last executing test programs: 3.318617685s ago: executing program 0 (id=1): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r2 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FILEMON_SET_FD(r2, 0xc0045301, &(0x7f0000000000)=r2) ioctl$FILEMON_SET_PID(r2, 0xc0045302, &(0x7f0000000040)) ioctl$FILEMON_SET_PID(r2, 0xc0045302, &(0x7f00000002c0)) setitimer(0x0, &(0x7f0000000040)={{0x8843, 0x26}, {0x0, 0x400cfe}}, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0) r3 = open(&(0x7f0000000480)='./file1\x00', 0x8004, 0x10a) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f0000000040)={0x2a, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff}) ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x2, 0xc, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xc002010, 0xffffffffffffffff, 0x0) minherit(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) 3.21179209s ago: executing program 1 (id=2): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) kqueue() bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, &(0x7f0000001700)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, 0x1c, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)=""/245, 0xf5}], 0x2, &(0x7f0000000440)=""/122, 0x7a}, 0x43) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = open(0x0, 0x80400000000206, 0x0) mlockall(0x2) unlink(0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r3, 0x3862) open$dir(&(0x7f0000000040)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f00000000c0)={r4, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x2, 0x1ff], 0x0, 0x20, 0x0, {0x0, 0x7, 0x0}, {0x0, 0xfffffffe, @sigval_int=0x4003e, @ke_flags=0x9fc040a3bd859cca}}) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) msync(&(0x7f00001e6000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) fchflags(r1, 0x40008) sync() syz_emit_ethernet(0x2a, &(0x7f0000000500)={@broadcast, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random='\x00\x00#\x00', @remote={0xac, 0x14, 0x0}, @random="128767a9aced", @local={0xac, 0x14, 0x0}}}}}) 3.172974371s ago: executing program 3 (id=4): r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x6, 0x4) rfork(0x14010) open$dir(0x0, 0x200, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2008, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="b90531074b01", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, {0x5, 0x4, 0x1, 0x9, 0xfc7, 0x66, 0x192c, 0x40, 0x14, 0xfffe, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}}}}}}) r1 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) ioctl$DIOCNATLOOK(0xffffffffffffffff, 0x8004745b, &(0x7f0000000080)) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2f5105", 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x6, 0x0, 0x0, 0x3}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0xac, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r3, 0x3862) r4 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r4, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r6, r5) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1, {[@timestamp={0x44, 0x4, 0x5}]}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}}}}) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 2.9034907s ago: executing program 2 (id=3): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000200)={'rack\x00', 0x1}, 0x24) openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x100}, 0x24) symlink(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001280)='./file0\x00') fspacectl(r0, 0x0, &(0x7f0000000400)={0x31, 0x9}, 0x0, 0x0) cpuset_setaffinity(0x3, 0x4, 0x8, 0x8, &(0x7f0000000080)={[0x3]}) syz_emit_ethernet(0xd2, &(0x7f0000000680)={@local, @empty, [{[{0x88a8, 0x1, 0x1, 0x1}], {0x8100, 0x2, 0x1, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x94, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @empty, [{0xe, 0xf, "e8130b6b6accc8fc7290d0f710fa665a90c75bbe12866a4bf028c8a0903f527e8995d6d7c3cc121d3fc1158a39ddaf4625e7e6f750e18b80da7d603f4d1a86afc1af8fc270d2326fcc57aebea4518f26aab17145e2fd326b2fb2a94ff9c6bc580790b01d923b77590034b0d723423f327e8fa7d79984857844e9"}]}}}}}}) open$dir(&(0x7f0000000380)='./file0/file0aaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_sctp_SCTP_EXPLICIT_EOR(r1, 0x84, 0x1b, &(0x7f0000000240)=0x8, 0x4) extattr_get_file(&(0x7f0000000300)='./file0\x00', 0x3, &(0x7f0000000340)='\x00', &(0x7f00000003c0)=""/54, 0x36) connect$inet(r1, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b5c422ca65675e274c429d4ecb6043c5c10548af3499af18ae3b738b9b6b5428e18e8a6f70a1fad05f03388e5d7fcc796fa874a4c850fc114d59d7d095f07c3338b7653ed757e08fc8325e69831de6411138839053b1a7b32636f2e05fcbcada2375bde92ed0ac706042efe8a3bcd095a7ab57ac9ddbdc94f1545f59d15ada6e76061b7834beac7d501f26c", 0x8e}], 0x1, 0x0, 0x0, 0x81}, 0x0) poll(0xffffffffffffffff, 0x2000, 0x3) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/../file0\x00', 0x1c6) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) open$dir(0x0, 0x40000400000002c2, 0x0) r3 = msgget(0x2, 0x290) setresuid(0x0, 0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) sendmsg$inet6_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1, 0xffffffff, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="66000000840000000a0000001001100002004a5d077a08006f0000010000000010000000930e000000e40000c700000000000f", @ANYRESDEC, @ANYBLOB="1c000000840000000a0000181df90b000000000000000000000000011000000084"], 0xec}, 0x0) sendmsg$inet6_sctp(r2, &(0x7f0000000180)={0x0, 0x6, 0x0}, 0x189) 2.688317962s ago: executing program 3 (id=5): open$dir(&(0x7f0000000000)='./file0\x00', 0x488200, 0x88) lgetfh(&(0x7f0000002080)='./file0\x00', &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fhlinkat(&(0x7f0000000140)={{[0x400, 0x9d8]}, {0xf352, 0xffff, "16532633b849b249dfc3b0cda20f7e0c"}}, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) socket(0x1c, 0x1, 0x0) r0 = socket$inet6(0x1c, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, &(0x7f0000000000)={0x66, 0x2, 0x0, 0x1, 0x0, [@mcast2]}, 0x18) sendmsg$inet6_sctp(r0, &(0x7f0000000900)={&(0x7f0000000600)=@in6={0x1c, 0x1c, 0x2, 0x8, @mcast1, 0x25bb}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000084829db47cd8ee0cb9003004ffffffff010000793e6c807e3f5c23538c210086a2f3d2d91926328b1d2d376189286bc2796626e079790cd361c895d38cb88c039274d06e7a0e43a85f32aecca6d5e9dcf26d6f1d4d470d0900000000000000704b408ab0c021a66afadc614041d90822b17e95cf167beaabe42bc848ab3065e1c675265bf520b36913c5f3faeec68cccaae340054193324a2f783524babfc4533d552deca986b4784d9340b18e036990c7605e57ee6da8ff9942689411a966928e64b81d0a84d34e1856fbd4344ea7e07dba1d5197ebeb3e", @ANYRES32=0x0], 0x1c, 0x20284}, 0x109) socket(0x2, 0x1, 0x0) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) socket$inet6_udplite(0x1c, 0x2, 0x88) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000003c0)={'rack\x00'}, 0x24) r3 = socket(0x11, 0x10000000000003, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[]) setsockopt$sock_int(r3, 0xffff, 0x40, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000140)="b10005019000e803480308c75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0) syz_extract_tcp_res(&(0x7f00000002c0), 0x6, 0xc) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x13) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) thr_suspend(&(0x7f0000000200)={0x100000001, 0x7ff}) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) 2.03229416s ago: executing program 1 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) posix_fallocate(r0, 0x0, 0x10007) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000780)=""/4122, 0x1019}, {&(0x7f0000000700)=""/87, 0xffa1}], 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0xa000535d, 0x0) writev(r2, &(0x7f0000000080), 0x1000000000000014) setrlimit(0x1, &(0x7f0000000000)={0x10000000000b35d, 0x4000005}) syz_emit_ethernet(0x32, &(0x7f00000005c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @generic="2f3f140b4600"/16}}}}) r3 = open$dir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x1}) rfork(0x85010) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x10, 0x2, 0x1, @rand_addr=0x7ffffffe}, 0x10) sendto$inet(r4, &(0x7f0000000740)="98a7c164101eaa80e55125501718c0197105eb337da217e4684ba26dd54b65a1c77793dda63068712d452f45aeb8698e8ba1cc78e1505b21520f6cfdac61cb53876ef336acde061e7e6ad0322c900d3d909ff0108fa8d58c00dfba54e15716a2372f3d2da22a94d442c401dfcd8616e8e9e4a1bdafee6faa9b059cb6234c0a30dab2e1963565a2dbcf758f38dc969f561d956c2c3673f1692f2bb9be2daa0f774c4f69ed07dcfa50ddcf75a419c53c0967488a2744599f002cc51eac659f92ea92a38aa8ef788f6f3c494b101cdf26945c66b2979cc56fa4f58e05d23c7b5764a4a5c25e78fbac2eaa27c660ab728f442663ff4d5e67a3636884cc54c15894ec422dfe7ae687c763749eace38a597bc333f05de48982b77491c2983ca81b9dc8d3b21b3b717666db0921a80bb171db43bcfae38ba63bb403e5b0c9beabe6772211ecab195c2f0b31cb221183f01ab14242ccd157c6f14938be4c385ce942239c09f30c6699dedc00d959747006ce4e41aba3dcf207fdf5abd093686ef2df765e7874b73006303f2be85595e86e202e708f93a48f9a2be155d10cc205bcccf9c2ed3c02217e3d6bd481feeb68d9b153335da4a6fc025c7b7a5dadfe200c45d9ef6df060bcf19c75b6ee9969bd0793ccd0c4f3221bb9427778b3da09698000ed7f3f47d5c5aeff998f65a367342776142e772b0a3af1cd761d0f35933dc9b53a0a28b15eff263d4e22a21458d295a9d2735ff6ac26ad5aad01016d8f1a51943561d8c77fcb5f86db87e722763b8e5138f1a03d186c959f4d3286983f1bd0dfc2edd56ec8cc56ed5368f93817f03012d1d4417088df156cdbbe5c20bc907ad8d149ea0331e17670722f8ae39c4f75aa5b94a2f5278908b1c2454b7cc749bc6c6f15b93e8082226f6e23f1ffd816265b6d010045ed98816251923b545342493974b6de83ca506ea14a5fbfa23eeeadca098a62dd4c92ca54c96bb43b53cdbff0548b629ad248279630bd3e5e8dcba6222ec3d30fae10ab604610bb8a508d0912c4a783a58a57815b1d47ed4312e5001f560a14ac730b389f69c8ba1f6195df40ee617ee1181117eb1e53ed84daac0306bea252ac5a2556ed89ed1bc2f25a517ed4b2d9a259c53d7ae8c0c1bd7227946417ea9f9c9e3cc9e94b4d7eacfa772992c88b5e1b90cf2ad116edf4b3b7e6b5dc96629c916741cdf75a4cf9eb8d6023e951d5bb2634f951bbedc68cd948c5fe13023fea6e66ddcf505d090346eaf59b043a48e8bb642de403f12220456a13732f46bd3098006f8dcc67f38879bb97af2b109cca27bed67354d3babe84fd9d7d7feeab5e4ac88c931cb44cd8435dfa7cb682b0db9042b8d908abf7fe2831d066137e6e44e671a654a3c528ab599b0d31ff2e3e8cd9461d420051a7cd7faa1d81a7378a3fb540eb8c2e665172bead3782543b2735248362b0ee53af60cfb2fae2444617cdf249a374ebc7a6873b4733734b0524de1b6d92657b01eba4e7f2ddf52c93b36fca3fce7b2b14517ec9513ff758573a0658de15b57dc354b6feade7f768d99d500c1b2a5e90757e221b2acc152d08a19d8d5fde5fdd2ded8ac3a1c86a4c9bafd4e163821bf3d0459921831b395e0aae6598c913ded1bded2354db1f5774cbb913484140b5cc26685eaf96a204136c5f2ac5384da21365a70f58587e858599d8682015113e6c8cebaaef96ce72bfef768a74b6a34bf03d71dd521b2e4466bab4915100b4e764ec484773d28d650809a5f84d9833eca01f8d7267c60b23ea3eafc1ae49b44034ff29bef3db181f81ec2523c117927dc783ba93bcf822ed61d80578a3c5cdc27090919e0e99bc84442292aa9746120f28261a73462b9bbed5e5d86c05b29e50a4da8fb74b0920a0c83c41c31a2b85df37b565de87db16e77afee19287b3fb5da2c0d63ab71e04f10b144da989ac85f219afd613025b182d930f20b3b4797d324d62", 0xfe36, 0x20010, &(0x7f0000000000)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) shutdown(r4, 0x1) extattr_set_link(0x0, 0x0, 0x0, &(0x7f0000000080)="c18fc680b3c6918deed1673857825ebf44fe4eaff354ae887a4f323487a0d2e80d2649a028cfd533e4de8d937527cf5fbb283d674f84971befb8d9f376d5e7c7", 0x40) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x103, 0x1) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) setreuid(0x0, 0x0) aio_read(&(0x7f0000000280)={r0, 0x7fffffff, &(0x7f0000000200)="ddb9a0157c9e04dc9b3618e94359d35e987d02", 0x13, [0x7, 0x6], 0x80000000, 0x0, 0x5, {0xffffffff, 0x7, &(0x7f0000000240)="8a431529918bc636831686cd72c9246eac9109e788ae4b1817ce4f06e4deaaaa27cdbe87acaecaa22496e4f7289fbb76"}, {0x1, 0x6, @sival_int=0x3, @spare=[0x7afd, 0x10001, 0x5, 0xbe, 0x2, 0x0, 0x100, 0x50a]}}) r6 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x89, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) 1.947832621s ago: executing program 3 (id=7): sigaltstack(&(0x7f0000ffe000/0x1000)=nil, 0x0) fork() socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40001) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) aio_write(&(0x7f0000000140)={r0, 0x40000000006, &(0x7f0000000240)="a3", 0x1, [0x5], 0x0, 0x0, 0x1, {0x0, 0xffffffffffffffff, 0x0}, {0x0, 0x0, @sival_ptr=0x5, @spare=[0x0, 0x9, 0x9, 0x6, 0x7, 0x1, 0x2, 0x8]}}) copy_file_range(r0, 0x0, r0, 0x0, 0x5, 0x0) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) fork() open$dir(&(0x7f00000001c0)='./file0\x00', 0x80200, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) select(0x40, &(0x7f0000000080)={0x421c, 0x7, 0x80000000, 0xfffffffffffffffe, 0x9ad, 0x3, 0x3, 0x6}, &(0x7f0000000280)={0xfffffffffffffffa, 0x8, 0x200, 0x10, 0x9, 0x9, 0x6}, &(0x7f00000002c0)={0x17c0, 0xffffffffffffc476, 0x1000, 0x2, 0x2, 0x9, 0x9, 0xffff}, &(0x7f0000000300)={0x8, 0x8001}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6(0x1c, 0x5, 0x0) ioctl$SMB_QUICK_READ(r1, 0x80306902, &(0x7f00000003c0)={0x3, 0x3, 0x9, @word=0x5, @byte=0x6a, 0x7ff, &(0x7f0000000340)=0x40, 0x1, &(0x7f0000000380)=0x7a, 0x1}) setsockopt$inet6_int(r2, 0x29, 0x25, &(0x7f0000000000)=0x10000, 0x4) syz_emit_ethernet(0x400e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6015f2ff3a3a0000eee7567b2c0e280000004c1e7b3b0000fe80000000a2c3af61000000000000aa"]) ioctl$MDIOCATTACH(r1, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0xe2ab, 0x2, &(0x7f0000000040)='./file0\x00', 0x7c, 0x8, 0x41, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b86, 0x8f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71e]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0xc, &(0x7f0000000000)={@multicast2, @loopback}, 0x8) getsockopt$inet_buf(r3, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 1.403963502s ago: executing program 2 (id=8): posix_fadvise(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) setrlimit(0xd, &(0x7f0000000980)={0x7fffffff, 0xfffffffffffffffd}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b7", 0x2, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, &(0x7f00000001c0)) r3 = socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') syz_emit_ethernet(0xfef2, &(0x7f0000000000)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local={0xac, 0x14, 0x0}, @empty, @multicast2}}}}) chroot(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000300)='./file0/file0/..\x00', 0x20000, 0x6) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x10, 0x2, 0x2, @multicast2}, 0x10) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) fork() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) sendmsg$inet6_sctp(r3, &(0x7f00000002c0)={&(0x7f0000000380)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0xfd}, {0x0}], 0x2, 0x0, 0x0, 0x81}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kqueue() 1.133350228s ago: executing program 3 (id=9): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) fcntl$dupfd(r0, 0x11, r1) r2 = socket(0x11, 0x3, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x10, 0x2, 0x2, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0xffffffffffffffff) r4 = kqueue() kevent(r4, &(0x7f0000000240)=[{0xb7, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0xfff000, 0x2, 0x7, 0x3ffffffffffffd]}, {0x6, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x32, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x19, 0x0, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(0xffffffffffffffff, 0x16, &(0x7f0000000080)={0x570}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x51, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) setsockopt$sock_int(r2, 0xffff, 0x1015, &(0x7f0000000040)=0x2, 0x4) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) rfork(0x3060) 0s ago: executing program 0 (id=10): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000040), 0x4, 0x0) ioctl$EVIOCREVOKE(r1, 0x20044591) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000003c0)={'rack\x00'}, 0x24) r3 = socket(0x11, 0x10000000000003, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRES32=0x41424344, @ANYBLOB="5550000000a2119078ff"]) setsockopt$sock_int(r3, 0xffff, 0x40, &(0x7f0000000000), 0x4) sendto$unix(r3, &(0x7f0000000140)="b10005019000e803000008c75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0) syz_extract_tcp_res(&(0x7f00000002c0), 0x6, 0xc) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x13) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) thr_suspend(&(0x7f0000000200)={0x100000001, 0x7ff}) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) getsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000280), &(0x7f0000000340)=0x10) bindat$unix(0xffffffffffffff9c, r0, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\x04\xaeQ\x02j\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1*\x1a\xb9g\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)=',,\x00', 0x0, 0x0) extattr_list_link(&(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e44fa50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83715620 usecount 8, writecount 6, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541196c8 ref 2 pages 544 cleanbuf 60 dirtybuf 8 lock type ufs: EXCL by thread 0xfffffe0054115000 (pid 809, syz-executor, tid 100125) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=e86bba51, uid=0, gid=0, flags=0x40008 ino 73, on dev gpt/rootfs Jul 3 09:27:37 ci-freebsd-main-9 kernel: arp: 00:00:23:00:00:00 attempts to modify permanent entry for 172.20.1.187 on tap1 md58027: truncating fractional last sector by 4 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe005856a800 Jul 3 09:27:39 ci-freebsd-main-9 kernel: arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.2.170 on tap2! panic: pmap_demote_pde: a wired mapping is missing PG_A cpuid = 1 time = 1751534859 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056e582d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056e58430 vpanic() at vpanic+0x257/frame 0xfffffe0056e585f0 panic() at panic+0xb5/frame 0xfffffe0056e586b0 pmap_demote_pde_locked() at pmap_demote_pde_locked+0x2337/frame 0xfffffe0056e58890 pmap_enter() at pmap_enter+0x8a1/frame 0xfffffe0056e589f0 vm_fault_copy_entry() at vm_fault_copy_entry+0x808/frame 0xfffffe0056e58b50 vm_map_protect() at vm_map_protect+0xfed/frame 0xfffffe0056e58cc0 sys_mprotect() at sys_mprotect+0x191/frame 0xfffffe0056e58d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056e58f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056e58f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x826cdef08, rbp = 0x826cdef80 --- KDB: enter: panic [ thread pid 864 tid 100149 ] Stopped at kdb_enter+0x6e: movq $0,0x25b9147(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0074e00000 rdx 0x7ffff rbx 0xffffffff827bcf60 .str.27 rsp 0xfffffe0056e58410 rbp 0xfffffe0056e58430 rsi 0x80001 rdi 0xffffffff8161a6c9 printf+0x149 r8 0 r9 0xffffffff r10 0xc6 r11 0xfffffe0054123cd0 r12 0xfffffe0054123780 r13 0xfffffffffffffffd r14 0xffffffff827bcf60 .str.27 r15 0 rip 0xffffffff8160424e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25b9147(%rip) db> show proc Process 864 (syz-executor) at 0xfffffe00540cf5c0: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 767 at 0xfffffe005410b000 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0007809040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe00540f2490 (map 0xfffffe00540f2490) (map.pmap 0xfffffe00540f2530) (pmap 0xfffffe00540f25a0) threads: 3 100117 RunQ syz-executor 100149 Run CPU 1 syz-executor 100151 S uwait 0xfffffe006de05600 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 875 1 875 0 Ss select 0xfffffe00584eb1c0 rtsol 874 1 874 0 Ss select 0xfffffe006de04e40 rtsol 873 764 764 0 R (threaded) syz-executor 100155 RunQ syz-executor 100156 S lthr 0xfffffe0054130780 syz-executor 100158 S uwait 0xfffffe00584eb480 syz-executor 872 1 872 0 Ss select 0xfffffe006de04ec0 rtsol 871 857 766 0 S uwait 0xfffffe006de05900 syz-executor 868 782 424 0 S kqread 0xfffffe005812b000 rtsol 864 767 767 0 R (threaded) syz-executor 100117 RunQ syz-executor 100149 Run CPU 1 syz-executor 100151 S uwait 0xfffffe006de05600 syz-executor 859 0 0 0 DL mdwait 0xfffffe0077710000 [md58027] 857 766 766 0 R (threaded) syz-executor 100144 RunQ syz-executor 100145 S uwait 0xfffffe00584ebd80 syz-executor 100147 S pipdwt 0xfffffe006b435700 syz-executor 100148 S uwait 0xfffffe006de05d00 syz-executor 100150 S uwait 0xfffffe006de05500 syz-executor 100152 S uwait 0xfffffe006de05700 syz-executor 100153 S uwait 0xfffffe006de05800 syz-executor 854 841 765 0 S uwait 0xfffffe006de06180 syz-executor 847 1 767 0 S uwait 0xfffffe006de05300 syz-executor 843 1 767 0 S uwait 0xfffffe006de05e00 syz-executor 841 765 765 0 RE CPU 0 syz-executor 827 0 0 0 DL aiordy 0xfffffe005410db00 [aiod4] 826 0 0 0 DL aiordy 0xfffffe00540ceb00 [aiod3] 825 0 0 0 DL aiordy 0xfffffe00540ce5a0 [aiod2] 824 0 0 0 DL aiordy 0xfffffe0054105040 [aiod1] 811 1 767 0 S uwait 0xfffffe006de05c00 syz-executor 782 771 424 0 S wait 0xfffffe0054103000 sh 771 424 424 0 S wait 0xfffffe0054106060 sh 767 763 767 0 R syz-executor 766 763 766 0 S nanslp 0xffffffff83b9e581 syz-executor 765 763 765 0 S nanslp 0xffffffff83b9e581 syz-executor 764 763 764 0 S nanslp 0xffffffff83b9e581 syz-executor 763 761 761 0 S select 0xfffffe006de06340 syz-executor 761 759 761 0 Ss sigsusp 0xfffffe0054103b70 csh 759 682 759 0 Ss select 0xfffffe006de063c0 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0058287cb0 getty 747 1 747 0 Ss+ ttyin 0xfffffe00593f50b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00593f54b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00593f58b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00593f5cb0 getty 743 1 743 0 Ss+ ttyin 0xfffffe00593f60b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe00593f64b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00593f68b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00593f6cb0 getty 738 1 18 0 S+ piperd 0xfffffe006b4419e0 logger 737 736 18 0 S+ nanslp 0xffffffff83b9e581 sleep 736 1 18 0 S+ wait 0xfffffe0054009060 sh 686 1 686 0 Ss nanslp 0xffffffff83b9e580 cron 682 1 682 0 Ss select 0xfffffe006de06540 sshd 495 1 495 0 Ss select 0xfffffe006de065c0 syslogd 424 1 424 0 Ss wait 0xfffffe0054008b00 devd 423 1 423 65 Ss select 0xfffffe00584ed0c0 dhclient 338 1 338 0 Ss select 0xfffffe006de06640 dhclient 335 1 335 0 Ss select 0xfffffe0057d756c0 dhclient 17 0 0 0 DL syncer 0xffffffff83cbbfa0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0007828040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cba560 [bufdaemon] 100083 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 D sdflush 0xfffffe00596c78e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d05400 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83ceb4c8 [dom0] 100081 D launds 0xffffffff83ceb4d4 [laundry: dom0] 100082 D umarcl 0xffffffff81dda750 [uma] 7 0 0 0 DL - 0xffffffff8391bcd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84645980 [pf purge] 5 0 0 0 DL waiting 0xffffffff848f5700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e6340 [doneq0] 100047 D - 0xffffffff838e62c0 [async] 100076 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce6d80 [crypto] 100044 D crypto_ 0xfffffe0007a72d30 [crypto returns 0] 100045 D crypto_ 0xfffffe0007a72d80 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0057cba488 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b46f20 [g_event] 100038 D - 0xffffffff83b46f40 [g_up] 100039 D - 0xffffffff83b46f60 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce7820 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c36ff0 [swapper] 100005 D - 0xfffffe0053ea0100 [softirq_0] 100006 D - 0xfffffe0053ea0000 [softirq_1] 100007 D - 0xfffffe0053e9fe00 [if_io_tqg_0] 100008 D - 0xfffffe0053e9fd00 [if_io_tqg_1] 100009 D - 0xfffffe0053e9fc00 [if_config_tqg_0] 100010 D - 0xfffffe0007769900 [kqueue_ctx taskq] 100011 D - 0xfffffe0007769800 [jail_remove taskq] 100012 D - 0xfffffe0007769700 [bus taskq] 100015 D - 0xfffffe0007769200 [thread taskq] 100017 D - 0xfffffe0007768e00 [aiod_kick taskq] 100018 D - 0xfffffe0007768d00 [deferred_unmount ta] 100019 D - 0xfffffe0007768c00 [inm_free taskq] 100020 D - 0xfffffe0007768b00 [in6m_free taskq] 100021 D - 0xfffffe0007768a00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007768900 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007768900 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007768900 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007768900 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007768800 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007768800 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007768800 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007768800 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007768300 [firmware taskq] 100041 D - 0xfffffe0007768200 [crypto_0] 100042 D - 0xfffffe0007768200 [crypto_1] 100057 D - 0xfffffe005812c000 [vtnet0 rxq 0] 100058 D - 0xfffffe005812be00 [vtnet0 txq 0] 100059 D - 0xfffffe005812bd00 [vtnet0 rxq 1] 100060 D - 0xfffffe005812bc00 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0058250f00 [virtio_balloon] 100066 D - 0xffffffff827c2301 [deadlkres] 100070 D - 0xfffffe00593da400 [acpi_task_0] 100071 D - 0xfffffe00593da400 [acpi_task_1] 100072 D - 0xfffffe00593da400 [acpi_task_2] 100074 D - 0xfffffe000776ba00 [mca taskq] 100075 D - 0xfffffe0007768100 [CAM taskq] 100077 D - 0xfffffe005812b500 [ipsec_offload] db> show all locks Process 864 (syz-executor) thread 0xfffffe0054123780 (100149) exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe00540f25a0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:7209 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00540f24f0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:2813 Process 841 (syz-executor) thread 0xfffffe005410a000 (100114) exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe00074cedc0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8644 exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe00540f2358) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8554 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5071K 543 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4214 sysctloid 34891 2055K 34966 vtbuf 24 1968K 46 kobj 331 1324K 506 newblk 449 1136K 690 vfscache 3 1025K 3 pcb 34 676K 71 inodedep 31 524K 117 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 141 282K 952 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 106 filedesc 24 185K 87 acpica 1674 184K 54432 vmem 5 144K 6 tidhash 3 141K 3 pagedep 18 133K 33 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 110 110K 127 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1002 82K 5074 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 523 ddb_capture 1 64K 1 kdtrace 210 41K 1035 umtx 304 38K 304 temp 35 37K 1845 DEVFS3 129 33K 139 hostcache 1 32K 1 shm 1 32K 1 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 BPF 15 19K 15 ifaddr 66 19K 68 ufs_mount 4 17K 5 proc 3 17K 3 LRO 16 17K 16 tty 16 16K 16 routetbl 124 16K 395 ithread 90 15K 90 bus-sc 34 15K 1650 eventhandler 163 14K 163 lltable 43 14K 43 ifnet 7 13K 7 ether_multi 152 13K 164 kenv 95 12K 95 GEOM 68 12K 508 CAM queue 5 11K 1528 rman 82 10K 447 plimit 24 9K 320 rpc 8 9K 8 in6_multi 65 9K 65 bmsafemap 2 9K 81 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 filemon 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 69 kqueue 69 8K 888 cred 25 7K 183 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 UMA 266 5K 266 pf_ifnet 10 5K 19 tcp_fsb_rack 2 5K 4 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 md_disk 1 4K 1 evdev 4 4K 4 pwddesc 63 4K 875 acpisem 28 4K 28 selfd 49 4K 7277 session 23 3K 34 DEVFSP 46 3K 50 proc-args 91 3K 1911 terminal 11 3K 11 acpidev 20 3K 20 diradd 19 3K 71 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 6 kcovinfo 36 3K 36 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K 14 lockf 18 2K 25 Unitno 30 2K 52 sctp_ifa 13 2K 14 newdirblk 13 2K 22 CC Mem 13 2K 22 CAM XPT 22 2K 543 in_multi 6 2K 9 tun 4 2K 4 select 12 2K 31 toponodes 6 2K 6 mkdir 11 2K 44 ipsecpolicy 2 2K 2 indirdep 5 2K 96 sctp_atcl 3 2K 7 msi 9 2K 9 netlink 2 2K 71 softdep 1 1K 1 dirrem 4 1K 49 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 10 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 14 ipsec 3 1K 3 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 8 osd 18 1K 38 mount 16 1K 140 pci_link 10 1K 10 inpcbpolicy 22 1K 188 crypto 4 1K 6 encap_export_host 12 1K 12 freefile 4 1K 30 procdesc 4 1K 10 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 14 1K 14 chacha20random 1 1K 1 biobuf 1 1K 1 tcp_pcm_rack 1 1K 2 vnodes 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 cryptodev 2 1K 40 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 soname 5 1K 3305 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 filecaps 4 1K 78 sctp_atky 3 1K 7 sctp_vrf 1 1K 1 vnet 1 1K 1 iov 1 1K 13522 pmc 1 1K 1 filedesc_to_leader 1 1K 2 entropy 2 1K 33 acpiintr 1 1K 1 sctp_athm 3 1K 7 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 52 p1003.1b 1 1K 1 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 12 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 tcp_do_rack 0 0K 0 mqdata 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 48 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 3 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freeblks 0 0K 36 freefrag 0 0K 8 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 5 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 1 in_mfilter 0 0K 1 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 21 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 186 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 4 lio 0 0K 0 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 ioctlops 0 0K 98 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 308 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 635 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 78 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8336 1062 12394 0 254 38494208 0 mbuf 256 8621 1041 17022 0 254 2473472 0 tcp_log 416 822 5028 8715 0 254 2433600 0 BUF TRIE 152 224 11580 785 0 62 1794208 0 malloc-4096 4096 395 3 1383 0 2 1630208 0 malloc-384 384 4173 27 4517 0 30 1612800 0 malloc-128 128 11477 117 11555 0 126 1484032 0 UMA Slabs 0 112 10944 30 10944 0 126 1229088 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 RADIX NODE 152 6456 143 27648 0 62 1003048 0 vmem btag 56 16534 137 16534 0 254 933576 0 malloc-65536 65536 9 1 12 0 1 655360 0 FFS inode 1168 531 22 561 0 8 645904 0 sctp_ep 1152 3 508 7 0 254 588672 0 socket 1024 47 461 1403 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 malloc-65536 65536 4 2 179 0 1 393216 0 256 Bucket 2048 149 11 984 0 8 327680 0 VM OBJECT 248 1214 98 13896 0 62 325376 0 malloc-64 64 4114 485 5623 0 254 294336 0 THREAD 1860 145 7 158 0 8 282720 0 malloc-16384 16384 12 5 46 0 1 278528 0 VNODE 440 570 60 602 0 30 277200 0 malloc-2048 2048 107 13 108 0 8 245760 0 malloc-16 16 14418 332 14505 0 254 236000 0 DEVCTL 1024 24 196 149 0 0 225280 0 malloc-256 256 710 100 1327 0 62 207360 0 malloc-32768 32768 0 6 72 0 1 196608 0 malloc-32768 32768 3 3 125 0 1 196608 0 UMA Zones 768 238 1 238 0 16 183552 0 malloc-32 32 5401 269 6939 0 254 181440 0 malloc-128 128 1215 180 25366 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 18 498 1179 0 254 165120 0 MAP ENTRY 96 1505 133 43473 0 126 157248 0 malloc-2048 2048 8 64 623 0 8 147456 0 malloc-1024 1024 125 19 1325 0 16 147456 0 FFS2 dinode 256 531 39 561 0 62 145920 0 FPU_save_area 832 147 15 172 0 16 134784 0 S VFS Cache 104 999 288 1053 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 mbuf_packet 256 1 507 134 0 254 130048 0 ksiginfo 112 56 988 78 0 126 116928 0 malloc-128 128 778 121 1852 0 126 115072 0 PROC 1376 63 14 875 0 8 105952 0 ertt_txseginfo 40 0 2626 2299 0 254 105040 0 malloc-128 128 565 210 3919 0 126 99200 0 malloc-32768 32768 0 3 13 0 1 98304 0 UMA Kegs 384 225 8 225 0 30 89472 0 128 Bucket 1024 48 35 248 0 16 84992 0 filedesc0 1072 63 14 875 0 8 82544 0 malloc-16384 16384 4 1 194 0 1 81920 0 malloc-8192 8192 6 3 10 0 1 73728 0 malloc-4096 4096 12 6 25 0 2 73728 0 g_bio 408 0 180 