last executing test programs: 9.98725485s ago: executing program 2 (id=117): sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x4, &(0x7f00000001c0)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x16, 0x0, 0x40, &(0x7f0000000340)="0b6fac4103e7a00d4689e808d0d4755aedaacdd4743c7eaa2c7300d05fe86098acc6b6448c9abd58edc30d7c444335ad7a074c086a5a10639a860c19fd1d4ece", 0x0, 0x0, 0x0, 0x7d8e699a}) (async) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x2, 0x0, 0x8060, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000400)}) r1 = kqueue() (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08060001080006040009aaaaa2aaaabb00000002ffffffffffffac1400aa"]) r2 = socket(0x2, 0x1, 0x0) (async) r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{0x3, 0xfffffffffffffff3, 0xc023, 0x0, 0x0, 0x0, [0x0, 0x4000000]}], 0x1, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) (async) sendmsg$unix(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x180}, 0x20104) (async) kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r4, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) (async) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) rfork(0x96014) (async) sync() (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) (async) sigpending(&(0x7f0000000140)) 9.882350328s ago: executing program 2 (id=119): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r1, 0x1000) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r2, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000280)='./file0\x00', 0x10000, 0x8, 0xa3d, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0xfffffffe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1]}) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r3 = kqueue() r4 = socket$inet6_udp(0x1c, 0x2, 0x0) r5 = getppid() fcntl$setown(r4, 0x6, r5) kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) open(&(0x7f0000000480)='./file0\x00', 0x0, 0xe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x2, 0x0, @loopback, 0xffffffff}, {0x1c, 0x1c, 0x0, 0x0, @rand_addr="f57799109f9cc24cb1b9a9bab803227d"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r8, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r8, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') cpuset_setdomain(0x3, 0x9, 0x9f86010000000000, 0x20, &(0x7f0000000080)={[0x1]}, 0x2) 9.698627837s ago: executing program 2 (id=123): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x17, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x44, &(0x7f0000000000)=0x40, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x10, 0x2, 0x2, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x4b, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) r3 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0xe) bind$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x405, @local={0xfe, 0x80, '\x00', 0x0}, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYRES16=r2], 0x8) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="13ed4f5e300378fae7865d7d1b8ba8a5"}, 0x1c) mkdir(0x0, 0x0) setreuid(0xee00, 0x0) getuid() procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) fork() sendmsg(0xffffffffffffffff, 0x0, 0x0) sigtimedwait(&(0x7f0000000080)={[0x0, 0x4, 0x6, 0x9]}, 0x0, 0x0) procctl$PROC_PDEATHSIG_CTL(0x2, 0x0, 0xb, 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r5, r6) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x4) fork() wait4(0x0, 0x0, 0x7, 0x0) 8.824268011s ago: executing program 2 (id=136): openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x808, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connectat$unix(0xffffffffffffff9c, r0, &(0x7f0000000040)=@file={0xfffffffffffffe44, 0x1, './file0/file0\x00'}, 0xa) 8.822974779s ago: executing program 2 (id=137): socket(0x1c, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$evdev(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) unlink(0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0xffffffffffffffff, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, &(0x7f00000003c0)={0x7, 0x5}, 0x8) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r1, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cfe19f0da4833728dc14", 0x0, &(0x7f0000000040)="cf", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "00ff03ff8e3500"}, 0x40) sendto$inet(r1, &(0x7f0000000000)="727f4c98e6e3b6d62e469a3ba2e66dba9106d9b78a10424b95805142", 0x1c, 0x185, &(0x7f0000000280)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) r2 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) lseek(r3, 0xfffffffffffffffd, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) fhstat(&(0x7f0000001a80)={{[0x8, 0x3]}, {0x6, 0xa, "35c0d40b0000008e00"}}, &(0x7f0000001ac0)) getresgid(&(0x7f0000000340), &(0x7f0000000180), &(0x7f0000001c40)) fstatat(r2, &(0x7f0000001c80)='./file0\x00', 0x0, 0x8000) freebsd11_stat(&(0x7f0000000100)='./file0\x00', 0x0) getresgid(&(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) kqueue() syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0]) kevent(r0, &(0x7f00000001c0)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0x5, 0x0, [0x0, 0xff800000000000, 0x7, 0x40000004000000]}], 0x1, 0x0, 0x0, 0x0) 8.755369236s ago: executing program 2 (id=138): openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000040)={@random="eb2e1996a4af", @empty, [{}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @broadcast, @local, @remote={0xac, 0x14, 0x0}}}}}) rfork(0x85000) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 4.992991125s ago: executing program 1 (id=171): r0 = semget$private(0x0, 0x5, 0x0) r1 = semget(0x0, 0x1, 0x60) __semctl$SETVAL(r1, 0x3, 0x8, &(0x7f0000000040)=&(0x7f0000000000)=0x200) semop(r0, &(0x7f0000000300)=[{0x3, 0x7fff, 0x1000}, {0x0, 0x7ff, 0x1800}, {0x1, 0x7, 0x1000}, {0x4, 0x2b, 0x800}], 0x4) semget$private(0x0, 0x5, 0x0) (async) semget(0x0, 0x1, 0x60) (async) __semctl$SETVAL(r1, 0x3, 0x8, &(0x7f0000000040)=&(0x7f0000000000)=0x200) (async) semop(r0, &(0x7f0000000300)=[{0x3, 0x7fff, 0x1000}, {0x0, 0x7ff, 0x1800}, {0x1, 0x7, 0x1000}, {0x4, 0x2b, 0x800}], 0x4) (async) 4.992075564s ago: executing program 1 (id=173): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x1c0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ftruncate(r1, 0x10000) (async) ftruncate(r1, 0x10000) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f00000000c0)={@multicast1, @local={0xac, 0x14, 0x0}, @multicast1}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000080)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1]}}) (async) aio_write(&(0x7f0000000240)={r2, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1]}}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) openat$bpf(0xffffff9c, &(0x7f0000001980), 0x80000, 0x0) (async) r5 = openat$bpf(0xffffff9c, &(0x7f0000001980), 0x80000, 0x0) ioctl$BIOCSETFNR(r5, 0x80084282, &(0x7f0000003080)={0x1, &(0x7f0000000040)=[{0x94, 0x8a, 0x6, 0xfffffff4}]}) (async) ioctl$BIOCSETFNR(r5, 0x80084282, &(0x7f0000003080)={0x1, &(0x7f0000000040)=[{0x94, 0x8a, 0x6, 0xfffffff4}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r4, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, &(0x7f00000001c0)) r6 = socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') chroot(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x400004000011830a, 0x0) (async) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400004000011830a, 0x0) write(r7, &(0x7f0000000780)="0892", 0x2) open$dir(&(0x7f0000000300)='./file0/file0/..\x00', 0x20000, 0x6) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r6, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x16, 0xffffffffffffffff) sendmsg$inet6_sctp(r6, &(0x7f00000002c0)={&(0x7f0000000380)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x14c}, {0x0}], 0x2, 0x0, 0x0, 0x81}, 0x0) fstatat(r6, 0x0, &(0x7f0000000580), 0x200) (async) fstatat(r6, 0x0, &(0x7f0000000580), 0x200) 4.085429233s ago: executing program 1 (id=186): openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x808, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connectat$unix(0xffffffffffffff9c, r0, &(0x7f0000000040)=@file={0xfffffffffffffe44, 0x1, './file0/file0\x00'}, 0xa) 4.074423671s ago: executing program 1 (id=187): ktimer_create(0x0, 0x0, &(0x7f0000000000)) (async) ktimer_create(0x0, 0x0, &(0x7f0000000180)) (async) ktimer_create(0x0, 0x0, &(0x7f00000001c0)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) (async) ktimer_create(0x0, 0x0, &(0x7f0000000280)) (async) rfork(0x81060) (async) getsockopt$inet6_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x1a, 0x0, 0x0) r0 = open$dir(0x0, 0x40, 0x100) (async) rfork(0x4000) unlinkat(r0, 0x0, 0x800) (async) setsid() (async) select(0x40, &(0x7f0000000600)={0x400, 0x9, 0x49c, 0x4, 0x40, 0xff, 0x3815, 0x1ae}, 0x0, 0xffffffffffffffff, 0x0) (async) ktimer_create(0x0, 0x0, &(0x7f0000000380)) (async) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) (async) ktimer_create(0x0, 0x0, &(0x7f0000000100)) ktimer_create(0x0, 0x0, &(0x7f00000001c0)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x0, 0x0, &(0x7f0000000300)) (async) ktimer_create(0x0, 0x0, &(0x7f00000003c0)) ktimer_create(0x0, 0x0, &(0x7f0000000600)) (async) ktimer_create(0x0, 0x0, &(0x7f0000000200)) ktimer_create(0x0, 0x0, &(0x7f0000000340)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0x0, 0x0, &(0x7f0000000080)) ktimer_create(0x0, 0x0, &(0x7f0000000240)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) (async) ktimer_create(0x0, 0x0, &(0x7f0000000100)) (async) ktimer_create(0x0, 0x0, &(0x7f00000001c0)) (async) ktimer_create(0x0, 0x0, &(0x7f0000000400)) (async) ktimer_create(0x0, 0x0, &(0x7f0000000600)) 4.015116563s ago: executing program 1 (id=188): kevent(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff8, 0x29, 0x2, 0xe8c5, 0x0, [0x0, 0x4, 0x7, 0x3ffffffffffffd]}], 0x1, 0x0, 0x0, 0x0) (async) sigqueue(0x0, 0x78, @sival_int=0x10000) (async) fork() (async) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040), 0x4) (async) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x8, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000000)={'rack\x00'}, 0x24) (async) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000000)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdefffff, [0x0, 0x0, 0x0, 0x4f1]}) (async) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) cpuset_setaffinity(0x3, 0x8, 0x5, 0xf5, &(0x7f0000000000)={[0x3]}) (async) socket(0x1b, 0x10000003, 0x2) r2 = socket(0x11, 0x10000000000003, 0x0) setsockopt$sock_int(r2, 0xffff, 0x8000, 0x0, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, 0x1c) (async) r4 = dup(r3) connect$inet6(r4, &(0x7f0000000100)={0x1c, 0x1c, 0x0, 0x0, @rand_addr="fe9571df2a72c3746660c8a1fabed6de", 0x40}, 0x1c) (async) r5 = open$dir(&(0x7f0000000100)='./file1\x00', 0x40000400000002c2, 0x180) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) (async) setsockopt$inet_mreqsrc(r6, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @empty, @loopback}, 0xc) setsockopt$inet_mreqsrc(r6, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0xd, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) syz_emit_ethernet(0xaf, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESOCT=r2]) (async) sendto$unix(r2, &(0x7f0000000140)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) 4.012243764s ago: executing program 1 (id=189): open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x24) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x4, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sigval_ptr=0x45, @ke_flags=0xc00c}}) r1 = semget$private(0x0, 0x7, 0x3c0) semop(r1, &(0x7f0000000180)=[{0x1, 0x1}, {0x3, 0x4020, 0x1000}], 0x2) open$dir(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x66, 0x0, 0x0) copy_file_range(r3, 0x0, r2, &(0x7f0000000080)=0x2ffff, 0xf, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) freebsd11_fhstatfs(0xffffffffffffffff, 0x0) aio_writev(0x0) r5 = kqueue() kevent(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x5, 0x0}) sysarch$I386_GET_LDT(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) socket(0x1c, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setgroups(0x0, 0x0) access(0x0, 0x0) kqueue() r6 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) open$dir(&(0x7f0000000840)='./file2\x00', 0x4000040000000ac2, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x80, @loopback={0xfeffffffffffffff}, 0xf}, 0x1c) 544.070576ms ago: executing program 3 (id=225): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) ktrace(0x0, 0x0, 0x808, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connectat$unix(0xffffffffffffff9c, r0, &(0x7f0000000040)=@file={0xfffffffffffffe44, 0x1, './file0/file0\x00'}, 0xa) 515.356701ms ago: executing program 3 (id=227): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x94, 0x0, 0x8}]}) socketpair(0x1, 0x20000000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) (async) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) lseek(0xffffffffffffffff, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000000)=""/62) bind$inet(r4, 0x0, 0x0) (async) bind$inet(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DIOCIGETIFACES(r5, 0x4004667a, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0xd8}) (async) ioctl$DIOCIGETIFACES(r5, 0x4004667a, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0xd8}) listen(r4, 0x7fffffff) r6 = kqueue() freebsd11_lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000280)=[r7]) kevent(r6, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000380), 0x100000, 0x0) (async) r8 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000380), 0x100000, 0x0) ioctl$CIOCGSESSION2(r8, 0xc040636a, &(0x7f0000000300)={0x28, 0x0, 0x14, &(0x7f00000000c0)="3cbe89526b172db07f82ee18e15b0073e47f022d", 0x0, 0x0, 0x0, 0xfdffffff, [0x10004, 0x2e, 0xb6a, 0x20000c]}) (async) ioctl$CIOCGSESSION2(r8, 0xc040636a, &(0x7f0000000300)={0x28, 0x0, 0x14, &(0x7f00000000c0)="3cbe89526b172db07f82ee18e15b0073e47f022d", 0x0, 0x0, 0x0, 0xfdffffff, [0x10004, 0x2e, 0xb6a, 0x20000c]}) kevent(r6, &(0x7f0000000080)=[{0x3, 0xfffffffffffffffa, 0x50, 0x200, 0x0, 0xfffffffffffffffc, [0x0, 0x0, 0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) getsockname(r2, &(0x7f0000001400)=@un=@file={0x1004, 