Extracting prog: 2m27.843738053s Minimizing prog: 15m58.7862001s Simplifying prog options: 0s Extracting C: 29.943015153s Simplifying C: 3m42.686411602s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$crypto-ioctl$CIOCGSESSION2-kqueue-kevent-socket-setsockopt$sock_int-aio_waitcomplete-bind$inet6-setsockopt$inet_tcp_TCP_FUNCTION_BLK-openat$ptmx-getsockopt$inet_sctp_SCTP_ASSOCINFO-connect$inet6-sendto$inet-sendmsg$unix-kmq_open-fcntl$dupfd-ioctl$CIOCCRYPT detailed listing: executing program 0: r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000000)={0x0, 0x26, 0x0, 0x0, 0x20, &(0x7f00000003c0)="70638953df0cef7e00080000000bf98994164394b5d947fa8802ca13b7270000", 0x10000, 0xbdfffffd, [0x0, 0x3]}) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000002c0)=0x101, 0x4) aio_waitcomplete(&(0x7f0000000240)=&(0x7f0000000b80)={r2, 0xfffffffffffffff9, &(0x7f0000000a00)="7108aa0bb2576c3d9d661fb7d4c7d3ed49ec16d7300ec6724feda8b21cf6c4ed39fbbd5262b62dedfdb7d51f908d2410e3a3601a74f3e0ac4f5e805929cc670113a57a8055d4e78dfcd624292e3defa8bd7252b17a32f8703908c77e9f5624c237321ba837ebaa1c", 0x68, [0x8eab, 0x4], 0x68e0, 0x0, 0x9fd, {0x3, 0x9b85, &(0x7f0000000a80)="51906aede2bf6115c11cdfa3f316fea8f77aad17357de7ae80c7ea40f979c00305afd7e46683b3f0bf"}, {0x0, 0x13, @sigval_int=0xaa81}}, &(0x7f0000000300)={0x100000000, 0xfffffffffffffff9}) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00'}, 0x24) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000400)={0x0, 0x8000, 0x4, 0x3, 0xff, 0xc09}, &(0x7f0000000440)=0x14) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r2, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000840)="faccbfc1213b7245c968e88fed57f69d4ed18b0fc343422fdc7ab9d92113373e90fbacef5551af86589dbe25e1d8baecceb5b8617b518f444d94092562c844048b841e675aa82565cf0446bc8b70fdd519bf853b11", 0x55}], 0x1, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC=r3, @ANYBLOB="000008006800000000000cbb51b4abdd8e55995d38da46dcbae7753bb7a740ae949c08168a7cab6b2b5862be7bed5268d6a15fe06f8948dbe498ee0a11cb5f2ee3a6dad374e65aacad", @ANYBLOB="f2", @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="63aebd739fdfff0300007f6ae841bdbb710a14776cc78af2c57ecaaac2bf83fc8d5a3e3b", @ANYRES32=r1, @ANYRES64, @ANYRES32=r1], 0x100, 0x20001}, 0x20180) r4 = kmq_open(&(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000080)={0x5, 0x10002000000000, 0x9}) fcntl$dupfd(r3, 0x0, r4) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000180)={0x0, 0x2, 0x2, 0x1ff1e, &(0x7f00000004c0), 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-open$dir-ftruncate-getpid-openat$filemon-ioctl$FILEMON_SET_FD-ioctl$FILEMON_SET_PID-kqueue-kevent-fork-madvise-openat$ptmx detailed listing: executing program 0: r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x400004000011830a, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) ftruncate(r1, 0x80002) r2 = getpid() r3 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$FILEMON_SET_FD(r3, 0xc0045301, &(0x7f00000007c0)=r0) ioctl$FILEMON_SET_PID(r3, 0xc0045302, &(0x7f0000000100)=r2) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) fork() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet-syz_emit_ethernet-unlink-open-setsockopt$inet_tcp_TCP_FUNCTION_BLK-open$dir-ftruncate-bind-accept4$unix-freebsd11_lstat-open$dir-socket-syz_emit_ethernet-bind$inet6-getsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT-setsockopt$inet_sctp_SCTP_AUTH_KEY-pwritev-open$dir-freebsd11_stat-getsockname-pwritev-sendmsg$unix-socket-setsockopt$inet_tcp_TCP_FUNCTION_BLK-socket$inet6_sctp-setsockopt$inet6_int-bind-connect$inet-sendto-shutdown detailed listing: executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6041799100303aff00000000000000000000000000000000fe8000000000000000000000000000aa040090780000000060fed9f60000240000000000000000000000000000000000fe8000000000000000000000000000aa7165a878e275e94da336abf0620dabbfe048782c0e"]) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @loopback, @broadcast, @loopback}}}}) unlink(0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f00000000c0)={'rack\x00', 0x10000}, 0x24) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) ftruncate(r0, 0x41f3) bind(r0, &(0x7f00000013c0)=@in6={0x1c, 0x1c, 0x1, 0x1, @local={0xfe, 0x80, '\x00', 0x0}, 0x1ff}, 0x1c) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs={0x8}, &(0x7f0000000040)=0x8, 0x0) freebsd11_lstat(&(0x7f0000001180)='./file1\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r4 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900483a003bcc3f0600000058132fa13a8be186e3fe8000000040000000000000000000aa02009078000000386006c33e00002b00fe8000000000000000000000000000aaff020000000000000000000000000001640200730000000000000000000003000000000000000001"]) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, 0x1c) getsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffff9c, 0x84, 0x24, &(0x7f0000000280)={0x0, @in={{0x10, 0x2, 0x1}}, 0x4536}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x13, &(0x7f0000000340)={r5, 0x9, 0xc1, "77498a794373bbb99ef167471642be3ced37de0d2cda9a385134d4ee2416a83af159681453a12fa4d6512cc7ccc7e46ed53719aaf05ae5b5bc96923ff0351aeb7a3867d832cbcc28ddda618e0dc646e88db0162eab3ec00eb1dc26219b295ab949d09cd10e684501c2b9b02fa72a10936c9b9031130780149bd9a4ceb24c3aac332ac286d5e4bed70460b207bcdde900de69cd0876a6a9c31a4887b249a61a7d184406b2827e0314c9294462346f79c04ab44e739c195129b27e2202fb54d882e4"}, 0xc9) pwritev(r3, 0x0, 0x0, 0x0) r6 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x9e) freebsd11_stat(&(0x7f0000001640)='./file1\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000000180)=0x1c) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000000500)=@file={0x2}, 0x2, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRESOCT=r3, @ANYBLOB="a8efa5a8c0083c4bf1c4025affedffff7a6bfabe6991659c3bae379b108067fa99e34fd2be169df99aa5a487edac8e266ca1f19d38509b2899875b44f7b6cdc8706eab9fe35c7a139bccd6989d5036177d8c9d313c9f047688cfc66aedf2869fa07213f3ae", @ANYRES32, @ANYBLOB, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES16, @ANYRES64=r8, @ANYRES16=r2, @ANYRES32=r7, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="061b0900367700ff44d9e75f23db90bb7d14be7947183efb684d19cbe3ceeb638a41c0bd51bfa5567db6981aaea4888a80422dfb98601399", @ANYBLOB="a8d72e3fa93e19b18ccaee", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES64], 0x118}, 0x20004) r9 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r9, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24) r10 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r10, 0x29, 0x3f, &(0x7f00000000c0)=0x1, 0x4) bind(r9, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) connect$inet(r9, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) sendto(r9, &(0x7f0000001480)="1d77c57c16eb5158caed03d9c0f6dca317dffc1d3274f66f21ae7c59f1ee36dfd4937ea42fcc31cb20e43d2d855805008764d272582aaa8e01850752a4ef2bf19ce924bc6abfa885ce3bb82db3049521de0dcadd090b74beb5001cc836fa6a6df5a439bbd9f6e99853d26df8f1558ce5718e04784e91873d746d7f04d639b9608adf0c8a2160f6c84cb6465394f135182bd779fca31bd722fc8452862c193bd74a492389f1a6500f3f6cd32f8e3e2348640cf138e8d8fbd568b750a6590010e379273f4535083f61c543831816d5cd1c4c0964e45de2f0d8c80d98e7b7820f1087956616a031c3ce09e02719de4eb3c7b7521469c86d1e4f4422aeadfdc10f9281d64f1ae344a1a557a97e9a7732b5cb1b0f6e4603be46ec05d26db9302240f6341885308c9f5d3b53f88e472fef6b56f84d51ccb7a8a86d7ec53003991f262a3023de86ab2376444000000000000000d6a23ad395e9781cfa7ccbeee8c722aff529291d324fc39ba33b20b5a5e33a163bc4869234c8fc7c392a305f68930a65de05f4a05f44f6f7d57cc6505583c17955561d57", 0x194, 0x4, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x1, 0x101, @mcast2, 0x6}, 0x1c) shutdown(r9, 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-socket$inet_sctp-getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE-getpid-socket-setsockopt$inet_tcp_TCP_FUNCTION_BLK-connect$inet-sendto detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpid() (async) r7 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r7, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00', 0xfd2}, 0x24) connect$inet(r3, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) sendto(r7, &(0x7f0000002280)="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", 0xf40, 0x0, &(0x7f0000000480)=@in={0x10, 0x2, 0x3, @loopback}, 0x10) program crashed: panic: Bad link elm ADDR next->prev != elm single: successfully extracted reproducer found reproducer with 25 syscalls minimizing guilty program testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-socket$inet_sctp-getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE-getpid-socket-setsockopt$inet_tcp_TCP_FUNCTION_BLK-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpid() (async) r7 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r7, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00', 0xfd2}, 0x24) connect$inet(r3, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-socket$inet_sctp-getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE-getpid-socket-setsockopt$inet_tcp_TCP_FUNCTION_BLK detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpid() (async) r7 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r7, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00', 0xfd2}, 0x24) program did not crash testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-socket$inet_sctp-getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE-getpid-socket-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpid() (async) socket(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-socket$inet_sctp-getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE-getpid-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpid() (async) connect$inet(r3, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-socket$inet_sctp-getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet(r3, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-socket$inet_sctp-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-ioctl$FILEMON_SET_FD-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000180)=r1) connect$inet(r3, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-getuid-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) getuid() (async) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-sendto$inet-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-setsockopt$inet_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-socket$inet_icmp_raw-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-bind$inet-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-socket$inet-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-bind$inet-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: panic: Bad link elm ADDR next->prev != elm testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-bind$inet-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-socket$inet-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program did not crash testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program did not crash testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet_sctp-socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-openat$filemon-socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-rename-socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) rename(0x0, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-sigaction-socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) sigaction(0x60, &(0x7f0000000200)={&(0x7f00000001c0)="c403f914fd00f346e00d43d37000c462f5a744730066f046005cc502c4e3a97f2303450f165587f343adc4432d4988000001000344d917", 0x4b, {[0x2, 0x3ff, 0x200, 0x1]}}, &(0x7f0000000280)={&(0x7f0000000240)="66400ffbf8c42225cfa27f0c00004e0fae3500800000c423f9142207f0190e836305e966440f73db93c4e225de4381f32e0f1c180fd84200"}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sigaction-socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: sigaction(0x65, &(0x7f00000000c0)={&(0x7f0000000080)="40dc1346f7efc4a249969900000000430f181502000000c4010173f504c14b0000460f1b6d45420f1a6f00410f0f9ffeefffffa4c4419814581b", 0x0, {[0x4, 0x2d0, 0x9, 0x7fc00]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f8978d34c77b5412dd8b0ba38c443390bb10000008026262e2ef0806b00ff490faea5ea3030c9660f380b8132ca4f69643c00f2f36745c3c44299dc77558f2850954e0000"}) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) (async) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) (async) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, 0x0, 