6340 0 30 73440 0 malloc-64 64 684 387 3336 0 254 68544 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-4096 4096 13 3 65 0 2 65536 0 malloc-2048 2048 10 22 728 0 8 65536 0 64 Bucket 512 71 57 1622 0 30 65536 0 malloc-8192 8192 6 1 121 0 1 57344 0 malloc-64 64 530 289 769 0 254 52416 0 tcp_bbr_map 128 0 403 145 0 126 51584 0 malloc-128 128 15 388 277 0 126 51584 0 malloc-256 256 88 107 152 0 62 49920 0 malloc-256 256 159 36 192 0 62 49920 0 malloc-256 256 89 106 850 0 62 49920 0 32 Bucket 256 62 133 407 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 12873 0 16 49152 0 malloc-1024 1024 14 34 542 0 16 49152 0 malloc-384 384 49 71 137 0 30 46080 0 syncache 168 0 264 3 0 254 44352 0 tcp_inpcb 1304 13 20 22 0 8 43032 0 malloc-8192 8192 5 0 5 0 1 40960 0 pcpu-8 8 4713 407 4869 0 254 40960 0 VMSPACE 584 42 28 855 0 16 40880 0 udp_inpcb 408 6 84 156 0 30 36720 0 malloc-64 64 8 559 13205 0 254 36288 0 malloc-64 64 162 405 164 0 254 36288 0 malloc-64 64 111 456 7384 0 254 36288 0 malloc-64 64 24 543 302 0 254 36288 0 malloc-64 64 9 558 34 0 254 36288 0 malloc-128 128 83 196 91 0 126 35712 0 malloc-128 128 68 211 75 0 126 35712 0 malloc-128 128 19 260 326 0 126 35712 0 routing nhops 256 26 109 33 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 79 11 107 0 30 34560 0 malloc-256 256 10 125 445 0 62 34560 0 malloc-256 256 27 108 68 0 62 34560 0 malloc-256 256 27 108 293 0 62 34560 0 malloc-256 256 15 120 529 0 62 34560 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 2 0 2 0 1 32768 0 malloc-8192 8192 2 2 23 0 1 32768 0 malloc-8192 8192 3 1 5 0 1 32768 0 malloc-4096 4096 5 3 566 0 2 32768 0 malloc-4096 4096 6 2 9 0 2 32768 0 malloc-2048 2048 4 12 27 0 8 32768 0 malloc-2048 2048 3 13 3 0 8 32768 0 malloc-2048 2048 9 7 9 0 8 32768 0 malloc-2048 2048 6 10 27 0 8 32768 0 malloc-1024 1024 2 30 12 0 16 32768 0 malloc-1024 1024 6 26 6 0 16 32768 0 malloc-1024 1024 16 16 19 0 16 32768 0 malloc-1024 1024 9 23 9 0 16 32768 0 malloc-512 512 2 62 23 0 30 32768 0 malloc-512 512 12 52 20 0 30 32768 0 malloc-512 512 3 61 175 0 30 32768 0 malloc-512 512 3 61 4 0 30 32768 0 pcpu-64 64 497 15 497 0 254 32768 0 tcp_bbr_pcb 896 1 35 3 0 16 32256 0 ttyinq 160 135 65 300 0 62 32000 0 Files 80 202 198 7044 0 126 32000 0 PGRP 120 27 237 38 0 126 31680 0 clpbuf 2624 0 12 21 0 4 31488 0 sctp_laddr 48 0 588 12 0 254 28224 0 malloc-32 32 350 532 426 0 254 28224 0 16 Bucket 144 53 143 281 0 62 28224 0 4 Bucket 48 6 582 8 0 254 28224 0 da_ccb 544 0 49 1687 0 16 26656 0 TURNSTILE 136 153 36 153 0 62 25704 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-4096 4096 5 1 6 0 2 24576 0 pipe 736 21 12 322 0 16 24288 0 PWD 40 20 586 105 0 254 24240 0 rtentry 168 29 115 33 0 62 24192 0 8 Bucket 80 51 249 489 0 126 24000 0 malloc-384 384 54 6 351 0 30 23040 0 malloc-384 384 11 49 15 0 30 23040 0 malloc-384 384 27 33 44 0 30 23040 0 ripcb 376 3 57 8 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 153 103 153 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 13 267 22 0 126 20160 0 malloc-32 32 74 556 262 0 254 20160 0 malloc-32 32 32 598 75 0 254 20160 0 malloc-32 32 32 598 2698 0 254 20160 0 malloc-32 32 35 595 193 0 254 20160 0 malloc-32 32 17 613 31 0 254 20160 0 2 Bucket 32 62 568 364 0 254 20160 0 KNOTE 160 4 121 13 0 62 20000 0 AIOCB 552 1 34 4 0 16 19320 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-4096 4096 0 4 186 0 2 16384 0 malloc-2048 2048 0 8 2 0 8 16384 0 malloc-1024 1024 1 15 1 0 16 16384 0 malloc-1024 1024 3 13 3 0 16 16384 0 malloc-512 512 0 32 1 0 30 16384 0 malloc-512 512 1 31 1 0 30 16384 0 malloc-512 512 3 29 9 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 1 287 1 0 254 16128 0 malloc-16 16 507 493 3432 0 254 16000 0 AIO 208 1 75 4 0 62 15808 0 kenv 258 17 43 1065 0 30 15480 0 tcp_rack_pcb 1088 1 13 2 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 udplite_inpcb 408 0 36 2 0 30 14688 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 152 226 931 0 254 12096 0 malloc-16 16 2 748 122 0 254 12000 0 malloc-16 16 12 738 12 0 254 12000 0 malloc-16 16 16 734 85 0 254 12000 0 malloc-16 16 56 694 24873 0 254 12000 0 malloc-16 16 52 698 1525 0 254 12000 0 cryptop 280 0 42 1 0 30 11760 0 malloc-384 384 1 29 2 0 30 11520 0 malloc-384 384 1 29 1 0 30 11520 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 0 2 2 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 3221 0 254 8016 0 malloc-16 16 3 497 4 0 254 8000 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 22 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOLIO 272 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl