384 0 malloc-512 512 0 32 121 0 30 16384 0 malloc-512 512 3 29 51 0 30 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 tcp_bbr_pcb 896 0 18 1 0 16 16128 0 sctp_laddr 48 2 334 14 0 254 16128 0 kenv 258 17 43 1071 0 30 15480 0 tcp_rack_pcb 1088 0 14 1 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 vtnet_tx_hdr 24 0 501 2678 0 254 12024 0 malloc-16 16 92 658 1821 0 254 12000 0 malloc-16 16 39 711 301 0 254 12000 0 malloc-16 16 63 687 824 0 254 12000 0 malloc-16 16 4 746 9336 0 254 12000 0 malloc-16 16 271 479 291 0 254 12000 0 malloc-16 16 24 726 26061 0 254 12000 0 malloc-384 384 1 29 1 0 30 11520 0 malloc-384 384 0 30 76 0 30 11520 0 malloc-384 384 1 29 1 0 30 11520 0 pcpu-16 16 8 504 8 0 254 8192 0 malloc-16 16 5 495 8 0 254 8000 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 15 24 19 0 0 3744 0 md1 4096 0 0 0 0 2 0 0 md2147483519 4 0 0 0 0 254 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf anchors 1664 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 nfspbuf 2664 0 0 0 0 4 0 0 swwbuf 2664 0 0 0 0 2 0 0 swrbuf 2664 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl