last executing test programs: 37.892551829s ago: executing program 0 (id=253): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0xee00) chflags(&(0x7f0000000080)='./file0\x00', 0x119304) setuid(0xee01) chflags(&(0x7f0000000040)='./file0\x00', 0x101010) 37.87375684s ago: executing program 0 (id=254): symlink(&(0x7f0000000080)='.\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x110) r2 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r2, r1, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) inotify_add_watch_at(r2, r0, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000410) 37.853533552s ago: executing program 0 (id=256): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0xa, 0x1, './file1\x00'}, 0xa) listen(r0, 0x2) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{0x3, 0xfffffffffffffff3, 0xc0c3, 0x80000000, 0x0, 0x0, [0x0, 0x1ccf, 0x2, 0x9]}], 0x1, 0x0, 0x0, 0x0) 37.792838111s ago: executing program 0 (id=257): symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') r0 = __specialfd$inotify(0x2, &(0x7f00000007c0)={0x100000}, 0x4) inotify_add_watch_at(r0, 0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x40) select(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 37.728691024s ago: executing program 0 (id=258): r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x2) symlinkat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') freebsd11_mknod(&(0x7f0000000280)='./file0\x00', 0x672cda28f543e327, 0x3) unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000500)='./file1\x00', &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 37.708809338s ago: executing program 0 (id=259): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0x10000) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) accept4(r0, 0x0, 0x0, 0x20000000) pwritev(r2, 0x0, 0x0, 0x0) 37.7046988s ago: executing program 32 (id=259): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0x10000) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) accept4(r0, 0x0, 0x0, 0x20000000) pwritev(r2, 0x0, 0x0, 0x0) 6.836924583s ago: executing program 4 (id=900): open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r0) getpeername$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @empty}, &(0x7f0000000080)=0x1c) setuid(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) 6.663784853s ago: executing program 4 (id=894): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x40) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x00', r0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4f) symlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) 6.590269812s ago: executing program 4 (id=895): r0 = open(&(0x7f00000002c0)='.\x00', 0x400000, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) symlink(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x18) r2 = open(&(0x7f00000002c0)='.\x00', 0x400000, 0x0) r3 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r3, r2, &(0x7f0000000280)='.\x00', 0x21000630) r4 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r4, r1, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') 6.56136886s ago: executing program 2 (id=897): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) fork() rfork(0x4040) freebsd11_lstat(&(0x7f0000000300)='./file0\x00', 0x0) preadv(r1, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) pwritev(r0, 0x0, 0x0, 0x6e338) 6.488344515s ago: executing program 4 (id=899): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x104}, 0x0) write(r1, &(0x7f00000001c0)="e7", 0x1) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x81) 6.476794127s ago: executing program 3 (id=901): aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, &(0x7f0000000240)={0x0, &(0x7f00000002c0)}, 0x0) r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6", 0x2) sendmsg$inet6_sctp(r1, &(0x7f0000000480)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0x100512a, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffe68, 0x1cc}, 0x81) getsockopt$inet6_sctp_SCTP_NODELAY(r1, 0x84, 0x4, &(0x7f0000000100), 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x20000000000000bc}) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 6.424925994s ago: executing program 4 (id=902): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_udp(r0, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x1c, 0x1, 0x0) lio_listio(0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000d80)={0x1, 0x0, @sigval_ptr=0x12, @spare=[0x3, 0x5, 0x3, 0xe, 0xe43, 0x7, 0x8, 0x8]}) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0) extattr_list_link(&(0x7f0000000540)='./file0\x00', 0x2, 0x0, 0x0) statfs(&(0x7f0000000140)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x0) 6.390141153s ago: executing program 4 (id=903): ktimer_create(0x4, 0x0, &(0x7f0000000140)) ktimer_create(0x0, 0x0, &(0x7f0000000200)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000080)) ktimer_create(0x0, 0x0, &(0x7f0000000000)) ktimer_create(0x0, 0x0, &(0x7f00000001c0)) ktimer_create(0x0, &(0x7f0000000400)={0x1, 0xb, @sigval_ptr=0x1000009, @spare=[0x60, 0x8, 0x80000001, 0x716d2258, 0x6, 0x42, 0x1, 0x7f]}, &(0x7f0000000180)) 6.387971845s ago: executing program 33 (id=903): ktimer_create(0x4, 0x0, &(0x7f0000000140)) ktimer_create(0x0, 0x0, &(0x7f0000000200)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000440)) ktimer_create(0x0, 0x0, &(0x7f0000000080)) ktimer_create(0x0, 0x0, &(0x7f0000000000)) ktimer_create(0x0, 0x0, &(0x7f00000001c0)) ktimer_create(0x0, &(0x7f0000000400)={0x1, 0xb, @sigval_ptr=0x1000009, @spare=[0x60, 0x8, 0x80000001, 0x716d2258, 0x6, 0x42, 0x1, 0x7f]}, &(0x7f0000000180)) 5.39883532s ago: executing program 2 (id=912): socket(0x1c, 0x1, 0x0) freebsd11_mknod(0x0, 0x1000, 0x0) freebsd11_statfs(0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) r1 = semget(0x2, 0x4, 0x200) semop(r1, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 5.391761979s ago: executing program 3 (id=906): aio_waitcomplete(0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xa86a7001833bc1f6) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 4.739193358s ago: executing program 1 (id=907): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x5) mmap(&(0x7f0000057000/0x2000)=nil, 0x2000, 0x7, 0x1010, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) preadv(r1, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 3.972059082s ago: executing program 1 (id=908): open$dir(&(0x7f0000000200)='./file0\x00', 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r1, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seteuid(0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) setreuid(0xee00, 0x0) rfork(0x85000) 3.969490111s ago: executing program 2 (id=909): r0 = semget(0x2, 0x4, 