last executing test programs: 7.525600573s ago: executing program 1 (id=139): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x2e, &(0x7f0000000040)={@empty, r2}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x40181, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x201, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c) 7.44411959s ago: executing program 1 (id=135): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f000091a000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000fed000/0x4000)=nil, 0x7000) shmdt(r1) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) 7.426882746s ago: executing program 1 (id=136): r0 = socket(0x2, 0x1, 0x0) setrlimit(0x9, &(0x7f0000000100)) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r0, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) 7.34429687s ago: executing program 1 (id=137): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, &(0x7f0000000080)={0x95f8, [{0x566e, [0xee0d, 0xd871, 0x7, 0xff, 0x7fff, 0x3, 0xfffffff7, 0xaa8, 0x7ff, 0x9, 0xfffffffc, 0x9, 0x7, 0x6219848d, 0x515, 0x8, 0x5, 0x0, 0x0, 0x2, 0x0, 0xf, 0xd6, 0x8, 0x1de, 0xfffffffb, 0x5, 0x2, 0x7f, 0xfff, 0x9, 0x6, 0x3, 0x5, 0x4, 0x5, 0x4, 0x401, 0x7, 0xba5c, 0xe8c, 0x80000001, 0x8, 0xfffffffd, 0x3, 0xedf, 0x1, 0xffffffff, 0x4c02, 0x4, 0x3, 0x10001, 0xffffffde, 0x0, 0x10, 0x400, 0x715, 0x7e1, 0x8000, 0xd, 0xa, 0x81, 0x2, 0x3, 0x4, 0x5131, 0x4, 0x1, 0xbe9a, 0xfff, 0x731, 0x9, 0xbc, 0xb, 0xc74f, 0x0, 0x9, 0x5, 0x4, 0x101, 0xfffffff8, 0x2, 0x0, 0x5, 0x5229, 0x9, 0x7, 0xfffffffb, 0x1, 0x8001, 0xf, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5, 0xe0, 0x7ff, 0x2, 0x0, 0x8, 0xc, 0x8]}, {0x5c, [0x5, 0x6, 0x4, 0xbae, 0x2, 0x4, 0x86f13b53, 0x401, 0x1000, 0x7, 0x6, 0x7, 0x7fff, 0x0, 0x5, 0x400, 0x9, 0x96a9, 0xbe, 0xfffffffe, 0xb, 0x80008, 0xae0, 0x6, 0x7, 0x40000, 0x40, 0x9, 0x7fff, 0x3, 0x200000, 0x7, 0x0, 0x5, 0x3b5, 0x6, 0x2, 0x58, 0x2, 0xff, 0xffffff00, 0x4, 0x4, 0x6, 0x3, 0x3, 0x8, 0x100, 0x0, 0x907, 0x101, 0x9, 0x6, 0xc95, 0x6, 0x8, 0x4, 0x2, 0xb, 0x3eb, 0x0, 0x7fff, 0x0, 0xff8, 0x9, 0x7, 0x8, 0x6, 0x61a, 0x2, 0x80000001, 0x90fd, 0x6, 0xd, 0x6eed, 0x0, 0x4, 0x1, 0x7, 0x5, 0x0, 0x10001, 0x10, 0x80000001, 0x9, 0x4b2, 0x100, 0x7fffffff, 0x2, 0x0, 0x7, 0x5, 0x1000, 0x0, 0x8, 0x6, 0x2, 0x1, 0x4, 0x1, 0x3ff, 0x1000, 0x1, 0x4]}, {0x0, [0x1, 0x6, 0x6, 0x2, 0x800, 0x0, 0xff, 0x6, 0x7, 0x3, 0xe, 0x1, 0xdd, 0x538, 0x7bac, 0xa, 0x10, 0x9, 0x10001, 0x8, 0x8, 0xff, 0x6, 0x2, 0x800000, 0x2, 0x4, 0x8, 0x4, 0xb, 0x9, 0x1, 0x3, 0xfff, 0x343d3543, 0x400000, 0xfffffff8, 0x9, 0xa87f, 0x800, 0x7, 0x2, 0x1, 0xdb4, 0x101, 0xb369000, 0x9, 0x92, 0x4, 0x0, 0x98, 0x3d104cc0, 0x52, 0x8, 0xc, 0x0, 0x437, 0x3, 0x3, 0x1, 0x1000, 0x200000, 0xfff, 0x17e7, 0x8, 0x7, 0x6, 0x0, 0x5, 0xf10, 0x5, 0x1, 0xffffffb8, 0x7fff, 0x9, 0xfffffffd, 0xfffffffe, 0x3158, 0x5, 0x2, 0x8, 0x36d5, 0x9, 0x1, 0xfffffffb, 0x2, 0x8, 0x8000, 0x5, 0x3, 0x1, 0xfffffffd, 0x4, 0x1, 0xfffffff7, 0x40, 0x6, 0x3, 0x6, 0x1ff, 0x4, 0x9, 0x9, 0x39]}, {0x3, [0x7, 0x5, 0x8, 0xfc, 0x12, 0xd683, 0x8, 0x5, 0x8, 0xadd, 0x5, 0xdb, 0x80000001, 0xc, 0x0, 0xfffffff7, 0xffffffff, 0x2, 0x5, 0x2, 0x3eb3, 0x0, 0x7, 0x7, 0x7, 0x6, 0x5, 0x7673faf3, 0x5a912096, 0x9, 0x1, 0x2, 0xffffffff, 0x1, 0x4f124442, 0x8, 0x0, 0x2, 0x7, 0x190, 0x5, 0x3, 0x1, 0x800, 0x9, 0x9, 0x3, 0x7, 0x5, 0x7, 0x8, 0x7, 0x0, 0x10001, 0x1, 0x0, 0x7ff, 0xe, 0x9, 0x2df, 0x7, 0x7fffffff, 0x80000001, 0x4, 0x3, 0x3, 0x4, 0x496a, 0x7, 0x7fffffff, 0x74, 0x2, 0x9, 0x3, 0x6, 0xf3, 0x1, 0xa3, 0x49c, 0xec0, 0x100, 0x3, 0x6, 0x9, 0x2, 0x0, 0x6, 0x6, 0x9, 0x1, 0x0, 0x5, 0xa, 0x2, 0x4, 0x3b, 0x3, 0x40, 0x225, 0x80, 0x4, 0x4, 0x7fff, 0x2]}, {0xe8bc, [0x5, 0x4, 0x8, 0x5, 0x4, 0x80, 0x9, 0x1ff, 0xfff, 0xfffffff9, 0x1ff, 0x1, 0x800, 0x80000000, 0x8, 0x7, 0x7ff, 0x6, 0xffff, 0x9, 0xe92, 0x8, 0x13, 0x2, 0x0, 0x7f, 0x401, 0x8, 0x7, 0x8, 0x4, 0x5, 0xffffe6ff, 0x7, 0x80000000, 0x6f88, 0x2, 0x9, 0x7f, 0xa5de, 0x0, 0x8, 0x3, 0x800, 0x5, 0x3ff, 0x54, 0x80, 0xf, 0x3ff, 0x8, 0xfffffffa, 0x9, 0x0, 0x800, 0x8, 0x1, 0x4, 0x6, 0x8, 0x3, 0x5, 0x5, 0x2, 0x1, 0xb26, 0x6, 0x81, 0x1, 0x101, 0x3, 0x2, 0x6, 0x200, 0x4, 0x5, 0x7, 0x2, 0x1ff, 0x3, 0x1, 0x800, 0x5, 0x7, 0x468, 0x7f, 0x94, 0x7, 0x6, 0x3, 0x7, 0x7ff, 0xfffffffe, 0x10000, 0x4, 0x4b, 0x435c9460, 0x3ff, 0x7ff, 0x4b, 0x40, 0x0, 0x5, 0x7]}, {0x3, [0x7, 0x2, 0x1, 0x5, 0xf, 0x40, 0x6, 0x1000, 0x4, 0x3, 0x5, 0x6, 0x1, 0x5, 0xa, 0x81, 0x7, 0x8, 0x8, 0x6, 0x80000000, 0x60, 0x0, 0xd2, 0x1, 0x9, 0x10001, 0x6, 0xc, 0x6, 0x200, 0x5, 0x3, 0x52fd0a00, 0x8, 0x3, 0xfffff1b2, 0x1d, 0x8, 0xff, 0x2000, 0x4b, 0x808f, 0x5, 0xb, 0xfffffffa, 0x3, 0x7ff, 0x430c, 0x1000, 0xb35, 0x0, 0x3, 0x9, 0x1ff, 0x6, 0x400000, 0x5, 0x10001, 0x1, 0x6, 0x1, 0xffff, 0x10, 0x0, 0x9, 0x3, 0xce94, 0x4, 0x0, 0xfffffc01, 0x80, 0x200007ff, 0x2, 0x3, 0x4, 0x8, 0x400, 0x8, 0x81, 0xfffffff7, 0x9, 0x6, 0x7ff, 0x7, 0x0, 0x24f8, 0x7fffffff, 0x6, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x4ab464c, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x5, 0x9, 0x5b8b7924, 0x7ac5]}, {0xffffff7f, [0x1, 0x4, 0x131f, 0x1, 0x8, 0x6, 0x0, 0x7, 0x3, 0x3, 0x1, 0x200, 0x7, 0x49, 0xfd, 0xd0, 0x39e, 0x3, 0x5, 0xffff, 0x5, 0x3, 0x0, 0x9, 0xffffffff, 0x7, 0xffffffff, 0x4, 0xc, 0x9, 0x263, 0xabd1, 0x3, 0x2, 0x9, 0x6, 0xb7af, 0x6, 0x2, 0x6, 0x200, 0x7, 0x10000, 0x2, 0x80000000, 0x4, 0xfffffff5, 0x1, 0x3041, 0x8, 0x6f, 0x7, 0x7, 0x5, 0xfff, 0x5, 0x8, 0x1, 0x5, 0x52, 0x3, 0x80, 0xe5, 0x7, 0x3f, 0x10, 0x6, 0x5, 0x4, 0xfffffff8, 0x4, 0x8001, 0x4220c0b8, 0xfff, 0x7, 0x6, 0x6, 0x80, 0x6, 0xc9, 0x2, 0x7, 0x52, 0x8000, 0xc, 0x6, 0x5, 0xe, 0x9, 0x8, 0x1, 0x5, 0x5, 0x7, 0x5, 0x6, 0x1d33945, 0x9, 0x8, 0x9fc, 0xffff, 0x4, 0x5, 0x8]}, {0xfffffffa, [0x1ff, 0x8, 0x9, 0x1, 0x7, 0x3, 0x1, 0x2, 0x80, 0x10000, 0x8, 0xae, 0x7, 0x3, 0x2, 0x6, 0x0, 0x42, 0xec7, 0x0, 0x3, 0x1, 0x9, 0x8, 0x7, 0xfff, 0x3, 0x8d4, 0x7ca, 0x5, 0x283, 0xd3b2, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x7ff, 0x200, 0x54, 0x1, 0x4, 0x40, 0x9, 0x40, 0x7, 0xc, 0x3, 0x1, 0x6, 0x10000, 0x6, 0x2, 0x7fffffff, 0xfffffff1, 0x0, 0xffff9594, 0x6, 0x2, 0x6ef, 0x1, 0x3, 0x0, 0x40, 0xfffffffe, 0x1, 0x3, 0xb28a, 0x1, 0x80000001, 0x4, 0x30e, 0x7b, 0x2, 0x5, 0x9, 0x7ff, 0x5, 0x7, 0x1, 0x9, 0xc, 0x6, 0x1, 0x272, 0xc, 0x0, 0x2, 0x4, 0x400, 0x5, 0xfffffffc, 0xffffffff, 0xcd9f, 0x19d, 0x5, 0xf0, 0x6, 0x4, 0x9, 0x4, 0xe6dc, 0x8, 0x1ff0]}, {0x0, [0x9, 0x5, 0x5, 0x1, 0x7, 0x7f, 0x9, 0x4, 0x79, 0x0, 0x7ff, 0xe, 0xffff, 0x0, 0x80000000, 0x7, 0x1000, 0x3ff, 0x3, 0xf7, 0x1, 0x0, 0x40000000, 0x5, 0xfffffff7, 0xfffffffe, 0x1ff, 0x2, 0x3, 0x1, 0x2, 0x1, 0x4, 0x81, 0x8, 0x2, 0x4, 0x6, 0x1, 0x6, 0xffff, 0x1, 0xf, 0x3, 0x2, 0x6, 0x7, 0x8, 0x1ff, 0x7ff, 0xa, 0x0, 0x1, 0x7, 0xc0, 0xf58f, 0x1000, 0x80000000, 0x3, 0x7ff, 0xfe0, 0x3, 0x7, 0x8, 0x9, 0x3, 0x1, 0x1, 0x5, 0x3, 0x1000, 0xfffffff7, 0x1ff, 0xffffffff, 0x4, 0x8001, 0x1, 0x8, 0x0, 0x6, 0x8, 0x1, 0x100, 0x8, 0x0, 0xd7fb, 0xa, 0x0, 0x5, 0x4, 0x1a0, 0x2, 0x4, 0x0, 0x6, 0x1ff, 0x40, 0x5, 0x4, 0xbc, 0x8, 0x5, 0x7, 0xfffffffb]}, {0x6, [0x10, 0x40, 0x1, 0x253, 0x8, 0x8, 0x8, 0x1, 0x7, 0x8, 0x0, 0x60, 0x7ff00000, 0x80, 0x8, 0x2, 0x2, 0x6, 0x1, 0x800, 0x1, 0x0, 0x529b, 0x3, 0x0, 0x5, 0x0, 0xfffffffa, 0x1000, 0xa, 0x9, 0xf, 0x7, 0x7, 0x5, 0x0, 0x2, 0x2, 0x5, 0x6, 0x9, 0x4, 0x7, 0xb, 0x101, 0x8, 0x4, 0xfb8c, 0xf3b, 0x4, 0x7, 0x8, 0x8, 0x7, 0x5, 0x4, 0x4, 0x5, 0xcff9, 0x2, 0x9cb, 0x3, 0x2, 0x400, 0x6, 0x7, 0x9bc7, 0x80000000, 0x8, 0x1, 0x200, 0x4, 0xc, 0x6, 0xc2c4, 0x5, 0x5, 0x7, 0x6, 0xf, 0x80, 0x3, 0xfffffffd, 0x20000000, 0x21, 0x2, 0x2, 0x3, 0x80, 0x1, 0x4, 0x7d7, 0x9, 0x4, 0x7f, 0x0, 0x7ff, 0x7fff, 0x1, 0x8a6, 0xfffffff9, 0x1, 0x6, 0x4]}, {0xc0, [0x3f04, 0xf, 0xfffffff7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x9, 0x6, 0x7fffffff, 0x0, 0xfffffffe, 0x7fff, 0xa39, 0x0, 0x0, 0x8, 0xe, 0x401, 0x8, 0x800, 0x7, 0x9, 0x40, 0x0, 0x5144b3ea, 0x694, 0x4, 0x7fe, 0x99, 0x81, 0x5, 0x4, 0x3, 0x0, 0x3ff, 0x1000, 0x9, 0x6, 0x40, 0x8, 0x1, 0xf, 0x1, 0x8, 0x5627aa48, 0x5, 0x4455, 0xfffffffd, 0x1000, 0x7, 0x0, 0x8, 0x0, 0x3, 0x7, 0xffff0000, 0x80000000, 0x7, 0x7fff, 0x0, 0x3, 0x2, 0x9, 0xe, 0x3, 0x7, 0x0, 0xa, 0x3, 0x54d, 0x100, 0x8, 0x3ff, 0x8, 0xfffffffd, 0xffffe64b, 0x400, 0x9, 0x200, 0x3, 0x7, 0x412, 0x40, 0x8, 0x9, 0x2, 0xb0000000, 0x3, 0xb, 0x0, 0x99, 0xeae, 0xe8, 0xfffffc00, 0xd8b5, 0x4, 0x9, 0xf, 0x2ab, 0x5, 0x8000]}, {0x0, [0x7, 0x44f, 0x4, 0x9, 0x4, 0x0, 0x6, 0xffffffed, 0x7f, 0x7, 0x3, 0x4, 0x80000001, 0x1, 0xdf96, 0x10000, 0x2, 0xc1e, 0x1000, 0x9, 0x6, 0x9b6, 0x404000, 0x1, 0x5, 0x7f, 0x0, 0x2, 0xf, 0x80, 0x8f7, 0x6, 0x2, 0x7f, 0xf7b1, 0x4, 0x0, 0xfffffff7, 0x6, 0x8, 0x1, 0x4, 0xfffff800, 0x8, 0x7, 0x4, 0x14, 0x10, 0x9, 0x7, 0x80, 0xffffffff, 0x10, 0x800, 0x3, 0x3ff, 0xb7, 0x5, 0x4, 0x6, 0x0, 0x8, 0x8001, 0x1, 0x2800000, 0x2e0, 0x10000, 0x8, 0x3, 0x800, 0x1, 0x7f, 0x9, 0x7, 0x10001, 0x8, 0x92, 0x40a54e46, 0x1, 0x7, 0x1ff, 0x1, 0x4, 0x7fff, 0x0, 0xf16, 0x800, 0x1, 0x0, 0x6, 0x1, 0x3a2, 0xf76b, 0x80000001, 0x6, 0xc0000, 0x8, 0xfffffff2, 0x7fffffff, 0x400, 0xb, 0x5, 0xffffffff, 0xffff]}, {0x5, [0x10000, 0x5, 0x25a, 0x1, 0x6, 0x2, 0x8, 0xfffffffd, 0x6, 0x3, 0x5, 0x100, 0x1, 0x2, 0x27c, 0x10000, 0x0, 0xfffffff3, 0x1, 0x7, 0xfffffff7, 0xfd4, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0xf, 0x6, 0x0, 0x100, 0x0, 0xe296, 0x0, 0x8000, 0xffffa59e, 0x7, 0x1, 0x4, 0x4, 0x100, 0x8, 0x1ca, 0x2, 0x5, 0x8, 0xfffffff9, 0xa, 0x52b, 0xe, 0x4, 0xfffffff9, 0x5f, 0x5, 0x8, 0xfffffff7, 0x2, 0x4, 0x6, 0x0, 0x5, 0x3, 0x7, 0xff, 0x10a, 0x7, 0x6, 0x1ff, 0x1, 0x4, 0x0, 0x4, 0x6, 0x401, 0x4a1, 0x5, 0x8001, 0x7, 0x6f, 0xc1f6, 0x2, 0x6, 0x1, 0x7, 0xff, 0x9, 0x43d, 0x2, 0xffff, 0x1, 0x7, 0x9a, 0x7ff, 0xb9, 0x800, 0x3, 0xc, 0x4, 0x5, 0x7, 0x9, 0x7ff, 0x32, 0x7]}, {0x6, [0x1, 0x5, 0xcd4, 0xb0, 0x1000, 0x8, 0xfff, 0x8, 0x6, 0xc, 0x4a, 0x9, 0x74, 0x6, 0xa, 0x75e7, 0x4, 0x0, 0x8, 0x0, 0x4, 0x1ff, 0x4, 0x80, 0x7, 0x7, 0x8, 0xaa9, 0x0, 0x7, 0xd46, 0x7, 0x5, 0x80000000, 0x9, 0x4f9b3d50, 0x800, 0x3, 0x8, 0x8, 0xdd62, 0x25ae, 0x0, 0x7, 0xfffffff9, 0x450, 0x3, 0x5, 0x2271, 0x1, 0x2, 0x1, 0x3, 0x7fffffff, 0x0, 0x3, 0xffffff48, 0x86, 0x0, 0xb959, 0x200, 0x8, 0x5, 0x2, 0x92ad, 0x1, 0x2, 0x38e, 0x7ff, 0x10, 0x7f, 0xbe15, 0x5, 0x7, 0xf, 0x86, 0x2, 0x5, 0x8001, 0x0, 0x3, 0x78aa0000, 0x0, 0x0, 0x8, 0x84e1, 0xd934, 0xe000, 0x8, 0xb5d, 0x9, 0x7ff, 0x4, 0x0, 0x4, 0xfffffff7, 0x1, 0x13, 0xecb, 0x1000, 0x10, 0x0, 0x80000001, 0x3]}, {0x3, [0x1, 0x8, 0x3, 0xc, 0x0, 0xf91, 0x4, 0x7, 0x4, 0x6, 0xfff, 0x6, 0xfffffffa, 0xa000, 0xfffffff9, 0x80, 0x1, 0x1, 0xff, 0x3, 0xf, 0x3, 0x70f, 0x100, 0x2, 0x2, 0xe3, 0x1, 0x7, 0x7fffffff, 0x1, 0x9, 0x5, 0x7, 0x9, 0xa, 0x6, 0x1, 0x2, 0x1, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x2, 0x401, 0x8, 0x8, 0x1, 0x7, 0xf2, 0x8, 0x7fffffff, 0x10001, 0x8, 0x4, 0x9, 0x5, 0x13f7, 0x779, 0x9, 0xffffffff, 0x0, 0x8, 0xeb7, 0x7, 0x9, 0x10000, 0x2, 0x4, 0x7fffffff, 0x6, 0x8, 0x7, 0x6cec, 0x10001, 0x3, 0x7, 0xb2, 0x1, 0x1, 0x5, 0x9, 0x3, 0x2, 0x5508c39c, 0x7, 0x5b3, 0x1, 0x400, 0x7, 0x1, 0x8, 0x2, 0x3, 0xe, 0x4, 0x2, 0x7, 0x3, 0x50, 0x9, 0x0, 0x3]}]}) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@random="717dc35b11bf", @random="c61800b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @udp={{0x0, 0x2, 0x8}}}}}}) 7.119608363s ago: executing program 1 (id=141): mkdir(&(0x7f0000000000)='./file0\x00', 0x8) chflags(&(0x7f0000000080)='./file0\x00', 0x119304) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x31) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') 6.868404199s ago: executing program 1 (id=145): open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x4, 0x180) __realpathat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/5, 0xffffffffffffff28, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') 6.798362468s ago: executing program 32 (id=145): open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x4, 0x180) __realpathat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/5, 0xffffffffffffff28, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') 6.483604954s ago: executing program 4 (id=148): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x1) 6.348454313s ago: executing program 4 (id=150): r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = __specialfd$inotify(0x2, &(0x7f0000000180)={0x100000}, 0x4) inotify_add_watch_at(r1, r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) open$dir(&(0x7f0000000040)='./file1\x00', 0x4000040000100ac2, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) 6.22536382s ago: executing program 33 (id=150): r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = __specialfd$inotify(0x2, &(0x7f0000000180)={0x100000}, 0x4) inotify_add_watch_at(r1, r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) open$dir(&(0x7f0000000040)='./file1\x00', 0x4000040000100ac2, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) 2.818186122s ago: executing program 0 (id=209): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000180)=0x101, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x1000000}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x188}], 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) 2.248009379s ago: executing program 2 (id=211): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40000400000002c2, 0x20) fcntl$setstatus(r0, 0x4, 0x4c) kevent(0xffffffffffffffff, &(0x7f0000000500)=[{0x3, 0xfffffffffffffffe, 0x103, 0x0, 0x4, 0x0, [0x0, 0x10000000040, 0x2, 0xdff]}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x46}], 0x860, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) 2.072937603s ago: executing program 2 (id=213): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="7103000000000000c2"], 0x20) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x76, 0x1}, 0x8) rfork(0x3040) 1.882046325s ago: executing program 0 (id=217): r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r1, r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) read(r1, &(0x7f00000000c0)=""/5, 0x5) open$dir(&(0x7f0000000100)='.\x00', 0x40, 0x91) 1.674685222s ago: executing program 0 (id=219): open(&(0x7f0000000b40)='./file0\x00', 0x7843d88b80d1cecd, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x8000) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) lchmod(&(0x7f0000000240)='./file0\x00', 0x62) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='{-,\x00'], 0x0) 1.561587536s ago: executing program 3 (id=221): r0 = socket(0x2, 0x2, 0x0) fork() open(0x0, 0x400, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffff38d}, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @random="c61800b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x0, 0x2, 0x8}}}}}}) 1.548038026s ago: executing program 0 (id=223): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0x0) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) accept4(r0, 0x0, 0x0, 0x40000000) fcntl$setstatus(r2, 0x4, 0x4c) 1.473623386s ago: executing program 3 (id=224): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x2e, &(0x7f0000000000)={@local={0xfe, 0x80, '\x00', 0x0}, r2}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x20105, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x201, @loopback, 0xe4}, 0x1c) 1.451937212s ago: executing program 3 (id=225): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x1, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c) setresuid(0x0, 0xee01, 0xee00) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) 1.445341221s ago: executing program 3 (id=226): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000180)=0x101, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x1000000}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x188}], 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) 1.048436754s ago: executing program 2 (id=229): r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) r1 = kqueue() r2 = kqueue() kevent(r2, &(0x7f0000000080)=[{0x3, 0xfffffffffffffff3, 0xc023, 0x0, 0x0, 0x0, [0x0, 0x4000000]}], 0x1, 0x0, 0x0, 0x0) kevent(r2, &(0x7f00000000c0)=[{0x3, 0xfffffffffffffffe, 0x45}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) 999.07698ms ago: executing program 2 (id=230): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) execve(0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000280)={{}, {0x1}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int}) 860.36854ms ago: executing program 2 (id=231): fork() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x410, 0xffffffffffffffff, 0x0) 640.865778ms ago: executing program 0 (id=232): socket(0x11, 0x10000000000003, 0x0) __specialfd$eventfd(0x1, &(0x7f0000000600)={0xfde6, 0x5}, 0x8) kevent(0xffffffffffffffff, &(0x7f0000000380)=[{0x4, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x3]}], 0x1, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) rfork(0x1000) 441.950586ms ago: executing program 0 (id=233): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000980)={'rack\x00'}, 0x24) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000001680)={0x10, 0x2, 0x0, @rand_addr=0x5}, 0x10) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'freebsd\x00', 0x3}, 0x24) 433.90628ms ago: executing program 3 (id=234): r0 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) freebsd11_fstatfs(r0, &(0x7f00000002c0)) rfork(0x1000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) 288.396711ms ago: executing program 3 (id=235): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ktimer_create(0x0, 0x0, &(0x7f0000000100)=0x0) ktimer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x101}, {0x0, 0x2}}, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) 287.690623ms ago: executing program 5 (id=243): r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) inotify_add_watch_at(r1, r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) inotify_add_watch_at(r1, r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 216.838048ms ago: executing program 2 (id=236): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 197.080885ms ago: executing program 5 (id=237): r0 = socket$inet6(0x1c, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20080) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) kevent(r1, &(0x7f0000000080)=[{0x3, 0xffffffffffffffff, 0x0, 0x300}], 0x1, 0x0, 0xc00, 0x0) 136.864566ms ago: executing program 5 (id=238): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_sctp_SCTP_EXPLICIT_EOR(r0, 0x84, 0x1b, &(0x7f0000000040)=0x7, 0x4) sendto(r0, &(0x7f00000001c0)="ce", 0x1, 0x80, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2018c, 0x0, 0x0) 118.643751ms ago: executing program 5 (id=239): r0 = vfork() procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) fork() fork() fork() lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r0}) wait4(r0, 0x0, 0x2, 0x0) 35.414727ms ago: executing program 5 (id=240): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) 0s ago: executing program 5 (id=241): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000240)=""/144, 0x90}], 0x2, 0x0}, 0x400c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. vnode_pager_putpages: zero-length write at 1610612736 resid 4096 0xfffffe0059ad9370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83712aa0 usecount 4, writecount 3, refcount 6 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0054123e88 ref 1 pages 32 cleanbuf 1 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe0054128780 (pid 933, syz-executor, tid 100230) nlink=1, effnlink=1, size=2147483651, extsize 0 generation=ea750d7c, uid=0, gid=0, flags=0x4 ino 73, on dev gpt/rootfs FreeBSD/amd64 (ci-freebsd-main-0.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe006de12000 Expensive callout(9) function: 0xffffffff81a2fdc0(0xfffffe006e5ec000) 0.005939258 s vnode_pager_putpages: zero-length write at 1610612736 resid 4096 0xfffffe006e5ce528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83712aa0 usecount 4, writecount 3, refcount 6 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005412e6c8 ref 1 pages 32 cleanbuf 1 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe0054128780 (pid 1000, syz-executor, tid 100298) nlink=1, effnlink=1, size=2147483651, extsize 0 generation=1b18cad6, uid=0, gid=0, flags=0x4 ino 83, on dev gpt/rootfs Connection to 10.128.1.98 closed by remote host. FreeBSD/amd64 (ci-freebsd-main-0.us-central1-b.c.syzkaller.internal) (ttyu0) login: tap4: Ethernet address: 58:9c:fc:10:d3:96 tap4: link state changed to UP ifaddr cache = 0xfffffe0058544000 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0058578000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058578000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058578000 tap4: link state changed to DOWN tap5: Ethernet address: 58:9c:fc:10:e6:49 tap5: link state changed to UP if_delmulti_locked: detaching ifnet instance 0xfffffe0058578000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058578000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058578000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 pid 1109 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - coredumpsize limit is 0) Warning! syz-executor[1125] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:607: callout_cc_add: Bad list head 0xfffffe00077bd838 first->prev != head cpuid = 0 time = 1754373350 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056de12f0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056de1450 vpanic() at vpanic+0x257/frame 0xfffffe0056de1610 panic() at panic+0xb5/frame 0xfffffe0056de16d0 callout_cc_add() at callout_cc_add+0x339/frame 0xfffffe0056de1730 callout_reset_sbt_on() at callout_reset_sbt_on+0x74f/frame 0xfffffe0056de1850 sleepq_set_timeout_sbt() at sleepq_set_timeout_sbt+0x20b/frame 0xfffffe0056de1910 _sleep() at _sleep+0x468/frame 0xfffffe0056de1a70 kern_clock_nanosleep() at kern_clock_nanosleep+0x5f8/frame 0xfffffe0056de1c30 sys_nanosleep() at sys_nanosleep+0xea/frame 0xfffffe0056de1d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056de1f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056de1f30 --- syscall (240, FreeBSD ELF64, nanosleep), rip = 0x3a20fa, rsp = 0x8209af768, rbp = 0x8209af790 --- KDB: enter: panic [ thread pid 766 tid 100117 ] Stopped at kdb_enter+0x6e: movq $0,0x25c43d7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0077200000 rdx 0x7ffff rbx 0xffffffff827cd4a0 .str.27 rsp 0xfffffe0056de1430 rbp 0xfffffe0056de1450 rsi 0x80001 rdi 0xffffffff81614c89 printf+0x149 r8 0 r9 0xffffffff r10 0x33e55fb460b2a2f r11 0xfffffe005410acd0 r12 0xfffffe005410a780 r13 0xfffffffffffffffe r14 0xffffffff827cd4a0 .str.27 r15 0 rip 0xffffffff815fe7be kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c43d7(%rip) db> show proc Process 766 (syz-executor) at 0xfffffe00540d75a0: state: NORMAL uid: 0 gids: 0, 5 parent: pid 762 at 0xfffffe00540f5560 ABI: FreeBSD ELF64 flag: 0x10004000 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0007809040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe0007810000 (map 0xfffffe0007810000) (map.pmap 0xfffffe00078100a0) (pmap 0xfffffe0007810110) threads: 1 100117 Run nanslp 0xffffffff83ba3c00 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1169 1058 1058 0 R (threaded) syz-executor 100101 RunQ syz-executor 100488 S sbwait 0xfffffe00598f46dc syz-executor 100489 RunQ syz-executor 1168 1 1058 0 S uwait 0xfffffe00584f2480 syz-executor 1166 1 1058 0 S uwait 0xfffffe00584f2780 syz-executor 1165 1 1058 0 S umtxn 0xfffffe00584f2680 syz-executor 1164 1 1058 0 S uwait 0xfffffe00584f2580 syz-executor 1159 765 765 60928 D (threaded) syz-executor 100463 S nanslp 0xffffffff83ba3c01 syz-executor 100478 D fork 0xffffffff827d1b80 syz-executor 100486 S uwait 0xfffffe00584f2880 syz-executor 1157 766 766 0 R (threaded) syz-executor 100113 Run CPU 1 syz-executor 100474 S uwait 0xfffffe006e4d7a00 syz-executor 100476 S uwait 0xfffffe006e4d7200 syz-executor 1155 763 763 0 S (threaded) syz-executor 100144 S nanslp 0xffffffff83ba3c00 syz-executor 100471 S connec 0xfffffe0059b338da syz-executor 100472 S uwait 0xfffffe006e4d6b80 syz-executor 1153 1 765 0 S uwait 0xfffffe006e4d6780 syz-executor 1143 1 766 0 S uwait 0xfffffe006e4d6480 syz-executor 1127 0 0 0 DL (threaded) [KTLS] 100427 D - 0xfffffe00584f8a00 [thr_0] 100428 D - 0xfffffe00584f8a80 [thr_1] 100429 D - 0xffffffff83cb5628 [reclaim_0] 1122 1 766 0 S uwait 0xfffffe006e4d7500 syz-executor 1104 1 1058 0 S uwait 0xfffffe006e4d7b00 syz-executor 1096 1 763 0 S uwait 0xfffffe0057e15b00 syz-executor 1081 1 1058 0 S uwait 0xfffffe006e4d6380 syz-executor 1073 1 765 0 S uwait 0xfffffe0057e15d00 syz-executor 1062 1 766 0 S uwait 0xfffffe0053e11780 syz-executor 1058 762 1058 0 S nanslp 0xffffffff83ba3c01 syz-executor 1057 1 766 0 S uwait 0xfffffe0057e15000 syz-executor 1044 1 1044 0 Ss+ ttyin 0xfffffe0058298cb0 getty 1043 1 1043 0 Ss+ ttyin 0xfffffe00585bd4b0 getty 1042 1 1042 0 Ss+ ttyin 0xfffffe00585bd8b0 getty 1041 1 1041 0 Ss+ ttyin 0xfffffe00585bdcb0 getty 1040 1 1040 0 Ss+ ttyin 0xfffffe00585be0b0 getty 1039 1 1039 0 Ss+ ttyin 0xfffffe00585be4b0 getty 1038 1 1038 0 Ss+ ttyin 0xfffffe00585be8b0 getty 1037 1 1037 0 Ss+ ttyin 0xfffffe00585becb0 getty 1036 1 1036 0 Ss+ ttyin 0xfffffe00585bf0b0 getty 1031 1 766 0 S uwait 0xfffffe0057e16380 syz-executor 1029 1 766 0 S uwait 0xfffffe0057e15a00 syz-executor 1013 1 766 0 S uwait 0xfffffe0057e15900 syz-executor 1011 1 766 0 S uwait 0xfffffe0057e16580 syz-executor 1008 1 765 0 S uwait 0xfffffe0053e11680 syz-executor 1004 1 763 0 S uwait 0xfffffe0057e15500 syz-executor 966 1 764 60929 SV sigwait 0xfffffe00540d5b70 syz-executor 960 1 764 0 S uwait 0xfffffe0057e15300 syz-executor 932 1 765 0 S uwait 0xfffffe006e4d7900 syz-executor 923 1 763 0 S uwait 0xfffffe006e4d6280 syz-executor 912 1 765 0 S uwait 0xfffffe006e4d6e80 syz-executor 901 900 764 0 S uwait 0xfffffe0053e11180 syz-executor 900 1 764 0 SV wait 0xfffffe005410c560 syz-executor 893 1 764 0 S uwait 0xfffffe0057e15e00 syz-executor 891 1 763 0 S uwait 0xfffffe0053e11280 syz-executor 884 1 765 0 S uwait 0xfffffe006e4d6880 syz-executor 882 0 0 0 DL aiordy 0xfffffe005410d580 [aiod4] 881 0 0 0 DL aiordy 0xfffffe005410dae0 [aiod3] 880 0 0 0 DL aiordy 0xfffffe005410e040 [aiod2] 879 0 0 0 DL aiordy 0xfffffe005410e5a0 [aiod1] 871 0 0 0 DL (threaded) [so_splice] 100122 D - 0xfffffe005968ec80 [thr_0] 100149 D - 0xfffffe005968ecc0 [thr_1] 863 782 423 0 S kqread 0xfffffe0059409800 rtsol 839 1 765 0 S uwait 0xfffffe0053e11e80 syz-executor 782 1 423 0 S wait 0xfffffe00540f8060 sh 766 762 766 0 R nanslp 0xffffffff83ba3c00 syz-executor 765 762 765 0 S nanslp 0xffffffff83ba3c00 syz-executor 763 762 763 0 S nanslp 0xffffffff83ba3c00 syz-executor 762 760 760 0 S select 0xfffffe00596911c0 syz-executor 760 1 760 0 Ss sigsusp 0xfffffe00540a8610 csh 16 0 0 0 DL syncer 0xffffffff83cc1820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a060 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100091 D sdflush 0xfffffe0057dc74e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0ac80 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf0d48 [dom0] 100080 D launds 0xffffffff83cf0d54 [laundry: dom0] 100081 D umarcl 0xffffffff81de25f0 [uma] 7 0 0 0 DL - 0xffffffff8391c5d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff8450d9e0 [pf purge] 5 0 0 0 DL waiting 0xffffffff848fd700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e6340 [doneq0] 100046 D - 0xffffffff838e62c0 [async] 100075 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cec640 [crypto] 100043 D crypto_ 0xfffffe0053ea9030 [crypto returns 0] 100044 D crypto_ 0xfffffe0053ea9080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b4c600 [g_event] 100038 D - 0xffffffff83b4c620 [g_up] 100039 D - 0xffffffff83b4c640 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 10003