last executing test programs: 5.979994127s ago: executing program 1 (id=28): r0 = socket(0x1c, 0x1, 0x0) freebsd11_mknod(0x0, 0x6000, 0x9) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0xfffffffc) select(0xc9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000140)='chd\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) syz_emit_ethernet(0x66, &(0x7f0000001d00)=ANY=[]) syz_extract_tcp_res(&(0x7f0000000380), 0x400, 0x8) sigaction(0x13, &(0x7f0000000040)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x70e3, 0xffff]}}, 0x0) r4 = fork() sigqueue(r4, 0x11, @sigval_int=0xfd51) sendmsg$unix(r3, 0x0, 0x20004) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) r5 = socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) setpriority(0x0, 0x0, 0x8000) fstatat(r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x4000) fork() execve(0x0, 0x0, 0x0) rfork(0x85000) __specialfd$inotify(0x2, &(0x7f00000001c0)={0x100000}, 0x4) freebsd10_pipe(0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) ioctl$BIOCSRTIMEOUT32(r6, 0x8008426d, &(0x7f00000000c0)={0x3, 0x33da}) r7 = kqueue() kevent(r7, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x8003, 0x4f, 0xfffffffffffffffe, 0x0, [0x0, 0x10, 0x1, 0x9]}], 0x1, 0x0, 0x0, 0x0) kqueue() 5.189706289s ago: executing program 1 (id=33): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) open$dir(0x0, 0x2000000, 0x126) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) syz_emit_ethernet(0x0, 0x0) r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0xa00) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = fork() sigqueue(r5, 0xf, @sival_int=0x8000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) freebsd11_lstat(&(0x7f0000000340)='./file0\x00', 0x0) preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) sendfile(r0, r2, 0x889b9, 0x0, 0x0, 0x0, 0x11) __specialfd$eventfd(0x1, &(0x7f0000000000), 0x8) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, &(0x7f0000000080)={0x95f8, [{0x566e, [0xee0d, 0xd871, 0x7, 0xff, 0x7fff, 0x3, 0xfffffff7, 0xaa8, 0x7ff, 0x9, 0xfffffffc, 0x9, 0x7, 0x6219848d, 0x515, 0x8, 0x5, 0x0, 0x0, 0x3, 0x0, 0xf, 0xd6, 0x8, 0x1de, 0xfffffffb, 0x5, 0x2, 0x7f, 0x10001, 0x9, 0x6, 0x3, 0x5, 0x4, 0x5, 0x4, 0x401, 0x7, 0xba5c, 0xe8c, 0x80000001, 0x8, 0xfffffffd, 0x3, 0xedf, 0x1, 0xffffffff, 0x4c02, 0x4, 0x3, 0x10001, 0xffffffde, 0x0, 0x10, 0x400, 0x715, 0x7e1, 0x4, 0xd, 0xa, 0xa09, 0x2, 0x3, 0x4, 0x5131, 0x4, 0x1, 0xbe9a, 0xfff, 0x731, 0x9, 0xbc, 0xb, 0xc74f, 0x0, 0x9, 0x5, 0x4, 0x101, 0xfffffff8, 0x2, 0x0, 0x5, 0x5229, 0x9, 0x7, 0xfffffffb, 0x81, 0x8001, 0xf, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5, 0xe0, 0x7ff, 0x2, 0x0, 0x8, 0xc, 0x8]}, {0x5c, [0x15, 0x6, 0x4, 0xbae, 0x2, 0x4, 0x86f13b53, 0x401, 0x1000, 0x7, 0x6, 0x7, 0x7fff, 0x0, 0x5, 0x400, 0x9, 0x96a9, 0xbe, 0xfffffffe, 0xb, 0x8, 0xae0, 0x6, 0x7, 0x40000, 0x40, 0x9, 0x7fff, 0x3, 0x200000, 0x7, 0x0, 0x5, 0x3b5, 0x6, 0x2, 0x58, 0x2, 0x1, 0xffffff00, 0x4, 0x4, 0x6, 0x3, 0x3, 0x8, 0x100, 0x0, 0x907, 0x101, 0x9, 0x6, 0xc95, 0x6, 0xc, 0x4, 0x2, 0xb, 0x3eb, 0x0, 0x7fff, 0x0, 0xff8, 0x9, 0x7, 0x8, 0x9, 0x61a, 0x2, 0x80000001, 0x90fd, 0x6, 0xd, 0x6eed, 0x0, 0x4, 0x1, 0x7, 0x5, 0x0, 0x10001, 0x40000010, 0x80000001, 0x9, 0x4b2, 0x100, 0x7fffffff, 0x2, 0x0, 0x7, 0x5, 0x1000, 0x0, 0x8, 0x6, 0x2, 0x1, 0x4, 0x1, 0x3ff, 0x1000, 0x1, 0x4]}, {0x0, [0x1, 0x6, 0x3, 0x2, 0x800, 0x0, 0xff, 0x6, 0x7, 0x3, 0xe, 0x1, 0xdd, 0x538, 0x7bac, 0xa, 0xd, 0x9, 0x10001, 0x8, 0x8, 0xff, 0x6, 0x2, 0x800000, 0x2, 0x4, 0x8, 0x4, 0xb, 0x9, 0x1, 0x3, 0xfff, 0x343d3543, 0x400000, 0xfffffff8, 0x9, 0xa87f, 0x800, 0x7, 0x2, 0x1, 0xdb4, 0x101, 0xb369000, 0x9, 0x92, 0x4, 0x0, 0x98, 0x3d104cc0, 0x52, 0x8, 0xc, 0x0, 0x437, 0x3, 0x3, 0x1, 0x1000, 0x8001, 0xfff, 0x17e7, 0x8, 0x7, 0x6, 0x0, 0x5, 0xf10, 0x5, 0x1, 0xffffffb8, 0x7fff, 0x9, 0xfffffffd, 0xfffffffe, 0x3158, 0x5, 0x2, 0x8, 0x36d5, 0x9, 0x1, 0xfffffffb, 0x2, 0x8, 0x8000, 0x5, 0x3, 0x1, 0xfffffffd, 0x4, 0x1, 0xfffffff7, 0x40, 0x6, 0x3, 0x6, 0x1ff, 0x4, 0x9, 0x9, 0x39]}, {0x3, [0x7, 0x5, 0x8, 0xfc, 0x12, 0xd683, 0x8, 0x5, 0x8, 0xadd, 0x5, 0xdb, 0x80000001, 0xc, 0x0, 0xfffffff7, 0xffffffff, 0x2, 0x5, 0x2, 0x3eb3, 0x0, 0x7, 0x7, 0x7, 0x6, 0x5, 0x7673faf3, 0x0, 0x9, 0x1, 0x2, 0xffffffff, 0x1, 0x4f124442, 0x8, 0x0, 0x2, 0x8007, 0x190, 0x5, 0x3, 0x1, 0x800, 0x9, 0x9, 0x3, 0x7, 0x5, 0x7, 0x8, 0x7, 0x0, 0x10001, 0x1, 0x0, 0x7ff, 0xe, 0x9, 0x2df, 0x7, 0x7fffffff, 0x80000001, 0x4, 0x3, 0x3, 0x4, 0x496a, 0x7, 0x7fffffff, 0x74, 0x2, 0x9, 0x3, 0x6, 0xf3, 0x1, 0xa3, 0x49c, 0xec0, 0x100, 0x3, 0x6, 0x9, 0x2, 0x0, 0x6, 0x6, 0x9, 0x1, 0x0, 0x5, 0xa, 0x2, 0x4, 0x3b, 0x3, 0x40, 0x225, 0x80, 0x4, 0x4, 0x7fff, 0x2]}, {0xe8bc, [0x5, 0x4, 0x8, 0x5, 0x4, 0x80, 0x9, 0x1ff, 0xfff, 0xfffffff9, 0x1ff, 0x1, 0x800, 0x80000000, 0x8, 0x7, 0x7ff, 0x6, 0x8, 0x9, 0xe92, 0x8, 0x13, 0x2, 0x0, 0x7f, 0x401, 0x8, 0x7, 0x8, 0x4, 0x5, 0xffffe6ff, 0x7, 0x80000000, 0x6f88, 0x2, 0x9, 0x7f, 0xa5de, 0x0, 0x8, 0x3, 0x800, 0x5, 0x403, 0x54, 0x80, 0xf, 0x3ff, 0x8, 0xfffffffa, 0x9, 0x0, 0x800, 0x8, 0x1, 0x4, 0x6, 0x8, 0x3, 0x5, 0x5, 0x2, 0x1, 0xb26, 0x6, 0x81, 0x1, 0x101, 0x3, 0x2, 0x6, 0x200, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x3, 0x1, 0x800, 0x5, 0x7, 0x468, 0x7f, 0x94, 0x7, 0x6, 0x3, 0x8, 0x7ff, 0xfffffffe, 0x10000, 0x4, 0x4b, 0x435c9460, 0x3ff, 0x7ff, 0x4b, 0x40, 0x0, 0x5, 0x7]}, {0x3, [0x7, 0x2, 0x1, 0x5, 0xf, 0x40, 0x6, 0x1000, 0x4, 0x3, 0x5, 0x8, 0x1, 0x5, 0xa, 0x81, 0x7, 0x8, 0x8, 0x6, 0x80000000, 0x60, 0x0, 0xd2, 0x1, 0x9, 0x10001, 0x6, 0xc, 0x6, 0x200, 0x5, 0x3, 0x52fd0a00, 0x8, 0x3, 0xfffff1b2, 0x1d, 0x8, 0xff, 0x2000, 0x4b, 0x808f, 0x5, 0xb, 0xfffffffa, 0x3, 0x7ff, 0x430c, 0x1000, 0xb35, 0x0, 0x3, 0x9, 0x9, 0x6, 0x400000, 0x5, 0x10001, 0x1, 0x6, 0x1, 0xffff, 0x10, 0x0, 0x9, 0x3, 0xce94, 0x4, 0x0, 0xfffffc01, 0x80, 0x200007ff, 0x2, 0x3, 0x4, 0x8, 0x400, 0x8, 0x81, 0xfffffff7, 0x9, 0x6, 0x7ff, 0x7, 0x0, 0x124f8, 0x7fffffff, 0x6, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x4ab464c, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x5, 0x9, 0x5b8b7924, 0x7ac5]}, {0xffffff7f, [0x1, 0x4, 0x131f, 0x1, 0x8, 0x6, 0x0, 0x7, 0x3, 0x3, 0x1, 0x200, 0x4a2, 0x49, 0xfd, 0xd0, 0x39e, 0x3, 0x5, 0xffff, 0x2c, 0x3, 0x0, 0x9, 0xffffffff, 0x7, 0xffffffff, 0x4, 0xc, 0x9, 0x263, 0xabd1, 0x3, 0x2, 0x9, 0x6, 0xb7af, 0x6, 0x2, 0x6, 0x1ff, 0x7, 0x10000, 0x2, 0x80000000, 0x4, 0xfffffff5, 0x1, 0x3041, 0x8, 0x6f, 0x2, 0x7, 0x3, 0xfff, 0x1, 0x8, 0x1, 0x5, 0x52, 0x3, 0x80, 0xe5, 0x7, 0x3f, 0x10, 0x6, 0x5, 0x4, 0xfffffff8, 0x4, 0x8001, 0x4220c0b8, 0xfff, 0xfffffff1, 0x6, 0x6, 0x80, 0x6, 0xc9, 0x2, 0x7, 0x52, 0x8000, 0xc, 0x6, 0x5, 0xe, 0x9, 0x8, 0x1, 0x5, 0x5, 0x7, 0x5, 0x6, 0x1d33945, 0xd, 0x8, 0x9fc, 0xffff, 0x4, 0x5, 0x8]}, {0xfffffffa, [0x1ff, 0x8, 0x9, 0x1, 0x7, 0x3, 0x1, 0x2, 0x80, 0x10000, 0x8, 0xae, 0x7, 0x3, 0x2, 0x6, 0x2, 0x42, 0xec7, 0x0, 0x3, 0x1, 0x9, 0x8, 0x7, 0xfff, 0x3, 0x8d4, 0x7ca, 0x5, 0x283, 0xd3b2, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x7ff, 0x200, 0x54, 0x1, 0x4, 0x40, 0x9, 0x40, 0x7, 0xc, 0x3, 0x1, 0x6, 0x10000, 0x6, 0x2, 0x7fffffff, 0xfffffff1, 0x0, 0xffff9594, 0x6, 0x2, 0x6ef, 0x1, 0x3, 0x0, 0x40, 0xfffffffe, 0x1, 0x3, 0xb28a, 0x1, 0x80000001, 0x800, 0x30e, 0x7b, 0x2, 0x5, 0x9, 0x7ff, 0x5, 0x7, 0x1, 0x9, 0x100000c, 0x6, 0x1, 0x272, 0xc, 0x0, 0x2, 0x4, 0x400, 0x5, 0xfffffffc, 0xffffffff, 0xd, 0x19d, 0x5, 0xf0, 0x6, 0x4, 0x9, 0x4, 0xe6dc, 0x8, 0x1ff0]}, {0x0, [0x9, 0x5, 0x314, 0x1, 0x7, 0x7f, 0x9, 0x4, 0x79, 0x0, 0x7ff, 0xe, 0xffff, 0x0, 0x80000000, 0x7, 0x1000, 0x3ff, 0x3, 0xf7, 0x0, 0x0, 0x40000000, 0x5, 0xfffffff7, 0xfffffffe, 0x1ff, 0x2, 0x3, 0x1, 0x2, 0x1, 0x4, 0x81, 0x8, 0x2, 0x4, 0x6, 0x1, 0x6, 0xffff, 0x1, 0xf, 0x3, 0x2, 0x6, 0x7, 0xa, 0x1ff, 0x7ff, 0xa, 0x0, 0x8, 0x7, 0xc0, 0xf58f, 0x1000, 0x0, 0x3, 0x7ff, 0xfe0, 0x3, 0x400007, 0x8, 0x9, 0x3, 0x1, 0x1, 0x5, 0x3, 0x1000, 0xfffffff7, 0x1ff, 0xffffffff, 0x4, 0x8001, 0x1, 0x8, 0x0, 0x6, 0x8, 0x1, 0x100, 0x8, 0x0, 0xd7fb, 0xa, 0x0, 0x5, 0x4, 0x1a0, 0x2, 0x5, 0x0, 0x6, 0x1ff, 0x40, 0x5, 0x4, 0xbc, 0x8, 0x5, 0x7, 0xfffffffb]}, {0x6, [0x10, 0x40, 0x1, 0x253, 0x8, 0x8, 0x8, 0x1, 0x7, 0x8, 0x3, 0x60, 0x7ff00000, 0x80, 0x8, 0x2, 0x2, 0x6, 0x80, 0x800, 0x1, 0x0, 0x529b, 0x3, 0x0, 0x5, 0x0, 0xfffffffa, 0x1000, 0xa, 0x9, 0xf, 0x7, 0x7, 0x5, 0x0, 0x2, 0x2, 0x5, 0x7, 0x9, 0x4, 0x7, 0xb, 0x101, 0x8, 0x4, 0xfb8e, 0xf3b, 0x4, 0x7, 0x8, 0x8, 0x7, 0x5, 0x4, 0x4, 0x5, 0xfffffff9, 0x2, 0x8, 0x3, 0x2, 0x400, 0x6, 0x7, 0x9bc7, 0x80000000, 0x8, 0x1, 0x200, 0x4, 0xc, 0x6, 0xc2c4, 0x5, 0x5, 0x7, 0x6, 0xf, 0x80, 0x3, 0xfffffffd, 0x20000000, 0x21, 0x2, 0x1, 0x3, 0x80, 0x1, 0x4, 0x7d7, 0x9, 0x4, 0x7f, 0x0, 0x7ff, 0x7fff, 0x1, 0x8a6, 0xfffffff9, 0x1, 0x6, 0x4]}, {0xc0, [0x3f04, 0xf, 0xfffffff7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x9, 0x6, 0x7fffffff, 0x0, 0xfffffffe, 0x7fff, 0x0, 0x0, 0x400000, 0x2, 0xe, 0x401, 0x8, 0x800, 0x7, 0x9, 0x40, 0x0, 0x5144b3ea, 0x694, 0x4, 0x7fe, 0x99, 0x81, 0x5, 0x4, 0x3, 0x0, 0x3ff, 0x1000, 0x9, 0x6, 0x40, 0x8, 0x1, 0xf, 0x1, 0x8, 0x5627aa48, 0x5, 0x4455, 0xfffffffd, 0x1000, 0x7, 0x3, 0x8, 0x0, 0x3, 0x7, 0xffff0000, 0x80000000, 0x7, 0x7fff, 0x0, 0x3, 0x2, 0x9, 0xe, 0x3, 0x7, 0x0, 0xa, 0x3, 0x54d, 0x100, 0x8, 0x3ff, 0x8, 0xfffffffd, 0xffffe64b, 0x400, 0x9, 0x200, 0x3, 0x7, 0x9, 0x40, 0x8, 0x9, 0x2, 0xb0000000, 0x3, 0xb, 0x400000, 0x99, 0xeae, 0xe8, 0xfffffc00, 0xd8b5, 0x4, 0x9, 0xf, 0x2ab, 0x5, 0x8000]}, {0x0, [0x7, 0x44f, 0x4, 0x9, 0x4, 0xffffffff, 0x6, 0xffffffed, 0x7f, 0x7, 0x3, 0x4, 0x80000001, 0x1, 0xdf96, 0x10000, 0x2, 0xc1e, 0x1000, 0x9, 0x6, 0x9b6, 0x404000, 0x1, 0x5, 0x7f, 0x0, 0x2, 0xf, 0x80, 0x8f7, 0x6, 0x2, 0x7f, 0xf7b2, 0x4, 0x0, 0xfffffff7, 0x6, 0x8, 0x1, 0x4, 0xfffff800, 0x8, 0x7, 0x7, 0x14, 0x10, 0x9, 0x7, 0x80, 0xffffffff, 0x10, 0x800, 0x3, 0x3ff, 0xb7, 0x5, 0x4, 0x4, 0x0, 0x8, 0x8001, 0x1, 0x2800000, 0x2e0, 0x10000, 0x8, 0x3, 0x800, 0x1, 0x7f, 0x9, 0x6, 0x10001, 0x8, 0x92, 0x40a54e46, 0x1, 0x7, 0x1ff, 0x1, 0x4, 0x7fff, 0x0, 0xf16, 0x800, 0x1, 0x0, 0x6, 0x1, 0x3a2, 0xf769, 0x80000001, 0x6, 0xc0000, 0x8, 0xfffffff2, 0x7fffffff, 0x400, 0xb, 0x9, 0xffffffff, 0xffff]}, {0x5, [0x10000, 0x5, 0x25a, 0x1, 0x6, 0x2, 0x8, 0xfffffffd, 0x6, 0x3, 0x5, 0x100, 0x1, 0x5, 0x27c, 0x10000, 0x0, 0xfffffff3, 0x1, 0x7, 0xfffffff7, 0xfd4, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0xf, 0x6, 0x0, 0x100, 0x0, 0xe296, 0x0, 0x8000, 0xffffa59e, 0x7, 0x1, 0x4, 0x4, 0x100, 0x8, 0x1ca, 0x2, 0x5, 0x8, 0xfffffff9, 0xa, 0x52b, 0xe, 0x4, 0xfffffff9, 0x5f, 0x5, 0x8, 0xfffffff7, 0x2, 0x4, 0x6, 0x0, 0x5, 0x3, 0x7, 0xff, 0x10a, 0x7, 0x6, 0x1ff, 0x1, 0x4, 0x0, 0x4, 0x6, 0x401, 0x4a1, 0x5, 0x8001, 0x7, 0x6f, 0xc1f6, 0x2, 0x6, 0x1, 0x7, 0xff, 0x9, 0x43d, 0x2, 0xffff, 0x1, 0x7, 0x9a, 0x7ff, 0xb9, 0x800, 0x3, 0xc, 0xffffffff, 0x5, 0x7, 0x9, 0x7ff, 0x32, 0x7]}, {0x6, [0x1, 0x5, 0xcd4, 0xb0, 0x1000, 0x8, 0xfff, 0x8, 0x6, 0xc, 0x4a, 0x9, 0x74, 0x6, 0xa, 0x75e7, 0x4, 0x0, 0x8, 0x3, 0x4, 0x1ff, 0x4, 0x80, 0x7, 0x7, 0x8, 0xaa9, 0x0, 0x7, 0xd46, 0x7, 0x5, 0x80000000, 0x9, 0x4f9b3d50, 0x800, 0x3, 0x8, 0x8, 0xdd62, 0x25ae, 0x0, 0x7, 0xfffffff9, 0x450, 0x3, 0x5, 0x2271, 0x1, 0x2, 0x1, 0x3, 0x7fffffff, 0x0, 0x3, 0xc, 0x86, 0x0, 0xb959, 0x200, 0x8, 0x5, 0x2, 0x92ad, 0x1, 0x2, 0x38e, 0x7ff, 0x10, 0x7f, 0x8, 0x5, 0x7, 0xf, 0x86, 0x2, 0x5, 0x8001, 0x0, 0x3, 0x78aa0000, 0x0, 0x0, 0x8, 0x84e1, 0xd934, 0xe000, 0x8, 0xb5d, 0x9, 0x7ff, 0x4, 0x0, 0x4, 0xfffffff8, 0x1, 0x13, 0xecb, 0x1000, 0x10, 0x0, 0x80000001, 0x3]}, {0x3, [0x1, 0x8, 0x3, 0xc, 0x0, 0xf91, 0x4, 0x7, 0x4, 0x6, 0xfff, 0x6, 0xfffffffa, 0xa000, 0xfffffff9, 0x80, 0x1, 0x1, 0xff, 0x3, 0xf, 0x3, 0x70f, 0x100, 0x2, 0x2, 0xe3, 0x1, 0x7, 0x7fffffff, 0x1, 0x9, 0x5, 0x7, 0x9, 0xa, 0xf4, 0x1, 0x2, 0x1, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x2, 0x401, 0x8, 0x8, 0x1, 0x7, 0xf2, 0x8, 0x7fffffff, 0x10001, 0x8, 0x4, 0x6, 0x5, 0x13f7, 0x779, 0x9, 0xffffffff, 0x0, 0x8, 0xeb7, 0x7, 0x9, 0x10000, 0x9, 0x4, 0x7fffffff, 0x6, 0x8, 0x7, 0x6cec, 0x10001, 0x3, 0x7, 0xb2, 0x1, 0x1, 0x5, 0x9, 0x3, 0x2, 0x5508c39c, 0x7, 0x5b3, 0x1, 0x400, 0x7, 0x1, 0x4, 0x2, 0x3, 0xe, 0x4, 0x2, 0x7, 0xffffffff, 0x50, 0x9, 0x0, 0x3]}]}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x46}], 0x860, 0x0, 0x0, 0x0) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000001940), 0x800, 0x0) connectat$unix(r6, r2, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "2f5105", 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@fragment={0x3b, 0x0, 0x9, 0x0, 0x0, 0x8, 0x65}], @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}}) 3.866348786s ago: executing program 0 (id=42): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) cpuset_getid(0x1, 0x7, 0xdfa9, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000280), 0x4) open$dir(0x0, 0x40000400000002c2, 0x0) open(0x0, 0x8004, 0x10a) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000040)={0x2a, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff}) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xc, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)}) pipe2(0x0, 0xd505eb4556f41fdb) ktimer_create(0x0, 0x0, 0x0) aio_waitcomplete(0x0, &(0x7f0000000200)={0x80000000}) cpuset_setid(0x2, 0x88834, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)=ANY=[@ANYRES32], 0x1030) r3 = socket(0x1c, 0x1, 0x0) writev(r3, 0x0, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000100)={@random="9f4c4662c957", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x22, 0x6a, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x7, @multicast2, {[@rr={0x7, 0x3, 0x5}]}}, @icmp=@generic={0x11, 0x8, 0x0, "ffdf0000009f"}}}}}) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) pipe2(0x0, 0x0) poll(0x0, 0x0, 0x9) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0xb542) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setresuid(0x0, 0xee01, 0x0) mkdirat(r4, &(0x7f0000000100)='./file1\x00', 0x0) renameat(r4, &(0x7f0000000200)='./file1\x00', r4, &(0x7f0000000140)='./file0/file0\x00') 3.808465963s ago: executing program 1 (id=45): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0xee) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0x1) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) sendfile(r0, r2, 0x89ba, 0x0, 0x0, 0x0, 0x17) 2.970037219s ago: executing program 0 (id=53): syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x34, 0x3a, 0x0, @rand_addr="3bcc2629a17a6c58afb8877c8be162e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x11, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [], "f8d3cdf8"}}}}}}}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2.969578587s ago: executing program 0 (id=54): socket$inet_sctp(0x2, 0x5, 0x84) clock_getres(0xa, &(0x7f0000000000)) sigaction(0x6, &(0x7f0000000200)={&(0x7f0000000340)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfffffffe]}}, 0x0) lio_listio(0x1, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x6, @sival_ptr, @spare=[0x101, 0x3, 0x0, 0x40000000000002e1, 0x7, 0x3, 0x5, 0x8]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1014, 0x0, 0x0) r0 = open(0x0, 0x80000000000206, 0x0) ftruncate(r0, 0x3862) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = open$dir(0x0, 0x0, 0x0) ioctl$DIOCRSETADDRS(0xffffffffffffffff, 0xc4504445, &(0x7f00000001c0)={{"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", "28a572e2c24b00000000000000004b000000000000000000000000feff00"}, 0x0}) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x14000000) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000200000008004540002c0000000002069078e00000b8e00000024e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601000a7907804060303b500"]) sendfile(r1, 0xffffffffffffffff, 0xb00, 0x40, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x4000) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x7fffffff}) open(0x0, 0x80000000000206, 0x0) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000040)={0x2a, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0xffffffff, 0xfdffffff}) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x100, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)}) kqueue() 2.892640748s ago: executing program 1 (id=56): r0 = socket(0x1c, 0x1, 0x0) ktimer_create(0x4, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x2c, 0x0, @loopback={0xfe}, @loopback={0xfe}, [@dstopts={0x54}]}}}}}}}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) cpuset_setaffinity(0x3, 0x2, 0xa32, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "10fcff", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x22, 0x0, 0x0) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$unix(r2, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) r3 = getpid() fcntl$setown(r0, 0x6, r3) socket$inet6_udp(0x1c, 0x2, 0x0) rfork(0x3060) syz_extract_tcp_res(&(0x7f00000000c0), 0xf74, 0x9) 2.030039212s ago: executing program 3 (id=62): kqueue() bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x100000, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x30) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) fork() pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf1999}], 0x1, 0x0) freebsd11_mknod(0x0, 0x1000, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff, 0x1, @rand_addr="6f036d898839acef88bd26e40df586ce", 0x6}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)="c72d6a", 0x3, 0x180, &(0x7f0000000180)={0x1c, 0x1c, 0x1, 0x9, @rand_addr="182e989313c238e53a13057d86e596ed", 0x240}, 0x1c) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) extattr_delete_link(0x0, 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c') socket(0x1c, 0x3, 0x0) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 1.850164169s ago: executing program 3 (id=63): open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0xfffffffb, @loopback}, 0x1c) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ftruncate(r2, 0x107d2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="10000000ffff000006"], 0x10}, 0x0) read(r3, &(0x7f0000000280)=""/26, 0x1a) fspacectl(r2, 0x1, &(0x7f0000000100)={0x0, 0xffff}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) mount(&(0x7f0000000140)='exfat\x00', &(0x7f0000000080)='./file0\x00', 0x200010, &(0x7f00000002c0)="0799d7815c9447efaafcedecc2c8491b808967e23a34e75b262eca2c47f009854f1db89db52fb413e9f4c248c801abca8077bb73bd8d9456fc9f93a71758ede17f1fa67efcf6f5e058ed3ea00b309818acd65ebfbba1229afac6ef89d7d549725a910d86cfdc378e36bfb129c08d66e223d5deb4b263d7f166809b8f2e621c95ca009bf98338a11dc3cb") r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x126) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20001, 0x0, 0x0) sendfile(r4, r1, 0x1, 0x0, 0x0, 0x0, 0x19) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) open$dir(&(0x7f00000016c0)='./file0\x00', 0x40000, 0xa0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) lio_listio(0x0, &(0x7f0000001f40)=[{0xffffffffffffffff, 0xdd, 0x0, 0x0, [0x3, 0x80], 0xacd, 0x0, 0x200, {0x97e3, 0xa, 0x0}, {0x1, 0x10, @sival_ptr=0x9, @thr={0x0, 0x0}}}], 0x1, 0x0) open$dir(0x0, 0x202, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) procctl$PROC_PROTMAX_STATUS(0x0, 0x0, 0x10, &(0x7f0000000080)) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000080)='./file0/file0/..