last executing test programs: 3.369662764s ago: executing program 2 (id=70): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = socket$inet6(0x1c, 0x2, 0x0) r1 = socket(0x26, 0x2, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) symlink(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000080)='./file0\x00', 0x80400000000206, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x88, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) __specialfd$eventfd(0x1, &(0x7f0000000000)={0x2, 0x5}, 0x8) r4 = kqueue() kevent(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) r6 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="ffffffffff0000000000000000000016", 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) cpuset_setdomain(0x2, 0x9, 0xffffffffffffffff, 0x20, &(0x7f0000000080)={[0xfffffffffffffffe, 0x0, 0x4]}, 0x2) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000040)={0x10, 0x20, 0x1, &(0x7f00000000c0)='d', 0x1, &(0x7f0000000080)="03", 0xefc, 0x7d866198, [0x0, 0x3f, 0x2, 0x3]}) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) thr_set_name(0x0, &(0x7f0000000180)='\x1d\xab\xb1\xdbgO\xc3h\f\xaf\xc1\x94\n\xb1\xbf\xa5+!Op\x95\x99\xa9\xb3c\x8c\x9d\x11\xfd\x88\xc2\xb8B#\xc2o\x00in\xd4q%\xb8j\xcc\x91\xe0U\x90\xaf*L\xfa\xb1s\xb3:\x0f\xa2\xc3\x90\xf1\xff\xeaD\xb1\xb5`%\xa1WfZ\xbf$\x03\xdbJ\x8c\t\x0fpt\b\xb7\xf4Rrr') sendto$inet6(r0, 0x0, 0x0, 0x8, &(0x7f0000000340)={0x1c, 0x1c, 0x3, 0x3c, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) r7 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r7, 0x0) utimensat(r7, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{0x3, 0x8984}, {0x5, 0x5}}, 0x4000) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="4341b858985affe85fe3a7b3923a9a548208e291c81a0308ae5dc5471f68599bf81634446a14d6ac8d3b074554e1118887153df22b55ccc296deb78a56a40a0218022e3357865c85f503e99c9c6f369a82817c6ab214c1", 0x57}, {&(0x7f0000000280)="599cacf9a127fb3c7831e3fd5983", 0xe}, {&(0x7f00000004c0)="4444ae1181679cae7104692c787e06674052cf917e3e96b0cf93ec0bd2f143139da0951d4fe4763cb2299aae2b79c3adc59b486b5e3e43d0f8d729afdf63ed21ea9d6de99ba18416d1c1e0733e83ec88065035025667cc1553d5da5f9f245c01e409bb5cefe613721d2aaa5f1a706c399569f956e63eab40ac873933094f24a86d4e2bdd447ac26fd6addb624928def587db411abf6c39397623d88a468c0f10c01a8f240266e49ac0c690606b305809c6da31c338f40d8966447196a13f7007fc63c5ad3f1ab6e9", 0xc8}, {&(0x7f00000002c0)="3891d3e9418b", 0x6}, {&(0x7f0000000400)="04d4bd30969ec561879689ad407d06816eb2f98a935528e280987e2f9d8e1bffba93751372fb0a7d9992bdc2875f3b4b5e46c6a628a1813e7f07ce35e3ef1d65edead320a99166", 0x47}, {&(0x7f00000005c0)="f961ab79790c74b35c86c204555ac9c8b5fe215a66feaad36802096c10e9c4867522e7432e74167ca9693def4367f159d510cc5552840f65e57c1a3ced63d3681da2c52f1d3f3be42d1f2c37d656d13c0e5c10929dc5b487d1026455875aa011756903c0c745a5a074f5d57386046d47c73494", 0x73}, {&(0x7f0000000640)="2085c2c767b3fcdf6a22db1b20f4134fd70a955f6721cf78a2688c3c05a65323aa8334c01695e465b0cf9661192659419c5a105491b208b982018504483b34082e18feafef9b904642016bd0b13bb93cd35071ef009ffd3a36ee110660aa6b5ec5af6b5123ee541041633f32c1d8", 0x6e}, {&(0x7f00000006c0)="c27606dc8cfe132cf65805e2efb9d743747a0b103c782dccbb0e138ac400a5ec0327c64bfe5d29885d2b84b84f837b2476e190dd4961da4fcdb1519a919101812b4fd3b51d2e36abd2e011cfe1e4567052f5da4d3b49c795312219547b66d4ecab145781836866e1dad05ef594c19b7dd294fdb31943a8481550acfda5afecaa2b", 0x81}], 0x8) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="a94c4662c957ffffffffffff0800450000200068000001029002110890789dc1870002000013dbf572b8bea5e019236776111ce5c661764b0f"]) 1.909616536s ago: executing program 2 (id=77): rfork(0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000ac0)="ee08665f19ac14d5e51348771197a7728420aef61715f7b1c3d4b1006a89dbdf579286eb50056ed7ab90c19f7add10278fd7b906af1172065c20c6a701a69d49d8d05efca17659b70f06cbb2bac99b15450ced3381cb6271bfb84def5c5139b6fc9c0ec18d401faef5d7f23c000000000000000000000000cbee5ccb7db87096802d50602e551e99a42f9c9b7821f696e06e1794074af9843a51cd302eacc9dfe97b776e0eda0359c6b52cea6617c7b000377117a640d2d06e6cdc8a16af52d0827706ae9f7063b7cb6fd857c88ea207f5b8f2ff12c4ec183d8913a71b652843a2", 0xe1) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x15, 0xe, 0x0, 0x0, 0xfffffe9e, 0x0, 0x5, 0x7000000, [0x10000400, 0x2, 0x7, 0x3b]}) cpuset_setaffinity(0x3, 0x4, 0x0, 0x4b, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.794611916s ago: executing program 2 (id=79): freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) sendfile(r1, r0, 0x1, 0x7ff, 0x0, 0x0, 0x1) syz_emit_ethernet(0x20f3, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES64]) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xffffffffffffffff) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0xca0706ee3fd5d6f6) truncate(&(0x7f0000000140)='./file0\x00', 0xb) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) procctl$PROC_NO_NEW_PRIVS_CTL(0x0, 0x0, 0x13, &(0x7f0000000000)=0x1) r3 = socket(0x1c, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN(r3, 0x6, 0x401, &(0x7f0000000000)={0x2, "c00c3180e65abbad448141d12e70766e"}, 0x14) setsockopt(r3, 0x6, 0x8, &(0x7f0000000400)="a147c0084c3b6548ee", 0x9) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) sendfile(0xffffffffffffffff, r3, 0x889b9, 0x0, 0x0, 0x0, 0x11) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) 1.509861102s ago: executing program 2 (id=80): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @multicast2}, 0x10) inotify_add_watch_at(r1, r0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80000020) inotify_add_watch_at(r1, r0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x12000eba) r3 = msgget$private(0x0, 0x790) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r4, 0xffff, 0x800, 0x0, 0x0) setuid(0xffffffffffffffff) msgrcv(r3, 0x0, 0x0, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x7369a0733676a8) truncate(&(0x7f00000000c0)='./file0\x00', 0x200000000008000) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) 1.399869921s ago: executing program 2 (id=81): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) sysarch$AMD64_GET_XFPUSTATE(0x84, &(0x7f0000000000)={&(0x7f00000002c0)="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", 0x1000}) kqueue() madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 1.329878839s ago: executing program 3 (id=82): open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f00001b8000/0x2000)=nil, 0x2000, 0x3, 0x20011, r0, 0x0) (async) mmap(&(0x7f00001b8000/0x2000)=nil, 0x2000, 0x3, 0x20011, r0, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r2, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0xffffffff, {0x0, 0x7, 0x0}, {0x0, 0x200}}) (async) aio_write(&(0x7f0000000340)={r2, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0xffffffff, {0x0, 0x7, 0x0}, {0x0, 0x200}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r4 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) open(&(0x7f0000000140)='./file0\x00', 0xc0, 0xac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet6_tcp(0x1c, 0x1, 0x0) seteuid(0xffffffffffffffff) r6 = shmget$private(0x0, 0x3000, 0x1e0, &(0x7f0000001000/0x3000)=nil) seteuid(0x0) shmctl$IPC_RMID(r6, 0x0) rfork(0x85000) (async) rfork(0x85000) rfork(0x1020) poll(0x0, 0xfffffffffffffe18, 0x7ff) (async) poll(0x0, 0xfffffffffffffe18, 0x7ff) r7 = accept4$inet6(r5, 0x0, &(0x7f0000000040), 0x18000000) setsockopt$inet6_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x8, &(0x7f0000000080)={0x5}, 0x4) setsockopt$inet6_int(r7, 0x29, 0x14, &(0x7f0000000000)=0x1006, 0x4) 1.169863374s ago: executing program 2 (id=83): r0 = semget$private(0x0, 0x4, 0x28c) semop(r0, &(0x7f0000000000)=[{0x3, 0x4d, 0x800}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xffb3, 0x1000}, {0x1, 0xb7f, 0x1800}, {0x3}, {0x0, 0x70, 0x1000}, {0x2, 0x8c9b, 0x1000}], 0x5) vfork() r1 = fork() __semctl$SETVAL(r0, 0x2, 0x8, &(0x7f0000000100)=&(0x7f0000000040)=0x1) wait4(r1, 0x0, 0x4, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = fork() sigqueue(r3, 0x5d, @sival_ptr=0xb1) r4 = socket(0x1c, 0x1, 0x0) r5 = getpid() freebsd11_fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) fcntl$setown(r4, 0x6, r5) rfork(0x84040) fcntl$setown(r4, 0x6, r3) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d86699a}) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ktimer_create(0x4, 0x0, &(0x7f0000000000)=0x0) ktimer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x1f6}, {0x0, 0x7}}, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x4078}) 919.931592ms ago: executing program 0 (id=88): symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000400)={0x10, 0x2, 0x3, @remote={0xac, 0x14, 0x0}}, 0x10) rfork(0x85000) socket$inet_icmp_raw(0x2, 0x3, 0x1) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, 0x0, 0x0) setitimer(0x0, &(0x7f0000000280)={{}, {0x1}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x4078}) syz_emit_ethernet(0x96, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db0905e80000000000000000009e61cd0c535a98000000ff0200000000000000000000000000012c05000000000000000800bd"]) 919.557401ms ago: executing program 1 (id=89): r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x63) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) open$dir(&(0x7f0000000040)='./file0\x00', 0xa08, 0x44) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x1c, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f00000003c0)="bd191b3939a20c717ceb9cfc876a0573", 0x10) open$dir(&(0x7f00000001c0)='./file0\x00', 0x8, 0x28) getresuid(&(0x7f0000000100)=0x0, 0x0, 0x0) r3 = socket(0x1b, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)="0204010802000000000000008fc30d4e", 0x10, 0x184, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x63) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0xa08, 0x44) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x1c, 0x3, 0x0) (async) setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f00000003c0)="bd191b3939a20c717ceb9cfc876a0573", 0x10) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x8, 0x28) (async) getresuid(&(0x7f0000000100), 0x0, 0x0) (async) socket(0x1b, 0x3, 0x0) (async) sendto$inet6(r3, &(0x7f0000000000)="0204010802000000000000008fc30d4e", 0x10, 0x184, 0x0, 0x0) (async) fchownat(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000) (async) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) (async) 789.929231ms ago: executing program 0 (id=90): r0 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) select(0x40, &(0x7f0000000100)={0x3, 0x2, 0x80000000, 0xfffffffffffffffe, 0x1, 0x9, 0x1, 0xfff}, &(0x7f0000000180)={0x8, 0x8, 0x8, 0x9, 0x2919fd62, 0x4, 0x8, 0x5}, &(0x7f00000001c0)={0x9, 0x6, 0x3f, 0x88d, 0x5a, 0x9e, 0x2000000000000000, 0x8}, &(0x7f0000000200)={0x9, 0x1}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x83) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x2, 0x386}, {0x6ee3, 0xffffffffffffffff}}) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x56) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x50, &(0x7f0000000380)={0x6, {{0x1c, 0x1c, 0x1, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x54, &(0x7f0000000180)={0x6, {{0x1c, 0x1c, 0x2, 0x800, @mcast1}}, {{0x1c, 0x1c, 0x2, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x54, &(0x7f0000000180)={0x6, {{0x1c, 0x1c, 0x1, 0x0, @mcast1}}, {{0x1c, 0x1c, 0x2, 0x0, @mcast1}}}, 0x108) r4 = socket(0x1c, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN(r4, 0x6, 0x401, &(0x7f0000000500)={0x8, "0938d70603bda8c1f9b1498675c35a56"}, 0x14) getsockopt$sock_timeval(r4, 0xffff, 0x1010, &(0x7f0000000000), &(0x7f0000001840)=0x10) connect$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) sendfile(r0, r2, 0x9, 0x20000000040, 0x0, 0x0, 0x11) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x31, &(0x7f0000000300)=ANY=[@ANYBLOB="1602000000000000040105bc"], 0x18) r5 = socket(0x26, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xb, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRESSES(r5, 0x84, 0x8004, &(0x7f00000002c0)={0x0, &(0x7f0000000440)=[@in6={0x1c}, @in6={0x1c}, @in={0x10, 0x2, 0xffffffffffffffff, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x2, &(0x7f00000004c0)={r7, 0x8, 0xfffff001, 0x1, 0x401, 0xf112}, 0x14) 720.00805ms ago: executing program 1 (id=91): symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$MDIOCRESIZE(r0, 0xc1c06d04, &(0x7f0000000300)={0x77df, 0x3, 0x0, &(0x7f00000000c0)='.\x02\x00', 0x5e99ba2, 0x3, 0x7, 0xffffffffffffffff, 0x2, 0x8, &(0x7f0000000100)='\x00', [0x1ff, 0x7ff, 0x6, 0x2, 0x81, 0x5d24, 0xff, 0xd, 0xd, 0x3, 0x1, 0x45c, 0x80000000, 0x6, 0x2, 0x8, 0x80, 0x0, 0xb, 0x4, 0x3, 0x5, 0x400, 0x2, 0x0, 0xfffffffe, 0x8, 0x3de2, 0xa72, 0x154, 0x4, 0x1000, 0x9, 0x7, 0x80, 0x800, 0x1, 0xffffff1b, 0x6ecb, 0x1453, 0x2, 0x1000, 0x3, 0x1a027d93, 0x1000, 0xa, 0x0, 0x2, 0x2, 0x40, 0x1, 0xc78, 0xe, 0xfff, 0x0, 0x8000, 0x9d, 0x1, 0x2, 0x3, 0x8, 0x4, 0x101, 0x9, 0xff, 0xff, 0x9, 0x6, 0xff, 0x0, 0x0, 0x80, 0x9, 0xfffffffb, 0x6, 0x5b9af7dd, 0xd9, 0x7fff, 0x2, 0x3, 0x4, 0x2, 0x6, 0x4, 0x4, 0xda7c, 0x1, 0x8, 0x0, 0x1, 0x9, 0x1, 0x7, 0x7, 0x6, 0x800]}) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000040)='.\x00', 0x80000049, &(0x7f0000000080)) 639.859551ms ago: executing program 3 (id=92): r0 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x42) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffc61, 0x0, 0x0, 0x181}, 0x100) (async) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x2b, &(0x7f0000000000)=0x2, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000383a003bcc3f0600000058ff2ea13a8be186e3fe8000000000000000000000000000aa02009078fffffffa60000000ffff2b00fe8000000000000000040000000000aafe8000000000000000000000000000bb1900000000000000"]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) (async) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='\x00'], 0x0) (async) cpuset_setaffinity(0x1, 0x2, 0x0, 0x94, &(0x7f0000000040)) (async) symlink(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r2 = getpgrp(0x0) (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x80008, 0x1000, 0x6, 0x0, 0x0, 0x10, 0x0, [0x0, 0x0, 0x3, 0x4, 0x0, 0x7, 0x4, 0x0, 0x646, 0x0, 0x7fffffff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x6, 0x0, 0xfffffff8, 0xfffffffc, 0x8, 0x0, 0x8, 0x2, 0x80004, 0x0, 0x40000, 0xfffffffd, 0x3, 0xfffffffe, 0x2000000, 0x4, 0x0, 0x821, 0x0, 0x80000000, 0x1, 0x8, 0x80000003, 0x0, 0x0, 0x1000000, 0x800000, 0x3, 0xda4, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x38b79ef1, 0x0, 0x0, 0x2, 0x200000, 0x3, 0x266, 0xc7d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf804, 0x2, 0x8e7, 0x0, 0x0, 0x1, 0x0, 0x20003, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x810, 0x7, 0xfffffff9, 0x9, 0x0, 0x0, 0x0, 0x4, 0x2, 0x20000003, 0x4]}) procctl$PROC_PDEATHSIG_STATUS(0x0, r2, 0xc, 0x0) (async) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6028c, 0x2) (async) setreuid(0x0, 0xee01) (async) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) setreuid(0xffffffffffffffff, 0x0) (async) symlink(&(0x7f00000001c0)='.\x02/file1/file0\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) cpuset_setaffinity(0x1, 0x7, 0x8, 0x8, &(0x7f0000000300)={[0x7]}) fcntl$lock(r0, 0xc, &(0x7f0000000280)={0x2, 0x1, 0x9d, 0x5, r2}) (async) rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') (async) socket$unix(0x1, 0x5, 0x0) eaccess(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async) rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 637.888766ms ago: executing program 1 (id=93): fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x18, &(0x7f0000000040)={@broadcast, @local={0xac, 0x14, 0x0}}, 0x8) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0) syz_emit_ethernet(0x43e, &(0x7f00000013c0)={@local, @empty, [], {@ipv6={0x86dd, {0x1, 0x6, "338e25", 0x408, 0x4a, 0xff, @empty, @loopback, {[@fragment={0x19, 0x0, 0x9, 0x1, 0x0, 0x3, 0x65}, @dstopts={0xb, 0x36, '\x00', [@generic={0xfc, 0xf7, "c33ee41d82fdba04008448e89df8438698ed4be508dc60640798b9cbad2d45ce44c550be09518e6dd2cf69a99fd02733d5aed78cb7f5bdcc59167b098811c4078eaa86c17e5da334fcece922fb42b3eb493985b8f5c3615c4db9f7fd9af2d3c38555c7abc7b777055662649d9bde19ead25229686aef5bea6661f871dcc9b1f452aebe734836abd3d82dab41202fe1a7329f96eadcfa856d22a628eec7e7703db3d33b41cea58d262a701e837fe75afc3584d1ac489b15c48346d2f1edb561fe0e50c80d941c6e1d9138c99e4434c8f0f992bfe550245e256b2dd2f21733ce951552e9bd551d89a41dc303959e7bd38496cd9da8c11e7f"}, @generic={0x7, 0xb9, "9352df8c4869ea82113bfe75714012511e2c056daf8f0aaaec2ec4fdae45b7210520b49b05a8c4ef5e3b0cf106d9b527d6b856cdf5da31085b1222d36fdb15fbe5b1e920ad1db2c345e6cfa7e66209640ce469f8a1de0b87f000826cdbc649f89bd4b1601207574464d40e492903e0e05c68b0c918520bff3445dfe0c6758b4be2f8ae3e2d460fecedc3bf5bf47cd428db7f79c2ce2ed755c2b76d9f35931354e5887cde670053e220b5133e644fdb1fbd99c89f11d17939b9"}, @pad1]}, @routing={0xe, 0x10, 0x0, 0x40, 0x0, [@loopback, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @remote={0xfe, 0x80, '\x00', 0x0}, @empty, @empty, @rand_addr="7f50aa5bfd9e9aa7aa68fd36163cf2bf", @empty]}, @dstopts={0x12, 0x24, '\x00', [@generic={0xe8, 0xa5, "1bbe27ec58d5298bec3e96376b1395a0f6aef7e1361c1285a9c7ab43f883a36c324df7dd6313a0bec3355cf08e0eb21bfb9d81461012fa11cc34df22263b729213277daf27502d49232c07f94c84b69666d182e271e81b5c6def6191f403d6839f3fddc317a1932a6763b216f56ce1d410a09dc61cded53691cb13abd54b05773530a1f8c714d58cea2167ccde515870bc165a8110b1f9c551d5127b062aa9f5eaf79e2215"}, @generic={0x3, 0x7d, "f0411eb930b693cace51c901bcd18524fe232a20388cd54ae45546c302c6c79f087760d0b87e544fa13e83fbde397ef0b6a1a13f3a839585771063efe103bdfe3ab52155fecfe4b42ab75b267d46f0fa7fe0eff2100e160e062f30f4639638c33bdff5f1a6f92d503e7f35daad9ebd6d75a341b7acc807615bc5d9d07e"}]}, @dstopts={0x64, 0xf, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @pad1, @generic={0x7, 0x71, "ef2fc8f4c001ac46161353e23998dd1b0e5e337eefc7feb8f215e0d3c9e64f4f971f95146d89be742599a60246732ae2a5eb9a17885e86c649ac3ca65b8127411edb9770e3693fc2023d815cdc8f93b72b100bf5f6f2742f2f007a3072a669fdbdadbd19365ac4d85fed300a0237a535ad"}]}]}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f0000000440)={0x1f, 0x23, 0x10, &(0x7f0000000300)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x4000, 0x3, 0x80000001]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)) 550.05291ms ago: executing program 3 (id=94): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0) semop(0x0, &(0x7f0000000140)=[{0x2, 0x5854, 0x3800}], 0x1) r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{0xff, 0xfffffffffffffff9, 0x1, 0x8, 0xe8c8, 0x0, [0x0, 0x2, 0x0, 0x8001]}], 0x1, 0x0, 0x0, 0x0) __specialfd$inotify(0x2, &(0x7f0000000000)={0x80000}, 0x4) rfork(0x85000) 549.029866ms ago: executing program 1 (id=95): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r2 = socket(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000000)="61a8", 0x2, 0x20005, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00', 0xfffffffd}, 0x24) open$dir(0x0, 0x80, 0x0) openat$crypto(0xffffff9c, 0x0, 0x0, 0x0) sysarch$I386_GET_LDT(0x0, &(0x7f0000000000)={0x0, 0x0}) rfork(0x85000) syz_emit_ethernet(0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mprotect(&(0x7f0000a5d000/0x3000)=nil, 0x3000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 538.839247ms ago: executing program 3 (id=96): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsync(r0) truncate(&(0x7f0000000140)='./file0\x00', 0xb) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) rfork(0x5000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='-%\x00'], 0x0) 389.874135ms ago: executing program 1 (id=97): syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200804, 0x0) r2 = socket$inet6(0x1c, 0x20000000, 0x3) accept$inet6(r2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x11, r1, 0xfffffffffffff000) setuid(0xee01) fcntl$lock(0xffffffffffffffff, 0xe, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffff, 0x10000000a}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x47, 0xffffffffffffffff, 0x47) rfork(0x20) ioctl$DIOCSETSTATUSIF(0xffffffffffffffff, 0xc0104414, &(0x7f00000001c0)) 389.100511ms ago: executing program 1 (id=98): setrlimit(0x7, &(0x7f00000001c0)={0x1}) setuid(0xffffffffffffffff) fork() fchownat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2000) r0 = kqueue() cap_fcntls_get(r0, &(0x7f0000000000)=[0x0]) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f00000000c0)={0x7fff, {{0x1c, 0x1c, 0x1, 0x10002, @rand_addr="217571037d412d2d3892db6d23ce5878", 0x2}}, {{0x1c, 0x1c, 0x2, 0xfff, @empty, 0x3}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x52, 0x0, 0x0) rfork(0x85000) 387.421348ms ago: executing program 3 (id=99): r0 = socket$inet6_icmp(0x1c, 0x2, 0x3a) r1 = getpid() aio_mlock(&(0x7f0000000280)={r0, 0x3, &(0x7f0000000180)="76d30e5274194f4a5b37fdabd297364de47b63908dda78b0a37b37c8f4a9c65f39c2e812aa1d15a0b6fb867394639c8db6d27a84822e3f04c5ba60fb0f679e55d75631e686dd4ff9d7712c93a4bbafd2afc1cbb774dda99f92da0ec23e4333a53c2c3d144834273b615bb9fad627d4a5240f9ccff3ab35fc6016568b1abcdf2660d166d47018eb37535d19c99bc0fbedc37acc51f819ab41e2946ce87c27c35552421dce524e62adbefe9697f8545c1a32e8e8b40ca48e650814bcf3b8aef1cccfc7c3528b", 0xc5, [0x8, 0x8], 0x2, 0x4, 0x59, {0xd1, 0x100000001, &(0x7f0000000000)="03738ebecbf0db6a3dc385b00bd2967bddad85b0851c422ca42c9d9f711faeb3f422ff541c4576a49d7cdf45967ce1799f00b3ad5504c7f2ae0bf82a08f24489373fa32a8c40feca280752443404f26ec1dd304240b4ad8c1a50c9aba3"}, {0x3, 0x21, @sival_int=0xe, @tid=r1}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) r4 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x9e) freebsd11_mknod(&(0x7f0000004400)='./file0\x00', 0x2000, 0x3) lgetfh(&(0x7f0000002080)='./file0\x00', &(0x7f0000000140)) utimensat(r2, &(0x7f0000000100)='./file1\x00', &(0x7f0000000340)={{0x89e000000000}, {0x5, 0xf73}}, 0x200) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000880)="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", 0x1cb}, {&(0x7f00000004c0)="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", 0x1bf}], 0x2, 0x6) 329.901604ms ago: executing program 3 (id=100): procctl$PROC_WXMAP_CTL(0x0, 0x0, 0x15, &(0x7f0000000200)=0x6) open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x8d) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) r1 = open(&(0x7f0000000340)='./file0\x00', 0x600, 0x0) flock(r1, 0x3) (async) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x2f9, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000002500)={@local, @random="75f43672decc", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@generic={0x5, 0x40, 0x0, "bc33ab8a"}}}}}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) procctl$PROC_REAP_KILL(0xaa1b5a2fd67f5f28, 0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x9, 0x1, 0xffffffffffffffff, 0xc422, 0x0}) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x4, 0x5da, 0x100000001, r4}) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000140)={0x5, 0x2}, 0x8) 219.942694ms ago: executing program 0 (id=101): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x1) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x2000000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r2, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000240)=""/187, 0x1b133353141e377d}], 0xb00207defa09c3c, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) 149.903457ms ago: executing program 0 (id=102): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x83) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) (async) rfork(0x85000) (async) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x4, 0x10, r1, 0x8) ksem_init(&(0x7f0000000100)=0x0, 0x0) ksem_post(r2) (async) sync() 47.409627ms ago: executing program 0 (id=103): r0 = kqueue() kevent(r0, &(0x7f0000000180)=[{0x7, 0xfffffffffffffffa, 0x75f2f472747d64a5, 0x1b, 0x100000000e, 0x885, [0x8001, 0x9, 0x0, 0x6]}], 0x1, 0x0, 0x0, 0x0) cpuset_setaffinity(0x3, 0x9, 0x40000, 0xcf, &(0x7f00000000c0)) rfork(0x1000) freebsd10_pipe(0x0) ioctl$UI_SET_BSDUNIQ(0xffffffffffffffff, 0x2000556d) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)=0x8, 0x4) r1 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f0000000140)=ANY=[@ANYRES16], 0x1010) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)=@in6={0x1c, 0x1c, 0x2, 0x9, @local={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r2, 0x80000001, &(0x7f0000000300)="e2", 0x1, [0xfffffffe, 0xffffffff], 0x0, 0x0, 0xf, {0x5, 0x7, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x9, 0x9, 0xf, 0x2, 0x100000000, 0xd24, 0x10000, 0x6b]}}) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2108000, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffefffffffaaaaaaaaaaaa080600188038060c0001aaaaaaaaaaaafb4f896a2c8fb2c0f60fc839aaaaaaaaaabb0c5eaf5b6e1dcacdf443b49bad3282b8"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60fc0fc30028000046ec9cd95f9d4ba80802bde698b7bc85fe8000000000000000000000000000aa8900907800000000ff0100000000000000000000000000010800000000020200a634cd9700000001"]) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) r6 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x6548ef4ced78e318) copy_file_range(r6, 0x0, r5, &(0x7f0000000200)=0x30003, 0x7, 0x0) sendmsg(r2, &(0x7f0000000b00)={&(0x7f0000000080)=@un=@abs={0x8, 0x3, 0x0, 0x0}, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000240)="4e0c55a3d1ad6e8f74fb5378fa53368e8d020571e8c5c85081534ab2fe0e1a161b7125f298f6e6552b635b9aa3bc734bf3d12a149733d7a2bab61a22831c168251f7fff79f1beecd21a1b423f4a530b0ee50dd412e414793b6b36acc283df3df380b541310fa63e955c69a8971d65a33bdef2b1c34ef878febf13a2b691dd6f69410f9ba8ca7da8eefcc5d621644adfbdfd320f259df3aadc18ff13d4d1f5086f4e67afc91494e136b7354ef65d2f12c8a911b73f6c2d0ea", 0xb8}, {&(0x7f0000000400)="cf225c9a7359aa25d4d2e7e513e63520baf8d454ac5d29eb787c33e6537af1480ea4af368efd07a8cff5db2af4e3ce4f215c6641b0f25f69fddebb57c0000facea2106eb9e471e77056855c4bac6c487d4a56c2d8993278ff22046c6b0c66bb8d2246c0ed26d29d1c6e886692ebe3bfb511b9d7a15a23d17129abacc0339dfa13cfccc7e506c", 0x86}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1001000000000000060000000400000089bbcf81d8f8e197b75f37fd05422743b2279917996474af369eb66402c63972ed5f1d1149ac7b4374b1338b9d20cfc9aa01087e2cd910603d0ad6f775ed8ab4d34966a855060982c694c0c611c669c1c59f1c18ada114350d7ae8df44477fca98cd29c0b5b6cfcd6f9e4cb70189147d45a96ad1a4d6d08e9b5aa9417eed97d3d89ff6b89c66aa0c2eced1d48c830d56a8b347f29d74077c320ef605a30ec32ab179d70398f0fcacb1c2b2b5dbd58868784ebd6dce8a14acb5c73ca7f05a5981e7a89ef3cf14d7030a2b0a793639d792ded29b73e90b6dd4cd0ece0530a32e624942c86a7460dd5b44180e524bbc83f77b588c1c899e8ebd5201d9fa2d2e8e00580000000000000041ff00000000000009dcd67bc98f0546d432517e3c7b7a41b49c1c0b4d397787200aafb5c4478d047a8e373c457129cadd97e638c38b3df6f5daa840714337dfc58d119871a6ca559b5d00000000000048000000000000008800000007000000ba0ef1768d6df6eed0557da0319b49116fbdbd77063514c8c7ca3058f312528afbead779665afcc00bc0162b459b78a956b5aace00000000b000000000000000060000000700000031ef995103a4931b1290cde6b6dfd086f7e05be37b386ebe7e948246fbc52e2609ca3a5a59a4d84e884281d67da02b7b2ebf7cb61c5b024819a3e7bfe91e114099f031ace78a2fc55e6188a0ba2188bf4d3e48de99d840d0134456b98639fcdda16c19ea382b4aec86877d4a141301e8a6184f9430a4e63e7c82731c6039bdd4272766db4efed5306cc99c1055b50c3fea23a2a9894dafdd6ee2f3d3a3a500006000000000000000060000000a000000d7003e2c03bc39223590098d62af39a40ac8e2d9912c423297fa629ad773558ae35c84a891bba3a2786d358b8e27d16b9e07f43304336283835d1cdb8950e2900b3b7b64e3913221540000000000000038000000000000003a00000007000000bb89065e29ff1077880dbbd8b9e6a783ce659ab05ff020bd41bc27c5da609fbf14cd000000000000f800000000000000ffff00000c000000477c30b01d477f04c4767d2559d01c3127e1a968c693555513139eaec3b0158dbbf29ec3a747da602f7dcd3a65debbafb1262bce1069fa5771dbd8c010f1087c39eed7b22ad49138f59819769a33321151bbf2420099373dce97b65354867d476ab2f30dffba44adea71bf3cd99d691e23ba3de21985ecec52b7243e4c3e38ecb1f8901889f74bba4ebf2f5634062901172731eac7673a2e2992e0baff4089bff278e4ecb1540c3c6b76adef1f19e8a358dbe239e01df2afea27ab321ea5158e153db4e826cb10619769c08d2702350658fbcacaf6ad929be2b99fd4a5505829907a345400000000f0000000000000000000000004000000494e9b09ff031fa9a2d57e8db3308c7d437b913a08253d34686bb7db0dec3b179349d759cebaab081ef86a1f723d3119e64876c35d52bf7b3d23881ac5f4a21598d34b59238e5cf94a7ef34a8f5d074b959a7f371d0c29f4e432c62f5a6d4356eccdaa5ff8a1ec842e361144215bf771b1d23ccce9b2bfb6b5923f16b05a3a13709b59aa4ce43eaca2ceddb0d021c57a588aa7e3087c2bf71fc42c22cb699405c571e88e99fd31733076043b46b7d37e1b3d03ffcd493a5b98de15680f632e1ba0c37dc6a00c528da30b129ce2778b2f6e9eb097c605dc8aa73f5ec8958d26001800000000000000ffff0000ea00000050100a642740620a0801000000000000880000000000000044de6e3231bbbcbc67ebf50fc3560ec4aab81064f2df57ada17b8dde2d64a65e1ece93727680c59c8ca99a5144f508bd9ef77793f72d698cf00f51f4feeffe537f5e7ae4d36a324c63b1e87a4e9b112780cd5cfb3f561abebe3fbce96a3c3406b723e2ac3459940594b61da58a2be9a3a7cf343a344ada0f15e86b88f2ac8e6a7b2c14a2d8b3e635b045140bc9a5ddc5740a50a12b8df86df32b190cd14cabea36ff80290ab0d3b119e5254f90a004e3db5a9c82fe60c040c3d1c3ab260f1eb1e0ea058f6df8f542cee271986676cbbb64e9ab630a7671d49fc7973b8d7cd1d9bc14f44e9258ed7adf8bc876f9f78206e1cc5f0000000000"], 0x600}, 0x8) preadv(0xffffffffffffffff, 0x0, 0xfffffffffffffeac, 0x125bafed) preadv(r4, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/205, 0xcd}], 0x1, 0x0) preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) dup2(r5, r5) 0s ago: executing program 0 (id=104): setreuid(0x0, 0xee01) mmap(&(0x7f0000029000/0x800000)=nil, 0x800000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async) procctl$PROC_SPROTECT(0x2, 0x0, 0x1, &(0x7f00000000c0)=0x21) (async) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) (async) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000580)=@in6={0x1c, 0x1c, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}, 0x1c) (async) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0xb0}], 0x1, &(0x7f00000000c0)={0x200000077359400}, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x10) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0058741800 Connection to 10.128.1.77 closed by remote host. pid 337 (dhclient), jid 0, uid 0: exited on signal 5 (core dumped) pid 423 (devd), jid 0, uid 0: exited on signal 5 (core dumped) FreeBSD/amd64 (ci-freebsd-main-5.us-central1-b.c.syzkaller.internal) (ttyu0) login: pid 877 (rtsol), jid 0, uid 0: exited on signal 5 (core dumped) pid 745 (getty), jid 0, uid 0: exited on signal 5 (core dumped) pid 334 (dhclient), jid 0, uid 0: exited on signal 5 (core dumped) pid 780 (sh), jid 0, uid 0: exited on signal 5 (core dumped) pid 743 (getty), jid 0, uid 0: exited on signal 5 (core dumped) pid 875 (rtsol), jid 0, uid 0: exited on signal 5 (core dumped) pid 746 (getty), jid 0, uid 0: exited on signal 5 (core dumped) pid 770 (sh), jid 0, uid 0: exited on signal 5 (core dumped) pid 876 (rtsol), jid 0, uid 0: exited on signal 5 (core dumped) pid 739 (getty), jid 0, uid 0: exited on signal 5 (core dumped) pid 955 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - coredumpsize limit is 0) pid 735 (sh), jid 0, uid 0: exited on signal 5 (core dumped) pid 744 (getty), jid 0, uid 0: exited on signal 5 (core dumped) pid 742 (getty), jid 0, uid 0: exited on signal 5 (core dumped) pid 740 (getty), jid 0, uid 0: exited on signal 5 (core dumped) pid 741 (getty), jid 0, uid 0: exited on signal 5 (core dumped) ktrace write failed, errno 27, tracing stopped for pid 951 ktrace write failed, errno 27, tracing stopped for pid 968 ktrace write failed, errno 27, tracing stopped for pid 967 ktrace write failed, errno 27, tracing stopped for pid 966 ktrace write failed, errno 27, tracing stopped for pid 960 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 762 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 766 md0: truncating fractional last sector by 8 bytes panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:607: callout_cc_add: Bad list head 0xfffffe000845ee90 first->prev != head cpuid = 1 time = 1767724073 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056d54eb0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056d55010 vpanic() at vpanic+0x257/frame 0xfffffe0056d551d0 panic() at panic+0xb5/frame 0xfffffe0056d55290 callout_cc_add() at callout_cc_add+0x339/frame 0xfffffe0056d552f0 callout_reset_sbt_on() at callout_reset_sbt_on+0x74f/frame 0xfffffe0056d55410 tcp_timer_activate() at tcp_timer_activate+0x56c/frame 0xfffffe0056d55490 tcp_do_segment() at tcp_do_segment+0x57a9/frame 0xfffffe0056d55770 tcp_input_with_port() at tcp_input_with_port+0x21ad/frame 0xfffffe0056d55a20 tcp6_input_with_port() at tcp6_input_with_port+0x8e/frame 0xfffffe0056d55a60 tcp6_input() at tcp6_input+0x26/frame 0xfffffe0056d55a90 ip6_input() at ip6_input+0x2280/frame 0xfffffe0056d55cf0 swi_net() at swi_net+0x2b8/frame 0xfffffe0056d55d90 ithread_loop() at ithread_loop+0x4ec/frame 0xfffffe0056d55ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056d55f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056d55f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 12 tid 100033 ] Stopped at kdb_enter+0x6e: movq $0,0x2587a77(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff8283c160 .str.27 rsp 0xfffffe0056d54ff0 rbp 0xfffffe0056d55010 rsi 0 rdi 0xffffffff81664139 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x33 r12 0xfffffe0007821780 r13 0xfffffffffffffffd r14 0xffffffff8283c160 .str.27 r15 0 rip 0xffffffff8164d41e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x2587a77(%rip) db> show proc Process 12 (intr) at 0xfffffe0007808560: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b5ef60 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b5ef60 reapsubtree: 12 sigparent: 20 vmspace: 0xffffffff83b5ff40 (map 0xffffffff83b5ff40) (map.pmap 0xffffffff83b5ffe0) (pmap 0xffffffff83b60050) threads: 20 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 Run CPU 1 [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] db> ps pid ppid pgrp uid state wmesg wchan cmd 995 763 763 0 S (threaded) syz-executor 100097 S nanslp 0xffffffff83bb5f41 syz-executor 100365 S uwait 0xfffffe00585f3100 syz-executor 100366 S select 0xfffffe006e047640 syz-executor 100367 S uwait 0xfffffe0058695000 syz-executor 991 766 766 0 S (threaded) syz-executor 100171 S nanslp 0xffffffff83bb5f41 syz-executor 100356 S lockf 0xfffffe005800d400 syz-executor 100357 S lockf 0xfffffe0058955a00 syz-executor 100358 S uwait 0xfffffe0058695300 syz-executor 989 764 764 -1 T (threaded) syz-executor 100098 s syz-executor 100354 D fork 0xffffffff82840840 syz-executor 100359 s syz-executor 984 1 764 0 S uwait 0xfffffe0058697e00 syz-executor 982 0 0 0 DL mdwait 0xfffffe006bb1c000 [md0] 971 970 765 0 S uwait 0xfffffe0059a2c800 syz-executor 970 969 765 0 SV wait 0xfffffe0058af4018 syz-executor 969 765 765 0 T (threaded) syz-executor 100111 s syz-executor 100321 s syz-executor 100323 D ppwait 0xfffffe0058af4518 syz-executor 100325 s syz-executor 966 1 966 0 Ss+ ttyin 0xfffffe0007bf80b0 getty 965 1 763 0 S uwait 0xfffffe0058697980 syz-executor 963 1 963 0 Ss+ ttyin 0xfffffe0007bf88b0 getty 961 1 765 0 S uwait 0xfffffe0059a2e000 syz-executor 958 1 958 0 Ss+ ttyin 0xfffffe0007bf78b0 getty 957 1 957 0 Ss+ ttyin 0xfffffe00599538b0 getty 954 1 954 0 Ss+ ttyin 0xfffffe0007bf90b0 getty 952 1 766 0 T syz-executor 949 1 949 0 Ss+ ttyin 0xfffffe00599518b0 getty 946 1 946 0 Ss+ ttyin 0xfffffe0007bf70b0 getty 941 1 941 0 Ss+ ttyin 0xfffffe00599530b0 getty 939 1 763 0 S uwait 0xfffffe00585f3c00 syz-executor 936 1 936 0 Ss+ ttyin 0xfffffe005422dcb0 getty 926 1 763 0 S uwait 0xfffffe00585f4b00 syz-executor 921 1 763 0 S uwait 0xfffffe0058697880 syz-executor 920 1 763 0 S uwait 0xfffffe00585f4c00 syz-executor 914 1 765 0 S uwait 0xfffffe0058697d00 syz-executor 913 1 765 0 S uwait 0xfffffe0058697580 syz-executor 910 1 764 0 S uwait 0xfffffe0058694180 syz-executor 909 1 764 0 S uwait 0xfffffe00585f4200 syz-executor 861 1 766 0 S uwait 0xfffffe0058695500 syz-executor 836 0 0 0 DL (threaded) [KTLS] 100089 D - 0xfffffe0059a13100 [thr_0] 100148 D - 0xfffffe0059a13180 [thr_1] 100149 D - 0xffffffff83cd78e8 [reclaim_0] 821 1 763 0 S uwait 0xfffffe0058695100 syz-executor 813 0 0 0 DL aiordy 0xfffffe0058a9fac0 [aiod4] 810 0 0 0 DL aiordy 0xfffffe0058af2ab8 [aiod3] 809 0 0 0 DL aiordy 0xfffffe0058af3568 [aiod2] 806 0 0 0 DL aiordy 0xfffffe0058a05570 [aiod1] 766 762 766 0 S nanslp 0xffffffff83bb5f41 syz-executor 765 762 765 0 S nanslp 0xffffffff83bb5f40 syz-executor 764 762 764 0 S nanslp 0xffffffff83bb5f41 syz-executor 763 762 763 0 S nanslp 0xffffffff83bb5f40 syz-executor 762 1 760 0 S select 0xfffffe0059a935c0 syz-executor 16 0 0 0 DL syncer 0xffffffff83ce3ae0 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83ce2020 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100093 D sdflush 0xfffffe0057f1fce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d23380 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83d09448 [dom0] 100080 D launds 0xffffffff83d09454 [laundry: dom0] 100081 D umarcl 0xffffffff81e37c30 [uma] 7 0 0 0 DL - 0xffffffff8392e510 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff844aaf80 [pf purge] 5 0 0 0 DL waiting 0xffffffff8489c700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f8340 [doneq0] 100046 D - 0xffffffff838f82c0 [async] 100075 D - 0xffffffff838f8140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83d04ce0 [crypto] 100043 D crypto_ 0xfffffe00077af830 [crypto returns 0] 100044 D crypto_ 0xfffffe00077af880 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b5e520 [g_event] 100038 D - 0xffffffff83b5e540 [g_up] 100039 D - 0xffffffff83b5e560 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 RL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 Run CPU 1 [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 Run CPU 0 [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83d05780 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D - 0xffffffff84c5dff0 [kernel] 100005 D - 0xfffffe00077cb000 [softirq_0] 100006 D - 0xfffffe00077cae00 [softirq_1] 100007 D - 0xfffffe00077cad00 [if_io_tqg_0] 100008 D - 0xfffffe00077cac00 [if_io_tqg_1] 100009 D - 0xfffffe00077cab00 [if_config_tqg_0] 100010 D - 0xfffffe00077caa00 [kqueue_ctx taskq] 100011 D - 0xfffffe00077ca900 [jail_remove taskq] 100012 D - 0xfffffe00077ca800 [bus taskq] 100015 D - 0xfffffe00077ca500 [thread taskq] 100017 D - 0xfffffe00077ca300 [aiod_kick taskq] 100018 D - 0xfffffe00077ca200 [deferred_unmount ta] 100019 D - 0xfffffe00077ca100 [inm_free taskq] 100020 D - 0xfffffe00077ca000 [in6m_free taskq] 100021 D - 0xfffffe00077c9e00 [linuxkpi_irq_wq] 100022 D - 0xfffffe00077c9d00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00077c9d00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00077c9d00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00077c9d00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00077c9c00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00077c9c00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00077c9c00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00077c9c00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00077c9b00 [firmware taskq] 100040 D - 0xfffffe00077c9100 [crypto_0] 100041 D - 0xfffffe00077c9100 [crypto_1] 100056 D - 0xfffffe00077c8900 [vtnet0 rxq 0] 100057 D - 0xfffffe00077c8800 [vtnet0 txq 0] 100058 D - 0xfffffe00077c8700 [vtnet0 rxq 1] 100059 D - 0xfffffe00077c8600 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe005800d900 [virtio_balloon] 100065 D - 0xffffffff82840841 [deadlkres] 100069 D - 0xfffffe00077c8b00 [acpi_task_0] 100070 D - 0xfffffe00077c8b00 [acpi_task_1] 100071 D - 0xfffffe00077c8b00 [acpi_task_2] 100073 D - 0xfffffe00077cb100 [mca taskq] 100074 D - 0xfffffe00077c8a00 [CAM taskq] 100076 D - 0xfffffe00077c8300 [ipsec_offload] 973 969 765 0 Z syz-executor db> show all locks Process 12 (intr) thread 0xfffffe0007821780 (100033) exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe006e31f560) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1486 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 devbuf 8283 7252K 8309 linker 385 5207K 507 tcp_hpts 8 4865K 8 sysctloid 35395 2086K 35470 vtbuf 24 1968K 46 kobj 337 1348K 510 newblk 88 1046K 2616 vfscache 3 1025K 3 pcb 27 671K 119 inodedep 16 518K 321 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 filedesc 43 341K 299 subproc 150 266K 1094 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 610 acpica 1674 184K 56977 vmem 5 144K 7 tidhash 3 141K 3 pagedep 11 131K 145 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 107 107K 124 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1015 83K 5167 LRO 20 83K 20 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 529 67K 529 ddb_capture 1 64K 1 umtx 336 42K 336 kdtrace 210 42K 1365 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 126 32K 136 msg 4 30K 4 kbdmux 6 28K 6 temp 31 21K 3743 DEVFS_RULE 56 20K 56 ifaddr 71 20K 73 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 124 16K 395 ithread 90 15K 90 bus-sc 34 15K 1690 lltable 47 15K 47 eventhandler 170 14K 170 ether_multi 152 13K 167 kenv 95 12K 95 GEOM 54 12K 470 shmfd 7 11K 13 CAM queue 5 11K 1528 rman 75 10K 430 cred 24 9K 227 rpc 8 9K 8 in6_multi 65 9K 65 bmsafemap 2 9K 283 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 3 pfs_vncache 1 8K 1 audit_evclass 240 8K 306 taskqueue 69 8K 81 ifnet 7 7K 7 sglist 6 7K 6 plimit 16 6K 464 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 kqueue 64 6K 1081 ufs_dirhash 24 5K 24 pf_ifnet 11 5K 20 UMA 271 5K 271 lockf 44 5K 178 vt 11 5K 11 md_disk 2 5K 2 memdesc 1 4K 1 MCA 32 4K 32 md_sectors 1 4K 1 evdev 4 4K 4 freework 15 4K 432 pwddesc 56 4K 1015 acpisem 28 4K 28 terminal 11 3K 11 DEVFSP 41 3K 72 uidinfo 5 3K 18 acpidev 20 3K 20 hhook 8 3K 10 kcovinfo 36 3K 36 netlink 2 3K 72 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 clone 8 2K 8 ip6ndp 13 2K 15 proc-args 66 2K 2052 sctp_ifa 13 2K 14 Unitno 27 2K 312 CAM XPT 22 2K 543 in_multi 6 2K 9 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 session 11 2K 43 sctp_timw 5 2K 5 msi 9 2K 9 selfd 17 2K 53836 sctp_stro 1 1K 6 softdep 1 1K 1 indirdep 4 1K 225 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 18 NFSD session 1 1K 1 mld 7 1K 7 igmp 7 1K 7 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 sctp_atcl 2 1K 27 newdirblk 6 1K 129 dirrem 3 1K 229 CC Mem 6 1K 75 pfil 6 1K 6 BPF 6 1K 19 isadev 6 1K 6 mount 16 1K 173 pci_link 10 1K 10 mkdir 5 1K 258 diradd 5 1K 253 crypto 4 1K 27 encap_export_host 12 1K 12 osd 11 1K 92 inpcbpolicy 17 1K 335 freeblks 2 1K 187 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 freefile 3 1K 194 chacha20random 1 1K 1 biobuf 1 1K 1 ip6opt 2 1K 16 ip_msource 4 1K 5 vnodes 1 1K 3 ktls 1 1K 10 select 2 1K 42 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 filedesc_to_leader 3 1K 6 sctp_atky 3 1K 33 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 freefrag 1 1K 432 ip6_msource 2 1K 2 VN POLL 1 1K 5 aio 4 1K 4 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 cryptodev 1 1K 245 ip_moptions 1 1K 6 vnet 1 1K 1 pmc 1 1K 1 sigio 1 1K 3 entropy 2 1K 33 acpiintr 1 1K 1 sctp_athm 2 1K 27 sctp_map 2 1K 12 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 1 sctp_iter 0 0K 11 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 11 sctp_aadr 0 0K 0 sctp_stri 0 0K 0 mqdata 0 0K 0 filemon 0 0K 3 pf_table 0 0K 0 pf 0 0K 1 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 tcp_pcm_rack 0 0K 2 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 4 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 913 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 7 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 2 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_moptions 0 0K 2 in6_mfilter 0 0K 3 frag6 0 0K 1 tcplog 0 0K 0 tcp_hwpace 0 0K 0 in_mfilter 0 0K 9 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 20 fadvise 0 0K 2 statfs 0 0K 259 namei_tracker 0 0K 4 inotify 0 0K 13 export_host 0 0K 0 cl_savebuf 0 0K 135 lio 0 0K 10 acl 0 0K 0 soname 0 0K 3393 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 10 iov 0 0K 14723 ioctlops 0 0K 110 eventfd 0 0K 4 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 458 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 653 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 8 rctl 0 0K 0 cache 0 0K 0 kexec 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 filecaps 0 0K