last executing test programs: 1.172376245s ago: executing program 0 (id=1): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x15, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x24, &(0x7f0000000080)={r1, @in6={{0x1c, 0x1c, 0x0, 0x8, @local={0xfe, 0x80, '\x00', 0x0}}}, 0x8001}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000180)={r1, 0x0, 0x8000, 0x436}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x102, &(0x7f0000000200)={r2, 0xeb, "29b607136115cdbea18944f35867c7e708a2567c26edba9564d6c3f9369c14a8151abd39c4bb67ae23977e9ae5a35858fdeaed01afba5a24698c813e0d1cf969001a7667322e6e011c0246ce6e49bb9d64dc6f0a22740f3828a4a58467e1d053cef3b1ca2a97ce8bd52564d808f30da528be99b64027d8cf2c1162923e44490a07e65677c4e61527b6a155e3e6f850477aa34f01adc2d91845dbf5d9e8abf697db846f17c73b3e10938be15e3b3c33c954f80b28dd5f196a1133c1170a59fc49401faaa17bd1a6dd6f17a3a0040b85a365ae40d3d3dc3ab98393614ce27532511e9b01e272520b12a68c75"}, &(0x7f0000000300)=0xf3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(r0, 0x84, 0x8003, &(0x7f0000000440)={r2, &(0x7f0000000380)=[@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, @in={0x10, 0x2, 0xffffffffffffffff, @multicast2}, @in={0x10, 0x2, 0xffffffffffffffff, @rand_addr}, @in={0x10, 0x2, 0xffffffffffffffff, @broadcast}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @empty}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @ipv4={""/10, ""/2, @remote}}, @in={0x10, 0x2, 0xffffffffffffffff, @multicast2}, @in={0x10, 0x2, 0xffffffffffffffff, @loopback}]}, &(0x7f0000000480)=0x10) profil(&(0x7f00000004c0)="3eec04ebe39a61e4ebdf180b992dd791f5cb79282b0fc25d64c316264f1b462b3061b65ecf9744a084bdecf89f332762bb7fcb11ac5bf8fa80d89fb3c1ad071bc00851950702efc230ef37727c1fac4f90a80049bf8e22afcd93e56b89b72c896c32132ff5da8b39d4f258d6a2c20653156c978b0b241420194219bd979f136d3ad20e7f9171163e58f99652e2e14d13dcf18d95f205de2d89774f7b7791", 0x9e, 0x8000000000000000, 0xe46) setsockopt$inet6_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000580)={0x1, [0x8]}, 0x6) r3 = fhopen(&(0x7f00000005c0)={{[0xfd, 0x6]}, {0x0, 0x4, "48bb21edd52056f8c4abee58b78cca4e"}}, 0x80000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r2, 0x3, 0x80000001, 0x7}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(r3, 0x84, 0x8003, &(0x7f0000000740)={r4, &(0x7f0000000680)=[@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @ipv4={""/10, ""/2, @loopback}}, @in={0x10}, @in={0x10, 0x2, 0xffffffffffffffff, @loopback}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast1}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, @in={0x10, 0x2, 0xffffffffffffffff, @local}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}]}, &(0x7f0000000780)=0x10) getsockopt$inet6_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x10, &(0x7f00000007c0), &(0x7f0000000800)=0x4) setsockopt$inet6_sctp_SCTP_EVENT(r0, 0x84, 0x1e, &(0x7f0000000840)={r1, 0xc, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x13, &(0x7f0000000880)={r5, 0xd26f, 0xa, "f75623e03d28085326eb"}, 0x12) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x23, &(0x7f00000008c0)={@in6={{0x1c, 0x1c, 0x3, 0x5, @remote={0xfe, 0x80, '\x00', 0x0}, 0x14000}}, r2, 0x2400, 0x2, 0xfff}, &(0x7f0000000980)=0x90) r7 = accept$unix(r3, &(0x7f00000009c0)=@abs={0x8}, &(0x7f0000000a00)=0x8) recvfrom(r7, &(0x7f0000000a40)=""/14, 0xe, 0x1, &(0x7f0000000a80)=@in={0x10, 0x2, 0x1, @rand_addr=0x7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) setsockopt$inet6_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000b00)=0x9, 0x4) sendto(r8, &(0x7f0000000b40)="38ba53ac6b784cbc5f8ee9ea90309e71988106403189b9dbb5475501cce9f91d05a36e701ca460836852c0b1d4dad05eb68cb66af76a36d215886d4418d5ea89d9c61a80c489f4ba4094d638aa996da6f53c9e1ca13b911c357d94b52660230c51842d11d1cf", 0x66, 0x2010d, &(0x7f0000000bc0)=@un=@abs={0x8, 0x0, 0x0, 0x3}, 0x8) ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f0000000c80)={0x1, 0x7c, 0x2, &(0x7f0000000c00)='./file0\x00', 0xfc, 0x2, 0x8001, 0x1, 0x3, 0x0, &(0x7f0000000c40)='\x00', [0x4, 0x9, 0x602, 0x37, 0x2, 0x0, 0xc02, 0x9, 0x2, 0x470, 0x9, 0x2, 0x9, 0x5, 0x2, 0x7, 0xfffffffd, 0x1000, 0xfffffe00, 0xfffffe00, 0xf, 0xfffffff7, 0x5, 0x9, 0x5, 0xb, 0x4, 0x7, 0x963, 0x9, 0x383, 0x2, 0x7, 0x4, 0x8, 0x2, 0x1, 0x3, 0x3, 0x7, 0x10001, 0x0, 0x9182, 0x2, 0xff, 0x7, 0xffffffff, 0x5, 0x9, 0x6, 0x1914, 0x8, 0x1, 0x6, 0xffffffff, 0x6, 0xffffff7f, 0xfffffff9, 0x0, 0x7ff, 0x9cf, 0x2, 0x7, 0xffffffff, 0x0, 0x7fffffff, 0x8, 0x10000, 0x7, 0xb9, 0x401, 0xe55, 0x1, 0x80000000, 0x0, 0x2, 0x10001, 0x2, 0xd27a, 0x7, 0x1, 0x5, 0x9966, 0x7, 0x9, 0x4, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x3, 0xecb, 0xffff, 0x80000000]}) freebsd11_stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) sendto$inet(r3, &(0x7f0000000f00)="b58259a5989918d40ff90fb65eceda5fb57f3bc21856fd82e5a0b7516ebce9384d5d39188c1e40d0b936208ccf2ca07153f8017614a7b1c41fa2e6f4bfd17ddaa1c0d8867e517c2dde7f8e76ff1f7bb8af8a376fd9e5b65cdbef5a76771b90913a6c9c2ea77ca71151841be9e62a6e8ee0e29d80fdfab9a1df9a83050d204d259cac6d8829d2e1c12aa4e805c3ec4b43007c192d937e89486ddead48ff9472796ce486e4c211daf44c06b1d0580fa96ddbc07cd7b124e4b0beac833d1599b0259245a201946a0e54be31ac01ee97ffdcd236eb4b2fe973502951e66d7ee2d5b270e6f5a3781fd33a2429a0", 0xeb, 0x0, &(0x7f0000001000)={0x10, 0x2, 0x3}, 0x10) setsockopt$sock_accept_filter(0xffffffffffffff9c, 0xffff, 0x1000, &(0x7f0000001040)={'accf_dns\x00', "39d5b40f571c731ae719577aaac9683bb3a684368c64dcc87fbe8f7fa8a7967b87a1d190ef675e401c92f8cd24383491224333afc4056cc77fbceb9e622c11afa7a75ddaf9d739456223d12aedf17d762e65cf4f51a796717b8653216018f38d6f73e096964686a1d00ebaa8ae45a2026d7a8649d26800e6acb77987f84dd35de55cb35cb86657cc208a38b76b46ed9ce6e9231221ae14ea65c3872722c92e06ba6ce9098a88e6d0d87742345e9a5df0ccdc8793dd1f7cc7958a43099f1f3bfc50187eb7ca164c01d8055e1fee49f36a6cf88dd92cb9ac28482d380a034dbd3e3f7928e0eb65c61a02f756d36891ca57"}, 0x100) cap_ioctls_get(r3, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) r9 = openat(r3, &(0x7f0000001180)='./file1\x00', 0x80000, 0x18) bind$inet(r9, &(0x7f00000011c0)={0x10, 0x2, 0x2, @broadcast}, 0x10) eaccess(&(0x7f0000001200)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r9, 0x84, 0x902, &(0x7f0000001240)=r6, 0x4) 1.025845651s ago: executing program 0 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r0, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cfe19f0da4833728dc14", 0x0, &(0x7f0000000040)="cf", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "00ff03ff8e3500"}, 0x40) sendto$inet(r0, &(0x7f0000000000)="727ffcc3", 0x4, 0x20185, &(0x7f0000000280)={0x10, 0x2, 0x3, @remote={0xac, 0x14, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_TXTLS_MODE(r0, 0x6, 0x28, &(0x7f0000000100)=0x2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r0) renameat(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00') ioctl$DIOCNATLOOK(r1, 0x8008745b, &(0x7f00000003c0)="28a7c7f9812306") 1.025563743s ago: executing program 2 (id=3): ppoll(0x0, 0x0, &(0x7f00000000c0)={0x400000101, 0x800}, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00', 0xfffffffe}, 0xbcb91f60203941a2) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) shutdown(r0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x1, @loopback, 0x4}, 0x1c) r1 = socket$inet6(0x1c, 0x2, 0x0) sendmsg$inet6_sctp(r1, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x6, @loopback, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@sndrcv={0x2c, 0x84, 0x2, {0x81, 0x30b2, 0x600, 0x9, 0x3, 0x4, 0x1, 0x6}}, @dstaddrv6={0x1c, 0x84, 0x29, @rand_addr="7779a2ca61bb3f21d2dc04a9a20297bc"}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @prinfo={0x14, 0x84, 0x7, {0xf, 0x2}}, @init={0x14, 0x84, 0x1, {0x0, 0x14, 0x400, 0xfff}}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @init={0x14, 0x84, 0x1, {0x2, 0x1, 0xbc, 0x2}}], 0xbc, 0x84}, 0x20000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) procctl$PROC_REAP_STATUS(0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) aio_writev(&(0x7f00000015c0)={r2, 0x0, &(0x7f0000000180)="726de5d2ff252a68dd65a7f4a8394438477b6d37f4259eca53a3de6e6bfe585f105fca9d20d59cebc8c11276aa670394fd9e0cefafd14ce5fa8e0c1c7efb06cca163ae5d7e41094c9db60bf7a58a71df9b1b60a14c08000000000000001fd25583e33c2313ecbed232973cfcd0d7ec0358b83321ea426ee6e4fe8621606dabc5fab4f8ca43543485d279b223d74f90b10d186cbdbe8b7243dedd6f0f454f9cd63537692c81a017e6890e2a5a92d462c8f8f929f71c98de8a4d00"/195, 0xc3, [0x2, 0xf7ffffff], 0x7fffffff, 0x8, 0x0, {0x0, 0xffff, 0x0}, {0x0, 0x2, @sival_int, @tid=r3}}) semget$private(0x0, 0x3, 0x308) r4 = socket(0x1c, 0x1, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x20080, 0x0, 0x0) setuid(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="9f4c4662c957", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x1, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@mask_request}}}}) getppid() setsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f0000000140)={0x80000001}, 0x8) bind$inet6(r4, &(0x7f0000000300)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00', 0x4}, 0x24) sendto$inet6(r4, 0x0, 0x0, 0x44, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x2, @loopback, 0x801}, 0x1c) rfork(0x5000) 957.850932ms ago: executing program 3 (id=4): open$dir(0x0, 0x202, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r0, 0x60c7800) setuid(0xffffffffffffffff) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000140)={0xf, &(0x7f0000000040)=[{0x5}], 0x1}) r3 = socket(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000240)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f00000000c0)={'freebsd\x00', 0x5}, 0x24) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) kqueue() r4 = kqueue() kevent(r4, &(0x7f0000000380)=[{0x4, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, [0x0, 0x1]}, {0x4, 0xffffffffffffffff, 0x8768, 0x0, 0x6, 0x0, [0x0, 0x0, 0x7fff]}], 0x2, 0x0, 0x0, 0x0) kevent(r4, &(0x7f00000001c0)=[{0x3, 0xffffffffffffffff, 0x21, 0x0, 0xfffffffffffffffd}], 0x1, &(0x7f0000000300)=[{}], 0x1, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r5, 0x80000001, &(0x7f0000000040)="e2", 0xfeac, [0x0, 0x1ff], 0x0, 0x0, 0x8000, {0x100000000000001, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x3ef8}}) rtprio(0x1, 0x0, &(0x7f0000000580)={0x2, 0x4}) setitimer(0x0, &(0x7f0000001600)={{0x1, 0x5}, {0x0, 0xffff}}, 0x0) setitimer(0x0, 0x0, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) syz_emit_ethernet(0xba6, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0xb98, 0x0, 0x0, 0x1, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1, {[@rr={0x7, 0x3, 0xad}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0x7, 0xb, "62251256745ab9f7ecd15a7a9b8780db47bd9c7cedc131e2642721a1aad7237772a3f8627e1aa4df43cb04a0ae909ee0eff67cc6d4d2922354672b7eaf2cebad015e3b275541f527d305f171ffd2eef689eab87ccbf727757e73b7b0df119691de847db31a9c296c6179d630f62787b75dbe3c7c05c9090fdd5b85b19699fbe935c86d102af913da077d749d12c9a7dffe00c6b8e34e3e40fbc767c616851e18b974ef08b4953df977268c07266eaf929ba67e518f914f26d75f3e103080a1791c35ad232f5f8c83cd2ac7bfe0b8e0545388073b6987d284d187bd31d86f8599051b165cb1229c6b5452c51c0c286108abaa4961aa2039c45a00679aaa02074f24e6adc9023e23e78281e91f009bb29ab13c06193ab514e1a53019167cf9359f66e484de7d91df84dfac0f0fec0bad76f2e89f8e5bd64c467d1b4c9a8051c92bbfc48eb2bdf031309c0cf23108822a9eaa7fa9818c01ac2c3aa9281e8cbd5b9129a210e899ab15087066c5662549439b14f4c9a5d8bfc049c780933ed27b6c07bd3833e71fd8de5854faadf0aa1467415ce6607e05722edadc2915bb68e469f6c7035bcf755570ace9c9cc76a63d3e785400f8b809818cbbf12190e7933d9735904245708cdba28c716b4b73178e746d478a5a129d1a4092424f84bb25fd6799534187042807e38a7c884bfdebc28101eea9e25a2030b89eb4a38066fb104dd7e8e7785ba6a52870737fc4fd0d39501ab80d09df46cb25fe2d231fb15e81ea13a845ed623927f8693d4659a60bff78d3b5bfdc9a13d713634410f2ebea449c14863f6cd85534a6741c53faa55af0ff3ab589c446e6862e2471620cb11c83958dc4bdd51edc46f898fd9423c4a60d99a24ec51efda9cb8e79309107703d49c0b63f0c5748c07d9f0415cb2042cf705c5cfd39fe08bab1fb33c080795d1c95c169a0980eb5c0fa9901dfce9a148d56daf2e1807f27c79dcbef1fa079ab883ccf1cfdd1b3135433eded34c852870e1bf4f4f3ccbf4b2583ea7fe7f71ce20c1378a935b49a840bb0f4480fb6ec9785ccdc659919fa6b526648df52e44f62820ada3b75ddb296ef5d2a2fc541aba6d4aba3e97e663808ecf5cbffcfb28ff57dafb36c4f6630383fd24ff329f5e3006a3ed53d9caf8157e90bacc9f1fb78311691997eefcc1c8dbcb04368b60a2cfe134b4d47becfa017f88ef9007483eda5a8614023206353c7850a6eb0a55a820d4dcf1e47c9cad60fd3f0289dc917aba0bddcadff87d2a49c8e88506e253fa1f37beabfb39ede9ab21e0dc31c1f6166a193999b1b218cebbbf8ebe2983fb2b281df46346ce849199ab66d26d4ab08ed27d2e8e70495f16819d3dda63b55e5079ff5cbd7e311c7778bd3157cb46ec80724037b22b22d27b4de2318ee3f7995e7c7f77354d49095339ff73a8bd1712571547beec3a469f5e96fc1c31332a81f5af5a0c1832f3b6e95bc177b181b5155283ee36ce0332bc4d7c4e38f823c6a1b25a783f11cfaf7aa78ce527f649243adb008fdd1d8297f24b3aa5ecc9629523cf864f398928727d1263cbe754ef70c3670280f6123352f372a47bc20fe6c7f3980fbdff87cf8302a429993ab099bd3c50be18e37e2c68cb72c0f37cc5965e422beb6a036b062bf636db874a2eb957f182b8b3818ff46f20bb7f0e6c481e06f1a07c19293d351a5e5d3d242260f53fb4c64ce0475d4f829bd67f6e1af052468cfcc94346b8b35cab4ee11e56157d6cd5d5544e9b58216f0680f3809721991808f0ad6945fd820eb2b2f6f901f4bafc0f2f2035db8dcf56d9e4af39a913c6aa00c3afeaa56e1a424e91cb00c8cb233d222cbe2316fdd8101ef82e9ef05694ce4a3dd3759d860d400ea0f115ace0e6a3387fd31bbfb9b51af912e847f47c874482f4436d5d9377242798f0511a7abe90da29f7a6fced30864d9681599e8a41338b7dc45d3b24aa19c6840173d8820ce1f0f2ffeaa9265cb5e6162816ce39f3290b6c5751f64747e750e0e151be3964b605d54d4483bb49f2edbf12968b70aa19fac173ed68560be159322b07ee0c5f6645dc0af23d2b6f4b4f8ad58dcb0d6b5ae7d5ab19e23bc9dc2ffcd3be6094dcf3c136f8a70e16b12086e507d9935d07d166e50d02fa86820f48b1a2d45cc8f39f3e6319e6f307bf9add7e7285a73b78b617274d24a9125c53e87390160c165e7738d330de7925a77958c02ef8eb3c80818d9c2c0ae0953ee48787b55fe6cb9d815ebc8e1b27c8a8efcb5c9322a490e88ff1b4ef5a510d02ce7e23125be0a19399aba84c025987ea0672be950c824d9540867973f3bf2fd0e76fa968090b204f66960f6c0b1b4e67665742d24a6c0c48be944b7b2f0c68d5d76d72fb501d175e2e041bfc247f88df4a328b86de2b20de88759c1476cdbc1dc715417af9eb7ae17d810d426a0f9bb8ff640dbdfd17d4d4530e558a0a89fcae71ef7924004e64caa7bba5ee8e880e94955ee0f0407406f32f2faca10c121442b757527c41f85ca4f9541f989e92fee5b2cac7b01f2c7adff54faa8c331438220df80a9294f6ac7b3d8c64179481f894e83a67d1ab066e5ceb64021687873c7242b849de751e58995656d1eab76301f445757b184c818fd39671fc15c408b9d76b92c245a5276f8ce7bf21fabad82053dcb31d6cbb7fb75b946d4b92f16063ca28984dcf6dd7b57ab76d44ac9ae1973fffef8e38585f9ffe89947974f991289e761748687f3b52af812e77673ae8c183ceea45caffcc945bd122478949c7e6ad06d322ec9148d9b1a8a27d330163fe325b6d969b19843cbe6ceb456a7d9ea9b58f736571867f14b6c555fe402320d6b29498178ff23a318dd61402f7e4d5dff5e5864032be89e8bd08f46cf124a75c07206669f8f7b2a266afbac80d00f49ee04ee4f5cfae1b8be115c15a9cb96e83836198cd986d9262075303278df9c05bc4b4e50e16324fe3522e226ca924ae386d0937b01371d2162a004b63e4e54df5114cf7185f6515852d22099be318dbc844a4ea1557fcd0a025a41efc56a3cd34843c50432368d1ce2e8467ae1a0c1707dd22f8c736aa9a5836f853894f9d30208bb787a4ee2f13fd114d461284acc24a0859d2aa7b0d1013d2a1360dc1c837fb8ff1f20ca1bb91603e07797e49d2d1a1fd1fc5783f6eeede29d3a3446c575075bbf6100cc255bfed82c7c34b00d12d4c9c06ae101793679d09886f81f20037776db52a38710d1e5ddf5861329508d3bee0b5232c71e163e462941fe7bcfd221c9cbd8e444c92e2d772efdeef7b5b5516a61cf572daccddd6d26d09b2f8f1b6160854f12395d55e9a39330271dac368bb38e0ffc45ba4020bce870f7e2fd3f277e433a7ec14b7377beff57a7ebc85def750fdd63cbf8caa4ea94bdda2182680d89c521cbe9421fe39d72ea982868e25a148995a956cd74c550333ae8dca4e40b2af3465f1329fe17fbef79393495be69d5699a5ab2c284fa27c9d0b91c320c8a9e89bd8431f5ec81162fcf49b430c6fba46abda855d84d607245995878cdec152896134c5203d1dff46286d47cdd140e1ae4a7c27552ac4eb403248f1c2780c161e1fc59865d2833431656981d97b59ff5e0abc0d5b5dae6737810113afc80a37ad131080b30d0af82111010b3d176ac0c6523d01b9ce2961ec29a534ddbb7e85fd68a18d9a6abf181850331dc5f0d68bf60e4a7763d883e872e63bf6eecbf810174011563e549bc4be3536ca463ce4f706d4729cd1d45552f7c11b4bc9594f3d7ae46f6f0a47fa4ca0a09ed0c9961041346116f1ccba544e1d395ccbef3fa2c3e9a592824570491e7b2d33e9e1bf338ea7c0716d19920506f4de099d2f2c74c2659b4e9fc074152042a2311a8e19c495de6cc8288642c799ef81716c396d1886c213ded35c943f606f5b51f910cc7c01730528bc6a1e6c31ec6765a35a528e133bb6a44ec1d037e4ff22d38f0f84304401ae11c7a5178e14946f6ce2f0234e3ba15b2a71759acc8d3551c9234a00ca3b7c92b5054652b344cbc4656d529d9d26c6d65f0f5769abbc29bf74b6060af80a8cab88b910f207b8a077e2252dfd6844411036bb7482366330e418d0ffb28ad8c53a6c834792390e68ce2ce3b7784981b49528bf3fc4abc842d"}}}}}) mlockall(0x2) mmap(&(0x7f0000029000/0x800000)=nil, 0x800000, 0x3, 0x20011, r6, 0x0) rfork(0x3060) 900.4869ms ago: executing program 1 (id=2): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x2, @rand_addr=0x5}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x3, @multicast1}, 0x10) setsockopt$sock_int(r0, 0xffff, 0x1018, &(0x7f0000000040)=0x1, 0x4) extattr_list_link(&(0x7f0000000540)='./file0\x00', 0x2, 0x0, 0x0) statfs(&(0x7f0000000140)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x54, &(0x7f00000004c0)={0x6, {{0x1c, 0x1c, 0x2, 0x0, @mcast1, 0x6}}, {{0x1c, 0x1c, 0x2, 0x0, @empty}}}, 0x108) pread(r2, 0x0, 0x0, 0x3) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x0) getresgid(0x0, &(0x7f0000001ec0), 0x0) r3 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) freebsd11_fstatfs(r3, &(0x7f00000002c0)) r4 = socket(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_mreqsrc(r4, 0x0, 0x46, &(0x7f0000000280)={@multicast1, @multicast2, @local={0xac, 0x14, 0x0}}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @random="c61800b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @udp={{0x0, 0x2, 0x8}}}}}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$MDIOCDETACH(r3, 0xc1c06d01, &(0x7f0000000680)={0x8, 0xd2, 0x0, 0x0, 