0x0, ""/4098}, &(0x7f00000013c0)=0x1004) (async) getsockname(r2, &(0x7f0000001400)=@un=@file={0x1004, 0x0, ""/4098}, &(0x7f00000013c0)=0x1004) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r9, 0x0, 0x0) dup2(0xffffffffffffffff, r3) open$dir(0x0, 0x0, 0x0) (async) open$dir(0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) 445.368367ms ago: executing program 3 (id=228): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0xca0706ee3fd5d6f6) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000000)=r0) r2 = setsid() ioctl$FILEMON_SET_PID(r1, 0xc0045302, &(0x7f00000002c0)=r2) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x90) openat(r3, &(0x7f0000000000)='./file0\x00', 0x200, 0x69) 385.293398ms ago: executing program 3 (id=229): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000680)='./file0\x00', 0x8000, 0x0) symlinkat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fchflags(r0, 0x200200) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000380)={'freebsd\x00'}, 0x24) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) access(0x0, 0x0) recvfrom(r2, &(0x7f00000005c0)=""/154, 0x9a, 0x2, &(0x7f0000000540)=@in={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) rtprio(0x1, 0x0, &(0x7f0000000580)={0x2, 0x4}) shmctl$IPC_STAT(0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) cpuset_setaffinity(0x3, 0x9, 0x100000, 0xcf, &(0x7f00000000c0)) freebsd11_lstat(&(0x7f0000000180)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x3863) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000380)={0x6, {{0x1c, 0x1c, 0x1, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x54, &(0x7f00000004c0)={0x6, {{0x1c, 0x1c, 0x2, 0x2000000, @mcast1, 0x5}}, {{0x1c, 0x1c, 0x2, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}}}, 0x108) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', &(0x7f0000000140)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f81", 0xff22) mount(&(0x7f00000004c0)='zfs\x00', &(0x7f0000000080)='./file0\x00', 0x44000002, &(0x7f00000006c0)="a1f614ec3e439d5c48a80500d927d1562cd22616b1f7fa0810fa57a5192011b3266a95edc7eea0bad3b009000000000000003f415f5019a85924751528d74be88f7c11bde9ccce58110b6daf95c6263adb9653acb5cfd812be8cc616abf748f8a7d5ce094308001b5602a682b95f09d933ae14dca7b2132e7d2be3fb17a268d806bf28b7b7592300cf6f69609985f154ddd0575624723518dc20e389d91fc1165c8403aa87eb8f2dcad727e1e83c5280472bafaa80b6e04bef3e1fe20ea6aaecd637bbb64f243a") 379.519145ms ago: executing program 0 (id=230): r0 = getsid(0xffffffffffffffff) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0xfffffbff) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x8) (async) procctl$PROC_TRACE_CTL(0x0, r0, 0x7, &(0x7f0000000000)=0x2) (async) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) open(&(0x7f0000000000)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) (async) execve(0x0, &(0x7f00000000c0)=[&(0x7f0000000080)='//\x00'], 0x0) (async) socket(0x1c, 0x4, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x1) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4, 0x0) (async) r1 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f00000000c0)={'bbr\x00'}, 0x24) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x1ff, @loopback, 0x2}, 0x1c) (async) sendto(r1, &(0x7f0000000500)="b9d5cf29033fda9f0d47f14a5babefe85e2f1027c0bb21378a3d78aef12d04ee87a6", 0x22, 0x100, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x2006}, 0x1c) mount(&(0x7f0000000740)='ext2fs\x00', 0x0, 0x10, &(0x7f0000000680)="ade842ebae21f7633aca48499e99749030ddbd9e14874ce6a586d90a306cb74264626630e10532de6c39d4332680bcfd0f4d702e0d69a62e7d5efef16b33148f") (async) r2 = socket(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x66) (async, rerun: 64) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async, rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) r3 = openat$crypto(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CIOCFINDDEV(r3, 0xc024636c, &(0x7f0000000100)={0xffffffff, "00f7109300080003ecc0a2d54a21bb53000000000100000093ae00001000"}) (async) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) (async, rerun: 64) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) (async, rerun: 64) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x5) (async) syz_emit_ethernet(0x684, 0x0) 345.179485ms ago: executing program 0 (id=231): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) setresgid(0x0, 0xee01, 0x0) (async, rerun: 32) r1 = getegid() setresgid(r1, 0x0, r1) sendto$inet(r0, 0x0, 0x0, 0x100, &(0x7f0000001180)={0x10, 0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x0, @rand_addr=0xe}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x105, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) fcntl$getown(0xffffffffffffffff, 0x5) (async) aio_write(0x0) (async) setsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) (async) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0x1c, 0x1, 0xaa) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, &(0x7f0000000480)={0x46}, 0x8) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f00000002c0)={0x1e, 0x1, 0xffffffffffffffff, 0x8}) (async) r4 = socket(0x1c, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) mount(&(0x7f0000000180)='hammer2\x00', &(0x7f00000001c0)='./file0\x00', 0x8000240, &(0x7f0000000200)="c5752fef05ab594b9b76249a121c470d629ded8845958092a4d56e38fbf3a881e884956cbabb24748cd51a6b") (async) socket(0x26, 0x2, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x44, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x2, @loopback, 0x801}, 0x1c) (async) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x26, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet6_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x23, &(0x7f00000005c0)={@in6={{0x1c, 0x1c, 0x1, 0x2, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x3}}, r6, 0x6ab, 0x4, 0x6}, &(0x7f0000000340)=0x90) (async) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000000c0)={0x10, 0x2, 0x3, @multicast1}, 0x10) chown(&(0x7f0000000080)='./file0\x00', 0x0, r1) 152.13831ms ago: executing program 3 (id=232): r0 = socket$inet_sctp(0x2, 0x1, 0x84) aio_write(&(0x7f0000000140)={r0, 0x8000000000000000, 0x0, 0x0, [0x40], 0x2, 0x0, 0x1, {0x7, 0x0, 0x0}, {0x0, 0xfffffffe, @sival_int=0x2, @thr={0x0, 0x0}}}) r1 = semget$private(0x0, 0x2, 0x480) __semctl$GETZCNT(r1, 0x4, 0x7) r2 = kqueue() r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x50, &(0x7f0000000380)={0x6, {{0x1c, 0x1c, 0x1, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x54, &(0x7f0000000180)={0x6, {{0x1c, 0x1c, 0x2, 0xfffffffd, @mcast1}}, {{0x1c, 0x1c, 0x2, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x54, &(0x7f0000000180)={0x6, {{0x1c, 0x1c, 0x2, 0x0, @mcast1}}, {{0x1c, 0x1c, 0x2, 0x0, @mcast1}}}, 0x108) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x42) r5 = open$dir(0x0, 0x0, 0x0) mkdirat(r5, 0x0, 0x0) renameat(r4, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') rfork(0x1000) kevent(r2, &(0x7f0000000500)=[{0x2, 0xfffffffffffffffe, 0x4, 0x0, 0xa, 0x0, [0x10, 0xfc3]}, {0x104000000000007, 0xfffffffffffffff5, 0xc0b1, 0x1000000, 0x200, 0xfffffffffffffffd, [0xffff, 0x8, 0xfffffffffffffffe]}, {0x7, 0xfffffffffffffff5, 0xc089, 0x64000000, 0x0, 0x3, [0x0, 0xfdffffffdffffffd]}], 0x3, &(0x7f00000002c0)=[{}], 0x1, 0x0) 85.336916ms ago: executing program 0 (id=233): r0 = socket(0x26, 0x2, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f00000001c0)=0x101, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x8000, {0x1, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x3ef7}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) setitimer(0x1, &(0x7f0000000140)={{0x8}, {0xfffffffffffffffd, 0x8000}}, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) cpuset_getid(0x3, 0x3, 0x54, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0xf33a}, {0x0, 0x10001}}, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r5 = accept$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000180)=0x1c) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r6, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) r7 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet_mreqn(r6, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x2e, &(0x7f0000000040)={@empty, r8}, 0x14) minherit(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x2e, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @broadcast}, r8}, 0x14) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x3, 0x1, 0x0) rfork(0x1000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1c, 0x5, 0x7) setsockopt$sock_int(r9, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) setitimer(0x0, 0x0, 0x0) socket(0x2, 0x1, 0x49) 45.127142ms ago: executing program 3 (id=234): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async, rerun: 64) r0 = kqueue() (rerun: 64) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file1/file0\x00', 0x10000, 0x102) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) aio_writev(&(0x7f00000015c0)={r1, 0x2, &(0x7f0000000000)='\b', 0x1, [0x9], 0xa, 0x8, 0x0, {0x6, 0x10002, 0x0}, {0x0, 0x1, @sival_int=0x1, @spare=[0x80, 0x2, 0x10, 0x7f, 0x4, 0x80005, 0x5, 0x100000000]}}) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) (async, rerun: 64) sendto$inet(r2, 0x0, 0x0, 0x20104, 0x0, 0x0) (rerun: 64) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) pwritev(r3, 0x0, 0x0, 0xed5) (async) freebsd11_fstatfs(r3, &(0x7f0000001040)) (async) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000780)) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x26, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x23, &(0x7f0000000240)={@in6={{0x1c, 