0x0) connect$inet(r0, &(0x7f0000000380)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) program did not crash testing program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet detailed listing: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0x5, 0x4) connect$inet(r0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=41.067060067s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked simplifying C reproducer testing compiled C program (duration=41.067060067s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing compiled C program (duration=41.067060067s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet program did not crash testing compiled C program (duration=41.067060067s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing compiled C program (duration=41.067060067s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing compiled C program (duration=41.067060067s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked testing compiled C program (duration=41.067060067s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$sock_int-connect$inet program crashed: Fatal trap NUM: page fault in in_pcbremhash_locked reproducing took 22m39.259878458s repro crashed as (corrupted=false): Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xffffffffffffffff fault code = supervisor write data, page not present instruction pointer = 0x20:0xffffffff8193ed37 stack pointer = 0x28:0xfffffe00575ea930 frame pointer = 0x28:0xfffffe00575ea970 FreeBSD/amd64code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 777 (syz-executor1243038) rdi: fffffe0071aff000 rsi: 00000000bb0014ac rdx: 0000000000000001 rcx: 0000000000000000 r8: 0000000000000000 r9: 0000000000000001 rax: ffffffffffffffff rbx: fffffe0071b05000 rbp: fffffe00575ea970 r10: 0000000000000000 r11: 0000000000000000 r12: fffffe0071aff000 r13: fffffe0071aff008 r14: ffffffffffffffff r15: 0000000000000000 trap number = 12 panic: page fault cpuid = 0 time = 1740903027 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00575ea150 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00575ea2b0 vpanic() at vpanic+0x257/frame 0xfffffe00575ea470 panic() at panic+0xb5/frame 0xfffffe00575ea530 trap_pfault() at trap_pfault+0xab4/frame 0xfffffe00575ea670 trap() at trap+0x753/frame 0xfffffe00575ea860 calltrap() at calltrap+0x8/frame 0xfffffe00575ea860 --- trap 0xc, rip = 0xffffffff8193ed37, rsp = 0xfffffe00575ea930, rbp = 0xfffffe00575ea970 --- in_pcbremhash_locked() at in_pcbremhash_locked+0x147/frame 0xfffffe00575ea970 in_pcbdrop() at in_pcbdrop+0x98/frame 0xfffffe00575ea990 tcp_close() at tcp_close+0x177/frame 0xfffffe00575eaa60 tcp_disconnect() at tcp_disconnect+0x1ef/frame 0xfffffe00575eaa90 tcp_usr_close() at tcp_usr_close+0x189/frame 0xfffffe00575eab70 soclose() at soclose+0x3d0/frame 0xfffffe00575eac60 _fdrop() at _fdrop+0x58/frame 0xfffffe00575eac90 closef() at closef+0x655/frame 0xfffffe00575eae70 fdescfree() at fdescfree+0xa5e/frame 0xfffffe00575eb050 exit1() at exit1+0x860/frame 0xfffffe00575eb0f0 sigexit() at sigexit+0x451/frame 0xfffffe00575eba70 postsig() at postsig+0x2c5/frame 0xfffffe00575ebbf0 ast_sig() at ast_sig+0x848/frame 0xfffffe00575ebea0 ast_handler() at ast_handler+0x2b0/frame 0xfffffe00575ebf10 ast() at ast+0x25/frame 0xfffffe00575ebf30 doreti_ast() at doreti_ast+0x1c/frame 0x820e51ed0 KDB: enter: panic [ thread pid 777 tid 100118 ] Stopped at kdb_enter+0x6e: movq $0,0x23eab87(%rip) db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0xdffff7c000000000 rbx 0xffffffff8274a640 .str.27 rsp 0xfffffe00575ea290 rbp 0xfffffe00575ea2b0 rsi 0 rdi 0xffffffff82e004c0 panicstr r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe005491d000 r13 0xfffffffffffffffe r14 0xffffffff8274a640 .str.27 r15 0 rip 0xffffffff815c248e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x23eab87(%rip) db> show proc Process 777 (syz-executor1243038) at 0xfffffe0054922000: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 776 at 0xfffffe00080085c0 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor1243038712 reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe000800f490 (map 0xfffffe000800f490) (map.pmap 0xfffffe000800f530) (pmap 0xfffffe000800f5a0) threads: 1 100118 Run CPU 0 syz-executor1243038 db> ps pid ppid pgrp uid state wmesg wchan cmd 777 776 774 0 RE CPU 0 syz-executor1243038 776 774 774 0 S wait 0xfffffe00080085c0 syz-executor1243038 774 772 774 0 Ss pause 0xfffffe00548f0b70 csh 772 682 772 0 Ss select 0xfffffe0071b49ec0 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0058a7dcb0 getty 747 1 747 0 Ss+ ttyin 0xfffffe0058dca8b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0058dcacb0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058dcc0b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058dcc4b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058dcc8b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058dcccb0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0058dcd0b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0058dcd4b0 getty 686 1 686 0 Ss nanslp 0xffffffff8398e3c0 cron 682 1 682 0 Ss select 0xfffffe0058a85140 sshd 495 1 495 0 Ds getbuf 0xfffffe0008446b7c syslogd 424 1 424 0 Ss select 0xfffffe0058a852c0 devd 423 1 423 65 Ss select 0xfffffe0058a85640 dhclient 338 1 338 0 Ss select 0xfffffe0058a85340 dhclient 335 1 335 0 Ss select 0xfffffe0058ce2cc0 dhclient 17 0 0 0 DL syncer 0xffffffff83aabc20 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83aaa1e0 [bufdaemon] 100081 D - 0xffffffff82e02140 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0058a7cce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83af50e0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83adb078 [dom0] 100084 D launds 0xffffffff83adb084 [laundry: dom0] 100085 D umarcl 0xffffffff81d83c90 [uma] 7 0 0 0 DL - 0xffffffff8370bbf0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff844385d0 [pf purge] 5 0 0 0 DL waiting 0xffffffff846d3580 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff836d6340 [doneq0] 100047 D - 0xffffffff836d62c0 [async] 100076 D - 0xffffffff836d6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ad68a0 [crypto] 100044 D crypto_ 0xfffffe005855e030 [crypto returns 0] 100045 D crypto_ 0xfffffe005855e080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0008bfc488 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83936dc0 [g_event] 100038 D - 0xffffffff83936de0 [g_up] 100039 D - 0xffffffff83936e00 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 Run CPU 1 [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ad7340 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84a0fff0 [swapper] 100005 D - 0xfffffe0007f6a200 [softirq_0] 100006 D - 0xfffffe0007f6a100 [softirq_1] 100007 D - 0xfffffe0007f6a000 [if_io_tqg_0] 100008 D - 0xfffffe0007f69e00 [if_io_tqg_1] 100009 D - 0xfffffe0007f69d00 [if_config_tqg_0] 100010 D - 0xfffffe0007f69c00 [pci_hp taskq] 100011 D - 0xfffffe0007f69b00 [kqueue_ctx taskq] 100012 D - 0xfffffe0007f69a00 [jail_remove taskq] 100015 D - 0xfffffe0007f69700 [thread taskq] 100017 D - 0xfffffe0007f69500 [aiod_kick taskq] 100018 D - 0xfffffe0007f69400 [deferred_unmount ta] 100019 D - 0xfffffe0007f69300 [inm_free taskq] 100020 D - 0xfffffe0007f69200 [in6m_free taskq] 100021 D - 0xfffffe0007f69100 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007f69000 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007f69000 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007f69000 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007f69000 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007f68b00 [firmware taskq] 100041 D - 0xfffffe0007f68a00 [crypto_0] 100042 D - 0xfffffe0007f68a00 [crypto_1] 100057 D - 0xfffffe0007f68800 [vtnet0 rxq 0] 100058 D - 0xfffffe0007f68700 [vtnet0 txq 0] 100059 D - 0xfffffe0007f68600 [vtnet0 rxq 1] 100060 D - 0xfffffe0007f68500 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe00546dc080 [virtio_balloon] 100066 D - 0xffffffff8274f8e0 [deadlkres] 100070 D - 0xfffffe0059bf6300 [acpi_task_0] 100071 D - 0xfffffe0059bf6300 [acpi_task_1] 100072 D - 0xfffffe0059bf6300 [acpi_task_2] 100074 D - 0xfffffe0007f6b000 [mca taskq] 100075 D - 0xfffffe0007f68900 [CAM taskq] 100077 D - 0xfffffe0059bf6100 [ipsec_offload] db> show all locks Process 777 (syz-executor1243038) thread 0xfffffe005491d000 (100118) exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe0007feaa70) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:2815 exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe0071aff020) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:1316 Process 495 (syslogd) thread 0xfffffe00548ef740 (100101) exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00719ef750) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3621 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 375 5015K 485 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4216 sysctloid 35205 2074K 35280 vtbuf 24 1968K 46 newblk 1915 1503K 1959 kobj 330 1320K 494 vfscache 3 1025K 3 pcb 24 669K 43 inodedep 5 514K 72 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54408 subproc 105 178K 845 vmem 5 144K 6 tidhash 3 141K 3 pagedep 2 129K 18 tfo_ccache 1 128K 1 IP reass 1 128K 1 sem 4 106K 4 DEVFS1 105 105K 114 gtaskqueue 18 98K 18 bus 994 81K 5040 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 519 65K 519 ddb_capture 1 64K 1 temp 18 37K 1581 hostcache 1 32K 1 shm 1 32K 1 umtx 256 32K 256 kdtrace 156 32K 897 DEVFS3 124 31K 134 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 BPF 10 18K 10 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1637 eventhandler 163 14K 163 kenv 95 12K 95 ifaddr 30 12K 32 GEOM 61 11K 477 routetbl 50 11K 176 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 bmsafemap 3 9K 40 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 69 sglist 6 7K 6 plimit 16 6K 338 CAM DEV 3 6K 510 cred 22 6K 284 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 UMA 269 5K 269 ifnet 3 5K 3 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 filedesc 1 4K 1 evdev 4 4K 4 acpisem 28 4K 28 ether_multi 40 4K 50 lltable 11 4K 11 pf_ifnet 5 3K 6 in6_multi 25 3K 25 terminal 11 3K 11 acpidev 20 3K 20 session 19 3K 32 kqueue 38 3K 780 hhook 8 3K 10 pwddesc 37 3K 778 clone 9 3K 9 uidinfo 3 3K 9 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 proc-args 57 2K 1711 Unitno 28 2K 42 lockf 16 2K 26 CAM XPT 22 2K 543 toponodes 6 2K 6 ipsecpolicy 2 2K 2 selfd 22 2K 29520 msi 9 2K 9 netlink 2 2K 57 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 vnodemarker 2 1K 20 NFSD session 1 1K 1 select 7 1K 29 CAM periph 4 1K 271 ipsec 3 1K 3 indirdep 3 1K 3 nhops 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 sctp_ifa 5 1K 6 crypto 4 1K 4 ip6ndp 4 1K 5 encap_export_host 12 1K 12 CC Mem 4 1K 8 in_multi 2 1K 4 cdev 2 1K 2 lkpikmalloc 8 1K 9 osd 9 1K 21 diradd 3 1K 36 chacha20random 1 1K 1 biobuf 1 1K 1 inpcbpolicy 11 1K 140 sctp_ifn 2 1K 6 mld 2 1K 2 igmp 2 1K 2 vnodes 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFSP 4 1K 9 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 7 prison 6 1K 6 cryptodev 2 1K 49 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 procdesc 1 1K 6 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3331 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 35 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 26 p1003.1b 1 1K 1 filecaps 1 1K 66 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 4 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 4 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 mqdata 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 filemon 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 15 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 5 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 newdirblk 0 0K 8 dirrem 0 0K 28 mkdir 0 0K 16 freefile 0 0K 26 freeblks 0 0K 25 freefrag 0 0K 14 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 3 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 LRO 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 tun 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 200 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 22 aio 0 0K 0 lio 0 0K 0 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 14838 ioctlops 0 0K 86 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 650 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 kcovinfo 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 25920 0 254 38494208 0 mbuf 256 8577 1085 33997 0 254 2473472 0 BUF TRIE 152 297 11507 994 0 62 1794208 0 malloc-384 384 4118 52 4118 0 30 1601280 0 malloc-128 128 11573 145 11675 0 126 1499904 0 malloc-4096 4096 330 2 495 0 2 1359872 0 UMA Slabs 0 112 10856 10 10856 0 126 1216992 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 vmem btag 56 15659 76 15659 0 254 881160 0 malloc-65536 65536 9 1 12 0 1 655360 0 pbuf 2624 0 245 0 0 2 642880 0 RADIX NODE 152 3902 201 23350 0 62 623656 0 FFS inode 1168 502 30 528 0 8 621376 0 malloc-256 256 2154 81 2546 0 62 572160 0 socket 1024 19 489 1316 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 256 Bucket 2048 120 18 901 0 8 282624 0 malloc-64 64 4098 249 4370 0 254 278208 0 malloc-65536 65536 4 0 4 0 1 262144 0 VNODE 440 532 44 560 0 30 253440 0 VM OBJECT 264 879 81 12771 0 30 253440 0 malloc-16 16 14578 422 15860 0 254 240000 0 THREAD 1824 117 11 118 0 8 233472 0 malloc-32768 32768 6 1 17 0 1 229376 0 malloc-2048 2048 107 5 298 0 8 229376 0 malloc-2048 2048 7 105 1039 0 8 229376 0 DEVCTL 1024 0 220 123 0 0 225280 0 UMA Zones 768 241 3 241 0 16 187392 0 malloc-32 32 5426 244 5592 0 254 181440 0 malloc-128 128 1178 217 28587 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 malloc-4096 4096 38 4 778 0 2 172032 0 unpcb 320 7 509 1159 0 254 165120 0 malloc-128 128 950 197 1957 0 126 146816 0 FFS2 dinode 256 502 68 528 0 62 145920 0 S VFS Cache 104 989 298 1029 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 156 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 8 0 1 131072 0 malloc-1024 1024 105 23 117 0 16 131072 0 mbuf_packet 256 0 508 118 0 254 130048 0 FPU_save_area 832 119 25 138 0 16 119808 0 ksiginfo 112 40 1004 60 0 126 116928 0 MAP ENTRY 96 804 330 39553 0 126 108864 0 PROC 1376 37 29 777 0 8 90816 0 UMA Kegs 384 227 6 227 0 30 89472 0 128 Bucket 1024 42 41 246 0 16 84992 0 malloc-8192 8192 7 2 114 0 1 73728 0 g_bio 408 4 176 5369 0 30 73440 0 malloc-64 64 515 556 15991 0 254 68544 0 malloc-128 128 326 201 511 0 126 67456 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-16384 16384 3 1 183 0 1 65536 0 malloc-4096 4096 15 1 107 0 2 65536 0 malloc-4096 4096 13 3 18 0 2 65536 0 filedesc0 1072 38 18 778 0 8 60032 0 malloc-384 384 56 94 123 0 30 57600 0 64 Bucket 512 64 40 1198 0 30 53248 0 malloc-64 64 499 320 1478 0 254 52416 0 malloc-128 128 17 386 276 0 126 51584 0 malloc-256 256 146 49 165 0 62 49920 0 32 Bucket 256 62 133 2047 0 62 49920 0 DIRHASH 1024 35 13 35 0 16 49152 0 NAMEI 1024 0 48 12181 0 16 49152 0 malloc-16384 16384 3 0 3 0 1 49152 0 malloc-8192 8192 6 0 7 0 1 49152 0 malloc-1024 1024 11 37 519 0 16 49152 0 syncache 168 0 264 5 0 254 44352 0 clpbuf 2624 0 16 73 0 4 41984 0 malloc-4096 4096 7 3 489 0 2 40960 0 da_ccb 544 1 69 1579 0 16 38080 0 udp_inpcb 416 6 84 128 0 30 37440 0 pcpu-8 8 4296 312 4324 0 254 36864 0 malloc-64 64 7 560 36 0 254 36288 0 malloc-64 64 41 526 29568 0 254 36288 0 malloc-64 64 66 501 834 0 254 36288 0 malloc-64 64 183 384 924 0 254 36288 0 malloc-64 64 15 552 652 0 254 36288 0 malloc-128 128 15 264 63 0 126 35712 0 malloc-128 128 7 272 8 0 126 35712 0 malloc-128 128 68 211 88 0 126 35712 0 routing nhops 256 10 125 17 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 67 23 67 0 30 34560 0 malloc-256 256 42 93 132 0 62 34560 0 malloc-256 256 47 88 320 0 62 34560 0 malloc-256 256 8 127 95 0 62 34560 0 malloc-256 256 50 85 696 0 62 34560 0 malloc-256 256 12 123 468 0 62 34560 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-8192 8192 2 2 4 0 1 32768 0 malloc-2048 2048 2 14 11 0 8 32768 0 malloc-2048 2048 6 10 93 0 8 32768 0 malloc-2048 2048 5 11 21 0 8 32768 0 malloc-1024 1024 2 30 10 0 16 32768 0 malloc-1024 1024 13 19 1073 0 16 32768 0 malloc-1024 1024 19 13 19 0 16 32768 0 malloc-1024 1024 9 23 10 0 16 32768 0 malloc-1024 1024 9 23 9 0 16 32768 0 malloc-512 512 2 62 12 0 30 32768 0 malloc-512 512 2 62 168 0 30 32768 0 malloc-512 512 6 58 24 0 30 32768 0 malloc-512 512 8 56 9 0 30 32768 0 pcpu-64 64 495 17 495 0 254 32768 0 ertt_txseginfo 40 0 808 610 0 254 32320 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 19 245 32 0 126 31680 0 VMSPACE 584 21 28 762 0 16 28616 0 sctp_laddr 48 0 588 4 0 254 28224 0 malloc-32 32 263 619 480 0 254 28224 0 16 Bucket 144 50 146 344 0 62 28224 0 4 Bucket 48 8 580 12 0 254 28224 0 TURNSTILE 136 129 60 129 0 62 25704 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 1 2 20 0 1 24576 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-8192 8192 3 0 3 0 1 24576 0 pipe 736 6 27 284 0 16 24288 0 PWD 40 10 596 101 0 254 24240 0 rtentry 168 13 131 17 0 62 24192 0 Files 80 68 232 6559 0 126 24000 0 8 Bucket 80 48 252 561 0 126 24000 0 tcp_inpcb 1312 4 14 8 0 8 23616 0 ripcb 384 1 59 4 0 30 23040 0 malloc-384 384 7 53 27 0 30 23040 0 malloc-384 384 17 43 683 0 30 23040 0 malloc-384 384 19 41 21 0 30 23040 0 malloc-384 384 26 34 38 0 30 23040 0 malloc-384 384 4 56 5 0 30 23040 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 129 127 129 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 udp_inpcb ports 32 3 627 40 0 254 20160 0 ertt 72 4 276 8 0 126 20160 0 malloc-32 32 41 589 47 0 254 20160 0 malloc-32 32 59 571 753 0 254 20160 0 malloc-32 32 31 599 3776 0 254 20160 0 malloc-32 32 25 605 459 0 254 20160 0 2 Bucket 32 51 579 303 0 254 20160 0 malloc-256 256 8 67 522 0 62 19200 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 2 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 2 2 219 0 2 16384 0 malloc-2048 2048 1 7 1 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-1024 1024 3 13 22 0 16 16384 0 malloc-512 512 1 31 1 0 30 16384 0 malloc-512 512 2 30 7 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 kenv 258 17 43 1063 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 tcp_inpcb ports 32 2 376 2 0 254 12096 0 malloc-32 32 0 378 2 0 254 12096 0 malloc-32 32 114 264 212 0 254 12096 0 KNOTE 160 0 75 8 0 62 12000 0 malloc-16 16 6 744 15 0 254 12000 0 malloc-16 16 18 732 57 0 254 12000 0 malloc-16 16 306 444 493 0 254 12000 0 malloc-16 16 183 567 3013 0 254 12000 0 malloc-16 16 20 730 24917 0 254 12000 0 malloc-16 16 15 735 37 0 254 12000 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 1 1 1 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 malloc-16 16 6 494 8 0 254 8000 0 vtnet_tx_hdr 24 0 167 6840 0 254 4008 0 UMA Slabs 1 176 8 14 8 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 376 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1152 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 sctp_ep 1152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcp_log 416 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 udplite_inpcb ports 32 0 0 0 0 254 0 0 udplite_inpcb 416 0 0 0 0 30 0 0 ripcb ports 32 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOLIO 272 0 0 0 0 30 0 0 AIOCB 552 0 0 0 0 16 0 0 AIO 208 0 0 0 0 62 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 final repro crashed as (corrupted=false): Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xffffffffffffffff fault code = supervisor write data, page not present instruction pointer = 0x20:0xffffffff8193ed37 stack pointer = 0x28:0xfffffe00575ea930 frame pointer = 0x28:0xfffffe00575ea970 FreeBSD/amd64code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 777 (syz-executor1243038) rdi: fffffe0071aff000 rsi: 00000000bb0014ac rdx: 0000000000000001 rcx: 0000000000000000 r8: 0000000000000000 r9: 0000000000000001 rax: ffffffffffffffff rbx: fffffe0071b05000 rbp: fffffe00575ea970 r10: 0000000000000000 r11: 0000000000000000 r12: fffffe0071aff000 r13: fffffe0071aff008 r14: ffffffffffffffff r15: 0000000000000000 trap number = 12 panic: page fault cpuid = 0 time = 1740903027 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00575ea150 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00575ea2b0 vpanic() at vpanic+0x257/frame 0xfffffe00575ea470 panic() at panic+0xb5/frame 0xfffffe00575ea530 trap_pfault() at trap_pfault+0xab4/frame 0xfffffe00575ea670 trap() at trap+0x753/frame 0xfffffe00575ea860 calltrap() at calltrap+0x8/frame 0xfffffe00575ea860 --- trap 0xc, rip = 0xffffffff8193ed37, rsp = 0xfffffe00575ea930, rbp = 0xfffffe00575ea970 --- in_pcbremhash_locked() at in_pcbremhash_locked+0x147/frame 0xfffffe00575ea970 in_pcbdrop() at in_pcbdrop+0x98/frame 0xfffffe00575ea990 tcp_close() at tcp_close+0x177/frame 0xfffffe00575eaa60 tcp_disconnect() at tcp_disconnect+0x1ef/frame 0xfffffe00575eaa90 tcp_usr_close() at tcp_usr_close+0x189/frame 0xfffffe00575eab70 soclose() at soclose+0x3d0/frame 0xfffffe00575eac60 _fdrop() at _fdrop+0x58/frame 0xfffffe00575eac90 closef() at closef+0x655/frame 0xfffffe00575eae70 fdescfree() at fdescfree+0xa5e/frame 0xfffffe00575eb050 exit1() at exit1+0x860/frame 0xfffffe00575eb0f0 sigexit() at sigexit+0x451/frame 0xfffffe00575eba70 postsig() at postsig+0x2c5/frame 0xfffffe00575ebbf0 ast_sig() at ast_sig+0x848/frame 0xfffffe00575ebea0 ast_handler() at ast_handler+0x2b0/frame 0xfffffe00575ebf10 ast() at ast+0x25/frame 0xfffffe00575ebf30 doreti_ast() at doreti_ast+0x1c/frame 0x820e51ed0 KDB: enter: panic [ thread pid 777 tid 100118 ] Stopped at kdb_enter+0x6e: movq $0,0x23eab87(%rip) db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0xdffff7c000000000 rbx 0xffffffff8274a640 .str.27 rsp 0xfffffe00575ea290 rbp 0xfffffe00575ea2b0 rsi 0 rdi 0xffffffff82e004c0 panicstr r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe005491d000 r13 0xfffffffffffffffe r14 0xffffffff8274a640 .str.27 r15 0 rip 0xffffffff815c248e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x23eab87(%rip) db> show proc Process 777 (syz-executor1243038) at 0xfffffe0054922000: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 776 at 0xfffffe00080085c0 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor1243038712 reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe000800f490 (map 0xfffffe000800f490) (map.pmap 0xfffffe000800f530) (pmap 0xfffffe000800f5a0) threads: 1 100118 Run CPU 0 syz-executor1243038 db> ps pid ppid pgrp uid state wmesg wchan cmd 777 776 774 0 RE CPU 0 syz-executor1243038 776 774 774 0 S wait 0xfffffe00080085c0 syz-executor1243038 774 772 774 0 Ss pause 0xfffffe00548f0b70 csh 772 682 772 0 Ss select 0xfffffe0071b49ec0 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0058a7dcb0 getty 747 1 747 0 Ss+ ttyin 0xfffffe0058dca8b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0058dcacb0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058dcc0b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058dcc4b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058dcc8b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058dcccb0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0058dcd0b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0058dcd4b0 getty 686 1 686 0 Ss nanslp 0xffffffff8398e3c0 cron 682 1 682 0 Ss select 0xfffffe0058a85140 sshd 495 1 495 0 Ds getbuf 0xfffffe0008446b7c syslogd 424 1 424 0 Ss select 0xfffffe0058a852c0 devd 423 1 423 65 Ss select 0xfffffe0058a85640 dhclient 338 1 338 0 Ss select 0xfffffe0058a85340 dhclient 335 1 335 0 Ss select 0xfffffe0058ce2cc0 dhclient 17 0 0 0 DL syncer 0xffffffff83aabc20 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83aaa1e0 [bufdaemon] 100081 D - 0xffffffff82e02140 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0058a7cce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83af50e0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83adb078 [dom0] 100084 D launds 0xffffffff83adb084 [laundry: dom0] 100085 D umarcl 0xffffffff81d83c90 [uma] 7 0 0 0 DL - 0xffffffff8370bbf0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff844385d0 [pf purge] 5 0 0 0 DL waiting 0xffffffff846d3580 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff836d6340 [doneq0] 100047 D - 0xffffffff836d62c0 [async] 100076 D - 0xffffffff836d6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ad68a0 [crypto] 100044 D crypto_ 0xfffffe005855e030 [crypto returns 0] 100045 D crypto_ 0xfffffe005855e080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0008bfc488 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83936dc0 [g_event] 100038 D - 0xffffffff83936de0 [g_up] 100039 D - 0xffffffff83936e00 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 Run CPU 1 [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ad7340 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84a0fff0 [swapper] 100005 D - 0xfffffe0007f6a200 [softirq_0] 100006 D - 0xfffffe0007f6a100 [softirq_1] 100007 D - 0xfffffe0007f6a000 [if_io_tqg_0] 100008 D - 0xfffffe0007f69e00 [if_io_tqg_1] 100009 D - 0xfffffe0007f69d00 [if_config_tqg_0] 100010 D - 0xfffffe0007f69c00 [pci_hp taskq] 100011 D - 0xfffffe0007f69b00 [kqueue_ctx taskq] 100012 D - 0xfffffe0007f69a00 [jail_remove taskq] 100015 D - 0xfffffe0007f69700 [thread taskq] 100017 D - 0xfffffe0007f69500 [aiod_kick taskq] 100018 D - 0xfffffe0007f69400 [deferred_unmount ta] 100019 D - 0xfffffe0007f69300 [inm_free taskq] 100020 D - 0xfffffe0007f69200 [in6m_free taskq] 100021 D - 0xfffffe0007f69100 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007f69000 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007f69000 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007f69000 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007f69000 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007f68e00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007f68b00 [firmware taskq] 100041 D - 0xfffffe0007f68a00 [crypto_0] 100042 D - 0xfffffe0007f68a00 [crypto_1] 100057 D - 0xfffffe0007f68800 [vtnet0 rxq 0] 100058 D - 0xfffffe0007f68700 [vtnet0 txq 0] 100059 D - 0xfffffe0007f68600 [vtnet0 rxq 1] 100060 D - 0xfffffe0007f68500 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe00546dc080 [virtio_balloon] 100066 D - 0xffffffff8274f8e0 [deadlkres] 100070 D - 0xfffffe0059bf6300 [acpi_task_0] 100071 D - 0xfffffe0059bf6300 [acpi_task_1] 100072 D - 0xfffffe0059bf6300 [acpi_task_2] 100074 D - 0xfffffe0007f6b000 [mca taskq] 100075 D - 0xfffffe0007f68900 [CAM taskq] 100077 D - 0xfffffe0059bf6100 [ipsec_offload] db> show all locks Process 777 (syz-executor1243038) thread 0xfffffe005491d000 (100118) exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe0007feaa70) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:2815 exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe0071aff020) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:1316 Process 495 (syslogd) thread 0xfffffe00548ef740 (100101) exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00719ef750) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3621 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 375 5015K 485 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4216 sysctloid 35205 2074K 35280 vtbuf 24 1968K 46 newblk 1915 1503K 1959 kobj 330 1320K 494 vfscache 3 1025K 3 pcb 24 669K 43 inodedep 5 514K 72 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54408 subproc 105 178K 845 vmem 5 144K 6 tidhash 3 141K 3 pagedep 2 129K 18 tfo_ccache 1 128K 1 IP reass 1 128K 1 sem 4 106K 4 DEVFS1 105 105K 114 gtaskqueue 18 98K 18 bus 994 81K 5040 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 519 65K 519 ddb_capture 1 64K 1 temp 18 37K 1581 hostcache 1 32K 1 shm 1 32K 1 umtx 256 32K 256 kdtrace 156 32K 897 DEVFS3 124 31K 134 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 BPF 10 18K 10 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1637 eventhandler 163 14K 163 kenv 95 12K 95 ifaddr 30 12K 32 GEOM 61 11K 477 routetbl 50 11K 176 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 bmsafemap 3 9K 40 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 69 sglist 6 7K 6 plimit 16 6K 338 CAM DEV 3 6K 510 cred 22 6K 284 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 UMA 269 5K 269 ifnet 3 5K 3 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 filedesc 1 4K 1 evdev 4 4K 4 acpisem 28 4K 28 ether_multi 40 4K 50 lltable 11 4K 11 pf_ifnet 5 3K 6 in6_multi 25 3K 25 terminal 11 3K 11 acpidev 20 3K 20 session 19 3K 32 kqueue 38 3K 780 hhook 8 3K 10 pwddesc 37 3K 778 clone 9 3K 9 uidinfo 3 3K 9 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 proc-args 57 2K 1711 Unitno 28 2K 42 lockf 16 2K 26 CAM XPT 22 2K 543 toponodes 6 2K 6 ipsecpolicy 2 2K 2 selfd 22 2K 29520 msi 9 2K 9 netlink 2 2K 57 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 vnodemarker 2 1K 20 NFSD session 1 1K 1 select 7 1K 29 CAM periph 4 1K 271 ipsec 3 1K 3 indirdep 3 1K 3 nhops 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 sctp_ifa 5 1K 6 crypto 4 1K 4 ip6ndp 4 1K 5 encap_export_host 12 1K 12 CC Mem 4 1K 8 in_multi 2 1K 4 cdev 2 1K 2 lkpikmalloc 8 1K 9 osd 9 1K 21 diradd 3 1K 36 chacha20random 1 1K 1 biobuf 1 1K 1 inpcbpolicy 11 1K 140 sctp_ifn 2 1K 6 mld 2 1K 2 igmp 2 1K 2 vnodes 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFSP 4 1K 9 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 7 prison 6 1K 6 cryptodev 2 1K 49 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 procdesc 1 1K 6 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3331 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 35 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 26 p1003.1b 1 1K 1 filecaps 1 1K 66 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 4 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 4 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 mqdata 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 filemon 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 15 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 5 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 newdirblk 0 0K 8 dirrem 0 0K 28 mkdir 0 0K 16 freefile 0 0K 26 freeblks 0 0K 25 freefrag 0 0K 14 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 3 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 LRO 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 tun 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 200 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 22 aio 0 0K 0 lio 0 0K 0 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 14838 ioctlops 0 0K 86 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 650 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 kcovinfo 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 25920 0 254 38494208 0 mbuf 256 8577 1085 33997 0 254 2473472 0 BUF TRIE 152 297 11507 994 0 62 1794208 0 malloc-384 384 4118 52 4118 0 30 1601280 0 malloc-128 128 11573 145 11675 0 126 1499904 0 malloc-4096 4096 330 2 495 0 2 1359872 0 UMA Slabs 0 112 10856 10 10856 0 126 1216992 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 vmem btag 56 15659 76 15659 0 254 881160 0 malloc-65536 65536 9 1 12 0 1 655360 0 pbuf 2624 0 245 0 0 2 642880 0 RADIX NODE 152 3902 201 23350 0 62 623656 0 FFS inode 1168 502 30 528 0 8 621376 0 malloc-256 256 2154 81 2546 0 62 572160 0 socket 1024 19 489 1316 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 256 Bucket 