last executing test programs: 3.617034687s ago: executing program 0 (id=83): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000201, &(0x7f00000000c0)="27ec0ac38bf06f295bdc5099d7c1425ac311c41ffe3f78db9fad8dc81014b480e9ac7cb77fe0d7391a5acc2fa58d5e63de2c85d08a48bc466ef08a7d556026c74617021c088b6a58e035", 0x4a, [0x4000003], 0x0, 0x6, 0x0, {0x0, 0xfffffffffffffffe, 0x0}, {0x2, 0x9, @sival_ptr=0x5, @ke_flags}}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) r2 = getsid(0x0) fcntl$setown(r1, 0x6, r2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = open$dir(0x0, 0x10000, 0x0) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000000)='./file0\x00', 0x4, 0x8) freebsd11_lstat(&(0x7f0000000340)='./file0\x00', 0x0) 2.99651211s ago: executing program 0 (id=86): syz_emit_ethernet(0x76, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x40, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}], "94ef0f13c9356461"}}}}}}}) r0 = kqueue() r1 = getpgid(0x0) aio_error(&(0x7f0000000800)={r0, 0x8, &(0x7f00000002c0), 0x0, [0xfffffffd, 0x8], 0x80, 0x5, 0x5, {0x9, 0x1, &(0x7f0000000740)="eefbef262a69138f0418f28f6a61b7ab4b81c330dcbda5a510f96f01ca251bf991dab2e3e4082c7859ef624e0743e586281e5069cd45a683f248d1189d345f8a3759d4e5890052f21af012a825610e19eac70a62d6e5566deff13054077104f3089c6e2ffae40560040eab476c3fd894bca4d67de6306468eda5a2ffb8a52725a0234037c58ed0e7f399f06f56fe65bb"}, {0x0, 0x11, @sigval_ptr=0xfffffffffffffffe, @tid=r1}}) kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9f4c4662c957", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x7, @multicast2}, @icmp=@generic={0x11, 0x8, 0x0, "e0000001"}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) ioctl$PIO_DEADKEYMAP(r2, 0x20006b09, &(0x7f0000000f00)={0xfd7, [{0x3, [0x8, 0x6, 0x7, 0x6, 0x1, 0x0, 0xffffffff, 0x5, 0x80, 0x8, 0x500, 0x8001, 0x2000, 0x80000000, 0x7, 0x0, 0x6, 0x7, 0x2, 0x8, 0xfff, 0x10001, 0x1000, 0x8, 0x4d97, 0xff, 0x101, 0x3, 0x6, 0x304, 0x6, 0x2, 0xfffffff9, 0x7, 0x7, 0xff, 0x10000, 0x2, 0x5, 0x2, 0x1, 0x3, 0x6f, 0x22df, 0x401, 0x7fffffff, 0xa7, 0xc, 0x6, 0x4, 0x9d49, 0xb, 0x8001, 0x6, 0x2, 0x1, 0x7f, 0x2, 0x6, 0x80000000, 0x2, 0x96fc, 0x200, 0x0, 0xfffffc00, 0x8, 0x0, 0x1e780, 0x50, 0x8001, 0x4, 0x9, 0x7, 0xffffffff, 0xfffeffff, 0xee, 0x0, 0x8, 0x7fff, 0x0, 0x2, 0x5b23, 0x4, 0xffffffff, 0x1, 0xf05, 0x9, 0xffffffff, 0x9, 0x80000001, 0x8, 0x9, 0x4, 0x7fffffff, 0x8000, 0x2, 0x8001, 0x8, 0x4, 0x3, 0x6, 0x80, 0xb3ab, 0x9]}, {0x4, [0x4, 0x3, 0x1, 0x3, 0x80000000, 0x4, 0x400, 0xeec, 0xf557, 0x8, 0x7fff, 0x8, 0x8, 0x401, 0xb, 0xa, 0xfad6, 0x8, 0x5, 0x6, 0x40, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0xc77e, 0x8, 0x81, 0xc9, 0xa4, 0xfffffff8, 0x2, 0x921, 0x7fffffff, 0x24, 0x2, 0x370c, 0xb00, 0x4, 0x52a, 0x8, 0x7, 0xff, 0x8, 0x4, 0x370a8713, 0x9, 0x6, 0x428, 0xfffffff8, 0x2, 0x7, 0x4, 0x0, 0x5, 0xffff, 0x81, 0x0, 0x8, 0x9, 0x0, 0x7, 0x3, 0x2, 0x2, 0xff, 0x1, 0x4, 0x3, 0x7, 0x2, 0x6, 0x3, 0xbb, 0xffff, 0x8, 0x4, 0x0, 0x9, 0x7, 0x703, 0x0, 0xfffffff9, 0x9, 0x6, 0x4, 0xb32, 0x4, 0x10, 0x9, 0x40, 0x3, 0x4, 0x91, 0x0, 0x0, 0x7fffffff, 0x8, 0x66f53e15, 0x1, 0x8000, 0x4]}, {0x1, [0x826, 0x1000, 0x9, 0xffff8001, 0x3, 0xffffff77, 0x6, 0x1, 0x7, 0xd, 0x9, 0x6621, 0x5, 0x1, 0x6, 0x0, 0x3, 0x44, 0x5, 0x7f, 0x2, 0x40, 0xe, 0x10001, 0x1, 0xfffffff7, 0x80, 0x6, 0x7, 0xe51, 0x1ff, 0x2, 0x2, 0xf8000000, 0x40, 0x0, 0x400, 0x10000, 0x7, 0x1, 0x8, 0xc03, 0x3, 0x2, 0x122, 0x7, 0xf, 0x7, 0x31c, 0x2, 0x81, 0x0, 0xffffffff, 0xd08, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6d, 0xfb, 0x3b, 0x8, 0x8, 0x5834, 0x8, 0x7fff, 0x1, 0x4, 0x0, 0x5, 0x9, 0xaa, 0x0, 0xa, 0x4, 0x80000001, 0x0, 0x4, 0x7fff, 0x0, 0xdc5, 0x6, 0x4, 0x8, 0x8001, 0x4, 0x9, 0x9, 0x7f, 0x3, 0xd5ca, 0x7, 0x7fff, 0x1, 0x2, 0x80, 0x1d12, 0x3, 0x0, 0xfffffffc, 0xe358, 0x200, 0x5]}, {0x0, [0xfffffff6, 0xb729, 0xa, 0x9, 0x2, 0x5, 0x9, 0x6, 0x40, 0x3fc3, 0x0, 0x3a, 0x72, 0x7ff3, 0x7, 0x6, 0xdcb, 0x81, 0x1, 0x7fffffff, 0x282d, 0x1ff, 0x10000000, 0x89, 0xffff0000, 0x7fff, 0x10, 0x2, 0x2, 0x4, 0xffffffff, 0xde, 0x3ff, 0x0, 0x6cd9, 0x101, 0x7, 0x1000, 0x2, 0x7f, 0x400001, 0xe03, 0x7, 0x5, 0x3, 0x2, 0x1, 0x4, 0x1, 0x2, 0x7f, 0x8, 0xf, 0x9, 0x50, 0x5, 0x0, 0x0, 0x93, 0x1, 0x4, 0x2, 0x18, 0x7ff, 0xd, 0x4, 0x5, 0x7c8, 0x9, 0x9f, 0x7f2d, 0x8fa, 0x1, 0xfffffff9, 0x9a9d, 0x5, 0x6, 0x8, 0x2e, 0x6, 0x1, 0x7f, 0x8, 0x5, 0x0, 0x0, 0x2, 0x40, 0x9, 0x7, 0xd5e, 0x1, 0x1ff, 0x7, 0x3ff, 0x10c, 0x7fff, 0x2, 0x7, 0x7, 0x1, 0x6, 0x6, 0x38]}, {0x1ff, [0x2, 0x0, 0x2, 0x2, 0x3e, 0xe, 0x401, 0xb, 0x0, 0x31, 0xad6b, 0x0, 0x5, 0x1ff, 0x3b, 0x9, 0xd, 0x1, 0x574b, 0x9, 0x5, 0xfffffff7, 0x9, 0x3, 0x7, 0x6, 0xa41, 0x6, 0x7, 0x1, 0x3, 0xa, 0xfffffffb, 0x2, 0x5, 0xe0000000, 0x3, 0x80000000, 0x8001, 0xfffffff9, 0x3, 0x2, 0x553, 0x40, 0x6f4, 0x0, 0x6, 0xd, 0x7, 0x2, 0x2, 0x8, 0x100, 0xd, 0x7, 0xfffffff6, 0xc3, 0x6, 0x8, 0x9, 0x0, 0x2000, 0x3ae, 0x40000000, 0x4, 0xc08, 0x8, 0x1000, 0x9, 0x10001, 0x10001, 0x0, 0x3, 0x200, 0x5, 0x5, 0x8, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7186b6e1, 0x7, 0x4, 0x10, 0x8, 0x7, 0xffffffff, 0xffffffff, 0x85f5, 0x0, 0x1, 0x800, 0x5, 0x5, 0x5, 0x80000001, 0x5, 0x8000, 0x3, 0xffffffff, 0x8, 0x1ff]}, {0x7db, [0x5, 0x7, 0x7, 0x9, 0x2, 0x6, 0x80000000, 0xffffffff, 0x6, 0x4, 0x6, 0x67d7, 0x8, 0x10001, 0xfffffffa, 0x2, 0x4, 0x6, 0xfffffe01, 0x8, 0xffffff93, 0x3, 0xa37, 0x3ff, 0x8, 0x7c8, 0x5, 0x101, 0x8, 0x2, 0x1000, 0x0, 0x3ff, 0x1, 0x3, 0x6, 0x1f64d413, 0x5, 0x1, 0xfffffffc, 0xedf, 0x2, 0xc, 0x2, 0x8, 0x0, 0x7, 0x9, 0x149, 0x5, 0x2, 0x5, 0x7fff, 0x0, 0x70, 0x4, 0x2, 0x2, 0x5, 0xba38, 0x2, 0x7, 0x2, 0xfffffffa, 0x2, 0x2, 0x9, 0xdd, 0xff, 0x3, 0x401, 0x200, 0x0, 0x9ad, 0x6, 0x91dc, 0x7fffffff, 0x6, 0xf0ff, 0x4, 0x20007, 0xff8, 0x8001, 0x0, 0x10000, 0xe, 0x80, 0x1000, 0x622, 0x7fffffff, 0x2e, 0x4, 0x4, 0x2, 0x5, 0x0, 0xe, 0xffffffff, 0xfffffff7, 0x6, 0x7f, 0x20d4, 0x3, 0x401]}, {0xdb6d, [0x8, 0x1, 0xffff8001, 0x6, 0x9, 0x0, 0x2, 0x6, 0xfffffff2, 0x7f, 0x8, 0x8, 0x7, 0xfffff755, 0x6, 0x9, 0x4, 0x5, 0x50f, 0x100, 0x6, 0x5, 0x3, 0x9e3, 0x7, 0xfff, 0x4, 0x7, 0x9, 0x8, 0x2, 0x0, 0xb4d, 0x2, 0x200, 0x4, 0x5, 0x9, 0x7df, 0x2, 0x7ff, 0x7, 0x1196, 0x2, 0x1afa, 0x7, 0xf, 0x80000001, 0x8, 0x4, 0x3, 0x1, 0x5, 0x2, 0x4, 0x9, 0x462, 0xf1, 0xffffffca, 0xad58, 0x66d, 0x7, 0x1, 0x1e, 0x5, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfa, 0x701, 0x81, 0xea2, 0x3, 0x7ff, 0x8, 0xb11, 0x3, 0x1000, 0x2, 0x400, 0x1ff, 0x6, 0x101, 0x6, 0xfffffffe, 0x5, 0x1, 0x81, 0x5, 0x3ff, 0x8, 0x4, 0x4, 0x2, 0x4, 0xfffffff9, 0xf, 0x573, 0xb, 0x6, 0x5, 0x7]}, {0x0, [0x6, 0x55f, 0x7fff, 0xad3, 0x4, 0x0, 0x0, 0x6b, 0x9, 0x101, 0x8, 0x3ff, 0x5, 0x40, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x3, 0x81, 0xfffffffa, 0x9, 0x401, 0xda, 0x6, 0xfffffff7, 0x200, 0x2, 0xb, 0x1, 0x3, 0x2, 0xd7, 0x0, 0x805, 0xffffffff, 0x40, 0x1, 0xd, 0x8001, 0x0, 0xaca, 0x3, 0xff, 0x5c, 0x100, 0x10000, 0x1, 0xffffffff, 0xffff, 0x40, 0x0, 0x914, 0x8, 0x7, 0x8, 0x6, 0x5, 0xa0, 0x231, 0xffff, 0xf1a, 0x100, 0x6, 0x4, 0x7fffffff, 0xc, 0x9, 0x7fff, 0x101, 0x8000, 0x0, 0x8003, 0x4, 0x9, 0xffffffff, 0x4, 0x10000, 0x0, 0x4, 0x6, 0xe45, 0x1, 0xd, 0xd7, 0x8000, 0xfffffff7, 0x6, 0x5, 0x200, 0x4, 0x5, 0x7, 0x5, 0x81, 0x8, 0x0, 0x6, 0x4, 0x8, 0xb4f, 0x9]}, {0x3, [0xfffffff5, 0x4, 0x9, 0x401, 0xd97, 0x80000001, 0x0, 0x470, 0x1, 0x6, 0x2, 0x4, 0x2f6229ce, 0x2, 0xa, 0x8, 0x7f, 0x4, 0x34, 0x9, 0x0, 0x5e, 0x7fffffff, 0xd2df, 0x54, 0x8, 0x6, 0x7ff, 0x5, 0x3, 0x6, 0x0, 0xffffffff, 0xffffffff, 0x3, 0x80000000, 0x9, 0x2, 0x18, 0x8, 0xff, 0x5, 0x9, 0x4, 0xfdb, 0x0, 0x6, 0x0, 0x6, 0x8, 0x2, 0x400, 0x8, 0x0, 0x8, 0x1, 0x401, 0x2400, 0x1, 0x5, 0x7f, 0x7ff, 0x80, 0xed, 0x70c, 0x9, 0x4, 0xb8, 0x1d3, 0x7fff, 0x2, 0xd74b, 0x1000, 0x8000, 0xff, 0x6, 0x10, 0xfff, 0x9, 0x1fe0, 0x5, 0x0, 0xffffff80, 0x0, 0xfd9, 0x1000, 0x6, 0xcb4, 0x7b9, 0x6, 0x4, 0x9, 0x4, 0x8, 0xfffffff7, 0x80000000, 0x80000000, 0x7f, 0x800, 0x2, 0x1, 0x1, 0x6, 0x7]}, {0x1, [0x2, 0x6, 0x5, 0x3ff, 0x9, 0x9, 0xfffffff6, 0x3, 0xfffffffd, 0x10000, 0xfffffe01, 0xfffffff7, 0xfffffffc, 0x7fff, 0xffffffb9, 0x32c, 0x9, 0x1, 0x50dc, 0x6, 0x8, 0x8, 0x2e, 0x8a05, 0x7, 0x3, 0xb, 0x1, 0xffff3c32, 0x8001, 0x2, 0xc3e0, 0x2, 0x6e31, 0x3, 0x2, 0x4, 0x8, 0x4, 0xd6, 0xfffffff9, 0x9, 0x9fc, 0x6, 0x81, 0xffffffc0, 0xc2ee, 0x6cb, 0x3, 0x35, 0x68, 0x6, 0xe28a, 0x7, 0xff, 0x8, 0x8, 0x1, 0x9f, 0x6, 0x8, 0x2, 0x4, 0xa4, 0x8, 0x7fff, 0x1, 0xfffff001, 0x0, 0x9, 0xa, 0x274, 0x9, 0x5, 0x9a, 0x9c99, 0x40081, 0xc, 0x18, 0x7, 0x0, 0x8, 0x10, 0x7, 0x6, 0x8, 0xff, 0x6, 0x7, 0x4, 0x8, 0x2, 0xaa37, 0x8, 0x5, 0x8, 0x1f, 0x4, 0x2, 0x1, 0xd, 0x1, 0xb9, 0x4]}, {0x0, [0x0, 0x5, 0x1, 0xe, 0x8000, 0x3, 0xafc, 0x401, 0x6, 0x8, 0x0, 0x8fa, 0x7f, 0xfffffff6, 0x120000, 0xff, 0xb4, 0xc, 0x6, 0x7ff, 0x5, 0x100, 0x10001, 0x3, 0x9, 0x101, 0xffffffff, 0xc, 0x8001, 0xc, 0x800, 0xa227, 0x5, 0x3ff, 0x1, 0x4, 0x1, 0x8, 0x2277, 0x7, 0xe9, 0x3, 0x1, 0x0, 0x2000, 0x8, 0x6, 0x1, 0x3, 0x3, 0x8, 0x5, 0x400, 0xaec, 0xfffffff7, 0x8c86, 0x9, 0x0, 0x8, 0x8, 0xe, 0xa, 0x3, 0x3e, 0x10000, 0x1, 0x46, 0x1, 0x82, 0x5, 0x5, 0x7, 0x184, 0xc3f2, 0xfffffffb, 0x8, 0x3, 0x5, 0xfffffff8, 0x0, 0xa436, 0x81, 0x4, 0x6, 0x7, 0x0, 0x0, 0x3b9, 0xb81a, 0x7, 0x1, 0x3, 0xffffffff, 0x8, 0xe, 0xffffa46a, 0x7fff, 0x0, 0x2, 0x201, 0x4, 0x1, 0x436f95d4, 0x1]}, {0x5, [0x0, 0xffffffff, 0x0, 0x5, 0x7, 0x2, 0x2, 0x7ff, 0x438, 0x2, 0x83, 0x4, 0x8, 0x10001, 0x5e54, 0x4, 0xd, 0x8, 0x4b, 0x3, 0x9, 0x7000000, 0x3, 0x8, 0x1, 0x10001, 0xf39a, 0x17, 0x5, 0xd94f, 0x87a9f2b, 0x4, 0x8, 0x9, 0x6, 0x4, 0x7, 0x4, 0x2, 0x10000, 0x8, 0x4e2, 0x10, 0x0, 0xd, 0x9, 0x0, 0x1, 0x4, 0xda, 0x28, 0x10001, 0x29, 0xff, 0x7, 0x61a, 0x3, 0x20006, 0x5, 0x0, 0x3, 0x6, 0x7ff, 0x3b0, 0x8, 0x3, 0x2, 0x0, 0xc34c, 0xd, 0xe1, 0x5, 0x6, 0x6, 0x8001, 0x3, 0x4, 0x8, 0x69e, 0x4, 0xd, 0x0, 0x3, 0x2, 0x4, 0x0, 0x7fffffff, 0x5, 0x4, 0x5, 0x3, 0x5, 0x2, 0x88, 0x81, 0x6, 0x10001, 0x8, 0x7f, 0x200, 0x0, 0x3, 0x4, 0x8]}, {0x4000000, [0x80, 0x9, 0x0, 0x4, 0x2, 0x2, 0x6, 0x7, 0xff, 0x10001, 0x7, 0x2, 0x3, 0x3, 0x9eca, 0xc9, 0x9, 0xff, 0x7f, 0xfffffff8, 0xa250, 0x6, 0x92, 0xfffff989, 0x3, 0x5, 0x1, 0x4, 0x3, 0x94, 0x1, 0xfffffff9, 0x800, 0x9, 0x2, 0xf8, 0xcca, 0xffffff01, 0x5c, 0x2, 0x10, 0x4, 0xd, 0x15f5, 0x9, 0x7f, 0x5, 0xfffffffa, 0x2, 0xe0000000, 0x8001, 0x9, 0x1, 0x8, 0xc327, 0xfffffffe, 0xea, 0x9, 0x9, 0x8000, 0x2, 0x8000, 0x8, 0x3ff, 0x5, 0x4, 0x5, 0x81d2, 0x4, 0x6, 0x40, 0x9a, 0x5, 0x0, 0x7ff, 0x6, 0x1, 0x718f, 0x3, 0x6, 0x3, 0x4, 0x8, 0x8001, 0x200, 0x802e, 0x2, 0x5, 0x10000, 0x8, 0x101, 0x1, 0xd, 0x9, 0x0, 0x0, 0x7, 0x3, 0xf57a, 0x1ff, 0xff, 0x1, 0x12a, 0x9]}, {0x6, [0x5, 0xfffffc01, 0x6366, 0xf, 0x4, 0x432, 0x3, 0xba6c0000, 0x0, 0x7, 0x4c000000, 0x3, 0x0, 0x3ff, 0x2, 0x4, 0xcc39, 0x473, 0x3, 0x6, 0x3, 0xb, 0x6, 0x0, 0x7ff, 0x6d0, 0x187e9fac, 0x7, 0x18, 0x3, 0x1, 0x2, 0xfffffffb, 0x1, 0x6, 0x4, 0x5, 0x4, 0x8, 0x88, 0x0, 0x80000000, 0xb, 0x4, 0x9, 0x3ff, 0x7, 0xd8b, 0x502e, 0x7, 0x7, 0x4, 0x6, 0xffffffff, 0x8, 0x1, 0x1ff, 0x97f, 0x310, 0x3, 0xcc0, 0x5, 0x169a, 0x10000, 0x43ad4fa3, 0x2, 0x9, 0x6, 0x401, 0xf, 0xffffff7f, 0x4b8a, 0x8, 0x7, 0x8ca9, 0x3, 0x9, 0xd7, 0x374, 0x8, 0x5, 0x4, 0x3, 0x5, 0x7fff, 0x7, 0x800, 0x0, 0x4, 0x10001, 0x80000001, 0x7fff, 0x7, 0xc9, 0x800, 0x9, 0x80, 0x8, 0xd2, 0x2, 0x1, 0x0, 0x8330, 0x9]}, {0x200, [0x784e2393, 0x4, 0x6, 0x9, 0xedf, 0x1, 0x3, 0x101, 0x9, 0x0, 0x101, 0x10, 0xf, 0x1, 0xc5, 0xa588, 0x0, 0xe, 0x6, 0x2, 0x0, 0x8, 0xe, 0xa, 0x8, 0x2, 0x7e, 0x0, 0x6, 0x80000000, 0x77, 0x2, 0x1000, 0x199, 0x2, 0xbf63e0, 0x0, 0xc6, 0x0, 0x400, 0x2, 0x140, 0x5, 0x6, 0x0, 0x9, 0xc7, 0x3c, 0xffffffff, 0x0, 0x5, 0x0, 0x8, 0x3, 0x2, 0x3486238e, 0x0, 0x7, 0xffffffff, 0xd93, 0x6, 0x2, 0x8, 0xfb6, 0x7, 0x5, 0x2, 0x1, 0x1, 0x80000001, 0x9, 0xc, 0x3, 0x8, 0xd6b, 0x2b3a, 0x6, 0xb8, 0x0, 0x9, 0xc, 0x0, 0x7, 0x6, 0x69e1, 0x100, 0x4, 0xfe, 0x4800000, 0x612, 0xfffffff8, 0xbe1, 0xe, 0xffffff7f, 0x5a8, 0x8001, 0x4e8a095, 0x6, 0x9, 0xffffffff, 0x3, 0xbbe, 0x5, 0x50]}]}) aio_fsync(0x4fb6c9497fdf3192, &(0x7f00000001c0)={0xffffffffffffffff, 0xfff, 0x0, 0x0, [0xc, 0x2], 0xa, 0x8, 0x2, {0x92, 0xbac7, &(0x7f0000000100)="6f3ff43c7a16a74d1458064d0a9bea2054e66a56c02b2c22b79531a85bb5caff7bcb67fd4b0b86517f1f0cd8b1668dd2516aa56914da6b3b9b81afdf52035772a5c1ac5a186b0bc2024cdae5d15371eb98f58c4f1ae59a3410c5004ab788c449462e3a24141b2c1d1dedd9aabdaa07b93659e52c4ca6eb70058495f60e9182787f86a405f5"}, {0x4, 0xc, @sival_int=0x32bc3360, @spare=[0x5, 0x1, 0xffff, 0x8, 0x5be4d9a9, 0x100000000, 0x7, 0x6]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) clock_getres(0xf, &(0x7f0000000ac0)) freebsd11_kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000015", 0x70, 0x2c, 0xff, @rand_addr="e1aaa2241dc0fb000000000000000178", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6, {0x7, 0x6, "18deb3", 0x0, 0x71, 0x1, @loopback, @empty, [@routing={0x6, 0x0, 0x0, 0x4}, @hopopts={0x70, 0x0, '\x00', [@enc_lim]}, @routing={0x4b, 0x4, 0x0, 0x5, 0x0, [@loopback, @mcast1]}]}}}}}}}) ppoll(&(0x7f0000000640), 0x0, 0x0, &(0x7f00000008c0)={[0x9, 0x5, 0xad26, 0x4]}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="d5", 0xfde7) openat$crypto(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) poll(0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f00000002c0)={0x3, 0x3}) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r4, 0x29, 0x44, 0x0, 0x0) posix_fallocate(r3, 0x0, 0x8) posix_fallocate(r3, 0x0, 0x10007) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) socket$inet6(0x1c, 0x3, 0x0) socket(0x11, 0x10000000000003, 0x0) aio_read(0x0) aio_return(0x0) 2.826233022s ago: executing program 2 (id=92): r0 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f0000000000)={0x0, 0x0, 0xb4, 0x1}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) connect$inet(r0, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) chroot(&(0x7f00000000c0)='.\x00') execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000040)='&$\x17'], 0x0) sendmsg$inet6_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b5c422ca65675e274c429d4ecb6043c5c10548af3499af18ae3b738b9b6b5428e18e8", 0x25}], 0x1, 0x0, 0x0, 0x81}, 0x100) r1 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000080)=0x101, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unmount(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x48000101) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000040)="b100050400000000380308000a01000000000000cea1fea7fef96ecfc73fd335ca087ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebb4257699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd007f720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc43eaea8c500000002000000000000020208a3054ef8000400000000000000010000000000000010", 0xb1, 0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) symlink(0x0, 0x0) extattr_delete_fd(0xffffffffffffffff, 0x0, &(0x7f0000000140)='-}#\xf4\x00') aio_read(&(0x7f00000001c0)={r2, 0xfffffffffffffffe, 0x0, 0x0, [0x0, 0x40], 0x0, 0x5, 0xa7c, {0x4000000000000, 0x0, 0x0}, {0x1, 0x13, @sival_ptr=0x5, @spare=[0x100000001, 0x7, 0xfffffffffffffffb, 0x3, 0x0, 0x5, 0x4, 0xffff]}}) r4 = socket$inet6_icmp(0x1c, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000001040)={0x1c, 0x1c, 0x0, 0xb, @mcast2, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) open$dir(&(0x7f0000000380)='./file0\x00', 0x488200, 0x166) truncate(&(0x7f0000000440)='./file0\x00', 0x403) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) sendfile(r5, r1, 0x200, 0x400000000001, 0x0, 0x0, 0x38) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x1d, 0x2c, 0xfffc, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x3, 0x2}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x1800, 0x1b07, 0xfffffbff, 0x153a}}}}}) setsockopt$inet_tcp_buf(r0, 0x6, 0x26, 0x0, 0x0) 2.636688065s ago: executing program 2 (id=93): open(0x0, 0x18289, 0x110) open$dir(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x205, 0x0) r1 = open$dir(&(0x7f0000000840)='./file0\x00', 0x40000400000002c2, 0xba) r2 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) ioctl$DIOCBEGINADDRS(r2, 0x8004667e, &(0x7f0000000440)="c14e9c") pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) extattr_delete_fd(r0, 0x1, &(0x7f0000000040)='\x00') close(r0) 2.486860941s ago: executing program 3 (id=95): setrlimit(0x7, &(0x7f0000000040)={0x2, 0xc}) (async) setreuid(0xee00, 0x0) (async) profil(0x0, 0x0, 0x0, 0x1) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200201, 0x0) (async) open$dir(0x0, 0x40000400000002c2, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000180)="e2b7", 0x2, [], 0x4, 0x8, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0xfffffff8, @spare=[0x0, 0x1, 0x0, 0x200000000000]}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) (async) kqueue() r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080), 0x0, 0x0) (async) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, 0xffffffffffffffff, 0x0) (async) fork() (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, &(0x7f00000001c0)) (async) r3 = dup(0xffffffffffffffff) posix_fadvise(r3, 0x6, 0x7, 0x3) (async) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x16fb745f}, &(0x7f0000000100)=0x10) rfork(0x2050) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) (async) rfork(0x1000) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) semop(0x0, &(0x7f0000000180)=[{0x4, 0xfffc}], 0x1) (async) getsockopt$inet6_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x104, 0x0, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) 2.43793648s ago: executing program 0 (id=96): socket$inet6_sctp(0x1c, 0x1, 0x84) r0 = socket(0x1c, 0x1, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = kqueue() syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000380068000000019078ac1400bbe00000b9e8333978000000004500fffc0000000000110000ac1400aa0000001c26539d6cdafafec4aa060b0626eaa7b248827cc8243b30fc4c301a240e5b4a0b0c1249c13b2d8c84e99a39c620aa7731ce4012215bf1f980dc9d9fb94e96e58c80d0af2a1a20175b094d98f5694d81b585ff690e1bf3816bd37d3445e66f4e573700772b1b188a11621fe8fe51a809053ec3c6699ff7315e6993d1d561e281ab86d52bbfcf0da8360b449f5be1adee2a05b024dbc9171506c2eadf00c372bc"]) kevent(r2, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) fork() fork() r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x2, 0x0, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f00000001c0), 0x4) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r6 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000200), 0x100001, 0x0) rfork(0x1000) cap_ioctls_get(r6, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r8 = socket$inet6_tcp(0x1c, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000000, 0x0) ioctl$MDIOCRESIZE(r5, 0xc1c06d04, &(0x7f0000000040)={0x0, 0x800, 0x0, 0x0, 0x1ff, 0x0, 0x180000, 0x0, 0xfffffffd, 0x80000001, 0x0, [0x0, 0x2, 0x0, 0x0, 0x800001, 0x0, 0x7, 0x7, 0x0, 0x0, 0xa, 0x40009, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x174a6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x3, 0x0, 0x403, 0x0, 0x2, 0xfffffffc, 0x0, 0xfff, 0x0, 0x85e, 0x0, 0xa44f, 0xfffffffe, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0xfffffffc, 0x50b, 0x0, 0x7fff, 0x401, 0xfffffc01, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d3133fa]}) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000016c0)="ade0a23db412ca8fc03749491dfa2c2ad659d37a455ce5957b601f87495fd1b466eccb95383f72a911da31a705df69092d040e90388ed2a4a1171ba9a5dd98414921be3c35d1209e6eedee1c18aa4def0c1974b5ba9b5562b66749bae9181957d414849abbd626d6392a4e47f31fe39caec05142d13d05f0a92d75e132682808f6feb7b25d2597515b30e4a99c70df1433bf616380ca134e086c89dd0903c4d1bf21363b1b9401b0a8386c554cd5f081d41761f8ed03a3a0ada6d1b343ca500d836122915b47fa0254825b6126cd78438183ed458cb7e510ac009dc0e482ab25bc76f3daa0b0d578b8ab5ff37becf4c867", 0xf1) sendto(r8, 0x0, 0x0, 0x4, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1, 0x3, @mcast2, 0x80}, 0x1c) setsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000140)={r7, @in={{0x10, 0x2, 0x1}}}, 0x90) getsockopt$inet6_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000300)={r7, 0x8}, &(0x7f00000003c0)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r9 = socket$inet6_icmp(0x1c, 0x2, 0x3a) setsockopt$inet6_group_source_req(r9, 0x29, 0x54, &(0x7f0000000400)={0x2, {{0x1c, 0x1c, 0x0, 0x7, @loopback, 0x8}}, {{0x1c, 0x1c, 0x2, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, 0x6}}}, 0x108) 2.437426336s ago: executing program 3 (id=97): r0 = open(&(0x7f0000000000)='./file0\x00', 0x100000, 0x90) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f00000001c0)={0xff, 0x2, 0xa0, 0x4, &(0x7f0000000040)="212338655f5e7c10fb61ae5247d178d67ffa76b2d77b51fb5fb9882c6d", &(0x7f0000000080)="0f6d1e85568a375c6670d533c614404686d1a0c8312b53f07c3f411c0e9b6919033380887aefb2b8a004ec46e29bb97e1efb7a0f33bcc258982f798edc4bd7fefb7fae3998a5666a09d60534f17b19cf4026a46f523d6a3ae4293ab3ddf04ebd3adf0672389f229186a66d1fa54b8d3a794b90e080a1aa2450ac39a61c33a49465efc4e49ed8ce1e5e2668a0551d451a654b89", &(0x7f0000000140)="2e8f8d", &(0x7f0000000180)="f75518419f05a9552e030958a6a20c112a3646ad0ecdb5ab"}) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x2000000, 0x2) bindat(r1, r0, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x2, 0x6, @mcast1, 0xbc8}, 0x1c) r2 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x10000, 0x4) kevent(r2, &(0x7f00000002c0)=[{0x81, 0xfffffffffffffff3, 0x0, 0x10, 0x7f51, 0x7, [0x10000, 0x2, 0x5, 0x1]}, {0xac8c, 0xfffffffffffffff9, 0x10, 0x8, 0x5, 0x1e, [0x1, 0x9, 0x6, 0x7]}, {0x10, 0xfffffffffffffffd, 0x1, 0x1, 0x9, 0x8, [0x6, 0x1, 0x3, 0x8]}, {0x8, 0x7396f7aa7befa885, 0x140, 0x80, 0x78, 0x8, [0xc00c, 0x3ff, 0x401, 0x2]}, {0xf7, 0xfffffffffffffffa, 0x2, 0x80000000, 0x3, 0x5, [0x4, 0x215fac00, 0x4, 0x5]}, {0x7fffffff, 0xfffffffffffffff8, 0x808a, 0x28, 0x0, 0x8, [0x3, 0x9, 0xb, 0x6b1f]}, {0x9, 0xfffffffffffffffd, 0x40a1, 0x0, 0x7, 0x6, [0xffffffffffffff00, 0x4, 0x9, 0x5]}], 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000640)={0x4593cb3, 0xe57}) r3 = open$dir(&(0x7f0000000680)='./file0\x00', 0x10000, 0x102) ioctl$DIOCSETIFFLAG(r2, 0xc0284459, &(0x7f00000007c0)={0x10, &(0x7f00000006c0)="7b3853c160d2e216dbda54bb599d8e82aba759e4a4d1a2a0b377da240826d38113c804f322944126b270dca9dc0a4bacf2a4d1c35f51239aebd313e71780820a704e6477fa4689efdced35e1008430a46ade2dd5c87aa5dd172343fb3b49699e87d57a39192489e75c70977bff85031bec40df410452dcb8f1309508b128ea29c55c9f18b4bfd36bbb1898c2755f4e210ee2ff9dac9ca4b0244662d706c71be23baa2e22bd45316b56d4f3538e0af5840fd0733be6dd851875f593401e95c12375cd0b646fde6843e70e1d68fa7ef876f01e55b1a0dc1c8ac7f98667d3a249168654c0b61f5f59c287dc", 0x3, 0x1, 0x4}) ioctl$DIOCCHANGERULE(r0, 0xcbe0441a, &(0x7f0000000800)="28c5bed71127f35631fd6719a396c64643f96efead18cf5f0cc384f2511348b7f02aaff9f4921696212f361f2d1be7f8af96a464cfd51a5fb96d73528abb3a8790129569122e") copy_file_range(r3, &(0x7f0000000880)=0xc4b7, r1, &(0x7f00000008c0)=0x9, 0x1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) access(&(0x7f0000000900)='./file0\x00', 0x0) extattr_set_link(&(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="3a813c4bc00e72c443204c9c513c4d7697b748f57610", 0x16) connect$inet6(r2, &(0x7f0000000a00)={0x1c, 0x1c, 0x1, 0xffffffff, @mcast2, 0x4}, 0x1c) getsockopt$inet6_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000a40)={0x0, 0xfffff800}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000ac0)={r4, 0x4, 0x4, [0x1, 0x4df, 0x9, 0xfff]}, &(0x7f0000000b00)=0x10) bind$bt_rfcomm(r0, &(0x7f0000000b40)={0x3, 0x33, 0x6, 0x7}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = shmget(0x1, 0x2000, 0x410, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000bc0)=""/18) freebsd11_getfsstat(&(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x1d8, 0x3) fstatat(r1, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) freebsd11_getfsstat(&(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x1d8, 0x3) __semctl$SEM_STAT(0x0, 0x1, 0xa, &(0x7f0000001180)=&(0x7f0000001140)={{0x0, 0x0, 0x0, 0x0}}) r11 = getpid() procctl$PROC_REAP_STATUS(0x2, 0xffffffffffffffff, 0x4, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r6, 0x1, &(0x7f0000001240)={{r7, r8, r9, r10, 0x82, 0xb40c, 0x0, 0x257}, 0x8001, 0xc, 0xd, 0xd, r11, r12, 0x6}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x20005501) setsockopt$sock_int(r2, 0xffff, 0x1012, &(0x7f00000012c0)=0x1, 0x4) fhlinkat(&(0x7f0000001300)={{[0x1, 0xb]}, {0x0, 0x0, "23235b4374b96192fb95efb6acacb975"}}, r5, &(0x7f0000001340)='./file0\x00') 2.165614196s ago: executing program 3 (id=99): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff0000"], 0x9}, 0x0) fcntl$getown(0xffffffffffffffff, 0x5) aio_write(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0x1c, 0x1, 0xaa) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, &(0x7f0000000480)={0x46}, 0x8) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f00000002c0)={0x1e, 0x1, 0xffffffffffffffff, 0x8}) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) mount(&(0x7f0000000180)='hammer2\x00', &(0x7f00000001c0)='./file0\x00', 0x8000240, &(0x7f0000000200)="c5752fef05ab594b9b76249a121c470d629ded8845958092a4d56e38fbf3a881e884956cbabb24748cd51a6b") socket(0x26, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x44, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x2, @loopback, 0x801}, 0x1c) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x26, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet6_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x23, &(0x7f00000005c0)={@in6={{0x1c, 0x1c, 0x1, 0x2, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x3}}, r4, 0x6ab, 0x4, 0x6}, &(0x7f0000000340)=0x90) truncate(&(0x7f0000000040)='./file0\x00', 0x800800805ffff) 2.163897231s ago: executing program 1 (id=100): r0 = socket(0x1c, 0x3, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x89, 0x8, 0xfffffffffffffff7, 0x0, [0x0, 0xfffffffffffffffe, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1009, &(0x7f0000000000), &(0x7f0000001840)=0x10) 1.156935678s ago: executing program 1 (id=101): setrlimit(0x7, &(0x7f0000000040)={0x2, 0x7}) fork() (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) (async) setresuid(0xee01, 0xffffffffffffffff, 0xee01) (async) access(&(0x7f0000000680)='./file0\x00', 0x0) r0 = semget$private(0x0, 0x4000000009, 0x82) semop(r0, &(0x7f0000000140)=[{0x2, 0x401, 0xe5ce97ab354d96be}, {0x4, 0x146, 0x1000}, {0x0, 0x7f}], 0x3) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) aio_write(&(0x7f0000000140)={r1, 0x800, 0x0, 0x0, [0x40], 0x2, 0x0, 0x1, {0x0, 0x0, 0x0}, {0x0, 0xfffffffe, @sival_ptr=0x239bfffffffffe, @thr={0x0, 0x0}}}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet(0x2, 0x5, 0x3) setsockopt$inet_mreqn(r2, 0x0, 0xd, &(0x7f0000000040)={@multicast2, @broadcast}, 0x45) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async) cpuset_setaffinity(0x0, 0x8, 0x7, 0x8, &(0x7f00000000c0)={[0x805]}) (async) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) aio_write(&(0x7f0000000140)={r4, 0x1000001000, &(0x7f0000000240)="a3", 0x1, [0xfffffffc], 0x0, 0x0, 0x1, {0x0, 0xffffffffffffffff, 0x0}, {0x0, 0x0, @sigval_ptr}}) copy_file_range(r4, &(0x7f0000000000)=0x80000001, r4, 0x0, 0x100000, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0xc, &(0x7f00000000c0)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000002500)=ANY=[]) aio_read(&(0x7f00000001c0)={r5, 0x0, 0x0, 0xfffffeaf, [0x0, 0x40], 0x0, 0x5, 0xa7c, {0x4000000000000, 0x0, 0x0}, {0x1, 0x13, @sival_ptr=0x5, @ke_flags=0x4000}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x900, &(0x7f0000000340)={0x0, 0xd0}, &(0x7f0000000580)=0x8) (async) setsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000140)={0x0, @in={{0x10, 0x2, 0x3}}, 0x2}, 0x90) cpuset_getaffinity(0x2, 0x2, 0xfffffffffffffff7, 0x8, &(0x7f0000000280)) (async) aio_cancel(r5, 0x0) 1.086955652s ago: executing program 2 (id=102): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1, 0x0, @empty}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000b80)="87d90000d63f0680", 0x8}], 0x1, 0x0}, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100, 0x41) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x2) listen(r0, 0x6) r2 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r2, 0x1) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r3 = socket$inet_sctp(0x2, 0x1, 0x84) readlinkat(r2, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=""/15, 0xf) listen(r3, 0xaa1095c4) r4 = kqueue() kevent(r4, &(0x7f0000000140)=[{0x4, 0xfffffffffffffffe, 0x3}, {0x4, 0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f00000000c0)={0x19, 0x0, 0x10, &(0x7f0000000040)="0100743adeff", 0xfffffffffffffea9, 0x0, 0x0, 0x7d86619a, [0x0, 0x7]}) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000880)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}) readv(r5, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000200)=""/56, 0x38}], 0x2) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x58, 0x1000301010005}) fork() close(r6) setuid(0xffffffffffffffff) r7 = getpgrp(0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfdffffff}) cpuset_setaffinity(0x3, 0x9, 0x100000, 0xcf, &(0x7f00000000c0)) procctl$PROC_TRACE_CTL(0x0, r7, 0x7, &(0x7f0000000040)=0xfffffffd) flock(r2, 0x8) ioctl$DIOCRSETADDRS(0xffffffffffffffff, 0xc4504445, 0x0) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x382, @local={0xfe, 0x80, '\x00', 0x0}, 0x2d}, 0x1c) 759.252047ms ago: executing program 1 (id=103): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2, 0x0, @rand_addr=0xffff7fff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001180)="017a88ca8330d4f5ef2e52a27f685a1722ec5ec9d67a6015a0e6a0db75dddaa395dc8ad6ad357a23bc2e62ce7f337680f84936d556374f9eee59c76751277129fbd3b79351767a317387f641529ae7dcf61fd7b6719203f15cd30c4a5306811406f996883a6c71e7e979fd78965a2fcc16fc6c4baad81eb619aed659186a91324cdf2cc4b4671410f520fdf219b067afdc2bbcf7c56b42efa753f918a6cfc27260ee0b4931bd0a7cfd7838913079ca36bcd35ea9bf836192f527ab7daa650daa6c0e4893b979ef12526bb99d46155a9e6c1a7350a9cc51e9029573e9d93cd1699bcc73bb25877696ad0ea494d66052f367c3578eedeccabfc4372c04a1129e68e823ec6efab725694ab91854bd1fb70435596489d8e922bc970f393351a41d6544296779ff91feda15de341cb6aff5082ea0d36bbe6dd8ec2a128b11772a943b55c40e67058d5606954e821fd9a57c2593d17a223ac64248a73c835d5c4f1e936459c2674f0aef8ca49e426bb901d2b8dc48b58e963a24c5f62fe3e2471dccc81f6d2258ae02418d11465184869adeddb6c60b0f44beb3a4f52bfd1f848ec953a59cabefc7e935a84064d07211315bd4713f8276e70fb4000644ec3533f66079e780d90d791125a0448058b0e2365452eca540e7e247ab218642eeee75605274548e207c61c748fae8f0bdf0a4679087b7a6d8f57cbc4e87840d36e9fd66780c1ff19cbe5f74fc3c3c562bffb8ba5c7fb9daf7a5b02c7d05938b8162e7e870acc047cb9afeb4190ba91e222dfdad522588c26b6132f36e2811d50903ef8d4a82cb99662e411f405a7b136203adc93e4e5b70025e64785ea8b6e02d636021447da01c9cfe530fbc3277fadf03c6b6674080c22299e1af1f8f724579b74894a46795661e62c4105de1f458fd6316be9ec41256427890fea130e7d9aea2abf8c3dab06d595d86bef0272ceb6d50b96b6ac0737d531c81cbda927c4cae2378924561ce08c7bce258f69e7903bd839062c3767654cc84e698c73e4e1bd9701b7368a032186af44ff657a1428435079edd102e9f1086e5e7a4b6ef4ee20863bf67daf076c3f00ab287384b00bd9e6762c79d34e07e9b5b41c106f264e8d3d565c665c98d026eb11f9f3fd0714d29c7784287ddc634977467509d1ca01c07fc69ce16edf1fc7d91e8a88a1c37b669e0644280b2462328541b0bdf0491a81703154c31277247defd158ae2a962cf35ea8318257ad705a574e776cb5341b12d30a7e31cab6ae73c222adf8a356da66230673d9cd30869d2dcd09dfd87f47f6a758eaafaf38820bd4806e705367e6af88748281e57ab2a909424c8079863af49c99fd8ffcf1935e4a32670577f30beb868254b4b21aa83965ef7061deccd5de504a05c2be3e399ad7a862826d984a09f600afa501e663d28aeb3029b4dcc3fa3ba956830b5cb4a004ecf1d4cf6531e5419941a3c4b30f839d71967873e8fedf2d25ec24184b5b98b156c66624a72bc99b60bb918516fcee950f9cac1c6135f3b9e28cab6dc6be7b1f93baf4b860d5e0dac64f956ce93caf1f94d36300e296e9f6746dc4fa0a3e2e188c818481c5abca7d0be72cbeb0269ec8f29938f7534e3321cd3f4c4e6c1a29fa4280181757264de2adef909a56dd5486e1599089c0a77aa51beb1c0686c6e9713fc10f7789b5682183eccf955638b7e21c06490bb17abce59a88ca6bf734828e3a3e0fa7e9242b30f8007197f923ccfc5524500cac5aa7501fcc9b3e088c9e55b6f54e71145cbc0fbc23e213d3926123e7927580db233434b58ced4018cc09bae6ca329c73939905d260028a3321e67821aa9afc8430142ccacda7c0a54f8b51b300f0501424d7083342138b7d9823e72ad34a5b1654c2cb42a74594a6ad9c23847506b034a4866da7b38f855ecf2cd999ef29e996815c2cc143eeacd9284d4a481868231cbc8d6012ee3112f1e3e3d224ace0aac042e920d96233b59ed701b0c2e696300c35dabaa5e", 0x58d, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) 758.874848ms ago: executing program 3 (id=104): kqueue() open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xd2) freebsd12_shm_open(&(0x7f00000002c0)='./file0\x00', 0xa00, 0x7c) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, 0x0) freebsd12_shm_open(&(0x7f0000000280)='./file0\x00', 0x2, 0x40) fork() kevent(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9, 0x5, 0x10}], 0x80000000, 0x0, 0x4, 0x0) bind(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) 489.720325ms ago: executing program 0 (id=105): ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000380)={0x1f, 0x22, 0x1, &(0x7f0000000100)='\v', 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xfffff7ff]}) semget$private(0x0, 0x4000000009, 0x0) (async) r0 = semget$private(0x0, 0x4000000009, 0x0) pipe2(&(0x7f0000000080), 0x4) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) write(r2, &(0x7f0000000140)='\x00', 0xfe80) poll(&(0x7f0000000680)=[{r2, 0x15}], 0x1, 0x10000008) dup2(r1, r2) semop(r0, &(0x7f0000000140)=[{0x1, 0x0, 0x800}, {0x2, 0x5854, 0x3800}], 0x2) open(&(0x7f0000000040)='./file0\x00', 0x80000000000209, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) cpuset(&(0x7f0000000000)) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) (async) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) 488.16352ms ago: executing program 1 (id=106): getsockopt$inet_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)={0x0, 0x4, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet6_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={r0, 0x4, 0x6}, &(0x7f00000000c0)=0xc) r2 = fhopen(&(0x7f0000000100)={{[0xe, 0x7]}, {0x5, 0x7, "ce1445cee62cdfc02760472d984e2f5a"}}, 0x200) ioctl$BIOCVERSION(r2, 0x40044271, &(0x7f0000000140)) lchown(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r0, 0x2, 0x7, 0x3b55}, 0x10) setsockopt$bt_rfcomm(r2, 0x816, 0x3, &(0x7f0000000200)=0xd2, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x900, &(0x7f0000000240)={r0, 0x200}, 0x8) truncate(&(0x7f0000000280)='./file0\x00', 0x3) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) r3 = shmget(0x3, 0x1000, 0x410, &(0x7f0000ffd000/0x1000)=nil) ioctl$DIOCNATLOOK(r2, 0xc04c4417, &(0x7f00000002c0)="e47a9f278fd1658839e73e92971f720155") ioctl$BIOCSETWF(r2, 0x8010427b, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{0x2, 0x20, 0x17, 0x7}, {0x6, 0x7, 0x6}, {0x9d0e, 0x56, 0x5, 0x8}, {0x3ff, 0x3, 0xbb}, {0x785c, 0x1, 0x7, 0x5}, {0x5c, 0x59, 0x2, 0xfe000000}, {0x9843, 0x5e, 0xbb, 0x7ff}, {0x5, 0xb, 0x8, 0x8}, {0xab, 0x7, 0x7f, 0x5}, {0x3, 0x0, 0x9, 0x4}]}) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x100, 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000400)={r0, 0x9, 0x2, 0x5}, 0x10) sendto(r2, &(0x7f0000000440)="ca", 0x1, 0x2010c, &(0x7f0000000480)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa) utimes(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x80000, 0x5}, {0x8fb, 0x10001}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x29, &(0x7f0000000540)={r1, 0x20000000}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f00000005c0)={0x8001, 0x8, 0x3, 0x7}, 0x8) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000600)=""/172) r6 = getpid() getpgrp(r6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x22, &(0x7f00000006c0)={0xe, 0x7, r5}, &(0x7f0000000700)=0xc) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000740)=""/130) setsockopt$inet6_group_source_req(r2, 0x29, 0x54, &(0x7f0000000800)={0x5, {{0x1c, 0x1c, 0x0, 0x800, @rand_addr="f6881845f14908ccff91cd1d1f0c8028", 0x200}}, {{0x1c, 0x1c, 0x1, 0x4, @remote={0xfe, 0x80, '\x00', 0x0}, 0x7}}}, 0x108) getsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000940)={r8, 0x4, 0xffffffff, 0x4}, &(0x7f0000000980)=0x10) ioctl$DIOCRCLRTABLES(r2, 0xc450443c, &(0x7f0000000ac0)={{"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", "f6c654ec69b67d48dd0e6b41a6292c1322eb43828240a089e5365d08c2355472", 0x7, 0x8}, &(0x7f00000009c0)="46ddd3824b0250d74508f385f4c3cfd8c9c7452734866b88480470bb3f3f4a4bfb70a74c6daf10251c3ea6ea7f02b754aaeecde44b57a8d66a11a89837222c0c7bde79406836180dfdd88647c9055a097313237fad21a25910b8da87a48aa1a2288667b59b339be997d2a3d016f4ec24dfe8d8aecbfa3e530cc59e5397723808b2aefc881f8af7bb8146dca07c19d5b93ca18a357e6e3f0df0abcde80d93dfdb322c436b7818fa49135b59901516abd2f2faf675f729ae66aa0c8b82686087213f70f68348fba37dbb4b8bcd3de1fe5967b2bf95e3f7eb35a46b60bec398582e87589c73e7f4cb34dd9d81", 0x24ba00000, 0x3, 0xa, 0x787, 0x400, 0x9, 0x8, 0x3}) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000f40)={0x1ff, 0xfffffffa}, 0x8) 485.971925ms ago: executing program 2 (id=107): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x4b, 0x0, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) (async) r2 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x6, 0xe739}}}}}) (async) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) open(&(0x7f0000000480)='./file0\x00', 0x0, 0xe) (async) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="4b00000000000000f0d0092a78e8bfc4e5a1488f80298906704676d2be441a965268331f98b186e51bb38578619a0165e6d463fc3e525ec9c20adab5acb53529706779b8480845997a38c11738d3a6f97a1b2517ff46cff9123153c67680191aa8b91c255089284dd7bc73d942868698baba4a0d596365f4461720671058e973606f413973162d7f4fda6fa589e225d2d1"], 0x8) (async) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async) mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r3 = getuid() setreuid(0x0, r3) (async) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x15, 0x4, 0x3, 0x1, 0x5, 0x66, 0xc, 0x7, 0x33, 0x7, @rand_addr, @empty=0xe0, {[@ra={0x94, 0x6, 0xfffffff7}, @timestamp={0x44, 0x24, 0xc0, 0x3, 0x1, [{[@loopback], 0x5}, {[], 0x75}, {[@empty], 0x1}, {[@multicast1], 0x7fffd}, {[], 0xb7}]}, @rr={0x7, 0x13, 0xf, [@remote={0xac, 0x14, 0x0}, @multicast1, @multicast2, @remote={0xac, 0x14, 0x0}]}]}}}}}}}) (async) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_buf(r4, 0x29, 0x65, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000200)="0e", 0xff66, 0x13, 0x0, 0x0) 480.380035ms ago: executing program 3 (id=108): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="19fdb123c091ae3db1f1c5f51d8be800"}}}, 0x108) r1 = socket(0x11, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @multicast1}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x2, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x1, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x80000000, @mcast2, 0xf}}, {{0x1c, 0x1c, 0x1, 0x0, @empty, 0x8}}}, 0x108) rfork(0x3060) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000000)='./file1\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x4000) 477.787961ms ago: executing program 1 (id=109): open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r1, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x44, &(0x7f0000001600)=0xa5, 0x4) r4 = open(&(0x7f0000000040)='./file0\x00', 0x8381, 0x20) ftruncate(r4, 0xe6a9) ftruncate(r4, 0x58000) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) fstatfs(r5, &(0x7f0000001700)) 475.513021ms ago: executing program 2 (id=110): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000005, &(0x7f0000000040)="e2", 0x1, [0x0, 0x3], 0x1, 0x20, 0xfffffffc, {0xbffffffffffffffd, 0x7, 0x0}, {0x0, 0x17, @sival_int=0xe}}) setresgid(0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = socket$inet6(0x1c, 0x2, 0x0) fcntl$lock(r1, 0x16, &(0x7f0000000000)={0x570}) setsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, 0xfffffefa) setgroups(0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x100, &(0x7f0000000100)={0x0, 0x8, 0x9, 0xde5, 0x6, 0x9, 0x2004, 0x1, {@in={{0x10, 0x2, 0x1, @loopback}}, 0x0, 0xfffffffc, 0x1c000, 0x1, 0x5, 0xe}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet6_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000005c0)={@in6={{0x1c, 0x1c, 0x0, 0x6, @rand_addr="5bb4e43959cffb993b058281e99077ec", 0xa4}}, 0x0, 0x6, 0x7, 0x6}, &(0x7f0000000400)=0x90) kevent(0xffffffffffffffff, &(0x7f0000000300)=[{0x20003, 0xfffffffffffffff5, 0xc0c3, 0x80, 0x0, 0x5, [0x0, 0x0, 0xfffffffffffffffe, 0x100000000]}, {0x18c, 0x0, 0x2080, 0x1, 0x98, 0x96, [0xd1e, 0xed, 0xb76, 0x6]}, {0x10001, 0xffffffffffffffff, 0x4, 0x80000000, 0x7, 0x7, [0x118, 0x2, 0x3f, 0x6]}, {0x40, 0xfffffffffffffff5, 0x4062, 0x1000000, 0x4, 0x4, [0x4, 0x100, 0x7, 0xc23]}], 0x4, 0x0, 0x0, 0x0) mlockall(0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x60000000) munlockall() mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x20000000, &(0x7f0000000140)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) r4 = getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x16, &(0x7f0000001500)={0x0, 0x8000}, 0x8) freebsd11_statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}) __semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=&(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0}}) fchown(r6, r7, r8) lchown(&(0x7f0000000140)='./file1\x00', r5, r8) procctl$PROC_REAP_STATUS(0x0, r4, 0x4, &(0x7f00000000c0)) fdatasync(r3) 409.435822ms ago: executing program 0 (id=111): r0 = socket(0x26, 0x2, 0x0) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f0000000080)={0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x2000, 0x0, 0xffff, 0x77, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x5, 0x0, 0x0, 0x0, 0x80004000, 0x0, 0x0, 0xffffffec, 0x2000, 0x0, 0x100000, 0x0, 0x40006, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x10000000, 0xd0e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0xe74, 0x400, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}) cpuset_setaffinity(0x3, 0x9, 0x0, 0xcf, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f00000001c0)=0x101, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x8000, {0x1, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x3ef7}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) setitimer(0x1, &(0x7f0000000140)={{0x8}, {0xfffffffffffffffd, 0x8000}}, 0x0) mlockall(0x2) getsid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) cpuset_getid(0x3, 0x3, 0x54, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0xf33a}, {0x0, 0x10001}}, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r5 = accept$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000180)=0x1c) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r6, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) r7 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet_mreqn(r6, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x2e, &(0x7f0000000040)={@empty, r8}, 0x14) minherit(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x2e, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @broadcast}, r8}, 0x14) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x3, 0x1, 0x0) rfork(0x1000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1c, 0x20000000, 0x2a) r10 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xb, &(0x7f0000000340)={0x401, 0x6, 0x1000, 0x5, 0x1, 0x10, 0x9, 0x6}, 0x20) setsockopt$sock_int(r9, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) 406.310199ms ago: executing program 3 (id=112): r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x7f, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="7f9e32533a7caaaaaaaaaaaa86dd6000080000000400000000000000000000000000000028ffffff"]) (async) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(r0, 0x84, 0x8003, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@in={0x10, 0x2, 0xffffffffffffffff, @broadcast}, @in={0x10, 0x2, 0xffffffffffffffff, @multicast1}]}, &(0x7f00000000c0)=0x10) (async) r1 = kqueue() mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) kevent(r1, &(0x7f00000007c0)=[{0xfffffffffffffffd, 0xfffffffffffffff9, 0x6fd0e9ee5e208145, 0x8, 0xe8c5, 0x0, [0xfffffffffffffffc, 0x4000000000000000, 0x0, 0x2]}, {0x0, 0xfffffffffffffffb, 0x9, 0x2, 0x89, 0xfffffffffffffff7, [0x104, 0x8000000000000001, 0x0, 0x2]}, {0x5, 0xfffffffffffffff3, 0xe2, 0x4, 0x2, 0x1, [0xfffffffffffffffa, 0x7fffffff, 0x5, 0x7ff]}, {0x2, 0xfffffffffffffff9, 0x0, 0x80000000, 0x4, 0x9a, [0xfffffffffffffffe, 0x1, 0xa, 0x4cf]}, {0x4, 0xfffffffffffffffc, 0x61, 0xc0000000, 0x5, 0x0, [0x6c3, 0x1, 0x2, 0x1]}], 0x5, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r4, 0x6) (async) r5 = fork() wait4(r5, &(0x7f0000000000), 0x1, &(0x7f0000000040)) fhlinkat(0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x200, 0x0) (async, rerun: 32) r6 = fork() ktrace(&(0x7f0000000100)='./file0\x00', 0x2, 0x1000, r6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) (async, rerun: 32) open$dir(&(0x7f0000000080)='./file0\x00', 0x100000, 0x2c) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="ff27dbc1da889efa1506fed79b0d6d58ffffffffff870698b05a75080600010800060400010000000000"]) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x200, &(0x7f0000000900)=0x401, 0x4) aio_suspend(0x0, 0x0, &(0x7f0000000c00)={0x0, 0xe011}) (async) setpgid(0x0, 0x0) (async) fork() (async) r8 = getppid() setpgid(0x0, r8) setpgid(0x0, 0x0) ioctl$OGIO_DEADKEYMAP(r7, 0x462a6b08, 0x0) 26.948073ms ago: executing program 1 (id=113): clock_nanosleep(0x0, 0x0, &(0x7f00000001c0)={0x1}, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setrlimit(0x4, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd11_mknod(&(0x7f0000000000)='./file0\x00', 0x672cda28f543e327, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x8110, 0x100) sigaction(0x38, &(0x7f0000000440)={&(0x7f00000003c0)="c4010d73d800f3460f1eef3666440f3805f0c403650c82030000001c643e470f38067706f34c0f2a2594000000c44225367a00c4c175e151974214d9c4a3617f247e02", 0x59, {[0x8, 0x1ff, 0xf, 0xab1]}}, 0x0) sigaction(0x38, 0x0, &(0x7f0000000780)={0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = kmq_open(&(0x7f0000000080)='./file0\x00', 0x200, 0x102, 0x0) kmq_notify(r0, &(0x7f0000000240)={0x4, 0xd, @sival_int=0x9, @spare=[0x6, 0x0, 0xffffffff, 0x4, 0x3, 0xffffffff, 0xc, 0x800]}) rfork(0x85000) 26.219827ms ago: executing program 2 (id=114): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr=0xfffffffd, @multicast1}, 0xc) r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000140)=ANY=[@ANYRES16], 0x1010) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x10000}, 0x24) setsockopt$inet_tcp_int(r0, 0x6, 0x47, &(0x7f0000000040)=0x5, 0x4) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) socket$inet6_udp(0x1c, 0x2, 0x0) kqueue() r1 = kqueue() freebsd11_kevent(r1, &(0x7f0000000000)=[{}], 0x6a81, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x2, 0x0, @broadcast}, 0xfffffd12) r2 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r2, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r2, &(0x7f0000000040)={0x17, 0x1c, 0x0, 0x0, @loopback={0x4}, 0xa27}, 0x1c) r3 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x7, @mcast1, 0x2}, 0x1c) clock_getres(0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sigqueue(0x0, 0xf, @sival_int=0x8000) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r5, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') 0s ago: executing program 0 (id=115): freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = kqueue() r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000000)=0x7fffffff, 0x4) connect(r1, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0xe4, @mcast2, 0x2}, 0x1c) rfork(0x95034) kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(0xffffffffffffffff, 0x6, 0x29, 0x0, 0x0) r2 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() freebsd11_mknod(&(0x7f0000000280)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000700)='./file0\x00', 0x10000, 0x43) unlink(&(0x7f0000000040)='./file0\x00') rfork(0x1000) r3 = accept$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) r4 = kqueue() clock_gettime(0x2, &(0x7f0000000000)) kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x11, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(r3, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@empty, @broadcast, [{[], {0x8100, 0x5, 0x0, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x8, 0x46, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_rs}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffff060400000000000000007f1400aa00"/42]) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.1.187 on tap1 Expensive callout(9) function: 0xffffffff81466210(0xfffffe006dd815a0) 0.008682215 s md0: truncating fractional last sector by 1 bytes Warning! syz-executor[856] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 ktrace write failed, errno 27, tracing stopped for pid 762 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 1 ktrace write failed, errno 27, tracing stopped for pid 781 arp: packet with unknown hardware format 0x00 received on tap0 arp: packet with short header received on tap0 pid 942 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore Out of ktrace request objects. vnode_pager_putpages: zero-length write at 1610612736 resid 4096 0xfffffe00777d16e0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83712480 usecount 4, writecount 3, refcount 6 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005412b2e8 ref 1 pages 32 cleanbuf 1 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe0054120000 (pid 990, syz-executor, tid 100343) nlink=1, effnlink=1, size=2147483651, extsize 0 generation=a256ccc0, uid=0, gid=0, flags=0x4 ino 112, on dev gpt/rootfs Connection to 10.128.1.174 closed by remote host. FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058578000 ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 762 panic: mq notifiers left cpuid = 1 time = 6 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056d01810 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056d01970 vpanic() at vpanic+0x257/frame 0xfffffe0056d01b30 panic() at panic+0xb5/frame 0xfffffe0056d01c00 mq_proc_exit() at mq_proc_exit+0x1cc/frame 0xfffffe0056d01c50 exit1() at exit1+0x62b/frame 0xfffffe0056d01cf0 sys_exit() at sys_exit+0x28/frame 0xfffffe0056d01d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056d01f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056d01f30 --- syscall (1, FreeBSD ELF64, exit), rip = 0x3a1e9a, rsp = 0x821068fc8, rbp = 0x821068fd0 --- KDB: enter: panic [ thread pid 1054 tid 100087 ] Stopped at kdb_enter+0x6e: movq $0,0x25c3b67(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827be6c0 .str.27 rsp 0xfffffe0056d01950 rbp 0xfffffe0056d01970 rsi 0 rdi 0xffffffff81611af9 printf+0x149 r8 0 r9 0xffffffff r10 0x1 r11 0 r12 0xfffffe00540aa780 r13 0xfffffffffffffffd r14 0xffffffff827be6c0 .str.27 r15 0 rip 0xffffffff815fb62e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c3b67(%rip) db> show proc Process 1054 (syz-executor) at 0xfffffe00540055c0: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 764 at 0xfffffe00540a65a0 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor exec reaper: 0xfffffe0007809040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe0054158000 (map 0xfffffe0054158000) (map.pmap 0xfffffe00541580a0) (pmap 0xfffffe0054158110) threads: 1 100087 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1056 763 763 0 R (threaded) syz-executor 100386 RunQ syz-executor 100435 S fifoor 0xfffffe0007738dc8 syz-executor 1055 765 765 0 R (threaded) syz-executor 100088 RunQ syz-executor 100431 D biowr 0xfffffe0007d01c58 syz-executor 100433 S uwait 0xfffffe00776c1e00 syz-executor 1054 764 764 0 RE CPU 1 syz-executor 1053 1050 1050 0 S uwait 0xfffffe00776c1b80 syz-executor 1052 1050 766 0 S uwait 0xfffffe00776c1a00 syz-executor 1051 1050 766 0 S uwait 0xfffffe00776c1900 syz-executor 1050 766 1050 0 S (threaded) syz-executor 100205 S nanslp 0xffffffff83ba0340 syz-executor 100420 S select 0xfffffe0057e036c0 syz-executor 100424 S uwait 0xfffffe00776c1800 syz-executor 1045 1 766 0 S uwait 0xfffffe0057d92980 syz-executor 1042 1 765 0 S uwait 0xfffffe0057d92880 syz-executor 1037 781 423 0 S nanslp 0xffffffff83ba0341 sleep 1035 1 1035 0 Ss+ ttyin 0xfffffe0053fdacb0 getty 1034 1 1034 0 Ss+ ttyin 0xfffffe005861d4b0 getty 1033 1 1033 0 Ss+ ttyin 0xfffffe005861d8b0 getty 1032 1 1032 0 Ss+ ttyin 0xfffffe005861dcb0 getty 1031 1 1031 0 Ss+ ttyin 0xfffffe0053fd9cb0 getty 1027 1 1027 0 Ss+ ttyin 0xfffffe005861e0b0 getty 1026 1 1026 0 Ss+ ttyin 0xfffffe005861e4b0 getty 1024 1 1024 0 Ss+ ttyin 0xfffffe005861e8b0 getty 1023 1 1023 0 Ss+ ttyin 0xfffffe005861ecb0 getty 1022 1 763 0 S uwait 0xfffffe00776c2380 syz-executor 1020 1 763 0 S uwait 0xfffffe006dec4480 syz-executor 1011 0 0 0 DL aiordy 0xfffffe0054136020 [aiod21] 1010 0 0 0 DL aiordy 0xfffffe0054136580 [aiod20] 1009 0 0 0 DL aiordy 0xfffffe0054136ae0 [aiod19] 1008 0 0 0 DL aiordy 0xfffffe0054137040 [aiod18] 1007 0 0 0 DL aiordy 0xfffffe005410b060 [aiod17] 1006 0 0 0 DL aiordy 0xfffffe005410b5c0 [aiod16] 1005 0 0 0 DL aiordy 0xfffffe005412d000 [aiod15] 1004 0 0 0 DL aiordy 0xfffffe00541375a0 [aiod14] 1003 0 0 0 DL aiordy 0xfffffe0054137b00 [aiod13] 1002 0 0 0 DL aiordy 0xfffffe0054138060 [aiod12] 1001 0 0 0 DL aiordy 0xfffffe005412d560 [aiod11] 1000 0 0 0 DL aiordy 0xfffffe00541385c0 [aiod10] 999 0 0 0 DL aiordy 0xfffffe005412f040 [aiod9] 998 0 0 0 DL aiordy 0xfffffe005412f5a0 [aiod8] 997 0 0 0 DL aiordy 0xfffffe0054135000 [aiod7] 996 0 0 0 DL aiordy 0xfffffe005412dac0 [aiod6] 995 0 0 0 DL aiordy 0xfffffe005412eae0 [aiod5] 982 1 764 0 S uwait 0xfffffe00776c2080 syz-executor 981 1 763 0 S uwait 0xfffffe0057cfb300 syz-executor 977 1 764 0 S uwait 0xfffffe0057d8fd00 syz-executor 975 1 763 0 S uwait 0xfffffe00776c2180 syz-executor 970 0 0 0 DL - 0xffffffff83cb0400 [soaiod4] 969 0 0 0 DL - 0xffffffff83cb0400 [soaiod3] 968 0 0 0 DL - 0xffffffff83cb0400 [soaiod2] 967 0 0 0 DL - 0xffffffff83cb0400 [soaiod1] 955 1 763 0 S uwait 0xfffffe00584f1580 syz-executor 948 1 764 0 S uwait 0xfffffe0057d8f400 syz-executor 943 1 764 60928 S uwait 0xfffffe006dec5300 syz-executor 939 1 766 0 S uwait 0xfffffe00584f2d80 syz-executor 937 1 766 0 S uwait 0xfffffe006dec5600 syz-executor 934 1 764 0 S uwait 0xfffffe00584f2300 syz-executor 930 1 765 0 S uwait 0xfffffe0057d90380 syz-executor 929 1 766 0 S uwait 0xfffffe0057d8f000 syz-executor 921 1 766 0 S uwait 0xfffffe006dec5680 syz-executor 915 1 765 0 S uwait 0xfffffe0057cfb580 syz-executor 913 1 766 0 S uwait 0xfffffe00584f2080 syz-executor 909 1 764 0 S uwait 0xfffffe00584f2880 syz-executor 898 1 764 0 S uwait 0xfffffe00584f1080 syz-executor 886 1 766 60928 S uwait 0xfffffe0057d8f800 syz-executor 849 0 0 0 DL (threaded) [KTLS] 100136 D - 0xfffffe005969aa00 [thr_0] 100151 D - 0xfffffe005969aa80 [thr_1] 100152 D - 0xffffffff83cb1c28 [reclaim_0] 834 1 765 0 S uwait 0xfffffe00584f1180 syz-executor 813 0 0 0 DL aiordy 0xfffffe005410a5a0 [aiod4] 812 0 0 0 DL aiordy 0xfffffe005410ab00 [aiod3] 810 0 0 0 DL aiordy 0xfffffe00540ec5c0 [aiod2] 809 0 0 0 DL aiordy 0xfffffe00540ec060 [aiod1] 781 1 423 0 S wait 0xfffffe00540d15a0 sh 766 762 766 0 S nanslp 0xffffffff83ba0341 syz-executor 765 762 765 0 S nanslp 0xffffffff83ba0341 syz-executor 764 762 764 0 S nanslp 0xffffffff83ba0341 syz-executor 763 762 763 0 S nanslp 0xffffffff83ba0340 syz-executor 762 760 760 0 S select 0xfffffe0057e037c0 syz-executor 760 1 760 0 Ss sigsusp 0xfffffe00540d0b90 csh 16 0 0 0 DL syncer 0xffffffff83cbde20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a060 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbc360 [bufdaemon] 100080 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100093 D sdflush 0xfffffe00596814e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d07280 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83ced348 [dom0] 100083 D launds 0xffffffff83ced354 [laundry: dom0] 100084 D umarcl 0xffffffff81ddd940 [uma] 7 0 0 0 DL - 0xffffffff83918cd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff8477c9e0 [pf purge] 5 0 0 0 DL waiting 0xffffffff844a0700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e3340 [doneq0] 100046 D - 0xffffffff838e32c0 [async] 100075 D - 0xffffffff838e3140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83ce8c00 [crypto] 100043 D crypto_ 0xfffffe0053ed8730 [crypto returns 0] 100044 D crypto_ 0xfffffe0053ed8780 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b48d00 [g_event] 100038 D - 0xffffffff83b48d20 [g_up] 100039 D - 0xffffffff83b48d40 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 Run CPU -1 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce96a0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c35ff0 [swapper] 100005 D - 0xfffffe00083fc000 [softirq_0] 100006 D - 0xfffffe00083fbe00 [softirq_1] 100007 D - 0xfffffe00083fbd00 [if_io_tqg_0] 100008 D - 0xfffffe00083fbc00 [if_io_tqg_1] 100009 D - 0xfffffe00083fbb00 [if_config_tqg_0] 100010 D - 0xfffffe00083fba00 [kqueue_ctx taskq] 100011 D - 0xfffffe00083fb900 [jail_remove taskq] 100012 D - 0xfffffe00083fb800 [bus taskq] 100015 D - 0xfffffe00083fb500 [thread taskq] 100017 D - 0xfffffe00083fb300 [aiod_kick taskq] 100018 D - 0xfffffe00083fb200 [deferred_unmount ta] 100019 D - 0xfffffe00083fb100 [inm_free taskq] 100020 D - 0xfffffe00083fb000 [in6m_free taskq] 100021 D - 0xfffffe00083fae00 [linuxkpi_irq_wq] 100022 D - 0xfffffe00083fad00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00083fad00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00083fad00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00083fad00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00083fac00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00083fac00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00083fac00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00083fac00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00083fab00 [firmware taskq] 100040 D - 0xfffffe00083faa00 [crypto_0] 100041 D - 0xfffffe00083faa00 [crypto_1] 100056 D - 0xfffffe00083fa800 [vtnet0 rxq 0] 100057 D - 0xfffffe00083fa700 [vtnet0 txq 0] 100058 D - 0xfffffe00083fa600 [vtnet0 rxq 1] 100059 D - 0xfffffe00083fa500 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057e03c80 [virtio_balloon] 100065 D - 0xffffffff827c3aa0 [deadlkres] 100069 D - 0xfffffe00593e5300 [acpi_task_0] 100070 D - 0xfffffe00593e5300 [acpi_task_1] 100071 D - 0xfffffe00593e5300 [acpi_task_2] 100073 D - 0xfffffe00083fc100 [mca taskq] 100074 D - 0xfffffe00083fa900 [CAM taskq] 100076 D - 0xfffffe00083fa300 [ipsec_offload] 100315 D - 0xfffffe00593e4700 [netlink_socket (PID] db> show all locks Process 1055 (syz-executor) thread 0xfffffe00540d6780 (100431) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007d01cd8) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_vnops.c:328 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00777cf598) locked @ /syzkaller/managers/main/kernel/sys/ufs/ufs/ufs_vnops.c:1311 exclusive lockmgr rename (rename) r = 0 (0xfffffe005409fb90) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3838 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5071K 644 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4213 sysctloid 35104 2068K 35296 vtbuf 24 1968K 46 kobj 330 1320K 507 newblk 18 1029K 1697 vfscache 3 1025K 3 pcb 41 683K 174 filedesc 67 534K 363 inodedep 15 518K 356 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 202 402K 1169 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 7856 acpica 1674 184K 54438 vmem 5 144K 6 tidhash 3 141K 3 pagedep 12 131K 170 tfo_ccache 1 128K 1 IP reass 1 128K 1 sem 4 106K 4 DEVFS1 106 106K 124 gtaskqueue 18 98K 18 bus 1004 82K 5082 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 526 ddb_capture 1 64K 1 kdtrace 265 50K 1494 umtx 384 48K 384 hostcache 1 32K 1 shm 1 32K 4 DEVFS3 125 32K 136 msg 4 30K 4 kbdmux 6 28K 6 temp 33 23K 3000 DEVFS_RULE 56 20K 56 ifaddr 66 19K 68 ufs_mount 4 17K 5 proc 3 17K 3 LRO 16 17K 16 tty 16 16K 16 routetbl 124 16K 395 ithread 90 15K 90 bus-sc 34 15K 1653 lltable 45 14K 45 eventhandler 163 14K 163 ifnet 7 13K 7 ether_multi 152 13K 167 kenv 95 12K 95 GEOM 61 11K 509 CAM queue 5 11K 1528 rman 82 10K 457 shmfd 4 10K 10 rpc 8 9K 8 in6_multi 65 9K 66 bmsafemap 2 9K 289 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 filemon 1 8K 6 pfs_vncache 1 8K 1 audit_evclass 240 8K 303 taskqueue 72 8K 96 kqueue 97 8K 1314 plimit 19 8K 613 sglist 6 7K 6 CAM DEV 3 6K 510 cred 23 6K 303 pwddesc 90 6K 1072 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 UMA 268 5K 269 pf_ifnet 10 5K 19 tcp_fsb_rack 2 5K 4 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 acpisem 28 4K 28 ip6opt 7 4K 24 inpcbpolicy 99 4K 410 mount 20 4K 754 crypto 6 3K 38 DEVFSP 46 3K 86 terminal 11 3K 11 acpidev 20 3K 20 uidinfo 4 3K 13 hhook 8 3K 10 sctp_atcl 6 3K 39 clone 9 3K 9 kcovinfo 36 3K 36 proc-args 82 3K 2113 pf_rule 1 2K 2 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K