0x39a, 0x5, 0x5, 0x4, 0xb60, 0x2, 0x0, [0x9, 0x7, 0xdd4, 0x400, 0x1, 0xfffffffe, 0x6, 0x7, 0x2c, 0x3, 0x3, 0xfd, 0x9, 0x9, 0x9, 0x4, 0x10, 0xffffffff, 0xc, 0xba, 0x2, 0x2, 0xc, 0x4, 0x5, 0x5, 0x2, 0x7, 0x4, 0x3, 0x81, 0x4, 0x5, 0xfffffffb, 0x8, 0x4000001, 0x401, 0x8, 0x1, 0x0, 0x6, 0x8000, 0x81, 0x2, 0x7, 0x57eaa6a4, 0x10000, 0x8, 0xfffffff7, 0x0, 0x3, 0xdb37432, 0x1, 0xe7, 0x9, 0x7, 0xe00c, 0x9, 0x5, 0xf74, 0x3, 0x401, 0x6, 0x5, 0x31f9, 0x8, 0x9, 0x1000, 0x85cf, 0x9, 0x8001, 0x7, 0x3, 0x7, 0x9, 0x6b8, 0x1000, 0x3ff, 0x0, 0x1, 0x2, 0x1, 0x31b, 0x2, 0xffffffff, 0x5, 0x8, 0x81, 0x3f, 0x2, 0xfffffffc, 0x200, 0x80, 0x100, 0x8b2b, 0x5a]}) 555.652471ms ago: executing program 3 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x800000000, 0x7, 0x0}, {0x0, 0x8, @sival_int=0xe, @thr={0x0, 0x0}}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) thr_suspend(&(0x7f0000000200)={0x6, 0x8d}) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) shmget(0x1, 0x2000, 0x82a, &(0x7f0000ffb000/0x2000)=nil) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x1e0) ioctl$DIOCNATLOOK(r3, 0x4004667f, &(0x7f0000000600)) r4 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x6d, 0x0, 0x0) r5 = socket(0x1c, 0x1, 0x0) fpathconf(r5, 0x9) r6 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1001, &(0x7f0000000080)=0x101, 0x4) bind$inet6(r6, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r7 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) sendfile(r7, r6, 0x0, 0x400000000000, 0x0, 0x0, 0x2d) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r6, 0x6, 0x29, &(0x7f0000000400)={0x0, &(0x7f0000000200), &(0x7f0000000380), 0x29, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, "8ed6308b41800058"}, 0x40) 431.419126ms ago: executing program 2 (id=7): aio_write(0x0) open(0x0, 0x80000000000206, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r1 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)="182a187d094b09d5c2da5cb8b9e2629e18cc9e3f6a7690dabf8beb4abc1aa91a8f6646c64bdc3faf4d4aeece25e52ccfd49df6d49097189852e4fa84bd736151cdc165065d080000b71be2ced1dcaf7a729c730eea0600000000000000c94492ca6327e640d79c969f9b78f9235da433e80ac467889eadd506ccd40d703ae975e8fec78719d96b11828506baa1e92f506ed50ebe15e12e5d7da0b71b919682456af4c711ff34ffd5cc133a95774922c8e038fd622f", 0xb5}, {0x0}], 0x2, 0x0, 0x0, 0x149}, 0x0) r2 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x106, 0x0) bind$inet6(r2, &(0x7f0000000100)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r4, 0x6, 0x27, &(0x7f0000000200)={&(0x7f0000000140)="0e0035930ced83c85dcd48ca2a90053a25b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f0000000500)="00400b0f97da0b262966cea5b132d3116a948d016a60788e5c27888de66cd85b1e86613c16480c326d6d45d74235498b6e39b542c56908e9e106b8d5324de5228c", 0xb, 0x20, 0x0, 0x12, 0x41, 0x0, 0x3, 0x3, "c3dae2c9038b94f1"}, 0x40) truncate(&(0x7f0000000080)='./file0\x00', 0x7ffe) dup2(r2, r3) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r3, 0x17, 0x0, 0x0, 0x0, 0x14) freebsd11_fstatat(r1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) 0s ago: executing program 1 (id=8): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) ktimer_create(0xf, 0x0, &(0x7f00000001c0)) ktimer_create(0x0, 0x0, &(0x7f0000000180)) ktimer_create(0x0, 0x0, &(0x7f0000000200)) ktimer_create(0x0, 0x0, &(0x7f0000000380)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x0, 0x0, &(0x7f0000000540)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x4, 0x0, &(0x7f0000000080)) ktimer_create(0x0, 0x0, &(0x7f0000000380)) ktimer_create(0x0, 0x0, &(0x7f0000000300)) ktimer_create(0x0, 0x0, &(0x7f00000003c0)) ktimer_create(0x4, 0x0, &(0x7f0000000500)) ktimer_create(0x0, 0x0, &(0x7f0000000240)) ktimer_create(0x0, 0x0, &(0x7f0000000140)) ktimer_create(0x4, &(0x7f0000000480)={0x1, 0x6, @sigval_int=0x8, @thr={0x0, 0x0}}, &(0x7f0000000400)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r1, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cfe19f0da4833728dc14", 0x0, &(0x7f0000000040)="cf", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "00ff03ff8e3500"}, 0x40) sendto$inet(r1, &(0x7f0000000000)="727f4c98e6e3b6d62e469a3ba2e66dba9106d9b78a10424b958051", 0x1b, 0x185, &(0x7f0000000280)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) lseek(r2, 0xfffffffffffffffd, 0x2) fhstat(0x0, 0x0) getresgid(&(0x7f0000001bc0), &(0x7f0000001c00), 0x0) fstatat(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x8000) getgroups(0x0, &(0x7f0000001f40)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fork() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. lock order reversal: (sleepable after non-sleepable) 1st 0xfffffe006deb9998 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1741 2nd 0xffffffff83ce2e40 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1440 lock order tun_ioctl -> tun_mtx established at: #0 0xffffffff81699fc1 at witness_checkorder+0x781 #1 0xffffffff8151f987 at __mtx_lock_flags+0x187 #2 0xffffffff81884a9c at tunifioctl+0x15c #3 0xffffffff8185fb48 at ifhwioctl+0xef8 #4 0xffffffff81863cec at ifioctl+0xd7c #5 0xffffffff816a8daa at kern_ioctl+0x52a #6 0xffffffff816a878e at sys_ioctl+0x36e #7 0xffffffff8218aa62 at amd64_syscall+0x4e2 #8 0xffffffff8212c5ab at fast_syscall_common+0xf8 lock order tun_mtx -> tun_ioctl attempted at: #0 0xffffffff8169ae92 at witness_checkorder+0x1652 #1 0xffffffff81589499 at _sx_xlock+0x139 #2 0xffffffff818849ca at tunifioctl+0x8a #3 0xffffffff81860a16 at ifhwioctl+0x1dc6 #4 0xffffffff81882432 at tunioctl+0xd92 #5 0xffffffff811f36f6 at devfs_ioctl+0x266 #6 0xffffffff8234f3f7 at VOP_IOCTL_APV+0x87 #7 0xffffffff81806ff7 at vn_ioctl+0x3c7 #8 0xffffffff811f45b9 at devfs_ioctl_f+0x69 #9 0xffffffff816a8daa at kern_ioctl+0x52a #10 0xffffffff816a878e at sys_ioctl+0x36e #11 0xffffffff8218aa62 at amd64_syscall+0x4e2 #12 0xffffffff8212c5ab at fast_syscall_common+0xf8 Warning! syz-executor[823] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. Sleeping thread (tid 100127, pid 807) owns a non-sleepable lock KDB: stack backtrace of thread 100127: sched_switch() at sched_switch+0x10b8/frame 0xfffffe0056f30f80 mi_switch() at mi_switch+0x33e/frame 0xfffffe0056f30fb0 sleepq_switch() at sleepq_switch+0x1f0/frame 0xfffffe0056f31010 _sx_xlock_hard() at _sx_xlock_hard+0xcdc/frame 0xfffffe0056f311d0 _sx_xlock() at _sx_xlock+0x1ed/frame 0xfffffe0056f31290 tunifioctl() at tunifioctl+0x8a/frame 0xfffffe0056f31350 ifhwioctl() at ifhwioctl+0x1dc6/frame 0xfffffe0056f31610 tunioctl() at tunioctl+0xd92/frame 0xfffffe0056f31730 devfs_ioctl() at devfs_ioctl+0x266/frame 0xfffffe0056f31820 VOP_IOCTL_APV() at VOP_IOCTL_APV+0x87/frame 0xfffffe0056f31850 vn_ioctl() at vn_ioctl+0x3c7/frame 0xfffffe0056f31a60 devfs_ioctl_f() at devfs_ioctl_f+0x69/frame 0xfffffe0056f31ab0 kern_ioctl() at kern_ioctl+0x52a/frame 0xfffffe0056f31b90 sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056f31d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056f31f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056f31f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a6e9a, rsp = 0x8260f4f08, rbp = 0x8260f4f80 --- panic: sleeping thread holds tun_mtx cpuid = 0 time = 1764210737 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c828f0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c82a50 vpanic() at vpanic+0x257/frame 0xfffffe0056c82c10 panic() at panic+0xb5/frame 0xfffffe0056c82cd0 propagate_priority() at propagate_priority+0x521/frame 0xfffffe0056c82d20 turnstile_wait() at turnstile_wait+0x663/frame 0xfffffe0056c82d90 __mtx_lock_sleep() at __mtx_lock_sleep+0x452/frame 0xfffffe0056c82ed0 __mtx_lock_flags() at __mtx_lock_flags+0x1fe/frame 0xfffffe0056c82fc0 tunstart_l2() at tunstart_l2+0x74/frame 0xfffffe0056c83020 tap_transmit() at tap_transmit+0x1d0/frame 0xfffffe0056c83070 ether_output_frame() at ether_output_frame+0x30c/frame 0xfffffe0056c83130 ether_output() at ether_output+0x114b/frame 0xfffffe0056c832a0 ip_output_send() at ip_output_send+0x2a2/frame 0xfffffe0056c83310 ip_output() at ip_output+0x2e32/frame 0xfffffe0056c83570 tcp_default_output() at tcp_default_output+0x55b9/frame 0xfffffe0056c83b10 tcp_timer_rexmt() at tcp_timer_rexmt+0xbe6/frame 0xfffffe0056c83c30 tcp_timer_enter() at tcp_timer_enter+0x2af/frame 0xfffffe0056c83cd0 softclock_call_cc() at softclock_call_cc+0x422/frame 0xfffffe0056c83e80 softclock_thread() at softclock_thread+0x200/frame 0xfffffe0056c83ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c83f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c83f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 2 tid 100031 ] Stopped at kdb_enter+0x6e: movq $0,0x258d5d7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff82831be0 .str.27 rsp 0xfffffe0056c82a30 rbp 0xfffffe0056c82a50 rsi 0 rdi 0xffffffff8165b5d9 printf+0x149 r8 0 r9 0xffffffff r10 0x6 r11 0x5 r12 0xfffffe000781a780 r13 0xfffffffffffffffe r14 0xffffffff82831be0 .str.27 r15 0 rip 0xffffffff816449be kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x258d5d7(%rip) db> show proc Process 2 (clock) at 0xfffffe0007808008: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b5c020 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b5c020 reapsubtree: 2 sigparent: 20 vmspace: 0xffffffff83b5d000 (map 0xffffffff83b5d000) (map.pmap 0xffffffff83b5d0a0) (pmap 0xffffffff83b5d110) threads: 2 100031 L *tun_mtx 0xfffffe000782f540 [clock (0)] 100032 RunQ [clock (1)] db> ps pid ppid pgrp uid state wmesg wchan cmd 824 764 764 0 R (threaded) syz-executor 100093 RunQ syz-executor 100149 RunQ syz-executor 823 765 765 0 R (threaded) syz-executor 100120 RunQ syz-executor 100144 S sbwait 0xfffffe00599152dc syz-executor 100147 S uwait 0xfffffe005858fb00 syz-executor 822 766 766 0 R (threaded) syz-executor 100096 RunQ syz-executor 100143 S lthr 0xfffffe00586a0000 syz-executor 100145 RunQ syz-executor 100146 D ufs 0xfffffe006e6b5908 syz-executor 100148 S uwait 0xfffffe00084f7780 syz-executor 821 0 0 0 DL aiordy 0xfffffe00586d0000 [aiod4] 820 0 0 0 DL aiordy 0xfffffe0058604010 [aiod3] 819 0 0 0 DL aiordy 0xfffffe00586f7568 [aiod2] 818 0 0 0 DL aiordy 0xfffffe00586f6560 [aiod1] 817 816 423 0 L *tun_mtx 0xfffffe000782f540 ifconfig 816 802 423 0 S wait 0xfffffe005870e010 sh 814 1 814 0 Ss select 0xfffffe0054236e40 dhclient 812 0 0 0 DL (threaded) [KTLS] 100130 D - 0xfffffe006e02d300 [thr_0] 100131 D - 0xfffffe006e02d380 [thr_1] 100133 D - 0xffffffff83cd4a28 [reclaim_0] 807 763 763 0 R (threaded) syz-executor 100125 RunQ syz-executor 100127 D tun_ioc 0xffffffff83ce2e40 syz-executor 100134 S uwait 0xfffffe005858ef00 syz-executor 802 786 423 0 S wait 0xfffffe00586f7010 dhclient 786 423 423 0 S wait 0xfffffe00586f7ac0 sh 766 762 766 0 R syz-executor 765 762 765 0 R syz-executor 764 762 764 0 R syz-executor 763 762 763 0 R syz-executor 762 760 760 0 S select 0xfffffe0007787b40 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00586a90b8 csh 758 681 758 0 Ss select 0xfffffe0007787bc0 sshd 747 1 747 0 Ss+ ttyin 0xfffffe0058328cb0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00542664b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00583278b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00542668b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058327cb0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0054266cb0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00542670b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00542674b0 getty 739 1 739 0 Ss+ ttyin 0xfffffe00542678b0 getty 737 1 17 0 S+ piperd 0xfffffe00598702e0 logger 736 735 17 0 S+ nanslp 0xffffffff83bb3001 sleep 735 1 17 0 S+ wait 0xfffffe0058605570 sh 685 1 685 0 Ss nanslp 0xffffffff83bb3001 cron 681 1 681 0 Ss select 0xfffffe0054236f40 sshd 494 1 494 0 Ss select 0xfffffe0007787d40 syslogd 423 1 423 0 Ss wait 0xfffffe00586ab570 devd 422 1 422 65 Ss select 0xfffffe00077880c0 dhclient 337 1 337 0 Ss select 