0x1c, 0x2, 0xbf1, @mcast1, 0x3}}, r4, 0x3, 0x3, 0x4}, 0x90) (async, rerun: 32) getgroups(0x0, 0x0) (rerun: 32) setresuid(0x0, 0x0, 0xffffffffffffffff) (async) setregid(0x0, 0x0) r5 = fork() sigqueue(r5, 0x50, @sival_int=0x6) (async) shmctl$IPC_SET(0x0, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x40}, {r0}, {0xffffffffffffffff, 0x2}, {r2, 0x100}, {r6, 0x2}], 0x7, 0x4) syz_emit_ethernet(0x5eb, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x5b5, 0x3a, 0x3eda8841f6300bf7, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7, "456dfe07f5271fe139de4270661a9e36235ffcb435a2f7ac8fba10ed79376b65d909580a54caf7066bfca834ce9bdd26ffefecaf6d2eb1e472992addedcc04030f3982886a8330be71e57edd104631b3c9c95dc2e997d4cd8bc0e2e293c50822354b54214b498fb9ebcb971bd67aff24441659bcc3fd945870371bbf25dd848f8333c21f7eba9fd052f83679d813569c5242304491f206786f8bebc8a8d040ae43cc8103cea541c589175624b490d0bbf153d17d92dca6a0398f1827f563ff63766a3f77bf07f5af2aae850491e10016a26f6d1890e87fa9e57cd56092d38281006a5d4879f261d872928bae627308c82f39e03b740c620fe3a927723aa6602e36d393d744829a69a9829388c045c22750f30693a0c75fa9467df924e9ab8d2580f337a7bd47b3ba235c7aa8533ee25f44e4d8d425d80802dd7f1b79c7d1a06436915de88c26a9aebd226a4647d52767080f1e65b45936be8113f9c7a8b01aa479191c73cc9045be02f19bd391385a1ae33ff02e0520c07d6d5d8d7c9da6add80263de21eec1cc63062f39c76801aa44d6575c3be2ccba6764c7f5e3fe41da0730fce6b0a4b4b409434122a5b42d29f4730ffa262c2c182ba763c0205d9c1426d3e9c75ff299eb91f18e2b3ff5c1958bf8dbd24d510631aa9233f513ed81a10f173dbb1d2324ffc9334bc0fc0d9619183bfca69445afdac263507e03b4afb7464a28f4c33262237a55ead07a60cddedefb3618d45735d16580f35abf5732d90e4c9ad9eebcfeb4fc33dca5ef7751f4f0566b33c5c75efed32ad8dd32397842205d52ea684e3e385f2c68b73a92b28989c298e42f2163183f8afdec6289e3e76dd50716138dd33b709cc4835fe247e73e0476cd5115c33cd57912df150bfd9e34233c4a44f8fd262c7916915b187acdadc7ef134b4fa0a53ffd310d27936d05b97d59e0c6be128b2c4ce3a406292ff5a4d08dbecf4779823fc92623b56bbd505f3fc730466fbbe503f73e7f979a5cc0593d2da68a5d86f15cc80d4e501d7a5018bebafa5107f1d784a2c8adcd27441ef45247824d0f299c6e551f1469cc4e445de4bd007439877564d9b9753393856aa9991ba6879fd9035c0a6d11c6dd603155493badd8dc4ce4fc1305f7eca158487b7db9b26ad63ca79a78093d38c2fad2f55ab4b3adb728377065b68740a6424072593e8e5f74b14e1c0853dbf2e0f2e0c05d567029b2bccdc2c11e85ada74b0b3861db9ab7dbec7d82ed95e86c0a706d67313c1e8b98c97d6032f3bb3253ee5ce319fb116f1d010003ac948f592db8de043e25d89f71f84e6361677754fcbbd40dc89bbf9420f5d00d3f45aa4db744d36fbdec008a5f8d37843165fab5eec6d8349e2ff636662f38536184ba1c3e4734c3bd1b4e944b2aeaf88b02d4b752c7be27701af5dc1dc2583b4b98abab0f014b4ef038f72601c433e0af77c5c996f642b86cdfe32ca151b31cc89adad2cfa8ac3e93607b98208a6af4eb35ad078772eb29301b88ffdf0ef7772f0919e46d42685fb939d6d68fd505dbe638054bcedc120ef20148f95d92ea9ac0e4b93cef5d898a9b4e01c0c1972ca306d9cd3bbfbfd1dcf6762ac85e83224eb51cdddddf805a57d23bca57b590e8b05e938460beff60c4d26501e5ea969ca8391025f5ab960eba35036460ae55602c6c64ce210bb642a19c2254fa038a38d9604ec90138e429a915dfaf4c685b656dd1c2a58c959f82d8e58b3d164d9b62b097117b05b28cfafb70e974ef348d5cb169f3e0d3970bf4fcb3d0679d35f169e72a992a672457813c8150e1b4efa9eea41eef9fd5da05a51bdbaf073fa08304fd06d3293187e756817f9d2552e78755aa5a4732742f9001e96b39ebd91f12e633013a86ca82d88baae42b6c90f0b6929940dcd741288b37baa73c86e6002c445afafaa2d2991339f7cbf2768180d2f7c45436174dc25a0623a641d5a099c4f4361118a0aa9cf1151a17a44e0715437f3654ac087e3528fcd71185a5a0935c2a61b99ccb465a90f5bb788612b80d2106025ec050cc37"}}}}}}) 40.0023ms ago: executing program 0 (id=235): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) ktrace(0x0, 0x0, 0x808, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connectat$unix(0xffffffffffffff9c, r0, &(0x7f0000000040)=@file={0xfffffffffffffe44, 0x1, './file0/file0\x00'}, 0xa) 39.485784ms ago: executing program 0 (id=236): socket$inet6_sctp(0x1c, 0x5, 0x84) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = kqueue() setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x200, 0x0, 0x0) (async) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) (async) sync() (async) socket$inet6_sctp(0x1c, 0x0, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000800)={0x0, 0x4, 0x7}) (async) sysarch$I386_GET_IOPERM(0x3, &(0x7f0000000200)) (async) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x1f, 0x0, 0x20, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4753cc859dd1bff275aedaacdd4743c7eaa2c", 0x0, 0x0, 0x0, 0x7d86699a, [0x0, 0x0, 0x0, 0xda]}) (async) ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000640)={0x0, 0x2, 0x0, 0xa7dd, &(0x7f0000000200), 0x0, 0x0, 0x0}) (async) rfork(0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) (async) ktimer_settime(0x0, 0x0, &(0x7f0000000000)={{0x81, 0xae}, {0x101, 0x1}}, &(0x7f0000000140)) (async) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) (async) copy_file_range(r2, &(0x7f0000000040)=0x5, r2, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=237): procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x2, @loopback, 0x1}, 0x1c) r0 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x410, 0xffffffffffffffff, 0x0) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x5) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000080)={0x10, 0x23, 0x1, &(0x7f0000000740)='\x00', 0x0, 0x0, 0x5, 0x7d86619b, [0x0, 0xffff, 0xc, 0x4000000]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r5 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x3ff, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0xb, 0x0, &(0x7f0000000340)) setsockopt$inet_mreq(r1, 0x0, 0xc, &(0x7f0000000000)={@multicast2, @loopback}, 0x8) getsockopt$inet_buf(r1, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r6 = socket$inet6_udplite(0x1c, 0x2, 0x88) aio_read(&(0x7f0000001280)={r6, 0x60000000, &(0x7f0000001380)="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", 0x102, [0x0, 0x80000000], 0x200, 0x18, 0xffffffff, {0x800, 0x2, &(0x7f0000001180)="c932b9fd7548cc0b2dc0240d1ffaf6681bf80f5747438bf887cd02543977405eca90dc44e3c55aa4bb1cb8797c7fa192011601ecf4b39101b5c02b3a8204266e28b7"}, {0x3, 0xc, @sival_ptr=0x8000000000000000, @thr={&(0x7f0000001200)="c4a22537710e653643a2d65f0000000000002e46d9f2660f2f74ef00c44141d0c466410f1a8d3969f4ecf245ad8f297882470c0f01d01c0e", &(0x7f0000001240)="d90af3da5a5070af125eb70f27a7bb124c201051867005f476128edc8e29c22e7e97f97c29f7c833687047715008fc40"}}}) setsockopt$sock_int(r6, 0xffff, 0x1014, 0x0, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000dc0)={0x20, 0x1, 0x0, 0x0, 0xffffffffffffffff}) pipe2(&(0x7f0000000000), 0x0) r7 = getpgid(0x0) procctl$PROC_SPROTECT(0x2, r7, 0x1, &(0x7f0000001180)=0x2) r8 = kqueue() kevent(r8, &(0x7f0000000040)=[{0x3, 0xfffffffffffffffe, 0x1c103, 0x0, 0x4, 0x2000000800000000, [0x0, 0x0, 0xfffffffffffffffc]}], 0x1, 0x0, 0x300, 0x0) rfork(0x85000) bind$inet(r0, &(0x7f0000001340)={0x10, 0x2, 0x0, @multicast1}, 0x10) sync() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. md0: truncating fractional last sector by 1 bytes vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e4d4000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 8, writecount 6, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541011f0 ref 1 pages 544 cleanbuf 60 dirtybuf 8 lock type ufs: EXCL by thread 0xfffffe0054130000 (pid 844, syz-executor, tid 100162) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=c9fa502e, uid=0, gid=0, flags=0x40008 ino 81, on dev gpt/rootfs Jan 1 00:00:04 ci-freebsd-main-8 kernel: arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.0.187 on tap0 FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0077833000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 7, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe005412c8b8 ref 1 pages 264 cleanbuf 31 dirtybuf 2 lock type ufs: EXCL by thread 0xfffffe005411f780 (pid 910, syz-executor, tid 100291) nlink=1, effnlink=1, size=1048576, extsize 0 generation=80e97067, uid=0, gid=0, flags=0x40008 ino 109, on dev gpt/rootfs ktrace write failed, errno 27, tracing stopped for pid 758 ktrace write failed, errno 27, tracing stopped for pid 746 ktrace write failed, errno 27, tracing stopped for pid 745 ktrace write failed, errno 27, tracing stopped for pid 742 ktrace write failed, errno 27, tracing stopped for pid 741 ktrace write failed, errno 27, tracing stopped for pid 735 ktrace write failed, errno 27, tracing stopped for pid 685 ktrace write failed, errno 27, tracing stopped for pid 681 ktrace write failed, errno 27, tracing stopped for pid 334 ktrace write failed, errno 27, tracing stopped for pid 736 ktrace write failed, errno 27, tracing stopped for pid 785 FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: lock order reversal: 1st 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/kern_ktrace.c:1151 2nd 0xfffffe006e42aac0 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:581 lock order ufs -> proctree established at: #0 0xffffffff81653331 at witness_checkorder+0x781 #1 0xffffffff81544fbf at _sx_slock_int+0x13f #2 0xffffffff81610b2d at uprintf+0x14d #3 0xffffffff81dbf0df at ufs_rmdir+0xdf #4 0xffffffff822f708d at VOP_RMDIR_APV+0xcd #5 0xffffffff817b80fa at kern_frmdirat+0x87a #6 0xffffffff82133662 at amd64_syscall+0x4e2 #7 0xffffffff820d86fb at fast_syscall_common+0xf8 lock order proctree -> ufs attempted at: #0 0xffffffff81654202 at witness_checkorder+0x1652 #1 0xffffffff814bb286 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81d92e3b at ffs_lock+0x18b #3 0xffffffff822f83e7 at VOP_LOCK1_APV+0x57 #4 0xffffffff817c34be at _vn_lock+0x14e #5 0xffffffff817c3d68 at vn_close1+0x1e8 #6 0xffffffff814acb7a at ktrops+0x41a #7 0xffffffff814ac2ed at sys_ktrace+0xaed #8 0xffffffff82133662 at amd64_syscall+0x4e2 #9 0xffffffff820d86fb at fast_syscall_common+0xf8 Expensive callout(9) function: 0xffffffff8468a450(0xfffffe007779b178) 0.003436673 s ZFS filesystem version: 5 ZFS storage pool version: features support (5000) if_delmulti_locked: detaching ifnet instance 0xfffffe0058140000 Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 Warning! syz-executor[1038] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 Connection to 10.128.1.24 closed by remote host. FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 md3: truncating fractional last sector by 4 bytes FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: panic: handle_workitem_remove: file ino 131 negative i_nlink -1 cpuid = 0 time = 5 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c4b7d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c4b930 vpanic() at vpanic+0x257/frame 0xfffffe0056c4baf0 panic() at panic+0xb5/frame 0xfffffe0056c4bbb0 handle_workitem_remove() at handle_workitem_remove+0xd45/frame 0xfffffe0056c4bcf0 process_worklist_item() at process_worklist_item+0x525/frame 0xfffffe0056c4be40 softdep_process_worklist() at softdep_process_worklist+0xfd/frame 0xfffffe0056c4be90 softdep_flush() at softdep_flush+0x1a4/frame 0xfffffe0056c4bef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c4bf30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c4bf30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 14 tid 100095 ] Stopped at kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827cb4c0 .str.27 rsp 0xfffffe0056c4b910 rbp 0xfffffe0056c4b930 rsi 0 rdi 0xffffffff81614a99 printf+0x149 r8 0 r9 0xffffffff r10 0x1 r11 0x17 r12 0xfffffe00540c1780 r13 0xfffffffffffffffe r14 0xffffffff827cb4c0 .str.27 r15 0 rip 0xffffffff815fe5ce kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> show proc Process 14 (bufdaemon) at 0xfffffe000780a5c0: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b4d060 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b4d060 reapsubtree: 14 sigparent: 20 vmspace: 0xffffffff83b4e040 (map 0xffffffff83b4e040) (map.pmap 0xffffffff83b4e0e0) (pmap 0xffffffff83b4e150) threads: 3 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100095 Run CPU 0 [/ worker] db> ps pid ppid pgrp uid state wmesg wchan cmd 1178 763 763 0 R (threaded) syz-executor 100751 RunQ syz-executor 100752 S uwait 0xfffffe0079406280 syz-executor 1174 766 766 0 S (threaded) syz-executor 100556 S nanslp 0xffffffff83ba3c41 syz-executor 100742 S connec 0xfffffe0059ac7cda syz-executor 100743 S uwait 0xfffffe0058257000 syz-executor 100750 S uwait 0xfffffe00584ee480 syz-executor 1171 1 1171 0 Ss+ ttyin 0xfffffe00582904b0 getty 1170 1 1170 0 Ss+ ttyin 0xfffffe005828d4b0 getty 1169 1 1169 0 Ss+ ttyin 0xfffffe005828d8b0 getty 1168 1 1168 0 Ss+ ttyin 0xfffffe00585cdcb0 getty 1167 1 1167 0 Ss+ ttyin 0xfffffe00585cd8b0 getty 1166 1 1166 0 Ss+ ttyin 0xfffffe00585ce0b0 getty 1165 1 1165 0 Ss+ ttyin 0xfffffe005828d0b0 getty 1164 1 1164 0 Ss+ ttyin 0xfffffe00585cd4b0 getty 1163 1 1163 0 Ss+ ttyin 0xfffffe005828dcb0 getty 1158 1 763 0 S uwait 0xfffffe0053e0ee80 syz-executor 1153 1 763 0 S uwait 0xfffffe0053e0ec80 syz-executor 1149 1 763 0 S uwait 0xfffffe005967b380 syz-executor 1145 0 0 0 DL mdwait 0xfffffe0077ab2000 [md3] 1128 1 766 0 S uwait 0xfffffe005825a480 syz-executor 1127 1 766 0 S umtxn 0xfffffe0053e0ed80 syz-executor 1122 1 1119 0 S uwait 0xfffffe00584eec80 syz-executor 1120 1118 1118 0 D ifnet_d 0xffffffff83cc2000 ifconfig 1118 762 1118 0 S wait 0xfffffe00540055c0 syz-executor 1117 1 766 0 S uwait 0xfffffe005967b500 syz-executor 1112 1 766 0 S uwait 0xfffffe0079405500 syz-executor 1111 1 763 0 S uwait 0xfffffe005967a480 syz-executor 1104 1 764 0 S uwait 0xfffffe0079405080 syz-executor 1095 1 766 0 S uwait 0xfffffe005967cd00 syz-executor 1083 1 764 0 S uwait 0xfffffe005967c800 syz-executor 1081 1 766 0 T syz-executor 1080 0 0 0 DL (threaded) [KTLS] 100604 D - 0xfffffe0058568900 [thr_0] 100605 D - 0xfffffe0058568980 [thr_1] 100606 D - 0xffffffff83cb5628 [reclaim_0] 1054 1 766 0 S uwait 0xfffffe0079405400 syz-executor 1052 1050 763 0 SV uwait 0xfffffe0079406180 syz-executor 1051 1 766 0 S uwait 0xfffffe00584ee580 syz-executor 1050 1 763 0 DV ppwait 0xfffffe005417ca60 syz-executor 1049 1 764 0 S uwait 0xfffffe005967cc00 syz-executor 1044 1 764 0 S uwait 0xfffffe00584eed80 syz-executor 1032 1031 1031 0 D tun_con 0xfffffe00581303a8 ifconfig 1031 762 1031 0 S wait 0xfffffe005413b5a0 syz-executor 1022 1 1017 0 S uwait 0xfffffe00584ecd00 syz-executor 1019 1 765 60928 S