2048 120 18 901 0 8 282624 0 malloc-64 64 4098 249 4370 0 254 278208 0 malloc-65536 65536 4 0 4 0 1 262144 0 VNODE 440 532 44 560 0 30 253440 0 VM OBJECT 264 879 81 12771 0 30 253440 0 malloc-16 16 14578 422 15860 0 254 240000 0 THREAD 1824 117 11 118 0 8 233472 0 malloc-32768 32768 6 1 17 0 1 229376 0 malloc-2048 2048 107 5 298 0 8 229376 0 malloc-2048 2048 7 105 1039 0 8 229376 0 DEVCTL 1024 0 220 123 0 0 225280 0 UMA Zones 768 241 3 241 0 16 187392 0 malloc-32 32 5426 244 5592 0 254 181440 0 malloc-128 128 1178 217 28587 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 malloc-4096 4096 38 4 778 0 2 172032 0 unpcb 320 7 509 1159 0 254 165120 0 malloc-128 128 950 197 1957 0 126 146816 0 FFS2 dinode 256 502 68 528 0 62 145920 0 S VFS Cache 104 989 298 1029 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 156 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 8 0 1 131072 0 malloc-1024 1024 105 23 117 0 16 131072 0 mbuf_packet 256 0 508 118 0 254 130048 0 FPU_save_area 832 119 25 138 0 16 119808 0 ksiginfo 112 40 1004 60 0 126 116928 0 MAP ENTRY 96 804 330 39553 0 126 108864 0 PROC 1376 37 29 777 0 8 90816 0 UMA Kegs 384 227 6 227 0 30 89472 0 128 Bucket 1024 42 41 246 0 16 84992 0 malloc-8192 8192 7 2 114 0 1 73728 0 g_bio 408 4 176 5369 0 30 73440 0 malloc-64 64 515 556 15991 0 254 68544 0 malloc-128 128 326 201 511 0 126 67456 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-16384 16384 3 1 183 0 1 65536 0 malloc-4096 4096 15 1 107 0 2 65536 0 malloc-4096 4096 13 3 18 0 2 65536 0 filedesc0 1072 38 18 778 0 8 60032 0 malloc-384 384 56 94 123 0 30 57600 0 64 Bucket 512 64 40 1198 0 30 53248 0 malloc-64 64 499 320 1478 0 254 52416 0 malloc-128 128 17 386 276 0 126 51584 0 malloc-256 256 146 49 165 0 62 49920 0 32 Bucket 256 62 133 2047 0 62 49920 0 DIRHASH 1024 35 13 35 0 16 49152 0 NAMEI 1024 0 48 12181 0 16 49152 0 malloc-16384 16384 3 0 3 0 1 49152 0 malloc-8192 8192 6 0 7 0 1 49152 0 malloc-1024 1024 11 37 519 0 16 49152 0 syncache 168 0 264 5 0 254 44352 0 clpbuf 2624 0 16 73 0 4 41984 0 malloc-4096 4096 7 3 489 0 2 40960 0 da_ccb 544 1 69 1579 0 16 38080 0 udp_inpcb 416 6 84 128 0 30 37440 0 pcpu-8 8 4296 312 4324 0 254 36864 0 malloc-64 64 7 560 36 0 254 36288 0 malloc-64 64 41 526 29568 0 254 36288 0 malloc-64 64 66 501 834 0 254 36288 0 malloc-64 64 183 384 924 0 254 36288 0 malloc-64 64 15 552 652 0 254 36288 0 malloc-128 128 15 264 63 0 126 35712 0 malloc-128 128 7 272 8 0 126 35712 0 malloc-128 128 68 211 88 0 126 35712 0 routing nhops 256 10 125 17 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 67 23 67 0 30 34560 0 malloc-256 256 42 93 132 0 62 34560 0 malloc-256 256 47 88 320 0 62 34560 0 malloc-256 256 8 127 95 0 62 34560 0 malloc-256 256 50 85 696 0 62 34560 0 malloc-256 256 12 123 468 0 62 34560 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-8192 8192 2 2 4 0 1 32768 0 malloc-2048 2048 2 14 11 0 8 32768 0 malloc-2048 2048 6 10 93 0 8 32768 0 malloc-2048 2048 5 11 21 0 8 32768 0 malloc-1024 1024 2 30 10 0 16 32768 0 malloc-1024 1024 13 19 1073 0 16 32768 0 malloc-1024 1024 19 13 19 0 16 32768 0 malloc-1024 1024 9 23 10 0 16 32768 0 malloc-1024 1024 9 23 9 0 16 32768 0 malloc-512 512 2 62 12 0 30 32768 0 malloc-512 512 2 62 168 0 30 32768 0 malloc-512 512 6 58 24 0 30 32768 0 malloc-512 512 8 56 9 0 30 32768 0 pcpu-64 64 495 17 495 0 254 32768 0 ertt_txseginfo 40 0 808 610 0 254 32320 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 19 245 32 0 126 31680 0 VMSPACE 584 21 28 762 0 16 28616 0 sctp_laddr 48 0 588 4 0 254 28224 0 malloc-32 32 263 619 480 0 254 28224 0 16 Bucket 144 50 146 344 0 62 28224 0 4 Bucket 48 8 580 12 0 254 28224 0 TURNSTILE 136 129 60 129 0 62 25704 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 1 2 20 0 1 24576 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-8192 8192 3 0 3 0 1 24576 0 pipe 736 6 27 284 0 16 24288 0 PWD 40 10 596 101 0 254 24240 0 rtentry 168 13 131 17 0 62 24192 0 Files 80 68 232 6559 0 126 24000 0 8 Bucket 80 48 252 561 0 126 24000 0 tcp_inpcb 1312 4 14 8 0 8 23616 0 ripcb 384 1 59 4 0 30 23040 0 malloc-384 384 7 53 27 0 30 23040 0 malloc-384 384 17 43 683 0 30 23040 0 malloc-384 384 19 41 21 0 30 23040 0 malloc-384 384 26 34 38 0 30 23040 0 malloc-384 384 4 56 5 0 30 23040 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 129 127 129 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 udp_inpcb ports 32 3 627 40 0 254 20160 0 ertt 72 4 276 8 0 126 20160 0 malloc-32 32 41 589 47 0 254 20160 0 malloc-32 32 59 571 753 0 254 20160 0 malloc-32 32 31 599 3776 0 254 20160 0 malloc-32 32 25 605 459 0 254 20160 0 2 Bucket 32 51 579 303 0 254 20160 0 malloc-256 256 8 67 522 0 62 19200 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 2 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 2 2 219 0 2 16384 0 malloc-2048 2048 1 7 1 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-1024 1024 3 13 22 0 16 16384 0 malloc-512 512 1 31 1 0 30 16384 0 malloc-512 512 2 30 7 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 kenv 258 17 43 1063 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 tcp_inpcb ports 32 2 376 2 0 254 12096 0 malloc-32 32 0 378 2 0 254 12096 0 malloc-32 32 114 264 212 0 254 12096 0 KNOTE 160 0 75 8 0 62 12000 0 malloc-16 16 6 744 15 0 254 12000 0 malloc-16 16 18 732 57 0 254 12000 0 malloc-16 16 306 444 493 0 254 12000 0 malloc-16 16 183 567 3013 0 254 12000 0 malloc-16 16 20 730 24917 0 254 12000 0 malloc-16 16 15 735 37 0 254 12000 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 1 1 1 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 malloc-16 16 6 494 8 0 254 8000 0 vtnet_tx_hdr 24 0 167 6840 0 254 4008 0 UMA Slabs 1 176 8 14 8 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 376 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1152 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 sctp_ep 1152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcp_log 416 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 udplite_inpcb ports 32 0 0 0 0 254 0 0 udplite_inpcb 416 0 0 0 0 30 0 0 ripcb ports 32 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOLIO 272 0 0 0 0 30 0 0 AIOCB 552 0 0 0 0 16 0 0 AIO 208 0 0 0 0 62 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0