\x00') posix_fadvise(r4, 0x6, 0x0, 0x3) bind(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x0, @empty, 0x2}, 0x1c) ktrace(&(0x7f00000001c0)='./file0/file0/..\x00', 0x4, 0x1008, 0x0) cap_enter() 1.73996581s ago: executing program 0 (id=65): close(0xffffffffffffffff) r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f0000c99000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000000014060000000000000000000000000000000000fe8000000000000000000000000000aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESHEX]) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000dea000/0x3000)=nil, 0x3000, 0x7) ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x2000000, 0x6, 0x0, 0xffffffff]}) extattr_delete_file(&(0x7f0000000040)='./file0\x00', 0x3, &(0x7f00000002c0)) lio_listio(0x0, &(0x7f0000000580)=[{0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_ptr, @ke_flags}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @ke_flags}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_int, @ke_flags}}], 0x3, 0x0) r3 = kqueue() cap_ioctls_get(r1, &(0x7f0000000040), 0x0) kevent(r3, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) fork() syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000303aff00000000000000000000000000000000fe8000000000000000000000000000aa040190780000007560f7d9f600002b0000000000000000000000000000100000fe8000000000000000000000000000aa"]) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FILEMON_SET_FD(r4, 0x20006601, 0x0) aio_waitcomplete(0x0, &(0x7f0000000200)={0x80000003}) r5 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x400, 0x0) aio_write(&(0x7f0000000340)={r5, 0xcec, 0x0, 0x0, [0x0, 0xfffffffe], 0x82000, 0x0, 0x8000000, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0xfff, @ke_flags=0xb8}}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 1.739045763s ago: executing program 2 (id=66): pipe2(&(0x7f0000000000), 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) aio_write(&(0x7f0000000140)={r0, 0x800, 0x0, 0x0, [0x40], 0x2, 0x0, 0x1, {0xd3, 0x0, 0x0}, {0x0, 0xfffffffe, @sigval_ptr=0xa1cf, @thr={0x0, 0x0}}}) socket(0x2, 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000140)=0xb, 0x4) bind$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f0000000000)={0x0, 0x26, 0x0, 0x0, 0x20, &(0x7f00000003c0)="70638953df0cef7e00080000000bf98994164394b5d947fa8802ca13b7270000", 0x10000, 0xbdfffffd, [0x0, 0x3]}) ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2, &(0x7f0000000480), 0x0, 0x0, 0x0}) fcntl$setstatus(r3, 0x4, 0x8) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = dup2(r6, r5) rfork(0x3060) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r8, r7, 0x0, 0x0, 0x0, 0x0, 0x7) close(r2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/57, 0x39}], 0x1) fcntl$setstatus(r10, 0x4, 0x4) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000340)="00c24886176aaf0b7ab79afc8db584706c97351889a37ebe02d8e5b39120a4960aee1c67947e1e9514cb85e136664c1edefacae7f6", 0xfe08}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(0xffffffffffffffff, 0x0) 1.318745494s ago: executing program 1 (id=56): r0 = socket(0x1c, 0x1, 0x0) ktimer_create(0x4, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x2c, 0x0, @loopback={0xfe}, @loopback={0xfe}, [@dstopts={0x54}]}}}}}}}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) cpuset_setaffinity(0x3, 0x2, 0xa32, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "10fcff", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x22, 0x0, 0x0) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$unix(r2, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) r3 = getpid() fcntl$setown(r0, 0x6, r3) socket$inet6_udp(0x1c, 0x2, 0x0) rfork(0x3060) syz_extract_tcp_res(&(0x7f00000000c0), 0xf74, 0x9) 1.162297335s ago: executing program 0 (id=67): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000300)="58a9d88bc12f61e6000000", 0xb, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x2ac8000, @ke_flags=0x8010}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socket(0x2, 0x3, 0x0) r3 = socket(0x1c, 0x1, 0x0) procctl$PROC_TRAPCAP_CTL(0x0, r2, 0x9, &(0x7f0000000340)=0x81) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) bind$inet6(r3, 0x0, 0x0) pipe2(0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x100000, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x98) openat(r4, &(0x7f0000000080)='./file0\x00', 0x80000, 0x120) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/66, 0xfffffef0}], 0x2f) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r5, 0x3862) r6 = openat$filemon(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(r6, 0x1000) r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r7, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000300)='./file0\x00', 0x10000, 0x8, 0xa39, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x80000000, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0xfffffffe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x81, 0x100, 0x0, 0x4000000, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1]}) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x12) r8 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) extattr_list_file(&(0x7f0000000100)='./file0\x00', 0x6, &(0x7f0000000140)=""/250, 0xfa) open(&(0x7f00000002c0)='./file1\x00', 0x80, 0x0) 1.060001905s ago: executing program 2 (id=68): setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r0 = socket$inet6(0x1c, 0x1, 0x3) getsockopt$inet6_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0xb) r1 = socket(0x1, 0x1, 