last executing test programs: 3.260330413s ago: executing program 2 (id=515): socket$inet6_sctp(0x1c, 0x5, 0x84) r0 = kqueue() setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x200, 0x0, 0x0) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x1, 0x0, 0x7, 0x3fffffffffffff]}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setreuid(0xee00, 0x0) fork() setrlimit(0x7, 0x0) setreuid(0xee00, 0x0) sync() r1 = socket(0x1, 0x2, 0x40) r2 = getpid() fcntl$setown(r1, 0x6, r2) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) minherit(&(0x7f0000b69000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) 2.953387682s ago: executing program 2 (id=516): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r0, 0x3) r1 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00280000000000069078000053f794b7b51aa0365404732b0000ffffffff4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"]) flock(r1, 0x3) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) extattr_set_file(&(0x7f00000001c0)='./file0\x00', 0x2, &(0x7f0000000200)='-\x00', 0x0, 0x0) socket(0x26, 0x3, 0xe4) extattr_set_file(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)='^\x00', 0x0, 0x0) extattr_get_link(&(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)='H\x00', 0x0, 0x0) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./file0\x00') open(&(0x7f00000001c0)='./file0\x00', 0x2f9, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @random="46b5ff563c9c", [], {@ipv4={0x800, {{0x18, 0x4, 0x3, 0x1f, 0x68, 0x64, 0x3ff, 0x40, 0x1f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x13, 0x6, [@multicast2, @empty, @loopback, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0xf, 0x2, [@loopback, @empty, @loopback]}, @rr={0x7, 0xb, 0x1, [@rand_addr=0x9, @empty]}, @rr={0x7, 0x1b, 0x2, [@empty, @loopback, @rand_addr=0x3ff, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @empty]}, @generic={0x89, 0x4, '4k'}]}}, @udp={{0x2, 0x2, 0x8}}}}}}) 2.553479349s ago: executing program 1 (id=520): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x4300, 0xffffffffffffffff) open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) cpuset_getaffinity(0x2, 0x4, 0x1a, 0x8, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) __realpathat(r0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x16, &(0x7f0000001500)={0x0, 0x8000}, 0x8) freebsd11_statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}) __semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=&(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0}}) fchown(r1, r2, r3) getsockopt$inet6_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000001340)={0x1, 0x80, 0x0}, &(0x7f0000001380)=0xc) setsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x24, &(0x7f00000013c0)={r4, @in6={{0x1c, 0x1c, 0x1, 0x3, @rand_addr="ece781585407db31a223780b4024db52", 0x7}}, 0x4}, 0x90) extattr_get_file(&(0x7f00000002c0)='./file0\x00', 0x5, &(0x7f0000000300)='\x86\'.^:-)^\x00', &(0x7f0000000340)=""/4096, 0x1000) 2.503408405s ago: executing program 3 (id=521): aio_suspend(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x80000000}) kqueue() fork() socket(0x1c, 0x1, 0x0) r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x19, &(0x7f00000009c0)="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", 0xff88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r2, 0x0, 0x3, &(0x7f0000000100)="08dcdd96", 0x4) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x16, 0x0, 0xf, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d475", 0x0, 0x0, 0x0, 0x7d86699a}) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, 0x0, 0x0, 0x0, &(0x7f0000000400)}) sendmsg$unix(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/93, 0x7}, 0x40) connect(0xffffffffffffffff, &(0x7f0000000200)=@in={0x10, 0x2, 0x3, @loopback}, 0x10) socket(0x1c, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x47, 0x0, 0x0) 2.502955117s ago: executing program 1 (id=522): ktrace(0x0, 0x4, 0xd27d43220c7df9b, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CIOCGSESSION2(r1, 0xc040636a, 0x0) syz_emit_ethernet(0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, 0x0, 0x0) r2 = socket(0x1c, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$CIOCCRYPT(r1, 0xc0306367, 0x0) cap_rights_limit(r0, 0x0) r3 = kqueue() kevent(r3, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x200, 0x0) semget(0x2, 0x2, 0x682) setuid(0xee01) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) fchmod(r4, 0xd0) 2.416514818s ago: executing program 1 (id=523): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x80, 0x0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) sendto$inet6(r1, &(0x7f0000000280)="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", 0xfd, 0x20081, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x53, @local={0xfe, 0x80, '\x00', 0x0}, 0x9}, 0x1c) freebsd11_fstatat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x4000) setregid(0x0, 0x0) posix_fadvise(r2, 0x4, 0xb70, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rfork(0x96014) write(r4, &(0x7f0000000080)="ba", 0x100000) 2.412054879s ago: executing program 3 (id=524): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f00000001c0)=0x101, 0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ftruncate(r0, 0x80002) socket$inet6_sctp(0x1c, 0x1, 0x84) access(0x0, 0x0) link(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000540), 0x0) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) sendfile(0xffffffffffffffff, r1, 0xf3d, 0x0, 0x0, 0x0, 0x11) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000000)={0x76, 0x1}, 0x8) rfork(0x3040) 2.280172767s ago: executing program 1 (id=525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b7", 0x2, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, &(0x7f00000001c0)) r3 = socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') chroot(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000300)='./file0/file0/..\x00', 0x20000, 0x6) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) sendmsg$inet6_sctp(r3, &(0x7f00000002c0)={&(0x7f0000000380)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0xfd}, {0x0}], 0x2, 0x0, 0x0, 0x81}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.277765413s ago: executing program 0 (id=526): socket(0x1c, 0x1, 0x0) r0 = socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) socket(0x1c, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x46, &(0x7f0000001240)={@multicast2, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @rand_addr=0x4}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) cpuset_getid(0x1, 0x2, 0xffff, 0x0) socket(0x1c, 0x1, 0x0) r2 = openat$crypto(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000040)={0x17, 0xf, 0x11, &(0x7f0000000000)="9877a4dfc3fb64c5110000000000000000", 0x0, 0x0, 0x0, 0xfdfffff8, [0x0, 0xfffffffd]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f00000001c0)={@multicast2}, 0xc) rfork(0x85000) 2.150396206s ago: executing program 0 (id=527): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) kqueue() sigqueue(0x0, 0x11, @sival_ptr) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f000016d000/0x1000)=nil, 0x1000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munlockall() setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) fork() aio_waitcomplete(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) munlockall() 2.083404054s ago: executing program 2 (id=528): r0 = socket$inet6(0x1c, 0x3, 0x0) r1 = socket(0x11, 0x10000000000003, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000003c0)=[{0xffffffffffffffff, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}, {0x7fff, 0xfffffffffffffffa, 0x0, 0x2, 0x3, 0xfffffffffffffffc, [0xfb7, 0x4, 0x10, 0xdba2]}, {0x3, 0xfffffffffffffffa, 0x4020, 0x100, 0x1, 0x7fffffffffffffff, [0x3ff, 0x7, 0x100000000]}, {0x0, 0xfffffffffffffffe, 0x2, 0x10, 0x1, 0x8000000000000001, [0x0, 0x2, 0xde0, 0x1]}], 0x4, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = kqueue() freebsd11_kevent(r3, &(0x7f0000000400)=[{0x200000000000004, 0xfffffffffffffffa, 0x18002, 0x100, 0x4, 0x95}, {0x2c3f, 0xfffffffffffffff9, 0x1c, 0x1, 0x2a604e4b}, {0x9, 0xfffffffffffffffa, 0x4, 0x80000000, 0xcacb3d3, 0x1b7c}, {0x2005, 0xfffffffffffffff3, 0x20, 0xc0000000, 0x80000001, 0x10001}, {0x0, 0xffffffffffffffff, 0x45, 0x200, 0x8, 0x7}], 0x5, &(0x7f00000004c0), 0x0, 0x0) kevent(r3, &(0x7f0000000140)=[{0x0, 0xfffffffffffffffe, 0x2c5d36d679bbff67}], 0xe4a, 0x0, 0xa9f9, 0x0) open$dir(&(0x7f0000001240)='.\x00', 0x8000, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x80000, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f00000000c0)='./file0\x00', 0x180244) sendto$unix(r1, &(0x7f0000000140)="b10005019000e803034808c75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8000a, 0x4) syz_emit_ethernet(0x400e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6015f2ff3aba567b2c0e280000004c0e7b3b0000fe8000000000000000000003000000aa"]) 1.669188091s ago: executing program 2 (id=529): open(&(0x7f0000000040)='./file0\x00', 0x8381, 0x0) mount(0x0, 0x0, 0x0, &(0x7f00000000c0)="35bf33baee71d8a68674a31ee54818dcc65ff6c32c5eb531e6dbe2bc6236d3981e288786f2f9a8a3252db260f999f154315d5f8877175bd785ad4fa995422150afb39d83") setgroups(0x3e, &(0x7f0000000100)) r0 = getegid() lchown(&(0x7f0000000000)='./file0\x00', 0xee01, r0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x14, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_int(r1, 0x29, 0x29, &(0x7f0000000040)=0xffff236e, 0x4) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) kqueue() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = kmq_open(&(0x7f0000000080)='./file0\x00', 0x200, 0x102, 0x0) close(r4) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r2, 0x40002) 1.599621746s ago: executing program 3 (id=530): openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ksem_init(&(0x7f00000000c0), 0x80b62) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) listen(r0, 0xfffffff6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000140)={0xf, &(0x7f0000000040)=[{0x5}], 0x1}) open$dir(0x0, 0xa36490c7eb8f5d14, 0x174) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) ktimer_create(0xb9f784a0c8a2994b, &(0x7f0000001fc0)={0x0, 0x1a, @sigval_int=0x3}, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x100, &(0x7f0000000100)=0x100002, 0x4) rfork(0x3060) 1.473427714s ago: executing program 3 (id=531): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r0, 0x107d2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DIOCBEGINADDRS(r1, 0x20004416, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000240)={'rack\x00'}, 0x24) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @loopback, @multicast1}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f0000000080)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x49, &(0x7f00000001c0)={@multicast1, @loopback, @broadcast}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x41f, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN(r3, 0x6, 0x469, &(0x7f00000000c0)={0x1, "f44a17b29d3b2d4600000500"}, 0x14) sync() 1.393354292s ago: executing program 3 (id=532): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20104, 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) pwritev(r2, &(0x7f0000000040), 0x0, 0xed5) freebsd11_fstatfs(r2, &(0x7f0000001040)) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000780)) getgroups(0x1, &(0x7f00000002c0)=[0x0]) setregid(0x0, 0x0) freebsd11_stat(&(0x7f0000000180)='./file0\x00', 0x0) r3 = fork() sigqueue(r3, 0x50, @sival_int=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x9, 0x0, 0xaec}, 0x1, 0x7, 0x5, 0x3, r3, 0xffffffffffffffff, 0x1}) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x40}, {r0}, {0xffffffffffffffff, 0x2}, {r1, 0x100}, {0xffffffffffffffff, 0x2}], 0x7, 0x4) syz_emit_ethernet(0x536, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x500, 0x3a, 0x3eda8841f6300bf7, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7, "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"}}}}}}) 1.253492199s ago: executing program 0 (id=533): mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) kqueue() aio_cancel(0xffffffffffffffff, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x3}]}}, @icmp=@timestamp}}}}) mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0) munlockall() 1.168363607s ago: executing program 1 (id=534): socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = kqueue() setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x200, 0x0, 0x0) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x1, 0x0, 0x7, 0x3fffffffffffff]}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) fork() setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) sync() r1 = socket(0x1, 0x2, 0x40) r2 = getpid() fcntl$setown(r1, 0x6, r2) connect$inet6(r1, &(0x7f0000000240)={0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) 1.087365107s ago: executing program 0 (id=535): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) kqueue() r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) lio_listio(0x1, 0x0, 0x0, 0x0) fork() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sigaction(0x13, 0x0, &(0x7f00000001c0)={0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) kqueue() r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) r2 = dup(r1) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="70638953e90cef7e00080000000b000000000000916d99e9", 0x0, 0xfdffffff}) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x20000, &(0x7f0000000000), 0x0, 0x0, 0x0}) 953.452409ms ago: executing program 2 (id=536): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = kqueue() freebsd11_kevent(r1, &(0x7f0000000000)=[{}], 0x6a81, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) clock_getres(0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fork() sigqueue(r3, 0xf, @sival_int=0x8000) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SMB_WRITEB(r5, 0xc0086924, &(0x7f0000000040)={0x2, 0x0, 0x0, @buf, @word=0x2, 0x0, 0x0, 0x0, 0x0}) getsockname$inet(r5, 0x0, &(0x7f0000000100)) fork() wait4(0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x47, 0x0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x49, &(0x7f0000000000)={@multicast1, @multicast1, @multicast1}, 0xc) 505.400833ms ago: executing program 3 (id=537): mkdir(&(0x7f0000000040)='./file0\x00', 0x38) r0 = kqueue() r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) fork() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) fork() openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08060001084cd6"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connectat$unix(r1, r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x0, 0x3}, 0x8) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr, @remote={0xac, 0x14, 0x0}}, 0xc) 454.387248ms ago: executing program 0 (id=538): open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80000, 0x105) r1 = getpgid(0x0) fcntl$lock(r0, 0xe, &(0x7f0000000100)={0x3, 0x3, 0x9, 0x100000001, r1}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xd8, 0x1000301010005, r1}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r4 = open(0x0, 0x205, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, 0x0, 0x0) fcntl$lock(r4, 0x9, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x20) flock(r5, 0x1) open$dir(0x0, 0x8110, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) dup2(r6, r3) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) 131.497576ms ago: executing program 2 (id=539): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) setregid(0x0, 0x0) aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={0x0, 0x0}}}) connectat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000db6000/0x4000)=nil, 0x4000, 0x5) mprotect(&(0x7f0000cae000/0x3000)=nil, 0x3000, 0x3) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f0000416000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x26, 0x2, 0x0) bind(r3, 0x0, 0x0) syz_emit_ethernet(0x3b, 0x0) recvmsg(r3, 0x0, 0x2) 94.603104ms ago: executing program 1 (id=540): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)="7dcf15735d8192e4137640bf92a7c9da9b0a4496883dec26e0f7eb86fc00c09459ce9fae8e4e7ce672298770a65498db976854c9e7f7f5677e66eb18122ec0df060cdada47b5c624232955c4152778f2c062a978eb2924a26c8341b684aeb56f6d90f7ff06c7b013be713b59b87da767f210b4e0f25cdcafb1c88509a944b84a4f4f62884543eca24f914b1ea28b88f5ac3937dff81ddc1567afd5d96bd84415b37575fb0a8eba78e25e31d6", 0xac}, {&(0x7f0000000000)="313b98cb7675399e4adb2e88dc14ad471a2aeb7b61ec058a141bfed337542e26d2167d8d31cbe73f3913af0e0c12c5ba32c07ae80106b79f6eb7447d5bcf64b43562ef3053e82455adca4ec58be97a5c8057987a", 0x54}, {&(0x7f00000000c0)}, {&(0x7f0000000600)="e0b1f4ce9482da0036871c6c017cd110a3cce8e27b158eaff409f0141b66fae929e72abbda3f9307e3da88685910d7a814e268a2fe36c639f503edcb5a816333dfe4410850fb83094dac6ee075ee8dd2e109dd73ba99e23d589e13c3b3db5a8601bc15ea8aba1f726be0771cf9d103fe59468efc451ba9322478130aae2efdafdb3c2e0b6b446aa5d1fc82179acb4429f5723e27f8c99a81c7d67088570fee6ceb195b66c53d8cd302112b11", 0xac}, {&(0x7f0000000340)="4a3ec098d377f8f39d1858f8a7d4ecad6c4f993d2ec79d3740ff9bcb751af8706ea6a14747e1cbfb12c83f2a4df25bea304d085a8756bff4801477b10c66cc51380dea805c2246d1da88a3e3c6829407dd2d45a2c25e16fe0dfa4eafefb2a005dddd4d6e0743e14d520e2b462e828a6d58b67804a2c132b19358078333787a0b4d54820045bac1f7a7dd18429e4c01000000f86776a4dfcf16c35875f70d68fefa088b929921b9698d5fde94a9364c5d444e74cfc074251101b1641e1721e23e99567232303788518d042e597172279260", 0xd1}, {&(0x7f0000000440)="9ceb3451728345752b53fd78531fc109ef7359010413a09c843c9435ec82ef2650afdabb527188b815aa1f14ee12196ec698df432d85c9ece2952cd03a9f08a88fc8de765988316a2767", 0x4a}, {&(0x7f00000004c0)="4729e1f3f5ebc06195c4b0f2ed0db9d3181f8d706b83377e537ec3d90261c97a284d0e2238697e66bc6e302fb3cebf61eceddcdc39d2f79a5f914d287fcde3563fb68ae6ae00668f5819f13b78a84d3e14bd468be35848fc27e8971e73973de2cdb283925d3a140fc42ec53187aab5a418caf83ae4059c252fb92cefe6662c499b17e56c00b9fbcee9fbada31ddf7f7c87395679d85acd189b6cf15a63690cd72c4f7b875fe2dc567e0d3482cc56452ecaa95b5786e4539f52", 0xb9}], 0x7) syz_emit_ethernet(0xe6, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dbbc6c00b00000fe80000000000000000000e6000000aaff0200000000000000000000000000012b15"]) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') lpathconf(&(0x7f0000000380)='.\x02\x00', 0x11) open(&(0x7f0000000100)='./file0\x00', 0x480e14, 0x0) chflags(&(0x7f0000000080)='./file0\x00', 0x119304) procctl$PROC_PROTMAX_CTL(0x0, 0x0, 0xf, &(0x7f0000000200)=0x1) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x8, 0x1c0) rfork(0x96014) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000dc0)={0x20, 0x1, 0x0, 0x0, 0xffffffffffffffff}) r1 = kqueue() copy_file_range(r0, &(0x7f0000000280)=0x1e, r0, &(0x7f00000006c0)=0x1, 0x100000000, 0x0) kevent(r1, &(0x7f00000001c0)=[{0x3, 0xffffffffffffffff, 0x21}], 0x1, 0x0, 0x12, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x1f, &(0x7f00000000c0), &(0x7f0000000240)=0x4) freebsd11_getdents(r0, 0x0, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) 0s ago: executing program 0 (id=541): mkdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r1, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="00b2c06df480cfe1", 0x0, &(0x7f00000006c0)=',', 0xb, 0x8, 0x0, 0x13, 0x1, 0x0, 0x3, 0x3, "6a0802e40094ffff"}, 0x40) r2 = fork() sigqueue(r2, 0xf, @sigval_ptr=0x2) getsockopt$inet_tcp_TCP_TXTLS_MODE(r1, 0x6, 0x28, 0x0, &(0x7f0000000140)) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x101, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x0, @mcast2}, 0x1c) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, 0x10) write(0xffffffffffffffff, 0x0, 0xfffffffffffffe19) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r3, 0xffff, 0x2, &(0x7f0000000040), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff81a2d930(0xfffffe006e4b9540) 0.002298166 s Out of ktrace request objects. Warning! syz-executor[815] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 Expensive callout(9) function: 0xffffffff81a2d930(0xfffffe006df51540) 0.005536867 s vnode_pager_putpages: zero-length write at 0 resid 6 0xfffffe006b4d7898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83712bc0 usecount 5, writecount 3, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005412daa8 ref 1 pages 1 cleanbuf 0 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005410d780 (pid 928, syz-executor, tid 100241) nlink=1, effnlink=1, size=6, extsize 0 generation=f774e32, uid=0, gid=-2086816849, flags=0x50000 ino 99, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058588000 if_delmulti_locked: detaching ifnet instance 0xfffffe00083d7000 if_delmulti_locked: detaching ifnet instance 0xfffffe00083d8000 FreeBSD/amd64 (ci-freebsd-main-0.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe00083d8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00083d7000 if_delmulti_locked: detaching ifnet instance 0xfffffe00083d7000 ktrace write failed, errno 27, tracing stopped for pid 1486 ktrace write failed, errno 27, tracing stopped for pid 1488 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 1490 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 1489 ktrace write failed, errno 27, tracing stopped for pid 762 if_delmulti_locked: detaching ifnet instance 0xfffffe00083d8000 Connection to 10.128.1.31 closed by remote host. arp: short packet received on tap3 Accounting disabled ktrace write failed, errno 27, tracing stopped for pid 1606 ktrace write failed, errno 27, tracing stopped for pid 1607 ktrace write failed, errno 27, tracing stopped for pid 1608 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 1603 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 1017 ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 762 ktrace write failed, errno 27, tracing stopped for pid 1 VNASSERT failed: nresid != oresid || *(a)->a_eofflag == 1 not true at vnode_if.c:1824 (VOP_READDIR_APV) 0xfffffe006ded7000: type VDIR state VSTATE_CONSTRUCTED op 0xffffffff83712bc0 usecount 2, writecount 0, refcount 3 seqc users 0 mountedhere 0 hold count flags () flags (VMP_LAZYLIST) v_object 0xfffffe00540ee0f8 ref 0 pages 0 cleanbuf 0 dirtybuf 1 lock type ufs: SHARED (count 1) nlink=2, effnlink=2, size=512, extsize 0 generation=7e93cd7b, uid=0, gid=0, flags=0x0 ino 209, on dev gpt/rootfs panic: VOP_READDIR: eofflag not set cpuid = 1 time = 32796 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00571c3210 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00571c3370 vpanic() at vpanic+0x257/frame 0xfffffe00571c3530 panic() at panic+0xb5/frame 0xfffffe00571c35f0 VOP_READDIR_APV() at VOP_READDIR_APV+0x4ab/frame 0xfffffe00571c36f0 kern_getdirentries() at kern_getdirentries+0x6f8/frame 0xfffffe00571c39b0 freebsd11_kern_getdirentries() at freebsd11_kern_getdirentries+0x155/frame 0xfffffe00571c3c50 freebsd11_getdents() at freebsd11_getdents+0xb0/frame 0xfffffe00571c3d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe00571c3f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00571c3f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a1afa, rsp = 0x82555bf08, rbp = 0x82555bf80 --- KDB: enter: panic [ thread pid 1628 tid 101270 ] Stopped at kdb_enter+0x6e: movq $0,0x25c5097(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe006f200000 rdx 0x7ffff rbx 0xffffffff827c9a00 .str.27 rsp 0xfffffe00571c3350 rbp 0xfffffe00571c3370 rsi 0x80001 rdi 0xffffffff81613ec9 printf+0x149 r8 0 r9 0xffffffff r10 0x1 r11 0x1 r12 0xfffffe00541e9780 r13 0xfffffffffffffffd r14 0xffffffff827c9a00 .str.27 r15 0 rip 0xffffffff815fd9fe kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c5097(%rip) db> show proc Process 1628 (syz-executor) at 0xfffffe00540aa5a0: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 764 at 0xfffffe00540dd000 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0x200 arguments: ./syz-executor exec reaper: 0xfffffe0007809040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe00540b7920 (map 0xfffffe00540b7920) (map.pmap 0xfffffe00540b79c0) (pmap 0xfffffe00540b7a30) threads: 3 100096 RunQ syz-executor 101269 S kqread 0xfffffe0078478000 syz-executor 101270 Run CPU 1 syz-executor db>