0x28d) __semctl$GETNCNT(r0, 0x30fac3f8a9e7b2a6, 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20104) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x52, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) rfork(0x3060) 3.968425694s ago: executing program 3 (id=910): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file\x00', 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r0 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x6, @empty, 0x7fc000}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x10145}, 0x20080) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000602000000090000006f00000003ffffffffffff00000000"]) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DIOCCHANGERULE(r1, 0xcb7c441a, &(0x7f00000000c0)="9e6568528585a93af8cfd6db6501ff5cbee61253a88e54ccf2c82054b208f8b104b0328047b1dc20024ede5e7bddca7348c2114c92dcdf48203aa5eb7673fb1ceafc83323deeb9947963b9a97036b2e849d271ca02dfa69ce1de4237598ef340cbf645fa28246829284d60af9143019e227d") 3.132240346s ago: executing program 3 (id=911): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) mlockall(0x2) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="16", 0x1}], 0x1, 0xb542) lchflags(&(0x7f0000000040)='./file0\x00', 0x60091) copy_file_range(r1, 0x0, r0, 0x0, 0x7, 0x0) 3.131989817s ago: executing program 1 (id=913): kqueue() r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) fork() kevent(r0, &(0x7f0000000200)=[{0x0, 0xfffffffffffffff9, 0x8029, 0x8, 0xeac5, 0x406, [0x1, 0xf, 0x7, 0x2]}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() kevent(0xffffffffffffffff, &(0x7f0000000040), 0xa1ba, 0x0, 0x1c0, 0x0) 3.090634765s ago: executing program 2 (id=914): ktimer_create(0x0, 0x0, &(0x7f0000000000)) ktimer_create(0x4, 0x0, &(0x7f0000000140)) ktimer_create(0x0, 0x0, &(0x7f0000000280)) ktimer_create(0x0, 0x0, &(0x7f0000000380)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0x0, 0x0, &(0x7f0000000000)) ktimer_create(0x0, 0x0, &(0x7f0000000180)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0x4, 0x0, &(0x7f00000000c0)) ktimer_create(0x4, &(0x7f0000000380)={0x1, 0x3, @sigval_int=0x64f9, @spare=[0x7fffffff, 0x101, 0x2, 0x8, 0xc, 0x6, 0x10001, 0x2000000e]}, &(0x7f0000000500)) 2.133170151s ago: executing program 1 (id=915): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}}) mlockall(0x2) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x80) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f0000000080)=0x81706, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) 2.132485332s ago: executing program 2 (id=916): aio_waitcomplete(0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x10000, 0x1) symlinkat(&(0x7f00000005c0)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000d80)='./file0\x00', 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 2.132271572s ago: executing program 3 (id=917): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x6, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000000)="615bd20ae8fe3ff3a62519d98fd6ced59f82a41615", 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x24, &(0x7f0000000100)='a', 0x1) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt$inet_tcp_buf(r1, 0x6, 0x26, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x24, 0x0, 0x0) fork() 1.104079176s ago: executing program 1 (id=920): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x9fb5baeefd4fee76}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x104}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x9fb5baeefd4fee76}, 0x80) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x104}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/64, 0x40}, 0x81) 2.874797ms ago: executing program 2 (id=921): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) open(0x0, 0x200, 0x2) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff}) close(r2) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) write(r1, &(0x7f00000004c0)="96", 0x1) kqueue() 136.239µs ago: executing program 3 (id=922): r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0xd2) r1 = kqueue() kevent(r1, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, [0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) close(r0) 0s ago: executing program 1 (id=923): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) mount(&(0x7f0000000040)='msdosfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) unlink(&(0x7f0000000040)='./file0\x00') rfork(0x85000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe00719d5800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 Expensive callout(9) function: 0xffffffff81a77ff0(0xfffffe00713d5540) 0.004072786 s syz-executor uses obsolete way to create divert(4) socket if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800 Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800 if_delmulti_locked: detaching ifnet instance 0xfffffe00719d5800 if_delmulti_locked: detaching ifnet instance 0xfffffe00719d5800 if_delmulti_locked: detaching ifnet instance 0xfffffe00719d5800 vnode_pager_putpages: zero-length write at 0 resid 2002 0xfffffe0071292a50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371e940 usecount 2, writecount 2, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005875d2e8 ref 1 pages 1 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0058740000 (pid 1251, syz-executor, tid 100672) nlink=1, effnlink=1, size=2002, extsize=0 generation=d6ea1b30, uid=0, gid=0, flags=0x4 ino 112, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 vnode_pager_putpages: zero-length write at 0 resid 1 0xfffffe007141f898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371e940 usecount 3, writecount 3, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005873c6c8 ref 2 pages 1 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0058790000 (pid 1349, syz-executor, tid 100788) nlink=1, effnlink=1, size=1, extsize=0 generation=a81dbd2b, uid=0, gid=0, flags=0x40000 ino 119, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe00719d5000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe005978e000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371e940 usecount 5, writecount 4, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005877b1f0 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe00587a3780 (pid 1821, syz-executor, tid 101381) nlink=1, effnlink=1, size=697472, extsize=0 generation=25efd0b7, uid=0, gid=0, flags=0x60091 ino 136, on dev gpt/rootfs SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=5 req=904 state=1 status=67 (errno 9: Bad file descriptor) FreeBSD/amd64 (ci-freebsd-i386-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: set $lines = 0 Password: Login incorrect login: show registers Password: Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl