last executing test programs: 21.241052269s ago: executing program 1 (id=46): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f490000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 19.304381421s ago: executing program 1 (id=50): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 18.108250138s ago: executing program 0 (id=51): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000200)='./file0\x00', 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) sendfile(0xffffffffffffffff, r2, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r3 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ftruncate(r3, 0x107d2) 17.503659017s ago: executing program 2 (id=52): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 16.459560916s ago: executing program 3 (id=53): socket(0x26, 0x2, 0x0) cpuset_setaffinity(0x2, 0x2, 0x0, 0x0, 0x0) r0 = open(0x0, 0x200000, 0xd2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc030636a, &(0x7f0000000040)={0x15, 0x1e, 0x10, &(0x7f0000000280)="ec5000b72e0000000001f0a5a251760f", 0x0, 0x0, 0x4000002, 0xfdf9ff84, [0x0, 0x4000, 0x1]}) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) getsockopt$inet_mreqn(r2, 0x0, 0xc, &(0x7f00000000c0)={@remote, @multicast1}, &(0x7f0000000200)=0xc) r4 = socket(0x1c, 0x1, 0x0) r5 = kqueue() kevent(r5, 0x0, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x4, &(0x7f0000000300)={0xbfff0001, 0x7}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="8f6f77edbb65ffffffffffff86dd605f6ad900383a003bcc3f0600000058132fa13a8be186e3fe8000000000000000000000000000aa02009078000000386006c33e00002b00fe800000000000000000000058e600aa0000000000000300fffffffffffffffe6400007300000000fcc50602907fac"]) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ktimer_create(0x4, 0x0, &(0x7f00000001c0)=0x0) ktimer_settime(r6, 0x0, &(0x7f0000000340)={{0x5, 0x10001}, {0x147ae14, 0x19f7}}, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) r7 = socket(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x41, 0x0, &(0x7f0000000240)) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) 16.023038993s ago: executing program 1 (id=54): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) execve(0x0, 0x0, 0x0) r1 = socket$inet6(0x1c, 0x0, 0xc) r2 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0x0) ftruncate(r2, 0x107d2) fspacectl(r2, 0x1, &(0x7f0000000000)={0x0, 0x400000010001}, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x20, @mcast2, 0x3}, 0x1c) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) setuid(0xee01) freebsd11_fstatfs(0xffffffffffffffff, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 15.792203555s ago: executing program 0 (id=55): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(0x0) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r1, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r1, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r2 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 15.185073384s ago: executing program 2 (id=56): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff020000000000000000000000000001290200000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 14.84111055s ago: executing program 3 (id=57): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) execve(0x0, 0x0, 0x0) r1 = socket$inet6(0x1c, 0x0, 0xc) r2 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ftruncate(r2, 0x107d2) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x20, @mcast2, 0x3}, 0x1c) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) setuid(0xee01) freebsd11_fstatfs(0xffffffffffffffff, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 13.034680866s ago: executing program 1 (id=58): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f490000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 12.836748249s ago: executing program 0 (id=59): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) execve(0x0, 0x0, 0x0) r1 = socket$inet6(0x1c, 0x0, 0xc) r2 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0x0) ftruncate(r2, 0x107d2) fspacectl(r2, 0x1, &(0x7f0000000000)={0x0, 0x400000010001}, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x20, @mcast2, 0x3}, 0x1c) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) setuid(0xee01) freebsd11_fstatfs(0xffffffffffffffff, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 