0x8) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x100000, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0xffffffffffffffff) r2 = kqueue() syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB]) setreuid(0xee00, 0x0) setresuid(0x0, 0x0, 0xee01) kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="8f0000000000000000ffffff86dd605f6ad900483a003bcc3f0603000058132fa13a8be186e3fe8000000000000000000000000016aa02009078000000006006c33e00002b00fec000000000000000000000000000aaff0200000000000000000000000000012b01000000000000000500000100010800020001000000f4"]) freebsd11_mknod(0x0, 0x1000, 0x9) syz_emit_ethernet(0x35, &(0x7f0000000240)=ANY=[@ANYBLOB="0000e500ecffe86ac9eb7b550806000f803a0603c224cddf87c8e718faaaaaaaaaaa19bdd80000000000000ee5de17ef038d8a5999"]) r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0x40000400000002c6, 0x0) fcntl$lock(r3, 0x16, &(0x7f0000000000)={0x570}) socket$inet6_udp(0x1c, 0x2, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x246, @ipv4, 0x2}}}, 0x108) setreuid(0xee00, 0x0) fork() clock_gettime(0x0, &(0x7f0000000200)) socket$inet6_udp(0x1c, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) sync() 990.522105ms ago: executing program 3 (id=69): r0 = socket$inet6(0x1c, 0x3, 0x7) r1 = kqueue() kevent(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffffff9, 0xb, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x18c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) extattr_get_file(0x0, 0x1, 0x0, &(0x7f00000013c0)=""/4096, 0x1000) symlinkat(&(0x7f0000000700)='./file0\x00', r2, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$lock(r1, 0xb, &(0x7f00000001c0)={0x3, 0x2, 0x5, 0x4}) renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00') sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000e80)=ANY=[], 0x100, 0x20001}, 0x20180) setresgid(0xee00, 0xee01, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) cpuset_setaffinity(0x3, 0x4, 0x1e, 0x8, &(0x7f0000000380)={[0x2]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0x1c, 0x3, 0x1) freebsd11_getfsstat(&(0x7f0000000600), 0x1d8, 0x2) r4 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) freebsd11_fstatfs(r4, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$CIOCCRYPT(r5, 0x80044403, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f00000002c0)=0x8000000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000100)=ANY=[], 0x38) 589.961994ms ago: executing program 2 (id=70): cpuset_setdomain(0x3, 0x3, 0xffffffffffffffff, 0x20, &(0x7f0000000040)={[0x1]}, 0x3) syz_emit_ethernet(0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa7004f5b3750786dd60050000004e3a003bcc2629a17a6c58afb8877c8be162e300000000000000000000000000000000c28f0644aaecc46c9650eecb74d6705f9fe895d8dbbfc4306d2bb694b79e93e627390bb14d0d7509177fd439e68f770ba855b161187a9ec13f97b0fd9089bad5bbfb94108c5e05602f84c543a190"]) r0 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r0, &(0x7f0000000040)={0x17, 0x1c, 0x0, 0x0, @loopback={0x4}, 0xa27}, 0x1c) socket$inet6(0x1c, 0x2, 0x0) ktimer_create(0x0, 0x0, &(0x7f0000000000)) ktimer_create(0x0, 0x0, &(0x7f0000000180)) ktimer_create(0x4, 0x0, &(0x7f00000001c0)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0x0, 0x0, &(0x7f0000000100)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x0, 0x0, &(0x7f00000003c0)) ktimer_create(0x0, 0x0, &(0x7f0000000000)) ktimer_create(0x0, 0x0, &(0x7f0000000180)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x4, 0x0, &(0x7f0000000280)) ktimer_create(0x0, 0x0, &(0x7f0000000380)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0xe, 0x0, &(0x7f0000000100)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x0, 0x0, &(0x7f0000000300)) ktimer_create(0x0, 0x0, &(0x7f00000003c0)) ktimer_create(0x0, 0x0, &(0x7f0000000200)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0x0, 0x0, &(0x7f0000000080)) ktimer_create(0x0, 0x0, &(0x7f0000000240)) ktimer_create(0x0, 0x0, &(0x7f0000000140)) 575.213726ms ago: executing program 0 (id=71): kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2, 0xf}) writev(r1, &(0x7f0000000280), 0x26) writev(r1, 0x0, 0x0) select(0x40, &(0x7f00000000c0)={0x7, 0xf, 0x4800000, 0x3, 0x3, 0x5, 0x3, 0x396e}, &(0x7f0000000140)={0x6, 0xa87, 0x7, 0x7, 0x3, 0x4, 0x3, 0x3}, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) mkdir(0x0, 0x0) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) fork() sendmsg(0xffffffffffffffff, 0x0, 0x0) sigtimedwait(&(0x7f0000000000)={[0x0, 0x8, 0x6, 0x9]}, 0x0, 0x0) procctl$PROC_PDEATHSIG_CTL(0x2, 0x0, 0xb, 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r2, r3) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x4) fork() wait4(0x0, 0x0, 0x7, 0x0) r4 = fork() procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f00000003c0)={0x13, 0x0, r4, 0x7}) fhstat(&(0x7f0000000040)={{[0x0, 0x9]}, {0x8, 0xfffb, "24ab245d25ea5c079201df0f48ecb83c"}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fhstat(&(0x7f0000000100)={{[0x8, 0x10]}, {0xfff1, 0x4, "d0fc8f0ea0a4aa4858b80ba3ed29f1dd"}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() getresgid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getgroups(0x9, &(0x7f0000000400)=[r9, r7, r8, r7, r6, r8, r7, r8, r9]) chown(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, r10) 420.024227ms ago: executing program 2 (id=72): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000b80)="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", 0x5c9, 0x2018c, &(0x7f0000000000)={0xf5, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCIGETIFACES(r1, 0xc0284457, &(0x7f00000002c0)={0x10, &(0x7f00000001c0)="df2c727203d962684fc7041e82f0abcde45a9f8adac06e271f8aa6b760aea9fac13353ecc468fca90185320cfe94e24505389846ad9abffb0f409c8a8b00216f95398abe81284b4b7095e6be9c66f4fd2aa4224fa7e8ade58b4474a6fb5c8d4eecd422c8460628e9c7137f136f4985f1f774f250dc2215fd09819a622d3e14b0483650f2d84fd60836f31b19ffc3e8da5e8f87f5c5cb9d0009f97997df8c4e4cba469f7edb850f3d0a26af0be9433287ca768f7baed173fe89e7aba5c254c9df71d16ed1f6217e6310ba38ae35ea1eada51fd99377873c5f1c43c2a0cfcabbb47ec6f4bd8458e479771f28d65891", 0x8, 0x890, 0x8}) r2 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/110, 0x6e}], 0x1) 223.124273ms ago: executing program 2 (id=73): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x80, 0x0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) (async) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280)="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", 0xfd, 0x20081, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x53, @local={0xfe, 0x80, '\x00', 0x0}, 0x9}, 0x1c) freebsd11_fstatat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) freebsd11_fstat(r1, &(0x7f0000000140)) (async) setregid(0x0, r2) (async) posix_fadvise(0xffffffffffffffff, 0x4, 0xb70, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) (async) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rfork(0x96014) write(r4, &(0x7f0000000080)="ba", 0x100000) 218.459571ms ago: executing program 3 (id=74): r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000001180)={0x8001, 0x1, 0x2, 0xff, &(0x7f0000000000)="1447e29e8b86b2eb53236be1d67c69b894795fb9bf984de497ac40be70d7e431a8d3e4739252a5d27ef9cfe4a338a946eea8abead01dc22d225524c5b192d9e2d1d0a77bec76df33b1cab9ae1a2a94ca782b6371454d0cdff04891a0dda81a4186a8fd98d59558232a7ad77714d8e38ed1f517c89b212c7a7a8d5e65ac5d91e71a924607986e9b0abe229794ae628b07746a5c5dda69e365f322d0c62bd2924e031fbb6c5ff6023a30f389b5591e9aa0de828152343b4d34e8c9ac5741c73481a566f159", &(0x7f0000000100)="b73ae251bf8a5f134fb029661ba7321b9d211573799c38dc89", &(0x7f0000000140)="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", &(0x7f0000001140)="fe8fb378119595e10ba5a0b465c6318572ee94f8a98064d75170bb82a52abc268b70fd600c1e7009223b7141b9a0ea"}) 215.348836ms ago: executing program 1 (id=56): r0 = socket(0x1c, 0x1, 0x0) ktimer_create(0x4, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x2c, 0x0, @loopback={0xfe}, @loopback={0xfe}, [@dstopts={0x54}]}}}}}}}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) cpuset_setaffinity(0x3, 0x2, 0xa32, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "10fcff", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x22, 0x0, 0x0) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$unix(r2, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) r3 = getpid() fcntl$setown(r0, 0x6, r3) socket$inet6_udp(0x1c, 0x2, 0x0) rfork(0x3060) syz_extract_tcp_res(&(0x7f00000000c0), 0xf74, 0x9) 215.112039ms ago: executing program 3 (id=75): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) thr_new(&(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, &(0x7f0000000440)={0x2, 0x41b}}, 0x68) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00', 0xd}, 0x24) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x60280, &(0x7f00000000c0)={0x1c, 0x1c, 0x2, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, &(0x7f0000002680)=""/4088, &(0x7f0000000000)=0xff8) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}) r2 = kqueue() kevent(r2, &(0x7f00000004c0)=[{0xffffffffffffffff, 0xfffffffffffffffb, 0x9, 0x8, 0xffffffffffffb76d, 0x101, [0x0, 0x0, 0x200000800007, 0x40000000000000]}, {0x7fff, 0xfffffffffffffffa, 0x0, 0x2, 0x3, 0xfffffffffffffffc, [0xfb7, 0x4, 0x80000000000010, 0xdba2]}, {0x4f, 0xfffffffffffffffa, 0x4020, 0x4, 0x1, 0x7fffffffffffffff, [0x3ff, 0x7, 0x100000000]}, {0x0, 0xfffffffffffffffb, 0x2, 0x10, 0x200001, 0x8000000000000001, [0x0, 0x2, 0x822, 0x1]}], 0x4, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x11, r2) freebsd11_fstatfs(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}) r5 = geteuid() __semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000840)=&(0x7f0000000800)={{r4, 0x0, r5, 0x0, 0x80, 0x47, 0x0, 0x7fffffff}, 0xff, 0x40, 0x0, 0x0, 0x100000000, 0x16}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x55, 0x0, 0x0) r6 = semget(0x0, 0x2, 0x6d7) semget$private(0x0, 0x1, 0x40) __semctl$IPC_RMID(r6, 0x0, 0x0) freebsd11_fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r4, r7) 137.439352ms ago: executing program 2 (id=76): openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x4}, 0x10) open(&(0x7f0000000280)='./file0\x00', 0x1, 0x1d7) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) cpuset_getdomain(0x0, 0x2, 0x4, 0x20, &(0x7f0000000280), 0x0) r1 = dup(0xffffffffffffffff) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="70638953e90cef7e00080000000b000000000000916d99e9", 0x0, 0xfdffffff}) ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x450c, &(0x7f0000000000), 0x0, 0x0, 0x0}) setrlimit(0x1, 0x0) open$dir(0x0, 0xf02, 0x186) syz_emit_ethernet(0x36, &(0x7f0000000700)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x1, 0x13, 0x28, 0x67, 0x2, 0x1, 0x67, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2, {[@timestamp={0x44, 0xc, 0x8, 0x2, 0x8, [{}, {[], 0x1}]}]}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x68, 0xda7}}}}}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x124) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x15, 0xe, 0x18, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755aedaacdd4743c7eaa", 0x0, 0x0, 0x0, 0x7d866997}) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000000000)={0x35d, {{0x10, 0x2, 0x3, @remote={0xac, 0x14, 0x0}}}}, 0x88) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) sigaltstack(0x0, 0x0) __cap_rights_get(0x0, r4, &(0x7f0000002f80)) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000180)={0xfe2, 0x1, 0x0, 0x10000, &(0x7f0000000500)="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", 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=77): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [0xfffffffe, 0xffffffff], 0x0, 0x0, 0xf, {0x5, 0x7, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x9, 0x9, 0xf, 0x2, 0x100000000, 0xd24, 0x10000, 0x6b]}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) sync() openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) r2 = open(&(0x7f0000000100)='./file0/file0\x00', 0x2, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0xf000000) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0xb) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) sendfile(r3, r6, 0x1, 0x400000000000, 0x0, 0x0, 0xf) r7 = socket(0x1c, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) truncate(&(0x7f0000000440)='./file0\x00', 0x403) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) r9 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r9, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r9, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c) r10 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_int(r10, 0xffff, 0x10000, &(0x7f0000000080)=0x400b, 0x4) bind$inet6(r10, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0xfffffffe, @empty, 0x7}, 0x1c) sendfile(r8, r7, 0x200, 0x400000000001, 0x0, 0x0, 0x38) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe005857c800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058148000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058148800 Warning! syz-executor[894] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 if_delmulti_locked: detaching ifnet instance 0xfffffe0058148000 Aug 17 12:45:14 ci-freebsd-main-2 kernel: arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) Connection to 10.128.1.38 closed by remote host. if_delmulti_locked: detaching ifnet instance 0xfffffe005857b000 if_delmulti_locked: detaching ifnet instance 0xfffffe005857b000 if_delmulti_locked: detaching ifnet instance 0xfffffe005857b000 FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: Aug 17 12:45:16 ci-freebsd-main-2 dhclient[334]: connection closed if_delmulti_locked: detaching ifnet instance 0xfffffe005857b000 if_delmulti_locked: detaching ifnet instance 0xfffffe005857b000 if_delmulti_locked: detaching ifnet instance 0xfffffe005857b000 FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: Aug 17 12:45:16 ci-freebsd-main-2 init[988]: getty repeating too quickly on port /dev/ttyv4, sleeping 30 secs Aug 17 12:45:16 ci-freebsd-main-2 init[991]: getty repeating too quickly on port /dev/ttyv2, sleeping 30 secs Aug 17 12:45:16 ci-freebsd-main-2 init[987]: getty repeating too quickly on port /dev/ttyv5, sleeping 30 secs Aug 17 12:45:17 ci-freebsd-main-2 init[992]: getty repeating too quickly on port /dev/ttyu0, sleeping 30 secs FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058148800 Expensive callout(9) function: 0xffffffff81abaca0(0) 0.005773649 s if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058147000 panic: ASan: Invalid access, 8-byte read at 0xfffffe0058582498, UMAUseAfterFree(fd) cpuid = 0 time = 1755434719 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c89cd0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c89e30 vpanic() at vpanic+0x257/frame 0xfffffe0056c89ff0 panic() at panic+0xb5/frame 0xfffffe0056c8a0c0 kasan_report() at kasan_report+0xdf/frame 0xfffffe0056c8a190 mld_change_state() at mld_change_state+0xf2/frame 0xfffffe0056c8a330 in6_leavegroup_locked() at in6_leavegroup_locked+0x17b/frame 0xfffffe0056c8a450 in6_pcbpurgeif0() at in6_pcbpurgeif0+0x2f6/frame 0xfffffe0056c8a550 _in6_ifdetach() at _in6_ifdetach+0x18e/frame 0xfffffe0056c8a630 if_detach_internal() at if_detach_internal+0x3aa/frame 0xfffffe0056c8a720 if_detach() at if_detach+0xb6/frame 0xfffffe0056c8a760 tun_destroy() at tun_destroy+0x1b4/frame 0xfffffe0056c8a7b0 tun_clone_destroy() at tun_clone_destroy+0x112/frame 0xfffffe0056c8a7e0 if_clone_destroyif_flags() at if_clone_destroyif_flags+0xc8/frame 0xfffffe0056c8a830 if_clone_destroy() at if_clone_destroy+0x1f6/frame 0xfffffe0056c8a870 ifioctl() at ifioctl+0x112a/frame 0xfffffe0056c8aab0 kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056c8ab90 sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056c8ad10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056c8af30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056c8af30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x8243762ca, rsp = 0x820cabf58, rbp = 0x820cabf70 --- KDB: enter: panic [ thread pid 1028 tid 100086 ] Stopped at kdb_enter+0x6e: movq $0,0x25b6ed7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xffffffff81625c1e _vprintf+0x1ae rdx 0 rbx 0xffffffff827e1820 .str.27 rsp 0xfffffe0056c89e10 rbp 0xfffffe0056c89e30 rsi 0 rdi 0xffffffff81626189 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x3 r12 0xfffffe005404f000 r13 0xfffffffffffffffe r14 0xffffffff827e1820 .str.27 r15 0 rip 0xffffffff8160fcbe kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25b6ed7(%rip) db> show proc Process 1028 (ifconfig) at 0xfffffe00540a8000: state: NORMAL uid: 0 gids: 0, 5 parent: pid 1026 at 0xfffffe00540d7010 ABI: FreeBSD ELF64 flag: 0x10004000 flag2: 0 arguments: ifconfig tap1 destroy reaper: 0xfffffe0007809010 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe0054133490 (map 0xfffffe0054133490) (map.pmap 0xfffffe0054133530) (pmap 0xfffffe00541335a0) threads: 1 100086 Run CPU 0 ifconfig db> ps pid ppid pgrp uid state wmesg wchan cmd 1028 1026 1026 0 R CPU 0 ifconfig 1027 768 768 0 R (threaded) syz-executor 100140 RunQ syz-executor 100288 D getblk 0xfffffe0007c02948 syz-executor 1026 764 1026 0 S wait 0xfffffe00540d7010 syz-executor 1025 767 767 0 R (threaded) syz-executor 100270 Run CPU 1 syz-executor 100287 D biowr 0xfffffe0007c028c8 syz-executor 100289 D ufs 0xfffffe00776d4070 syz-executor 100290 D ufs 0xfffffe00776d4c78 syz-executor 100291 D ufs 0xfffffe00776d4c78 syz-executor 1021 1012 765 0 S uwait 0xfffffe0057da2700 syz-executor 1020 1012 765 0 S uwait 0xfffffe005829b200 syz-executor 1016 1012 765 0 S uwait 0xfffffe005829ae80 syz-executor 1012 765 765 0 R (threaded) syz-executor 100238 RunQ syz-executor 100276 S uwait 0xfffffe0057da2c00 syz-executor 100277 S uwait 0xfffffe0057da2b00 syz-executor 100278 S sigwait 0xfffffe005410b620 syz-executor 100280 S uwait 0xfffffe0057da2600 syz-executor 1009 1 767 60928 S uwait 0xfffffe0058299480 syz-executor 1007 0 0 0 DL mdwait 0xfffffe0059582000 [md0] 1003 1 765 0 S uwait 0xfffffe005829d000 syz-executor 999 1 765 0 S uwait 0xfffffe00584f3080 syz-executor 992 1 992 0 Ss+ ttyin 0xfffffe005828bcb0 getty 991 1 991 0 Ss+ ttyin 0xfffffe0058627cb0 getty 988 1 988 0 Ss+ ttyin 0xfffffe00586274b0 getty 987 1 1 0 S nanslp 0xffffffff83ba7c41 init 985 1 985 0 Ss+ ttyin 0xfffffe0058626cb0 getty 980 1 768 0 S uwait 0xfffffe0057d10380 syz-executor 979 1 979 0 Ss+ ttyin 0xfffffe00586284b0 getty 972 1 972 0 Ss+ ttyin 0xfffffe005828acb0 getty 971 1 768 60928 S uwait 0xfffffe00584f1280 syz-executor 967 1 967 0 Ss+ ttyin 0xfffffe00586280b0 getty 959 1 959 0 Ss+ ttyin 0xfffffe00586278b0 getty 933 1 768 0 SV uwait 0xfffffe0057da2500 syz-executor 932 1 768 0 SV uwait 0xfffffe00584f1e00 syz-executor 931 0 0 0 DL (threaded) [so_splice] 100190 D - 0xfffffe00584f1a80 [thr_0] 100231 D - 0xfffffe00584f1ac0 [thr_1] 927 1 768 0 S uwait 0xfffffe00584f3480 syz-executor 924 1 767 0 S uwait 0xfffffe005829b680 syz-executor 923 1 767 0 S uwait 0xfffffe00584f2680 syz-executor 922 1 768 0 S uwait 0xfffffe00584f2580 syz-executor 911 1 768 0 S uwait 0xfffffe0058299380 syz-executor 906 1 768 0 S uwait 0xfffffe00584f3180 syz-executor 896 1 768 0 S uwait 0xfffffe00584f1d00 syz-executor 891 1 768 0 S uwait 0xfffffe00584f1c00 syz-executor 852 1 765 -1 S uwait 0xfffffe00584f2780 syz-executor 832 1 768 0 S uwait 0xfffffe0058299180 syz-executor 828 0 0 0 DL aiordy 0xfffffe0054109ab8 [aiod4] 827 0 0 0 DL aiordy 0xfffffe005410a010 [aiod3] 826 0 0 0 DL aiordy 0xfffffe005410a568 [aiod2] 825 0 0 0 DL aiordy 0xfffffe005410aac0 [aiod1] 768 764 768 0 S nanslp 0xffffffff83ba7c40 syz-executor 767 764 767 0 S nanslp 0xffffffff83ba7c40 syz-executor 765 764 765 0 S nanslp 0xffffffff83ba7c40 syz-executor 764 1 762 0 S select 0xfffffe0057da2cc0 syz-executor 737 1 17 0 S+ piperd 0xfffffe00598289e0 logger 736 735 17 0 S+ nanslp 0xffffffff83ba7c40 sleep 735 1 17 0 S+ wait 0xfffffe00540ed000 sh 685 1 685 0 Ss nanslp 0xffffffff83ba7c41 cron 681 1 681 0 Ss select 0xfffffe0058299f40 sshd 494 1 494 0 Ss select 0xfffffe005829b7c0 syslogd 16 0 0 0 DL syncer 0xffffffff83cc5820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cc3d60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 D sdflush 0xfffffe005828a4e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0ec80 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf4d48 [dom0] 100080 D launds 0xffffffff83cf4d54 [laundry: dom0] 100081 D umarcl 0xffffffff81df2880 [uma] 7 0 0 0 DL - 0xffffffff839205d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff8485ac30 [pf purge] 5 0 0 0 DL waiting 0xffffffff84522700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838ea340 [doneq0] 100046 D - 0xffffffff838ea2c0 [async] 100075 D - 0xffffffff838ea140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cf0640 [crypto] 100043 D crypto_ 0xfffffe0053efb730 [crypto returns 0] 100044 D crypto_ 0xfffffe0053efb780 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b50640 [g_event] 100038 D - 0xffffffff83b50660 [g_up] 100039 D - 0xffffffff83b50680 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83cf10e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c43ff0 [swapper] 100005 D - 0xfffffe0053eb2100 [softirq_0] 100006 D - 0xfffffe0053eb2000 [softirq_1] 100007 D - 0xfffffe0053eb1e00 [if_io_tqg_0] 100008 D - 0xfffffe0053eb1d00 [if_io_tqg_1] 100009 D - 0xfffffe0053eb1c00 [if_config_tqg_0] 100010 D - 0xfffffe0007775200 [kqueue_ctx taskq] 100011 D - 0xfffffe0007775100 [jail_remove taskq] 100012 D - 0xfffffe0007775000 [bus taskq] 100015 D - 0xfffffe0007774c00 [thread taskq] 100017 D - 0xfffffe0007774a00 [aiod_kick taskq] 100018 D - 0xfffffe0007774900 [deferred_unmount ta] 100019 D - 0xfffffe0007774800 [inm_free taskq] 100020 D - 0xfffffe0007774700 [in6m_free taskq] 100021 D - 0xfffffe0007774600 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007774500 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007774500 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007774500 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007774500 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007774400 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007774400 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007774400 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007774400 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007774300 [firmware taskq] 100040 D - 0xfffffe0007774200 [crypto_0] 100041 D - 0xfffffe0007774200 [crypto_1] 100056 D - 0xfffffe0007773e00 [vtnet0 rxq 0] 100057 D - 0xfffffe0007773d00 [vtnet0 txq 0] 100058 D - 0xfffffe0007773c00 [vtnet0 rxq 1] 100059 D - 0xfffffe0007773b00 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057d9e680 [virtio_balloon] 100065 D - 0xffffffff827e5f00 [deadlkres] 100069 D - 0xfffffe00593f6a00 [acpi_task_0] 100070 D - 0xfffffe00593f6a00 [acpi_task_1] 100071 D - 0xfffffe00593f6a00 [acpi_task_2] 100073 D - 0xfffffe0007775900 [mca taskq] 100074 D - 0xfffffe0007774100 [CAM taskq] 100076 D - 0xfffffe0007773a00 [ipsec_offload] 100180 D - 0xfffffe007792c600 [netlink_socket (PID] db> show all locks Process 1028 (ifconfig) thread 0xfffffe005404f000 (100086) exclusive sleep mutex in6_multi_list_mtx (in6_multi_list_mtx) r = 0 (0xffffffff83cebba0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:1387 shared rw udpinp (udpinp) r = 0 (0xfffffe006b719aa0) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1487 exclusive sx in6_multi_sx (in6_multi_sx) r = 0 (0xffffffff83cebbe0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:682 exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 1 (0xffffffff83cc6000) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:1082 Process 1027 (syz-executor) thread 0xfffffe0054125780 (100288) exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00599b33e0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3595 Process 1025 (syz-executor) thread 0xfffffe0054124000 (100287) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007c02948) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4022 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00776d4070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1243 Process 1025 (syz-executor) thread 0xfffffe0054116000 (100289) exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00776d4c78) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_cache.c:4844 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 377 5100K 495 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4213 sysctloid 35242 2076K 35317 vtbuf 24 1968K 46 kobj 331 1324K 504 newblk 13 1027K 1175 vfscache 3 1025K 3 pcb 43 685K 150 inodedep 15 518K 269 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 filedesc 56 441K 310 subproc 146 298K 1114 vnet_data 2 224K 2