0xfffffe0007787e40 dhclient 334 1 334 0 Ss select 0xfffffe00542370c0 dhclient 16 0 0 0 DL syncer 0xffffffff83ce0c20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cdf160 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 D sdflush 0xfffffe005808e4e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d204c0 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100077 Run CPU 1 [dom0] 100080 D launds 0xffffffff83d06594 [laundry: dom0] 100081 RunQ [uma] 7 0 0 0 RL [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff844dff60 [pf purge] 5 0 0 0 DL waiting 0xffffffff8487c700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f5340 [doneq0] 100046 D - 0xffffffff838f52c0 [async] 100075 D - 0xffffffff838f5140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83d01e20 [crypto] 100043 D crypto_ 0xfffffe0007b17030 [crypto returns 0] 100044 D crypto_ 0xfffffe0007b17080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b5b5e0 [g_event] 100038 D - 0xffffffff83b5b600 [g_up] 100039 D - 0xffffffff83b5b620 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 L *tun_mtx 0xfffffe000782f540 [clock (0)] 100032 RunQ [clock (1)] 12 0 0 0 RL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 RunQ [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83d028c0 [audit] 0 0 0 0 RLs (threaded) [kernel] 100000 D parked 0xffffffff84c57ff0 [swapper] 100005 D - 0xfffffe00077f7a00 [softirq_0] 100006 D - 0xfffffe00077f7800 [softirq_1] 100007 D - 0xfffffe00077f7600 [if_io_tqg_0] 100008 D - 0xfffffe00077f7400 [if_io_tqg_1] 100009 D - 0xfffffe00077f7200 [if_config_tqg_0] 100010 D - 0xfffffe00077f7000 [kqueue_ctx taskq] 100011 D - 0xfffffe00077f6d00 [jail_remove taskq] 100012 D - 0xfffffe00077f6b00 [bus taskq] 100015 D - 0xfffffe00077f6500 [thread taskq] 100017 D - 0xfffffe00077f6100 [aiod_kick taskq] 100018 D - 0xfffffe00077f5e00 [deferred_unmount ta] 100019 D - 0xfffffe00077f5c00 [inm_free taskq] 100020 D - 0xfffffe00077f5a00 [in6m_free taskq] 100021 D - 0xfffffe00077f5800 [linuxkpi_irq_wq] 100022 D - 0xfffffe00077f5600 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00077f5600 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00077f5600 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00077f5600 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00077f5100 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00077f5100 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00077f5100 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00077f5100 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00077f4400 [firmware taskq] 100040 D - 0xfffffe0007bcc100 [crypto_0] 100041 D - 0xfffffe0007bcc100 [crypto_1] 100056 D - 0xfffffe00077f8200 [vtnet0 rxq 0] 100057 D - 0xfffffe00541f6500 [vtnet0 txq 0] 100058 D - 0xfffffe00541f6400 [vtnet0 rxq 1] 100059 D - 0xfffffe00541f6300 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe00580bf000 [virtio_balloon] 100065 RunQ [deadlkres] 100069 D - 0xfffffe0058595000 [acpi_task_0] 100070 D - 0xfffffe0058595000 [acpi_task_1] 100071 D - 0xfffffe0058595000 [acpi_task_2] 100073 D - 0xfffffe00077f8100 [mca taskq] 100074 D - 0xfffffe0007bcba00 [CAM taskq] 100076 D - 0xfffffe0058594700 [ipsec_offload] db> show all locks Process 824 (syz-executor) thread 0xfffffe00586c2780 (100093) exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff83bc5730) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:1313 Process 823 (syz-executor) thread 0xfffffe0058716780 (100144) exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe0059915180) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4837 Process 822 (syz-executor) thread 0xfffffe0058715000 (100145) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007d193e0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1754 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006e6b5908) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1315 Process 817 (ifconfig) thread 0xfffffe00586c0000 (100098) exclusive sx tun_ioctl (tun_ioctl) r = 0 (0xffffffff83ce2e40) locked @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1440 exclusive sx in_control (in_control) r = 0 (0xffffffff83ce5ac0) locked @ /syzkaller/managers/main/kernel/sys/netinet/in.c:367 Process 807 (syz-executor) thread 0xfffffe0058717000 (100125) shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe0007810e10) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4998 Process 807 (syz-executor) thread 0xfffffe0058716000 (100127) exclusive sleep mutex tun_mtx (tun_mtx) r = 0 (0xfffffe006deb9998) locked @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1741 Process 8 (pagedaemon) thread 0xfffffe0058607780 (100077) exclusive sleep mutex pmap (pmap) r = 0 (0xffffffff8381a620) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:9067 exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe00074c7180) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8952 Process 2 (clock) thread 0xfffffe000781a780 (100031) exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe006e04a020) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_rwlock.c:190 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 384 5203K 498 tcp_hpts 8 4865K 8 devbuf 4187 4324K 4212 sysctloid 35270 2078K 35345 vtbuf 24 1968K 46 kobj 335 1340K 499 newblk 504 1150K 593 vfscache 3 1025K 3 pcb 23 669K 52 inodedep 73 539K 99 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 124 254K 892 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 1018 acpica 1674 184K 56977 vmem 5 144K 7 tidhash 3 141K 3 filedesc 18 137K 77 pagedep 22 134K 31 tfo_ccache 1 128K 1 IP reass 1 128K 1 sem 4 106K 4 DEVFS1 106 106K 123 gtaskqueue 18 98K 18 bus 1011 83K 5163 LRO 20 83K 20 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 527 66K 527 ddb_capture 1 64K 1 kdtrace 196 39K 975 umtx 288 36K 288 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 125 32K 135 msg 4 30K 4 kbdmux 6 28K 6 temp 32 22K 1827 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 BPF 14 19K 14 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 124 16K 395 ithread 90 15K 90 bus-sc 34 15K 1690 eventhandler 163 14K 163 lltable 43 14K 43 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 GEOM 49 11K 431 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 bmsafemap 4 9K 70 plimit 23 9K 332 cred 23 9K 182 in6_multi 65 9K 65 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 240 8K 306 taskqueue 69 8K 69 freework 29 8K 58 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 kqueue 64 6K 837 dirrem 19 5K 44 ufs_dirhash 24 5K 24 UMA 270 5K 270 diradd 35 5K 62 pf_ifnet 10 5K 19 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 mount 36 4K 114 crypto 12 4K 12 pwddesc 57 4K 827 acpisem 28 4K 28 indirdep 13 4K 52 selfd 45 3K 7484 terminal 11 3K 11 DEVFSP 44 3K 47 proc-args 84 3K 1866 session 21 3K 32 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 8 kcovinfo 36 3K 36 mkdir 17 3K 42 netlink 2 3K 71 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K 13 lockf 18 2K 25 Unitno 28 2K 50 sctp_ifa 13 2K 14 CAM XPT 22 2K 543 newdirblk 12 2K 21 in_multi 6 2K 8 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 select 10 2K 29 msi 9 2K 9 softdep 1 1K 1 freeblks 4 1K 33 sahead 1 1K 1 secasvar 1 1K 1 CC Mem 8 1K 15 nhops 6 1K 8 vnodemarker 2 1K 8 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 14 ipsec 3 1K 3 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 pci_link 10 1K 10 osd 13 1K 32 encap_export_host 12 1K 12 inpcbpolicy 18 1K 171 cdev 2 1K 2 lkpikmalloc 8 1K 9 ktls 5 1K 11 counter_rate 13 1K 13 freefile 3 1K 15 chacha20random 1 1K 1 biobuf 1 1K 1 ktls_ocf 2 1K 2 vnodes 1 1K 1 procdesc 2 1K 8 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 cryptodev 2 1K 35 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 freefrag 1 1K 17 aio 4 1K 4 iov 2 1K 13653 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3321 filecaps 4 1K 72 sctp_vrf 1 1K 1 ip_msource 1 1K 1 vnet 1 1K 1 sendfile 1 1K 259 pmc 1 1K 1 entropy 2 1K 32 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 sctp_mcore 0 0K 0 sctp_socko 0 0K 5 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 2 sctp_atky 0 0K 1 sctp_atcl 0 0K 1 sctp_a_it 0 0K 12 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 mqdata 0 0K 0 pf_table 0 0K 0 pf 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 filemon 0 0K 0 tcp_pcm_rack 0 0K 2 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 4 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 1 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 47 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 2 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 3 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 1 in_mfilter 0 0K 2 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 20 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 183 namei_tracker 0 0K 0 inotify 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 7 lio 0 0K 0 acl 0 0K 0 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 ioctlops 0 0K 98 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 190 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 648 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 rctl 0 0K 0 cache 0 0K 0 kexec 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tpm_buffer 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 feeder 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8321 1331 18452 0 254 39534592 0 mbuf 256 8634 1283 21826 0 254 2538752 0 BUF TRIE 152 226 11578 496 0 62 1794208 0 tcp_log 416 3707 361 6071 0 254 1692288 0 malloc-4096 4096 394 2 1883 0 2 1622016 0 malloc-384 384 4159 41 4172 0 30 1612800 0 malloc-128 128 11877 120 12313 0 126 1535616 0 UMA Slabs 0 112 11186 4 11186 0 126 1253280 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 RADIX NODE 152 6164 175 26369 0 62 963528 0 vmem btag 56 16545 126 16545 0 254 933576 0 malloc-65536 65536 13 1 16 0 1 917504 0 FFS inode 1168 537 23 552 0 8 654080 0 pbuf 2664 0 198 0 0 2 527472 0 socket 1024 30 478 1366 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 VM OBJECT 248 1124 124 13366 0 62 309504 0 sctp_ep 1152 0 259 1 0 254 298368 0 256 Bucket 2048 123 21 1077 0 8 294912 0 malloc-64 64 4406 193 5419 0 254 294336 0 VNODE 440 574 56 591 0 30 277200 0 THREAD 1860 138 6 149 0 8 267840 0 malloc-2048 2048 3 125 1086 0 8 262144 0 malloc-16 16 14788 212 17809 0 254 240000 0 malloc-2048 2048 102 10 103 0 8 229376 0 DEVCTL 1024 20 200 147 0 0 225280 0 malloc-16384 16384 11 2 39 0 1 212992 0 malloc-32768 32768 4 2 124 0 1 196608 0 malloc-32 32 5489 433 6351 0 254 189504 0 UMA Zones 768 242 2 242 0 16 187392 0 malloc-128 128 1141 254 26458 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 11 505 1169 0 254 165120 0 malloc-32768 32768 0 5 37 0 1 163840 0 malloc-256 256 554 76 808 0 62 161280 0 malloc-1024 1024 123 21 147 0 16 147456 0 FFS2 dinode 256 537 33 552 0 62 145920 0 MAP ENTRY 96 1290 222 41613 0 126 145152 0 FPU_save_area 832 140 22 161 0 16 134784 0 S VFS Cache 104 997 290 1047 0 126 133848 0 malloc-65536 65536 0 2 58 0 1 131072 0 malloc-65536 65536 0 2 118 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 mbuf_packet 256 37 471 393 0 254 130048 0 malloc-4096 4096 26 4 83 0 2 122880 0 ksiginfo 112 51 993 68 0 126 116928 0 malloc-128 128 602 173 1194 0 126 99200 0 malloc-32768 32768 2 1 3 0 1 98304 0 malloc-256 256 269 106 1369 0 62 96000 0 PROC 1368 56 10 824 0 8 90288 0 UMA Kegs 384 228 5 228 0 30 89472 0 128 Bucket 1024 42 41 239 0 16 84992 0 filedesc0 1072 57 13 827 0 8 75040 0 malloc-384 384 149 31 676 0 30 69120 0 malloc-64 64 573 498 2414 0 254 68544 0 g_bio 440 0 153 5292 0 30 67320 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-16384 16384 4 0 6 0 1 65536 0 malloc-8192 8192 6 2 89 0 1 65536 0 malloc-256 256 181 74 572 0 62 65280 0 malloc-128 128 309 94 427 0 126 51584 0 malloc-128 128 204 199 221 0 126 51584 0 32 Bucket 256 58 137 1095 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 1 47 12658 0 16 49152 0 malloc-8192 8192 6 0 7 0 1 49152 0 malloc-2048 2048 12 12 57 0 8 49152 0 malloc-1024 1024 12 36 524 0 16 49152 0 64 Bucket 512 70 26 1672 0 30 49152 0 syncache 176 0 276 3 0 254 48576 0 malloc-4096 4096 6 4 9 0 2 40960 0 pcpu-8 8 4705 415 4861 0 254 40960 0 udp_inpcb 408 7 83 148 0 30 36720 0 malloc-64 64 24 543 286 0 254 36288 0 malloc-64 64 286 281 13826 0 254 36288 0 malloc-64 64 65 502 1424 0 254 36288 0 malloc-64 64 178 389 7665 0 254 36288 0 malloc-64 64 0 567 412 0 254 36288 0 malloc-64 64 134 433 144 0 254 36288 0 malloc-128 128 53 226 204 0 126 35712 0 malloc-128 128 47 232 3325 0 126 35712 0 malloc-128 128 128 151 540 0 126 35712 0 routing nhops 256 26 109 33 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 73 17 100 0 30 34560 0 malloc-256 256 21 114 79 0 62 34560 0 malloc-256 256 28 107 205 0 62 34560 0 malloc-256 256 36 99 98 0 62 34560 0 malloc-256 256 69 66 120 0 62 34560 0 malloc-256 256 33 102 299 0 62 34560 0 malloc-32768 32768 0 1 11 0 1 32768 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 0 2 190 0 1 32768 0 malloc-8192 8192 2 2 22 0 1 32768 0 malloc-8192 8192 4 0 4 0 1 32768 0 malloc-4096 4096 4 4 9 0 2 32768 0 malloc-2048 2048 9 7 21 0 8 32768 0 malloc-2048 2048 10 6 27 0 8 32768 0 malloc-2048 2048 3 13 28 0 8 32768 0 malloc-2048 2048 2 14 2 0 8 32768 0 malloc-2048 2048 4 12 195 0 8 32768 0 malloc-1024 1024 4 28 44 0 16 32768 0 malloc-1024 1024 3 29 994 0 16 32768 0 malloc-1024 1024 7 25 189 0 16 32768 0 malloc-1024 1024 19 13 19 0 16 32768 0 malloc-512 512 0 64 110 0 30 32768 0 malloc-512 512 14 50 19 0 30 32768 0 malloc-512 512 4 60 24 0 30 32768 0 malloc-512 512 0 64 16 0 30 32768 0 malloc-512 512 9 55 9 0 30 32768 0 pcpu-64 64 503 9 503 0 254 32768 0 ttyinq 160 135 65 300 0 62 32000 0 clpbuf 2664 0 12 15 0 4 31968 0 PGRP 120 25 239 36 0 126 31680 0 VMSPACE 584 36 13 805 0 16 28616 0 sctp_laddr 48 0 588 12 0 254 28224 0 malloc-32 32 336 546 610 0 254 28224 0 16 Bucket 144 52 144 258 0 62 28224 0 4 Bucket 48 6 582 8 0 254 28224 0 AIO 208 2 131 4 0 62 27664 0 da_ccb 544 0 49 1422 0 16 26656 0 udplite_inpcb 408 0 63 2 0 30 25704 0 TURNSTILE 136 145 44 145 0 62 25704 0 cpuset 200 8 120 8 0 62 25600 0 malloc-8192 8192 1 2 27 0 1 24576 0 pipe 736 20 13 288 0 16 24288 0 ertt_txseginfo 40 1 605 707 0 254 24240 0 PWD 40 19 587 104 0 254 24240 0 rtentry 168 29 115 33 0 62 24192 0 Files 80 173 127 6809 0 126 24000 0 8 Bucket 80 58 242 296 0 126 24000 0 tcp_inpcb 1304 8 10 15 0 8 23472 0 malloc-384 384 21 39 47 0 30 23040 0 malloc-384 384 44 16 355 0 30 23040 0 tcp_rack_pcb 1088 0 21 2 0 8 22848 0 ripcb 376 3 57 6 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 145 111 145 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 8 272 15 0 126 20160 0 malloc-32 32 36 594 177 0 254 20160 0 malloc-32 32 86 544 131 0 254 20160 0 malloc-32 32 94 536 597 0 254 20160 0 malloc-32 32 16 614 64 0 254 20160 0 malloc-32 32 22 608 283 0 254 20160 0 malloc-32 32 31 599 3796 0 254 20160 0 2 Bucket 32 63 567 355 0 254 20160 0 tcp_rack_map 128 0 155 7 0 126 19840 0 AIOCB 552 1 34 4 0 16 19320 0 ktls_session 256 2 73 3 0 62 19200 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 6 0 2 16384 0 malloc-4096 4096 0 4 2 0 2 16384 0 malloc-4096 4096 1 3 184 0 2 16384 0 malloc-1024 1024 8 8 8 0 16 16384 0 malloc-1024 1024 1 15 1 0 16 16384 0 malloc-512 512 3 29 51 0 30 16384 0 malloc-512 512 2 30 8 0 30 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 rl_entry 48 1 335 2 0 254 16128 0 kenv 258 17 43 1067 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 KNOTE 160 2 73 13 0 62 12000 0 malloc-16 16 44 706 1351 0 254 12000 0 malloc-16 16 36 714 177 0 254 12000 0 malloc-16 16 60 690 175 0 254 12000 0 malloc-16 16 4 746 269 0 254 12000 0 malloc-16 16 268 482 280 0 254 12000 0 malloc-16 16 23 727 26031 0 254 12000 0 L VFS Cache 320 0 36 1 0 30 11520 0 malloc-384 384 1 29 1 0 30 11520 0 malloc-384 384 1 29 1 0 30 11520 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 630 0 254 8016 0 malloc-16 16 5 495 8 0 254 8000 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf anchors 1664 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOLIO 272 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2664 0 0 0 0 16 0 0 nfspbuf 2664 0 0 0 0 4 0 0 swwbuf 2664 0 0 0 0 2 0 0 swrbuf 2664 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-384 384 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl tcpcb at 0xfffffe006e04a000 t_segq first: 0 t_segqlen: 0 t_dupacks: 0 t_callout: 0xfffffe006e04a188 t_timers: 0xfffffe006e04a1c8 t_state: 2 (TCPS_SYN_SENT) t_flags: 0x100002a1 t_flags2: 0xa snd_una: 0x38e56944 snd_max: 0x38e56945 snd_nxt: 0x38e56944 snd_up: 0x38e56944 snd_wl1: 0x00000000 snd_wl2: 0x00000000 iss: 0x38e56944 irs: 0x00000000 rcv_nxt: 0x00000000 rcv_adv: 0x0000ffff rcv_wnd: 0 rcv_up: 0x00000000 snd_wnd: 4096 snd_cwnd: 1 snd_ssthresh: 1073725440 snd_recover: 0x38e56945 t_rcvtime: 2147427605 t_startime: 0 t_rttime: 0 t_rtsq: 0x38e56944 t_rxtcur: 220 t_maxseg: 1460 t_srtt: 0 t_rttvar: 400 t_rxtshift: 1 t_rttmin: 3 t_rttupdated: 0 max_sndwnd: 0 t_softerror: 0 t_oobflags: 0x0 t_iobc: 0x00 snd_scale: 0 rcv_scale: 0 request_r_scale: 8 ts_recent: 0 ts_recent_age: 0 ts_offset: 4078762317 last_ack_sent: 0x00000000 snd_cwnd_prev: 0 snd_ssthresh_prev: 0 snd_recover_prev: 0x00000000 t_badrxtwin: 41662 snd_numholes: 0 snd_holes first: 0 snd_fack: 0x00000000 rcv_numsacks: 0 t_rttlow: 0 rfbuf_ts: 40662 rfbuf_cnt: 0 t_fb.tfb_tcp_block_name: freebsd t_cc.name: cubic _t_logstate: 1 (TCP_LOG_STATE_TAIL) t_lognum: 7 t_loglimit: 5000 t_logsn: 7 0.000 ATTACH, error: 0 +0.086 usersend: rcv.acc: 0 rcv.ccc: 0 snd.acc: 0 snd.ccc: 53 +0.000 SENDOOB, error: 0 +0.000 > S 954558788:954558788(0) win 65535 +0.000 Starting Retransmission timer: 1000 ms +0.998 Processing Retransmission timer +0.000 > S 954558788:954558788(0) win 65535