12.48248987s ago: executing program 2 (id=60): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) 12.472541174s ago: executing program 3 (id=61): socket(0x26, 0x2, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xd2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc030636a, &(0x7f0000000040)={0x15, 0x1e, 0x10, &(0x7f0000000280)="ec5000b72e0000000001f0a5a251760f", 0x0, 0x0, 0x4000002, 0xfdf9ff84, [0x0, 0x4000, 0x1]}) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) getsockopt$inet_mreqn(r2, 0x0, 0xc, &(0x7f00000000c0)={@remote, @multicast1}, &(0x7f0000000200)=0xc) r4 = socket(0x1c, 0x1, 0x0) r5 = kqueue() kevent(r5, 0x0, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x4, &(0x7f0000000300)={0xbfff0001, 0x7}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="8f6f77edbb65ffffffffffff86dd605f6ad900383a003bcc3f0600000058132fa13a8be186e3fe8000000000000000000000000000aa02009078000000386006c33e00002b00fe800000000000000000000058e600aa0000000000000300fffffffffffffffe6400007300000000fcc50602907fac"]) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ktimer_create(0x4, 0x0, &(0x7f00000001c0)=0x0) ktimer_settime(r6, 0x0, &(0x7f0000000340)={{0x5, 0x10001}, {0x147ae14, 0x19f7}}, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) r7 = socket(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x41, 0x0, &(0x7f0000000240)) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) 10.850491383s ago: executing program 3 (id=62): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 10.003063949s ago: executing program 2 (id=63): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000200)='./file0\x00', 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) sendfile(0xffffffffffffffff, r2, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r3 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ftruncate(r3, 0x107d2) 9.182159873s ago: executing program 0 (id=64): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000200)='./file0\x00', 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) sendfile(0xffffffffffffffff, r2, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r3 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ftruncate(r3, 0x107d2) 7.284332101s ago: executing program 3 (id=65): socket(0x26, 0x2, 0x0) cpuset_setaffinity(0x2, 0x2, 0x0, 0x0, 0x0) r0 = open(0x0, 0x200000, 0xd2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc030636a, &(0x7f0000000040)={0x15, 0x1e, 0x10, &(0x7f0000000280)="ec5000b72e0000000001f0a5a251760f", 0x0, 0x0, 0x4000002, 0xfdf9ff84, [0x0, 0x4000, 0x1]}) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) getsockopt$inet_mreqn(r2, 0x0, 0xc, &(0x7f00000000c0)={@remote, @multicast1}, &(0x7f0000000200)=0xc) r4 = socket(0x1c, 0x1, 0x0) r5 = kqueue() kevent(r5, 0x0, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x4, &(0x7f0000000300)={0xbfff0001, 0x7}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="8f6f77edbb65ffffffffffff86dd605f6ad900383a003bcc3f0600000058132fa13a8be186e3fe8000000000000000000000000000aa02009078000000386006c33e00002b00fe800000000000000000000058e600aa0000000000000300fffffffffffffffe6400007300000000fcc50602907fac"]) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ktimer_create(0x4, 0x0, &(0x7f00000001c0)=0x0) ktimer_settime(r6, 0x0, &(0x7f0000000340)={{0x5, 0x10001}, {0x147ae14, 0x19f7}}, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) r7 = socket(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x41, 0x0, &(0x7f0000000240)) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) 7.249622043s ago: executing program 1 (id=66): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff020000000000000000000000000001290200000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 6.178444383s ago: executing program 0 (id=67): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) execve(0x0, 0x0, 0x0) r1 = socket$inet6(0x1c, 0x0, 0xc) r2 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0x0) ftruncate(r2, 0x107d2) fspacectl(r2, 0x1, &(0x7f0000000000)={0x0, 0x400000010001}, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x20, @mcast2, 0x3}, 0x1c) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) setuid(0xee01) freebsd11_fstatfs(0xffffffffffffffff, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 5.904130905s ago: executing program 2 (id=68): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) execve(0x0, 0x0, 0x0) r1 = socket$inet6(0x1c, 0x0, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x107d2) fspacectl(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x0, 0x400000010001}, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x20, @mcast2, 0x3}, 0x1c) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) setuid(0xee01) freebsd11_fstatfs(0xffffffffffffffff, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 2.619512146s ago: executing program 2 (id=69): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff020000000000000000000000000001290200000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffa, @empty, 0x3}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 2.618921965s ago: executing program 1 (id=70): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) execve(0x0, 0x0, 0x0) r1 = socket$inet6(0x1c, 0x0, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x107d2) fspacectl(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x0, 0x400000010001}, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x20, @mcast2, 0x3}, 0x1c) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) setuid(0xee01) freebsd11_fstatfs(0xffffffffffffffff, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 2.46379046s ago: executing program 0 (id=71): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) truncate(&(0x7f0000000200)='./file0\x00', 0x6) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) 0s ago: executing program 3 (id=72): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000200)='./file0\x00', 0x6) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendfile(r0, 0xffffffffffffffff, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r1 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x107d2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. Stopping cron. Stopping sshd. Waiting for PIDS: 681. Stopping devd. Waiting for PIDS: 423panic: failed to reclaim memory cpuid = 1 time = 1761717075 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c9f470 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c9f5d0 vpanic() at vpanic+0x257/frame 0xfffffe0056c9f790 panic() at panic+0xb5/frame 0xfffffe0056c9f860 vm_pageout_oom() at vm_pageout_oom+0xce4/frame 0xfffffe0056c9f8f0 vm_pageout_worker() at vm_pageout_worker+0xf9b/frame 0xfffffe0056c9fea0 vm_pageout() at vm_pageout+0x2ce/frame 0xfffffe0056c9fef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c9ff30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c9ff30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 8 tid 100077 ] Stopped at kdb_enter+0x6e: movq $0,0x258b757(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff82826a80 .str.27 rsp 0xfffffe0056c9f5b0 rbp 0xfffffe0056c9f5d0 rsi 0 rdi 0xffffffff8165a459 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x33 r12 0xfffffe0054014780 r13 0xfffffffffffffffd r14 0xffffffff82826a80 .str.27 r15 0 rip 0xffffffff8164383e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x258b757(%rip) db> show proc Process 8 (pagedaemon) at 0xfffffe005400a558: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b59040 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b59040 reapsubtree: 8 sigparent: 20 vmspace: 0xffffffff83b5a020 (map 0xffffffff83b5a020) (map.pmap 0xffffffff83b5a0c0) (pmap 0xffffffff83b5a130) threads: 3 100077 Run CPU 1 [dom0] 100080 RunQ [laundry: dom0] 100081 Run CPU 0 [uma] db> ps pid ppid pgrp uid state wmesg wchan cmd 1155 766 766 0 N syz-executor 1154 1134 763 0 S uwait 0xfffffe0058156300 syz-executor 1153 1130 764 0 S uwait 0xfffffe0058155e80 syz-executor 1152 1147 914 0 S+ kqread 0xfffffe00582a4b00 pwait 1147 914 914 0 S+ wait 0xfffffe00540eeab0 sh 1134 763 763 0 D (threaded) syz-executor 100099 D vmwait 0xffffffff83003480 syz-executor 100446 S select 0xfffffe006dc36140 syz-executor 100448 S aiowc 0xfffffe00540cb398 syz-executor 100452 S uwait 0xfffffe0058519980 syz-executor 1130 764 764 0 D (threaded) syz-executor 100186 D vmwait 0xffffffff83003480 syz-executor 100443 S uwait 0xfffffe0058157d80 syz-executor 100444 S aiowc 0xfffffe0054135390 syz-executor 100450 S uwait 0xfffffe0058154200 syz-executor 1128 765 765 0 D (threaded) syz-executor 100113 D vm map 0xfffffe000780f060 syz-executor 100445 S lockf 0xfffffe005850a100 syz-executor 100447 S select 0xfffffe006dc35940 syz-executor 100449 D vmwait 0xffffffff83003480 syz-executor 100451 S uwait 0xfffffe006df28b00 syz-executor 1092 1 765 0 S uwait 0xfffffe005851c600 syz-executor 1091 1 764 0 S uwait 0xfffffe007797ee00 syz-executor 1087 1 763 0 S uwait 0xfffffe0058156400 syz-executor 1058 1 763 0 S uwait 0xfffffe0077843080 syz-executor 1053 1 765 0 S uwait 0xfffffe005851ae80 syz-executor 1051 1 766 0 S uwait 0xfffffe0058155300 syz-executor 1012 1 764 0 S uwait 0xfffffe0077843180 syz-executor 1002 1 763 0 S uwait 0xfffffe006df29080 syz-executor 1001 1 765 0 S uwait 0xfffffe0058155200 syz-executor 965 1 766 0 S uwait 0xfffffe0007782600 syz-executor 957 1 765 0 S uwait 0xfffffe0058155600 syz-executor 954 1 763 0 S uwait 0xfffffe0058156600 syz-executor 949 1 764 0 S uwait 0xfffffe0007782580 syz-executor 930 1 765 0 S uwait 0xfffffe005851ad80 syz-executor 922 1 763 0 S uwait 0xfffffe0058155400 syz-executor 920 918 914 0 S+ nanslp 0xffffffff83bb0000 sleep 918 914 914 0 S+ wait 0xfffffe00540ef008 sh 914 1 914 0 Ss+ wait 0xfffffe0054197000 sh 912 1 764 0 S uwait 0xfffffe007797f180 syz-executor 911 1 766 0 S uwait 0xfffffe0077842f00 syz-executor 910 1 765 0 S uwait 0xfffffe006df28a00 syz-executor 906 1 763 0 S uwait 0xfffffe006df26980 syz-executor 905 1 764 0 S uwait 0xfffffe0058519200 syz-executor 902 1 766 0 S uwait 0xfffffe005851c700 syz-executor 901 1 763 0 S uwait 0xfffffe005851c800 syz-executor 899 1 765 0 S uwait 0xfffffe006df26100 syz-executor 897 1 764 0 S uwait 0xfffffe006df26a80 syz-executor 893 1 763 0 S uwait 0xfffffe005851ce80 syz-executor 892 1 764 0 S uwait 0xfffffe006df26000 syz-executor 891 1 765 0 S uwait 0xfffffe007797ef00 syz-executor 890 1 766 0 S uwait 0xfffffe005851c980 syz-executor 885 1 764 0 S uwait 0xfffffe005851cb80 syz-executor 884 1 763 0 S uwait 0xfffffe005851c300 syz-executor 881 1 765 0 S uwait 0xfffffe005851a880 syz-executor 880 1 766 0 S uwait 0xfffffe005851c500 syz-executor 878 1 764 0 S uwait 0xfffffe006df26880 syz-executor 876 1 763 0 S uwait 0xfffffe005851ca80 syz-executor 874 1 765 0 S uwait 0xfffffe0058157700 syz-executor 873 1 766 0 S uwait 0xfffffe005851a980 syz-executor 868 1 763 0 S uwait 0xfffffe005851c400 syz-executor 867 1 766 0 S uwait 0xfffffe007797f500 syz-executor 866 1 765 0 S uwait 0xfffffe006df26580 syz-executor 865 1 764 0 S uwait 0xfffffe0058519800 syz-executor 860 1 763 0 S uwait 0xfffffe005851a780 syz-executor 859 1 765 0 S uwait 0xfffffe0058519900 syz-executor 857 1 766 0 S uwait 0xfffffe0077843400 syz-executor 856 1 764 0 S uwait 0xfffffe005851a680 syz-executor 854 1 763 0 S uwait 0xfffffe0058157400 syz-executor 853 1 765 0 S uwait 0xfffffe0058157800 syz-executor 849 1 766 0 S uwait 0xfffffe0058157500 syz-executor 847 1 763 0 S uwait 0xfffffe005851a480 syz-executor 846 1 765 0 S uwait 0xfffffe006df26380 syz-executor 841 1 766 0 S uwait 0xfffffe0058519100 syz-executor 840 1 764 0 S uwait 0xfffffe0058157980 syz-executor 839 1 763 0 S uwait 0xfffffe0058157e80 syz-executor 838 1 765 0 S uwait 0xfffffe0058157c80 syz-executor 833 1 763 0 S uwait 0xfffffe0058157a80 syz-executor 832 1 766 0 S uwait 0xfffffe0058519300 syz-executor 831 1 764 0 S uwait 0xfffffe0058519700 syz-executor 827 1 765 0 S uwait 0xfffffe0058157b80 syz-executor 826 1 763 0 S uwait 0xfffffe0058519400 syz-executor 823 1 766 0 S uwait 0xfffffe006df26780 syz-executor 822 1 764 0 S uwait 0xfffffe006df26680 syz-executor 821 0 0 0 DL aiordy 0xfffffe005410f010 [aiod4] 820 0 0 0 DL aiordy 0xfffffe005410f568 [aiod3] 819 0 0 0 DL aiordy 0xfffffe005410fac0 [aiod2] 818 0 0 0 DL aiordy 0xfffffe000780a570 [aiod1] 817 1 765 0 S uwait 0xfffffe006df26480 syz-executor 816 805 816 0 Ss select 0xfffffe006dc35dc0 dhclient 811 1 811 0 Ss select 0xfffffe006dc36040 dhclient 805 788 423 65 S select 0xfffffe006dc36240 dhclient 788 423 423 0 S wait 0xfffffe00540cb568 sh 766 762 766 0 DL vmwait 0xffffffff83003480 syz-executor 765 762 765 0 SL wait 0xfffffe00540cc570 syz-executor 764 762 764 0 S wait 0xfffffe00540ee000 syz-executor 763 762 763 0 S wait 0xfffffe00540caab8 syz-executor 762 760 760 0 S select 0xfffffe005850a340 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe005400bb68 csh 758 1 758 0 Ss select 0xfffffe005850a3c0 sshd 737 735 17 0 D+ pfault 0xffffffff83003480 sleep 736 1 17 0 S+ piperd 0xfffffe005989a000 logger 735 1 17 0 S+ wait 0xfffffe0054003ab8 sh 494 1 494 0 Ss select 0xfffffe005850b1c0 syslogd 423 1 423 0 Ss wait 0xfffffe005400cac0 devd 422 1 422 65 Ss select 0xfffffe006dc36440 dhclient 337 1 337 0 Ss select 0xfffffe005850a9c0 dhclient 334 1 334 0 Ss select 0xfffffe006dc36540 dhclient 16 0 0 0 DL syncer 0xffffffff83cddc20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0054002558 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cdc160 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 D sdflush 0xfffffe00586440e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d1d040 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100077 Run CPU 1 [dom0] 100080 RunQ [laundry: dom0] 100081 Run CPU 0 [uma] 7 0 0 0 DL - 0xffffffff839285b0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84559f60 [pf purge] 5 0 0 0 DL waiting 0xffffffff84908700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f2340 [doneq0] 100046 D - 0xffffffff838f22c0 [async] 100075 D - 0xffffffff838f2140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cfe9e0 [crypto] 100043 D crypto_ 0xfffffe0007a95330 [crypto returns 0] 100044 D crypto_ 0xfffffe0007a95380 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b58600 [g_event] 100038 D - 0xffffffff83b58620 [g_up] 100039 D - 0xffffffff83b58640 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83cff480 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c51ff0 [swapper] 100005 D - 0xfffffe0053e24700 [softirq_0] 100006 D - 0xfffffe0053e24600 [softirq_1] 100007 D - 0xfffffe0053e24500 [if_io_tqg_0] 100008 D - 0xfffffe0053e24400 [if_io_tqg_1] 100009 D - 0xfffffe0053e24300 [if_config_tqg_0] 100010 D - 0xfffffe000777c500 [kqueue_ctx taskq] 100011 D - 0xfffffe000777c400 [jail_remove taskq] 100012 D - 0xfffffe000777c300 [bus taskq] 100015 D - 0xfffffe000777c000 [thread taskq] 100017 D - 0xfffffe000777bd00 [aiod_kick taskq] 100018 D - 0xfffffe000777bc00 [deferred_unmount ta] 100019 D - 0xfffffe000777bb00 [inm_free taskq] 100020 D - 0xfffffe000777ba00 [in6m_free taskq] 100021 D - 0xfffffe000777b900 [linuxkpi_irq_wq] 100022 D - 0xfffffe000777b800 [linuxkpi_short_wq_0] 100023 D - 0xfffffe000777b800 [linuxkpi_short_wq_1] 100024 D - 0xfffffe000777b800 [linuxkpi_short_wq_2] 100025 D - 0xfffffe000777b800 [linuxkpi_short_wq_3] 100026 D - 0xfffffe000777b700 [linuxkpi_long_wq_0] 100027 D - 0xfffffe000777b700 [linuxkpi_long_wq_1] 100028 D - 0xfffffe000777b700 [linuxkpi_long_wq_2] 100029 D - 0xfffffe000777b700 [linuxkpi_long_wq_3] 100036 D - 0xfffffe000777b600 [firmware taskq] 100040 D - 0xfffffe000777b400 [crypto_0] 100041 D - 0xfffffe000777b400 [crypto_1] 100056 D - 0xfffffe000777b000 [vtnet0 rxq 0] 100057 D - 0xfffffe000777ae00 [vtnet0 txq 0] 100058 D - 0xfffffe000777ad00 [vtnet0 rxq 1] 100059 D - 0xfffffe000777ac00 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057d90f00 [virtio_balloon] 100065 D - 0xffffffff8282b161 [deadlkres] 100069 D - 0xfffffe0059418a00 [acpi_task_0] 100070 D - 0xfffffe0059418a00 [acpi_task_1] 100071 D - 0xfffffe0059418a00 [acpi_task_2] 100073 D - 0xfffffe000777c600 [mca taskq] 100074 D - 0xfffffe000777b300 [CAM taskq] 100076 D - 0xfffffe000777ab00 [ipsec_offload] db> show all locks Process 1134 (syz-executor) thread 0xfffffe00540c8000 (100099) shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe005414b738) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4998 Process 1130 (syz-executor) thread 0xfffffe0054132780 (100186) exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00540cd4f0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:2813 Process 1128 (syz-executor) thread 0xfffffe0054101780 (100449) exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00541a7e10) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4373 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe000780f060) locked @ /syzkaller/managers/i386/kernel/sserialport: VM disconnected.