last executing test programs: 2m5.552685871s ago: executing program 2 (id=126): aio_waitcomplete(0x0, 0x0) profil(0x0, 0x0, 0x1, 0xd6) r0 = socket(0x10, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x28, 0x3010b}, 0x8) r1 = socket(0x1c, 0x1, 0x0) r2 = socket(0x1, 0x4, 0xfc) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1b, &(0x7f00000001c0), 0x4) setresuid(0xffffffffffffffff, 0xee01, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="9f4c4662c157ffffffffff0009004500006c00680000010290780000ef4ce000000211089078e0000001020000135e7204ed3f3f4d139efa204fac6c917c9100c552c1a3c7ac4e20ebfc3232b83592e5206d2ebc3e06236ecf111369a964fe6c6b2bedecf5703699779b7f0b4106ac4203b35d4e7274721d6028548cd459eeaebe0153b9e24d1fb8f78c6ae5426963da05271c04f3cd3da606cc4e82add929078edcf22f145c"]) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0x6c, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) mincore(&(0x7f000037c000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/158) syz_emit_ethernet(0x9f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa2f753623b7caa4aaaaaabb08004a0000910000000005019078ac1400aae0000001820ec2519f21a4b2125b7e9f091b0703040000000800907800002b1710622f9c461bcee0198a7190e67c8c395d6c64be9726cfa6ac22308f3c8bb6cceff11291fb24e53139aa43fdc353ff88333b5860316d01354c775cf146dca7c52ef74ea4c04efb5b0389d5bf1d4da56c17777f9489c3da2e114645968fe529cf4fa1ffff696906395255fb015b0f7a2dccf4a36410dd060f00000000da9de3a537d9952c0000000000000062c8e3832eaa88de251774a5"]) cpuset_getid(0x1, 0x1, 0x7, 0x0) cpuset(&(0x7f0000000000)=0x0) cpuset_setid(0x2, 0x0, r5) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x7fff) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) open(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x40000, 0x0) socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2m4.690078114s ago: executing program 2 (id=132): socket(0x1c, 0x1, 0x0) chflags(&(0x7f0000000300)='./file0\x00', 0x48004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x1010, 0xffffffffffffffff, 0x1000) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x10) ioctl$UI_SET_SNDBIT(r0, 0x2004556a) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r2, &(0x7f0000001000)=""/223, 0xdf) cap_fcntls_get(r1, &(0x7f0000000200)) r3 = socket(0x1c, 0x1, 0x0) getsockopt$inet_tcp_TCP_TXTLS_MODE(r3, 0x6, 0x28, &(0x7f0000000040), &(0x7f0000000180)=0x4) sysarch$I386_SET_LDT(0x1, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[{0x10000000048b}], 0x1}) aio_waitcomplete(0x0, 0x0) cap_rights_limit(r2, &(0x7f0000000100)=[0x2, 0x6]) socket(0x1c, 0x10000000, 0x40) r4 = openat$bpf(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$BIOCSETF(r4, 0x80084267, &(0x7f0000000140)={0x0, 0x0}) open(&(0x7f0000000b40)='./file0\x00', 0x7843d88b80d1cecd, 0x112) chflags(&(0x7f0000000080)='./file0\x00', 0x119304) open$dir(&(0x7f0000000800)='./file0\x00', 0x40000400000002c2, 0x0) r5 = socket(0x1c, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./file1\x00', 0x40000, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x80010, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_MODE(r7, 0x6, 0x28, &(0x7f0000000100)=0x2, 0x4) r8 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) cpuset_getaffinity(0x2, 0x6, 0x4, 0x0, 0x0) ioctl$CIOCGSESSION2(r8, 0xc030636a, &(0x7f00000000c0)={0x17, 0x26, 0x18, &(0x7f0000000240)="72e8789fa2e77d9bcf47eaa3c96be4435162120119167dd0", 0x0, 0x0, 0xffffffff, 0x7d32559c, [0x5, 0x0, 0x5, 0x9]}) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) ioctl$PIO_SCRNMAP(r6, 0x81006b03, &(0x7f0000000140)={"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"}) socket(0x1c, 0x1, 0x0) 2m3.839981134s ago: executing program 2 (id=136): aio_waitcomplete(0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000080)={0x4, 0x3}, 0x8) (async) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000080)={0x4, 0x3}, 0x8) r1 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) setuid(0xee01) r3 = socket(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) ioctl$CIOCGSESSION2(r1, 0xc030636a, &(0x7f0000000040)={0x19, 0x0, 0x10, &(0x7f0000000100)="ec7b000000800008000180a5a2519798", 0x0, 0x0, 0x0, 0xfdf9ff81, [0x0, 0x8]}) ioctl$CIOCCRYPT(r1, 0xc01c6367, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000800)}) (async) ioctl$CIOCCRYPT(r1, 0xc01c6367, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000800)}) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) getpriority(0x0, 0xa) (async) getpriority(0x0, 0xa) minherit(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) (async) minherit(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r4 = socket(0x1c, 0x1, 0x0) setgroups(0x0, 0x0) __semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, 0x0, 0x0) setsockopt$inet6_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) (async) setsockopt$inet6_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) ioctl$DIOCXROLLBACK(0xffffffffffffffff, 0xc00c4453, &(0x7f00000000c0)='H') (async) ioctl$DIOCXROLLBACK(0xffffffffffffffff, 0xc00c4453, &(0x7f00000000c0)='H') cpuset(0x0) (async) cpuset(0x0) cpuset_setid(0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) cap_fcntls_limit(r0, 0x9) open$dir(0x0, 0x488200, 0x176) (async) open$dir(0x0, 0x488200, 0x176) 2m3.76024945s ago: executing program 2 (id=138): aio_waitcomplete(0x0, 0x0) (async) profil(0x0, 0x0, 0x7, 0xd6) (async, rerun: 32) r0 = socket(0x1c, 0x1, 0x0) (rerun: 32) shutdown(0xffffffffffffffff, 0x2) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x3010b}, 0x0) (async) connectat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) socket(0x1c, 0x1, 0x0) (async) r1 = socket(0x1, 0x5, 0xfc) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) getsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000040)={@rand_addr, @rand_addr}, &(0x7f0000000100)=0xc) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) minherit(&(0x7f00004ac000/0x3000)=nil, 0x3000, 0x1) (async) freebsd11_stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000001c0)) fstat(r2, &(0x7f0000000440)) (async) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) (async) syz_emit_ethernet(0x9f, 0x0) (async, rerun: 32) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (rerun: 32) ioctl$CIOCGSESSION2(r3, 0xc030636a, &(0x7f0000000300)={0x29, 0x14, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x4d46b76e, [0x0, 0x7fffffff, 0x2, 0x5]}) (async) getsockopt$inet6_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0xc) (async, rerun: 32) procctl$PROC_STACKGAP_STATUS(0x0, 0x0, 0x12, &(0x7f0000000180)) (async, rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) (async) r4 = kqueue() freebsd11_kevent(r4, &(0x7f0000000280)=[{0x400, 0xfffffffffffffff5, 0x0, 0x20000000, 0xd, 0x5}, {0x4551, 0xfffffffffffffff8, 0x8048, 0x80000000, 0x6, 0x1}, {0x0, 0xfffffffffffffffa, 0x8004, 0x20, 0x3, 0x5}], 0x3, 0x0, 0x0, 0x0) (async) cpuset(0x0) (async) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) (async, rerun: 32) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) (async, rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) (async) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 2m3.75809109s ago: executing program 2 (id=139): socket(0x26, 0x2, 0x0) cpuset_setaffinity(0x2, 0x2, 0x0, 0x0, 0x0) aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, &(0x7f00000004c0), 0x0, [0x3, 0x10000000], 0x200000000000000, 0x20, 0x0, {0x4, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562ef}}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xd2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$CIOCGSESSION2(r3, 0xc030636a, &(0x7f0000000040)={0x15, 0x0, 0x10, &(0x7f0000000100)="ec7b0000000000000001f0a5a2519798", 0x0, 0x0, 0x8, 0xfdf9ff85}) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) socket(0x1c, 0x1, 0x0) r4 = open$dir(&(0x7f0000000240)='.\x00', 0x10000, 0x1b0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = __specialfd$inotify(0x2, &(0x7f0000000180)={0x100000}, 0x4) inotify_add_watch_at(r5, r4, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000410) inotify_rm_watch(r5, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@random="8f6f77edbb65", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0x0, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback={0x300, 0xfffffffffffffffe}, [@routing={0x64, 0x2, 0x0, 0x73, 0x0, [@mcast2]}]}}}}}}}) open$dir(0x0, 0x2, 0x0) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYBLOB="858907d3c2bb805acf218577e1b446efe7b9446bc717f3fb74a11ba4cc1b0bd0e6c19b5e56cb86a637fdf872604a867240ee167e19ebd3c947aabff143d7b76971da37819192b27a663386bdb9252d202b3b963b59f5ae49958c83ed6bee103346b085f61d65ff00c4fc4940750e3c9d9a131e2ff9117ea175aae9ab90a181b34fb3be3f8e1fe8da3f040dff9fc8ef328694fef5105f871063baabfb5fcad30db8ad26282ace37d083c468", @ANYRESOCT=r6]) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) socket(0x1c, 0x1, 0x0) r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCDETACH(r7, 0xc1c06d01, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd16, 0x2, 0x0, 0x0, [0xfff, 0x0, 0x40, 0x2, 0x0, 0x80000, 0x3, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x20000, 0x7, 0x2, 0x8, 0x10000, 0x80000001, 0x8ffc, 0x0, 0x1, 0x1a40, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x9462, 0x10, 0x7, 0x20006, 0x1000d826, 0x0, 0x0, 0xffffffff, 0x8, 0x3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, 0x1006, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x81, 0x400000, 0x2000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0xfffffffe, 0x0, 0x9, 0x1, 0x0, 0x7, 0x20000, 0x7, 0xfffffffe, 0xfffffffe, 0x8]}) msgget$private(0x0, 0x716) openat$ptmx(0xffffff9c, &(0x7f0000000280), 0x100000, 0x0) 2m2.034714764s ago: executing program 2 (id=145): aio_waitcomplete(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(0xffffffffffffff9c, r0, &(0x7f0000000240)=@file={0x3e, 0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x3060) (async) rfork(0x3060) openat$crypto(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) socket(0x10, 0x4, 0x5) (async) socket(0x10, 0x4, 0x5) open$dir(0x0, 0x200, 0x0) (async) open$dir(0x0, 0x200, 0x0) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) openat$smbus(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) openat$smbus(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x1c, 0x1, 0x0) (async) socket(0x1c, 0x1, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, &(0x7f0000000180)={0x29, 0x25, 0xb, &(0x7f0000000040)="9877a4dfdbe77ff13822ee", 0x0, 0x0, 0x0, 0xfdfffff8, [0x7fffffff, 0x0, 0x800]}) dup(0xffffffffffffffff) ioctl$KDSKBSTATE(0xffffffffffffffff, 0x20044b14) socket(0x1c, 0x1, 0x0) (async) socket(0x1c, 0x1, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) aio_read(&(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x1, 0x20, @sigval_ptr=0x100000000, @spare}}) aio_cancel(r1, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async) kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000180)) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000180)) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg$inet6_sctp(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20009}, 0x100) syz_extract_tcp_res(0x0, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x9dcebc2f0df9d10c) socket$inet6_sctp(0x1c, 0x1, 0x84) (async) socket$inet6_sctp(0x1c, 0x1, 0x84) 47.189610008s ago: executing program 3 (id=437): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) r0 = socket(0x1c, 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffc]}], 0x1, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0xfffffffc) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000001680), &(0x7f00000016c0)=0x8) select(0x40, &(0x7f0000000340)={0x0, 0x10000000000a39e, 0x0, 0x300, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x10000}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000140)='chd\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2, 0x5, @loopback, 0xfffffffd}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="85d9000000000000", 0x8}], 0x1, 0x0}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000001d00)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900303a003bcc3f06000000d6f8a13c315edae0ef3e64a458132fa13a8be186e3fe80000000000000"]) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, &(0x7f0000000080)={0x95f8, [{0x566e, [0xee0d, 0xd871, 0x7, 0xff, 0x7fff, 0x3, 0xfffffff7, 0xaa8, 0x7ff, 0x9, 0xfffffffc, 0x9, 0x7, 0x6219848d, 0x515, 0x8, 0x5, 0x0, 0x0, 0x2, 0x0, 0xf, 0xd6, 0x8, 0x1de, 0xfffffffb, 0x5, 0x2, 0x7f, 0x10001, 0x9, 0x6, 0x3, 0x5, 0x4, 0x5, 0x4, 0x401, 0x7, 0x9, 0xe8c, 0x80000001, 0x8, 0xfffffffd, 0x3, 0xedf, 0x1, 0xffffffff, 0x4c02, 0xb4, 0x3, 0x10001, 0xffffffde, 0x0, 0x10, 0x400, 0x715, 0x7e1, 0x4, 0xd, 0xa, 0xa09, 0x2, 0x1, 0x4, 0x5131, 0x4, 0x1, 0xbe9a, 0xfff, 0x731, 0x9, 0xbc, 0xb, 0xc74f, 0x0, 0x9, 0x6, 0x4, 0x101, 0xfffffff8, 0x2, 0x0, 0x5, 0x5229, 0x9, 0x7, 0xfffffffb, 0x1, 0x8001, 0xf, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5, 0xe0, 0x7ff, 0x2, 0x0, 0xb, 0xc, 0x8]}, {0x5c, [0x5, 0x200006, 0x4, 0xbae, 0x2, 0x4, 0x86f13b53, 0x3fd, 0x1000, 0x5, 0x6, 0x7, 0x7fff, 0x0, 0x5, 0x400, 0xa, 0x96a9, 0xbb, 0xfffffffe, 0xb, 0x8, 0xae0, 0x6, 0x7, 0x40000, 0x40, 0x9, 0x7fff, 0x3, 0x200000, 0x7, 0x0, 0x5, 0x3b5, 0x28ef, 0x2, 0x58, 0x2, 0xff, 0xffffff00, 0x6, 0x4, 0x6, 0x3, 0x3, 0x8, 0x100, 0x0, 0x907, 0x2101, 0x9, 0x6, 0xc95, 0x6, 0xc, 0x4, 0x2, 0xb, 0x3eb, 0x0, 0x7fff, 0x0, 0xff8, 0x9, 0x7, 0x8, 0x5, 0x61a, 0x2, 0x5, 0x90fd, 0x6, 0xd, 0x6eed, 0x0, 0x4, 0x1, 0x7, 0x5, 0x0, 0x10001, 0xe, 0x80000001, 0x9, 0x4b2, 0x100, 0x7fffffff, 0x2, 0x0, 0x7, 0x5, 0x1000, 0x0, 0x8, 0x6, 0x2, 0x1, 0x4, 0x1, 0x3ff, 0x1000, 0x1, 0x4]}, {0x0, [0x1, 0x6, 0x8, 0x2, 0x800, 0x0, 0xff, 0x6, 0x7, 0x3, 0xa, 0x1, 0xdd, 0x538, 0x7bac, 0xa, 0x10, 0x9, 0x10001, 0x8, 0x8, 0xff, 0x6, 0x2, 0x800003, 0x2, 0x4, 0x8, 0x4, 0xb, 0x9, 0x1, 0x3, 0xfff, 0x343d3543, 0x400000, 0xfffffff8, 0x9, 0xa87f, 0x1000, 0x7, 0x2, 0x1, 0xdb4, 0x101, 0xb369000, 0x3af, 0x92, 0x4, 0x0, 0x98, 0x3d104cc0, 0x52, 0x8, 0xc, 0x0, 0x437, 0x3, 0x3, 0x1, 0x1000, 0x200000, 0xfff, 0x17e7, 0x8, 0x7, 0x6, 0x0, 0x5, 0xf10, 0x5, 0x1, 0xffffffb8, 0x7fff, 0x9, 0xfffffffd, 0xfffffffe, 0x3158, 0x5, 0x2, 0x8, 0x36d5, 0x9, 0x1, 0xfffffffb, 0x2, 0x8, 0x8000, 0x5, 0x3, 0x1, 0xfffffffd, 0x1000, 0x1, 0xfffffff7, 0x40, 0x6, 0x3, 0x6, 0x1ff, 0x4, 0x9, 0x9, 0x39]}, {0x3, [0x7, 0x5, 0x8, 0xfc, 0x12, 0x4, 0x8, 0x1, 0x8, 0xadd, 0x5, 0xdb, 0x80000001, 0xc, 0x0, 0xfffffff7, 0xffffffff, 0x2, 0x5, 0x2, 0x3eb3, 0x0, 0x7, 0x7, 0x7, 0x6, 0x5, 0x7673faf3, 0x5a912096, 0x9, 0x1, 0x2, 0xffffffff, 0x1, 0x4f124443, 0x8, 0x0, 0x2, 0x7, 0x190, 0x5, 0x3, 0x1, 0x800, 0x9, 0x9, 0x3, 0x7, 0x5, 0x7, 0x8, 0x7, 0x0, 0x10001, 0x1, 0x0, 0x7fb, 0xe, 0x9, 0x2df, 0x7, 0x7fffffff, 0x80000001, 0x4, 0x3, 0x3, 0x4, 0x496a, 0x7, 0x7fffffff, 0x74, 0x2, 0x9, 0x3, 0x6, 0xf3, 0x1, 0xa3, 0x49c, 0xec0, 0x100, 0x3, 0x6, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0x9, 0x1, 0x0, 0x8, 0xa, 0x2, 0x4, 0x3b, 0x3, 0x40, 0x225, 0x80, 0x4, 0x4, 0x3, 0x2]}, {0xe8bc, [0x5, 0x4, 0x8, 0x5, 0x4, 0x80, 0x9, 0x1ff, 0xfff, 0xfffffff9, 0x1ff, 0x1, 0x800, 0x80000000, 0x8, 0x7, 0x7ff, 0x6, 0xffff, 0x9, 0xe92, 0x8, 0x13, 0x2, 0x0, 0x7f, 0x401, 0x8, 0x7, 0x8, 0x400, 0x5, 0xffffe6ff, 0x7, 0x80000000, 0x6f88, 0x2, 0x9, 0x7f, 0x10a5de, 0x0, 0x8, 0x3, 0x800, 0x5, 0x3ff, 0x3, 0x80, 0x10, 0x3ff, 0x8, 0xfffffffa, 0x9, 0x0, 0x800, 0x8, 0x1, 0x4, 0x6, 0x8, 0x3, 0x5, 0x5, 0x2, 0x1, 0xb26, 0x6, 0x81, 0x1, 0x101, 0x3, 0x2, 0x6, 0x200, 0x4, 0x5, 0x7, 0x2, 0x1ff, 0x3, 0x4, 0x800, 0x5, 0x7, 0x468, 0x7f, 0x94, 0x7, 0x7ff, 0x3, 0x7, 0x7ff, 0xfffffffe, 0x10000, 0x4, 0x4b, 0x435c9460, 0x3ff, 0x1, 0xfffffff9, 0x40, 0x0, 0x5, 0x7]}, {0x3, [0x7, 0x2, 0x1, 0x5, 0xf, 0x40, 0x6, 0x1000, 0x4, 0x3, 0x5, 0x6, 0x1, 0x5, 0xa, 0x81, 0x7, 0x8, 0x8, 0x6, 0x80000000, 0x60, 0x0, 0xd2, 0x1, 0x9, 0x10001, 0x6, 0xc, 0x6, 0x200, 0x205, 0x3, 0x52fd0a00, 0x8, 0x3, 0xfffff1b2, 0x21, 0x8, 0xff, 0x2000, 0x9, 0x1, 0x5, 0xb, 0xfffffffa, 0x3, 0x7ff, 0x430c, 0x1000, 0xb35, 0x0, 0x3, 0x9, 0x4, 0x6, 0x400000, 0x5, 0x10001, 0x1, 0x6, 0x1, 0xffff, 0x10, 0x0, 0x9, 0x3, 0xce94, 0x4, 0x0, 0xfffffc02, 0x80, 0x200007ff, 0x2, 0x3, 0x4, 0x8, 0x400, 0x8, 0x81, 0xfffffff7, 0x9, 0x6, 0x7ff, 0x7, 0x0, 0x24f8, 0x7fffffff, 0x6, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x4ab464c, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x5, 0x6, 0x5b8b7924, 0x7ac5]}, {0xffffff7f, [0x1, 0x400, 0x131f, 0x1, 0x8, 0x6, 0x100, 0x7, 0x3, 0x3, 0x1, 0x200, 0x7, 0x49, 0xfd, 0xd0, 0x39e, 0x3, 0x5, 0xffff, 0x5, 0xffffffff, 0x0, 0x9, 0xffffffff, 0x7, 0xffffffff, 0x4, 0xc, 0x9, 0x263, 0x4, 0x3, 0x2, 0x9, 0x20008, 0x200b7af, 0x6, 0x2, 0x6, 0x200, 0x7, 0x10000, 0x2, 0x80000000, 0x4, 0xfffffff5, 0x1, 0x3041, 0x8, 0x6f, 0x7, 0x8, 0x3, 0xfff, 0x5, 0x8, 0x1, 0x0, 0x52, 0x3, 0x80, 0xe6, 0x7, 0x3f, 0x10, 0xa, 0x5, 0x4, 0xfffffff8, 0x4, 0x8001, 0x4220c0bb, 0xfff, 0x7, 0x6, 0x6, 0x80, 0x6, 0xc9, 0x2, 0x7, 0x52, 0x8000, 0xc, 0x6, 0x5, 0xe, 0x9, 0x8, 0x1, 0x5, 0x5, 0x7, 0x5, 0x6, 0x1d33945, 0x9, 0x8, 0x9fc, 0xffff, 0x4, 0x85, 0x8]}, {0xfffffffa, [0x1ff, 0x8, 0x9, 0x1, 0x7, 0x3, 0x1, 0x2, 0x80, 0x10000, 0x8, 0xae, 0x7, 0x3, 0x2, 0x6, 0x0, 0x42, 0xec7, 0xfffffffe, 0x3, 0x1, 0x9, 0x8, 0x7, 0xfff, 0x20000003, 0x8d4, 0x7ca, 0x101, 0x283, 0xd3b2, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x7ff, 0x200, 0x54, 0x1, 0x4, 0x4, 0x9, 0x40, 0x7, 0xc, 0x3, 0x1, 0x6, 0x10000, 0x6, 0x6, 0x7fffffff, 0xfffffff4, 0x0, 0xffff9594, 0x6, 0x1, 0x46ef, 0x1, 0x3, 0x0, 0x40, 0xfffffffb, 0x1, 0x3, 0xb28a, 0x1, 0x80000001, 0x4, 0x30e, 0x7b, 0x2, 0x5, 0x9, 0x7ff, 0x5, 0x7, 0xff, 0x9, 0xc, 0x6, 0x1, 0xfffffffa, 0xd3, 0x0, 0x80000002, 0x4, 0x400, 0x0, 0xfffffffc, 0xffffffff, 0xcd9f, 0x19d, 0x5, 0xf0, 0x6, 0x84, 0x9, 0x4, 0xe6dc, 0x8, 0x1ff0]}, {0x0, [0x3, 0x5, 0x5, 0x1, 0x7, 0x7f, 0x9, 0x10, 0x79, 0x0, 0x7ff, 0xe, 0x7ff, 0x0, 0x80000000, 0x7, 0x1000, 0x3ff, 0x3, 0xf7, 0x1, 0x0, 0x40000000, 0x5, 0xfffffff7, 0xfffffffe, 0x1ff, 0x2, 0x3, 0x1, 0x2, 0x1, 0x4, 0x81, 0xa, 0x2, 0x1, 0x6, 0x1, 0x6, 0xffff, 0x1, 0xf, 0x3, 0x401, 0x6, 0x3, 0x8, 0x1ff, 0x7ff, 0xa, 0x0, 0x1, 0x7, 0xc0000, 0xf58f, 0x1000, 0x0, 0x3, 0x7ff, 0x5, 0x3, 0x7, 0x8, 0x9, 0x3, 0x1, 0x1, 0x5, 0x3, 0x1000, 0xfffffff7, 0x1ff, 0xffffffff, 0x4, 0x8001, 0x1, 0x8, 0x0, 0x6, 0x8, 0x1, 0x100, 0x1, 0x0, 0xd7fb, 0xa, 0x0, 0x5, 0x4, 0x1a0, 0x3, 0x4, 0x0, 0x6, 0x1ff, 0x40, 0x5, 0x4, 0xbc, 0xd3d, 0x5, 0x7, 0xfffffffb]}, {0x6, [0x10, 0x40, 0x1, 0x253, 0x8, 0x8, 0x8, 0x1, 0x6, 0x8, 0x7f, 0x60, 0x7ff00000, 0x80, 0x8, 0x2, 0x2, 0x4, 0x80, 0x800, 0x6, 0x0, 0x529b, 0x3, 0x0, 0x5, 0x0, 0xfffffffa, 0x1000, 0xa, 0x9, 0x2, 0x7, 0x7, 0x5, 0x0, 0x2, 0x3, 0x5, 0x2, 0x9, 0x4, 0x7, 0xb, 0x101, 0x8, 0x4, 0xfb8c, 0xf3b, 0x4, 0x7, 0x8, 0x8, 0x7, 0x5, 0x4, 0x4, 0x5, 0xcff9, 0x2, 0x9cb, 0x0, 0x2, 0x400, 0x6, 0x7, 0x9bc7, 0x80000000, 0x8, 0x1, 0x200, 0x4, 0xc, 0x6, 0xc2c3, 0x5, 0x5, 0x7, 0x6, 0xf, 0x80, 0x3, 0xfffffffd, 0x20000000, 0x21, 0x2, 0x2, 0x3, 0x80, 0x1, 0x4, 0x7d7, 0x9, 0x4, 0x7f, 0x0, 0x7ff, 0x7fff, 0x1, 0x886, 0xfffffff9, 0x1, 0x6, 0x4]}, {0xc2, [0x3f04, 0xf, 0xfffffff7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x9, 0x6, 0x7fffffff, 0x0, 0xfffffffe, 0x7fff, 0x0, 0x0, 0x0, 0x2, 0xe, 0x401, 0x97, 0x800, 0x7, 0x9, 0x40, 0x0, 0x5144b3ea, 0x694, 0x4, 0x7fe, 0x99, 0x81, 0x5, 0x4, 0x3, 0x0, 0x3ff, 0x1000, 0x9, 0x6, 0x40, 0x8, 0x1, 0x2, 0x1, 0x8, 0x5627aa48, 0x5, 0x4455, 0xfffffffd, 0x1000, 0x74f9, 0x0, 0x8, 0x0, 0x3, 0x8, 0xffff0002, 0x80000000, 0x7, 0x7fff, 0x0, 0x3, 0x2, 0x9, 0xe, 0x3, 0x7, 0x0, 0xa, 0x3, 0x54d, 0x100, 0x8, 0x3ff, 0x8, 0xfffffffd, 0xffffe64d, 0x400, 0x9, 0x200, 0x3, 0x7, 0x412, 0x40, 0x8, 0x9, 0x2, 0xb0000000, 0x3, 0xb, 0x0, 0x99, 0xeae, 0xe8, 0xfffffc00, 0xb7, 0x4, 0x9, 0xf, 0x2ab, 0x5, 0x8000]}, {0x0, [0x7, 0x44f, 0x4, 0x9, 0x4, 0x0, 0x6, 0xffffffed, 0x7f, 0x7, 0x3, 0x4, 0x80000001, 0x1, 0xdf96, 0x10000, 0x2, 0xc1e, 0x1000, 0x9, 0x6, 0x9b6, 0x404000, 0x1, 0x5, 0x7f, 0x0, 0x2, 0xf, 0x80, 0x8f7, 0x6, 0x2, 0x7f, 0xf7b1, 0x4, 0x0, 0xfffffff7, 0x6, 0x8, 0x1, 0x4, 0xfffff800, 0x8, 0x7, 0x4, 0x14, 0xc, 0x9, 0x7, 0x480, 0xffffffff, 0x10, 0x800, 0x3, 0x3ff, 0xb7, 0x5, 0x4, 0x6, 0x0, 0x8, 0x8001, 0x1, 0x2800000, 0x9, 0x10000, 0x8, 0x3, 0x800, 0x1, 0x7f, 0x9, 0x7, 0x10001, 0x8, 0x92, 0xffffffff, 0x1, 0x7, 0x1ff, 0x1, 0x4, 0x267, 0x0, 0xf16, 0x800, 0x1, 0x4, 0x6, 0x1, 0x3a2, 0xf76b, 0x80000001, 0x6, 0xc0000, 0x4, 0xfffffff2, 0x7fffffff, 0x400, 0xb, 0x9, 0xffffffff, 0xffff]}, {0x5, [0x10000, 0x5, 0x25a, 0x1, 0xfffffff9, 0x2, 0x8, 0xfffffffd, 0x6, 0x3, 0x5, 0x100, 0x1, 0x2, 0x27c, 0x10000, 0x0, 0xfffffff3, 0x1, 0x7, 0xfffffff7, 0xfd4, 0x3ff, 0x7, 0x8, 0xa3a9, 0x1, 0xf, 0x8, 0x0, 0x100, 0x0, 0xe296, 0x0, 0x8000, 0x7, 0x7, 0x1, 0x80004, 0x4, 0x100, 0x8, 0x1ca, 0x2, 0x5, 0x8, 0xfffffff9, 0xa, 0x52b, 0xe, 0x4, 0xfffffff9, 0x5f, 0x5, 0x8, 0xfffffff7, 0x2, 0x4, 0x6, 0x0, 0x5, 0x3, 0x7, 0xff, 0x10a, 0x7, 0x6, 0x1ff, 0x2, 0x4, 0x0, 0x4, 0x6, 0x401, 0x4a1, 0x5, 0x8001, 0x7, 0x6f, 0xc1f6, 0x2, 0x6, 0x1, 0x7, 0xff, 0x9, 0x43d, 0x2, 0xffff, 0x1, 0x7, 0x9a, 0x7ff, 0xb9, 0x800, 0x3, 0xc, 0xffffffff, 0x5, 0x7, 0x9, 0x7ff, 0x32, 0x7]}, {0x6, [0x1, 0x5, 0xcd4, 0xb0, 0x1000, 0x8, 0xffff, 0x80, 0x8, 0xc, 0x4a, 0x9, 0x74, 0x6, 0xa, 0x75e7, 0x4, 0x0, 0x8, 0x0, 0x4, 0x101, 0x4, 0x80, 0x7, 0x7, 0x8, 0xaa9, 0x3, 0x7, 0xd46, 0x7, 0x5, 0x80000000, 0x9, 0x4f9b3d50, 0x800, 0x3, 0x8, 0x8, 0xdd62, 0x25ae, 0x0, 0x7, 0xfffffff9, 0x450, 0x3, 0x5, 0x2271, 0xffffffff, 0x5, 0x1, 0x3, 0x7fffffff, 0x0, 0x3, 0xffffff48, 0x86, 0x0, 0xb959, 0x200, 0x9, 0x5, 0x2, 0x92ad, 0x1, 0x2, 0x38e, 0x7ff, 0x10, 0x7f, 0xbe15, 0x5, 0x7, 0xf, 0x1, 0x2, 0x2, 0x8001, 0x0, 0x3, 0x78aa0000, 0x0, 0x0, 0x8, 0x84e1, 0xd938, 0xe000, 0x8, 0xb5d, 0x9, 0x7ff, 0x4, 0x0, 0x4, 0xfffffff4, 0x1, 0x13, 0xecb, 0x1000, 0x10, 0x2, 0x80000001, 0x3]}, {0x3, [0x1, 0x8, 0x3, 0xc, 0x0, 0xf91, 0x4, 0x7, 0x4, 0x6, 0xfff, 0x6, 0x7fff, 0xa000, 0xfffffff9, 0x80, 0x1, 0x1, 0xff, 0x3, 0xf, 0x8, 0x70f, 0x100, 0x2, 0x2, 0xe3, 0x1, 0x7, 0x7fffffff, 0x1, 0x9, 0x5, 0x7, 0x9, 0xa, 0x3, 0x1, 0x2, 0x1, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x2, 0x401, 0x8, 0x8, 0x1, 0x7, 0xf2, 0x8, 0x7fffffff, 0x10001, 0x8, 0x6, 0x9, 0x5, 0x13f7, 0x779, 0x9, 0xffffffff, 0x0, 0x8, 0xeb7, 0x7, 0x9, 0x10000, 0x2, 0x8, 0x7fffffff, 0x6, 0x8, 0x7, 0x6cec, 0x10001, 0x3, 0x7, 0xb2, 0x1, 0x1, 0x5, 0x9, 0x3, 0x2, 0x5508c39c, 0x5, 0x5b3, 0x1, 0x0, 0x7, 0x1, 0x4, 0x2, 0x3, 0xe, 0x3, 0x2, 0x7, 0x3, 0x850, 0x9, 0x0, 0x3]}]}) r4 = socket(0x1c, 0x1, 0x0) fpathconf(r4, 0x3f) r5 = socket$inet6_sctp(0x1c, 0x800000000000005, 0x84) dup2(r5, r5) r6 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x3, 0x0, @mcast2, 0xc}, {0x1c, 0x1c, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x7, 0x6, 0xfffffffe, 0x10000, 0x2000, 0x0, 0xfffb]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fffe080a4000", 0x104}, 0x1c) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) sigaction(0x13, &(0x7f0000000040)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x70e5, 0xffff]}}, 0x0) r7 = fork() sigqueue(r7, 0x11, @sigval_int=0xfd51) sigqueue(r7, 0x13, @sigval_ptr=0x1000000) 46.371902795s ago: executing program 3 (id=441): r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) sigaction(0x8000e, &(0x7f00000003c0)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x3d, {[0xfffff801, 0x50e5, 0xfdffffff, 0x1]}}, 0x0) thr_new(&(0x7f0000000380)={&(0x7f00000000c0)="0fe42b3e215d1a3e36f30f1bfec4e3315eaccd28c377ccc2f20f79fc8fc878c34a37d6c4e1e5c23e0064660fd3d626f30f7fc48fe8488efd47", 0x80000001, &(0x7f0000001980)="eb1a7ba1e4f0ecb67c90ffa5192f046041b916a565a8a166febba9e0f1d56e4aecdf8c4058d135a61d6f3bf92295ff18a7114c90154683f2921acea216a65db87fff1adca4493a77b1659708d582bb5f8950541b3bed992bfefbb5fedcb30e0013947d58c88502a92be39160c8034eca4cbddd524110bf9bf35beba431b1", 0x7e, &(0x7f0000000200), 0x0, &(0x7f0000000100), 0x0, 0x1, &(0x7f0000000300)={0x2, 0x4}, [0xe, 0x8033, 0x4]}, 0x3c) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) connectat(r0, r1, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x0, 0xfffffff8, @empty}, 0x1c) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x410, r0, 0x2) listen(0xffffffffffffffff, 0x9) socket(0x1c, 0x1, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40000, 0x7e) socketpair(0x1, 0x2, 0x3, 0x0) lchflags(&(0x7f0000000000)='./file0\x00', 0x8014) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) fspacectl(r2, 0x1, &(0x7f0000000040)={0x3ff, 0x94d}, 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r2, 0x100}, {r1, 0x10}], 0x2, &(0x7f0000000440)={0x80, 0x100}, &(0x7f0000000500)={[0x80000001, 0x9, 0x2542, 0x3]}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6) freebsd11_lstat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$inet6(0x1c, 0x2, 0x0) sendmsg$inet6_sctp(r4, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0a7e323a55d965957a443f400731bb73"}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000290000002f"], 0x14}, 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 45.501781784s ago: executing program 3 (id=444): aio_waitcomplete(0x0, 0x0) profil(0x0, 0x0, 0x1, 0xd6) r0 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000ffff080001"], 0x28, 0x3010b}, 0x0) r3 = socket(0x1c, 0x1, 0x0) r4 = socket(0x1, 0x5, 0xfc) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)="2eed576d49c9d805ae464c19276226ec488b967d2f", 0x15}], 0x1, 0x0, 0x3c, 0x20108}, 0x20105) setsockopt(r1, 0x3, 0x9, &(0x7f00000002c0)="f3086114a5f1f650992eccc114777e071167c8a9e50809c4c1f3f463566a803d481e010d87ea2d547f45c9818e3eb80007e456d4ff0fbd5dd2624fce1489844dd4d28361a40fa31d4c17bb77b9d74f3b8bc527f5e5bcaf4b0d656fd94d3e1eadc8b6f9656d2055657e3625a30b688c6e39c617a04a7003cb5602f70b1eed0652588ca2c379a4aa0a3363ac557746f594d583c70a21ada9240fda1c33ed6528490faa5c6cffa015879a017b11ffe2028267b4ee43e02d910438e27df0cc9140bfa505b91c1cae2edcf26962e7862cce476ac5cb95ca8e987e7cbbbac318312474d78e376a5cb2f0d108bfd17ac5c58d040af21bd52f59191e", 0xf8) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1b, &(0x7f00000001c0), 0x4) setresuid(0xffffffffffffffff, 0xee01, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) setresuid(0xffffffffffffffff, 0xee01, 0x0) rtprio_thread(0x1, 0x0, &(0x7f0000000680)={0x2, 0x1c}) syz_emit_ethernet(0x50, &(0x7f0000000200)={@random="9f4c4662c157", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x42, 0x68, 0x0, 0x1, 0x2, 0x0, @rand_addr=0xef4c, @multicast2}, @icmp=@generic={0x11, 0x8, 0x0, "e0000001020000135e7204ed3f3f4d139efa204fac6c917c9100c552c1a3c7ac4e20ebfc32391ff05805"}}}}}) dup2(r5, r5) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) cpuset_getid(0x1, 0x3, 0x0, 0x0) cpuset(&(0x7f0000000000)) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) ktimer_create(0x4, 0x0, &(0x7f0000000440)=0x0) ktimer_settime(r7, 0x1, &(0x7f0000000580)={{0x100000000, 0x6}, {0x100000000006, 0x3b9aca00}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r6, 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000001480)={&(0x7f0000000040)=@in={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYBLOB="3a1aee98db4cd78aed4af281facf30bd8d95cdbfabf85dd23ed34737ae29c4e2ab2cc23152f8e0063d337dba40b42db1f0dd2deccf1b2e45e0108d0a44e5b29f22b1bce96ea1c535d22577cdca29e2146b74541acaad53712232648cee5a005c1f740ecee17ecf580000000000", @ANYRES64=r3], 0xfffffffffffffe99, 0x20180}, 0x80) cap_fcntls_get(r0, &(0x7f0000000080)) 44.632389816s ago: executing program 3 (id=448): r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN(r0, 0x6, 0x401, &(0x7f0000000100)={0x2, ' \x009\t\x00'}, 0x14) socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r1, 0xfffffff7) 44.630468698s ago: executing program 3 (id=449): sysarch$AMD64_SET_FSBASE(0x81, 0x0) (async) r0 = msgget(0x2, 0x30) msgctl$IPC_RMID(r0, 0x0) 44.629504526s ago: executing program 3 (id=450): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) __specialfd$inotify(0x2, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x24) ppoll(0x0, 0x0, 0x0, &(0x7f0000000000)={[0x5000861b, 0x2, 0x3, 0x7fffffc1]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r1 = kqueue() freebsd10_pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) kmq_timedsend(r2, &(0x7f0000000880)="77233feb54e5b31a81702ff72921d658feefb373853f4150264223cdfae3f65b1dd7b0153cbcf6981387465034bc70323673469a6e6f95d849c9019b5a90d3e18c9cc7b6b2591772672c850a6212df881c94dd839aa717066f507980ae0267320f7dd97cd28ee1e6017ac27381a5bc96d3add178312ded658817ed0a02cda90820e528117da78ec4e6bb2d48f2c873483430e7fda460503d3c2fe5dc540356379132b8ecc07d3d851eb1f354071d7a239b0ade31405d9a15da4ed7ec9c30d90e5cb1602be223578b489a3bdd63d6a1e58066", 0xd2, 0x8001, 0x0) kevent(r1, &(0x7f00000006c0)=[{0xfffffffe, 0xfffffffffffffffb, 0x1, 0x400, 0x9, 0x1000, [0x0, 0x3, 0xc, 0x40000000000000]}, {0x40000, 0xfffffffffffffffa, 0x4010, 0x1, 0x400, 0x688c, [0x9, 0x100, 0x8, 0x8c]}, {0x0, 0xfffffffffffffffd, 0x8090, 0x10, 0x7, 0x3, [0x0, 0xffb, 0x8, 0xffffffffffff8001]}, {0x7, 0xfffffffffffffff8, 0x4c, 0xffffff, 0xd3dc, 0xffeffffb, [0x6, 0x3, 0x0, 0x4]}, {0x8000, 0xffffffffffffffff, 0x8002, 0x8, 0x2, 0x7, [0x8, 0x5, 0x8, 0x6]}, {0x1, 0xfffffffffffffff3, 0x4045, 0xc0000000, 0x1, 0x200, [0x3, 0x93, 0x9, 0x1]}], 0x6, 0x0, 0x0, 0x0) r4 = socket(0x1c, 0x1, 0x0) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$CIOCGSESSION2(r5, 0xc030636a, &(0x7f0000000080)={0xb, 0x1d, 0x10, &(0x7f0000000840)="ec7b00000904ff242581b2babe29ff7c", 0x0, 0x0, 0x3, 0x9, [0x0, 0x0, 0xffe, 0xfffffffc]}) r6 = socket(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) fstat(r5, &(0x7f0000000480)) setfib(0x80103) ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000280)={0x1, 0x1, 0x76, 0x1, &(0x7f00000001c0)="6b8200456510b014de335b970197c946f4d4acae671918817e152dd4b52d8d5e479db3ab32a2c54543c51c98485113112f89749d817380ffffffffee41268c844458d883b9f9664bdb8fc4c88bad5b1ad7827f5b501de0f13dca335a537210ebdaa4e42ee583175f3e0000000000000000008000", 0x0, 0x0, 0x0}) minherit(&(0x7f0000692000/0x4000)=nil, 0x4000, 0x0) __realpathat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x20, 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) shmat(0x0, &(0x7f0000693000/0x1000)=nil, 0x2000) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) ioctl$BIOCSRSIG(0xffffffffffffffff, 0x80044273, &(0x7f0000000180)=0x5) sendmsg$inet6_sctp(r3, 0x0, 0x20109) r7 = socket(0x1c, 0x5, 0x0) socketpair(0x11, 0x3, 0x2, 0x0) rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000410) freebsd11_getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGETMODE(r7, 0x40046676, 0x22e00000) 21.770021248s ago: executing program 1 (id=527): open(&(0x7f0000000b40)='./file0\x00', 0x7843d88b80d1cecd, 0x100) truncate(&(0x7f00000001c0)='./file1/../file0\x00', 0x7f) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f0000000840)='./file0\x00', 0x40000400000002c2, 0xa) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="16", 0x1}], 0x1, 0xb542) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) fork() wait4(0x0, 0x0, 0x2, 0x0) socket(0x1c, 0x1, 0x0) munlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) open$dir(&(0x7f00000016c0)='./file0\x00', 0x2, 0x0) socket(0x1c, 0x1, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) truncate(&(0x7f0000000080)='./file0\x00', 0x8000) open(&(0x7f0000000280)='./file1\x00', 0x2000000, 0xd2) setsockopt$inet6_int(r1, 0x11, 0x4, 0x0, 0x0) r2 = socket(0x1c, 0x1, 0x0) mkdir(0x0, 0x0) symlink(0x0, &(0x7f0000001700)='./file0\x00') chroot(&(0x7f0000000080)='./file0\x00') chroot(&(0x7f0000000200)='./file0\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1/../file0\x00') ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 20.960622444s ago: executing program 1 (id=530): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='hammer2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(0x0, 0x0) clock_gettime(0xf, &(0x7f0000000340)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x2, 0x7}) mkdir(&(0x7f0000000240)='./file2\x00', 0x60) minherit(&(0x7f0000ffc000/0x1000)=nil, 0x822fbf000, 0x3) setreuid(0x0, 0x0) fork() r0 = socket(0x11, 0x3, 0x0) shutdown(r0, 0x2) r1 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x2) symlinkat(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000480)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCLOCK(r2, 0x2000427a) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x40047477, &(0x7f0000002c80)={0x0, 0x7}) unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fdatasync(r1) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file1\x00') r3 = socket(0x1c, 0x1, 0x0) fstatat(r3, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000980), 0xc200) setsockopt$inet6_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000440)={0x4}, 0xfffffd1b) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) chmod(&(0x7f00000002c0)='./file1/file0\x00', 0xa4) sigaction(0x25, &(0x7f0000000140)={&(0x7f0000000100)="260f38f91c79660f38289000000000420f493e0f2aa47f0000450067660ffc9b2e96c4c31518a2e300000093c4e28d8c64e3000f0fcfbfc4c1b964f1", 0x20, {[0x5, 0x2, 0x0, 0x28000]}}, &(0x7f0000000200)={&(0x7f00000001c0)="8fc8208eb9d98b0000f264660ff5183e660f50fec4c10a2a8eac000000f3a4c4e2791ccf0f48cfd27679a0d4bc0000670f1fd1"}) chdir(&(0x7f0000000280)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) 20.859927325s ago: executing program 1 (id=531): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x1) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r1 = kqueue() (async) r2 = socket(0x1c, 0x1, 0x0) (async) r3 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r3, &(0x7f0000000140)="b10005059000e803480308c75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x30, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@param_prob={0x4, 0x1, 0x0, 0xfffeffff, {0x6, 0x6, "e70278", 0x6, 0x6, 0x0, @rand_addr="af7c484adcebf51b740e67010c6c47de", @mcast2}}}}}}}) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) (async) kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) (async) getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, 0x0, &(0x7f0000000080)) (async) connect$inet(r2, &(0x7f00000000c0)={0x10, 0x2, 0x1}, 0x10) (async) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) (async) r4 = socket(0x1c, 0x1, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) msgget$private(0x0, 0x790) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) bindat$unix(0xffffffffffffff9c, 0xffffffffffffffff, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) r5 = openat$md(0xffffff9c, 0x0, 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f00000006c0)={0x0, 0x0, 0x2, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0xf, 0x1ffffff, 0x80000, 0x349d, 0x0, [0x10001, 0x2, 0x0, 0x0, 0x12, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x78b, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x80200, 0x2, 0x2, 0xfffffffc, 0xfe, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x2, 0xfffffff9, 0x368, 0xe, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfff7fff9, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2]}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x28, &(0x7f00000001c0)=0xa, 0x4) (async) select(0xc9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f00000005c0)) syz_emit_ethernet(0xfff, &(0x7f00000002c0)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a60fc92c03cb697a653e336f000000500000000000ff0200000000000000000000000000010000002e000000004e214e2000089078aee282c3f693a5a0369a48658574b0fee3be4d357d8a292251000f224fc6971cdaf1693e54e39ade7e7a10b1a6b9f87d15799eda0655912c940aa716cc6c88b865d3f1098b48756cba7e30a725e8ee9e4ced76292d8e04190e1eeeb90587a0e3fe430971743b83c535b0577e7a7bc356a606d4c0cbe5cde6b48443eccdc1cabb62eba24a4b7b77239850ae6f7bf90ce8e220624c5b773a20611e3be488ac93e7199d41c9aeffca6fd99a8a25fa0aa9148fc1dc38d940c4a653d2bca5e3359d7bfdc3f4d2b19d694f8c5f12c1c0ef2b303862e4953fa6727af9cb6dd2f4610eb50f2ee0027db7055da5113e9e34692620907d33e6935fb084d3ee92e60560370f28f0c0c2f66a8e061ee40263783b126dd3c11bb31cc94e7729e92fd33de5c3fafb4228aa39fae9e7b1d235175af1e9f3c4c52c12c199b1962995f600a5ef18d64249b036846988202ce72d58cd838089216554c948653b642b143e55d3e0f230d601459c1e08c8a9bf3cf832cf1c142a300683559048344d5b494f3dea6f6162e7b3ee123f67ccebc22f8f5e03a41cd031da5aa7bb3a6b6a3006e0c1471ee45dd4947e17492e1efda07948ce57830916ed187a2b05edaafe19f7c713efd6f763cefc0deb32e52e8c8cc60a3ca6d16f25cdb06dbc1e8e0b260e28de5ce6e8323bce3a047e409c9912f65addeb69f6218a48df7ef381b3064f5368111455daf4d31e292562661564794489016d091b31f35582302d20c9a02d87899e288896b9046fc711ab73e09f77c24845a4f0bc822999229195beced9f0d94839bbed9f571d371c277acca74856ded897992d9ab7926ead24605b1137b83c4e9c6a3d88522e6ca4284a5cee0671ff747ac4c983ded5ef2336c327472a19a9ce5f47f96639ee1b9a44d7382b26b3c86bfbf6f7e2ed77dc868df567d19461f569465ccb8c5c81a322e4e5f031a725e960ae05aa36bc314b4abdaca64e472c1c8e324d55f766075af689ef6789b2e0ae7176428fb22d9e69a2bcd9d100cce311d0b3d8fd718cd2106ffbb83895b2a377bd975a56f3d0145b318760f57abdfa30323e6597fcdd3b2889a92df24c23e0e9de8e0b1effef8395fb61fea32bbcb74b002fe5a3a7972fb74a55e2ca8a182c8d9a4a5f18b3c7f267535c5151e55b99432f1a3a05fe72915779240f4dc42c7e0218e66d2514bfe79b6a03bbd97c2b1b4470bf9df965aae0822e6f1bcaea18559d3eb214a64ff625f087574514ab652f5b2e47b7a98d7eda1717ce6fbe102fdcebdfe6b939e259fdb448ac0570eac15048be6ca0e50fb830c08cbc125ff0f2c04822c214df4c157ee6f7eb2c4b2b96d23a27b582e59c67933290e7dcb46ef7076914c101696a22960ddd4c1a379bd70e29feaf60b2f115145158b5fc419deb8e13a02eb67c1941bdac6a17b6f3a3ffe2aa577edf793a50a5a9da48d08e14785d73780195e8a112ca53a3b5af1b9d4a3dd8b1f17de21662bd80a3e694e4d2b7487e563dd6b713cc64e025067371d6b127546cf731474aee952d6cd19ceeeaf752f3201b83302789bb71d66ca6c253137fe7132c3c471ae7de11c0cd6ad13df670a546dec9b82b58ff63b35b8fe46a189fdf3b673aab5f5465ed0132cb26b4232777a0d337742bb617fca9ad8d3e97010824249bd4589100911adcc279adb940a029e0589a3b9da226dde5ec182497a92e0ee48dff9c327b81220f42481b519d9547b4eb7f06c37256b668530e23df88a1d6c85cbb68a2583d3151b485455d4e9f7a24f4a7429f68f19bdf4d1ccdd5fee0f859fcf943d99ae4e0915007e89bc9e843595d2816366b9cef6687ef1fd54194eca5c6568d4fa86cc1dc921d38ce7ef9ae4ef4812f0fb4cc603d7cb794b0b5c918312e3a4744e5ddd4dbdd3f08237a28e4ecc74d24185e4ac7b4ccc717abe428843286b3800e63b1451b045ff2e534fd5e751f4b3b369e7dd973bf70958df54271d52c82704f5b0f49b895261afd97a539299a7fed7351bcb84a5283b1814e665791dbd836e6bd0e9120b8fa516a1604200a92c0e818799bfc1d979bf6d9d48510e97d51ffe57d24554c01b7023cec466cc0f9334f93586b097a5457f38081f8c48e6c950c849d896e85d8121f53bc7381bc82959dc2a00d85de57256f07ae975ee6c5dab6fbd0297d57f2ad0dbf954702ba6ddc45585781dcccbe9b337e6d0310f9dc43c47dc99e2cd6423b5d17dcaaa9aea730c0afe5b64a0ef7c9b80fdca7f75eafa772442406241539be557f3fc86946e8ab5489019248eb92d1e20805258063cc408875bd08240f855adc8f0957a186c76f5493d9b654fbca1ffc3c220caf4ff202619ef41e20c007a3424dd67498aeabe3953db43b34502b07fccb24eb12315be2c9db087f288ae7406ea8d3428773150b00bfa22fe5fdc77a4e65eafe174d47d9dad0f68a5bc98769d9ec497acbefb3367d57e4e0d7b1dce5211adccc81d4fba593a4f8456c3b457a0c16a7f89997c6e0c1c39c9a331c1216a9205ce0981c91db279e53bae9485705deafa7d777b68100775921ad0f6a701644b6eea42c8fba0a0ec0da7a901e14d9edd114b4b8fc78e20736d47f0780e4661be5b8b273056910d319ed1608fe933d2607af56cceb05f147da35bfe572320794545f372166402b84ef6ee22498f37a6cabf0497fde8be276f411ac6eacffa4301e24f6fd67dc54befc009b93e71802ed7a36d15aa4d02111166a545b9d779b54f816eea6c6e8f3277a1a88171290342a77f409d8d97e7ffb2826d033f452feec52d158740d26951a6471e74ae95db9608263487337998210784dcffe1b3a1cf6ce2ebb4ff8712386d8672e996dd7f6e2b8c016f61c53e818e560b190bfbff6fb5a7dff8a7470fcc77ed12dbaec166480c0247deb2bdc7af3a03950d880e34ddfb334b8c1f50880e5f57d77fa1021735331fd5b6526c30a9e662be3f4e57608596ecad94324918566a5c04205df9203bad7593a6ff59b07d2732672f55f240244d59f0e3d91c5bcec1704b317d71f3fc72a9b62f28f428684dc704aaee23427f9daaf01425b21505f3f923e83b1e75cbb0dc9cda4a5979d04a4b34aa98ab0d112ca222d2f094b4366351c8f6a955bcd1b94c07f358e723d7c290d6374a9e3723c309c746ca41a07f4b8304bdfb94f2f8ef5aa72de3c7d7b28f31ac6e2140959f6838e12986639fa2104976e9005bf7d69cc43c669fadb07613a139b7fc574d4c107a4d34751ff1dc42164883c78002d9fcf9d04729f8071bc69aeb62b826665c96bbf3cca3204b74ae92b951960e9bc39282d00a7742b85d8cad65528d7f5438d2ffd7e2f60cb56ae97ac981f3a5f821e0167637109055348023ff45e18f53c2416b8f25600d0c3a5262e0fba4c6503b1ecad16c4be923d150ec5131d87ee64f6b5cec8f2ac9a50465f560169c3bc21f80e8f67fdbb3d288733bf9abf6818034274c03cd30db56ab7f1bbbb483cc8d7d9c120ef1935fb921e9cf501019c9cf0219acbe2e576baf62cea0b31fb6824501e2d791b52f78690fb06659ff7df5d7f4db2eba7d9bb913b78288eaeadfb16f7d42c54e9b769884a118c59f20b08a1147580bbe98d52ed02827cc32bad0ff99f4bb5117cacc5d0fa45ebf1977d8f77ec7f7127121298359bd52d51f8a0883bc7e72db3337363b5153098b929b0547de08b68e37cf81998b15d3ff96fc300cdd8fb4e46f39b8349e43b0f483c57de315bdd9b00f1d8e106ccd21930fae0757c76fd4893a31d337bc363de7606909e9944b6e5a46e0bcd3e78329386bf233ffb4195f31134eeb5b638b672424be6e0cb1690c2e7d28c8e40a3ce4875c479526cd2da9cae30326f1487dddd64b01b6c3e0cac78cf5d81dff1e8aa224f0cd921dc631abddcbd7127fc3fd29c35ba142f8f1e2bcd2ebc767448e5cf8e44e951df3b198d1680904c715895e02b7237395dcc28c1f65a84f302acef802d1bc38767d5bca836fff178ff8f6a2c8fdf38d5918236cfe72a7d20c6cdc5b37536d150ccbe05e22ae3054e8f135e8ef0f4340caae1324a76404c99ad5ed719c707492f70d2e7adcf2e4d77d320f9eb71da793437d48fe0a0218d459ba00d06a09785b5580cd12a7aa073915953c23680d05b7c47da46e2bc855ed622eac5ad8f7490677a5bd36de4e64ce23752164308e8ae961982897193724194ba0c65cf620a62864662e917f72658dc91e188a60d3cd4dc6f8f90e8928e043102"]) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200"/51]) (async) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) (async) syz_emit_ethernet(0x5e, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, &(0x7f0000000080)={0x19, 0x0, 0x3, &(0x7f0000000000)="ec7b00", 0x0, 0x0, 0x0, 0xfdffef85, [0x0, 0x0, 0x0, 0xe3]}) 20.689879806s ago: executing program 1 (id=532): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x11, r0) ioctl$KDGKBTYPE(r1, 0x40044b40, 0x9) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) r2 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x12, 0x0, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) ioctl$SMB_READW(r3, 0xc01c6908, &(0x7f0000000140)={0x4, 0xd, 0x6, @byte=0x4f, @byte=0x16, 0x0, &(0x7f00000000c0)=0x80, 0x1, &(0x7f0000000100)=0xdc, 0x1}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f0000000040)={0xb, 0x5000, 0x100, 0x3}, 0x8) dup(r3) setgroups(0xfffe, 0x0) r4 = socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) r5 = dup(r4) r6 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) r7 = socket(0x1c, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="861e839ff728ce193c3036218e4a64ca35b1804d6209ec4994530903944fe630fc510a75065dff5968fac4eb7746ee43a84b390d04bc127fb9a5daf1", 0x3c}], 0x1, &(0x7f0000004cc0)=[@rights={0x18, 0xffff, 0x1, [r2, r5, r6]}], 0x18}, 0x0) freebsd11_mknod(&(0x7f0000000180)='./file0\x00', 0x40, 0xc59) recvfrom$unix(r8, 0x0, 0xfffffffffffffd1a, 0x0, 0x0, 0x0) ioctl$KDGETMODE(r7, 0x40046676, 0x22e00000) 19.839965119s ago: executing program 1 (id=536): socket$inet_icmp_raw(0x2, 0x3, 0x1) mount(&(0x7f0000000000)='msdosfs\x00', 0x0, 0x25, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000001500082c00e1aaa2241dc0fb000000000000000000fe8000000000000000000000000000aa3300010100010000"]) pipe2(0x0, 0xd505eb4556f41fdb) aio_waitcomplete(0x0, 0x0) cpuset_setid(0x2, 0x0, 0x0) socket(0x1c, 0x2, 0x5) openat$bpf(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socket(0x1c, 0x1, 0x0) r0 = socket(0x1c, 0x1, 0x0) lio_listio(0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000d80)={0x1, 0x20, @sival_int=0x4, @spare=[0x0, 0x5, 0x9, 0x1, 0x8, 0x7, 0xfd926ff, 0xfffffffe]}) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) semget$private(0x0, 0x1, 0x1) rfork(0x85000) fhopen(&(0x7f0000000000)={{[0x5c8951ac, 0x3bea9983]}, {0xfffe, 0x1, "0a0000009a165d5900"}}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) socket(0x2, 0x20000000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x2, 0x0, @loopback, 0xf7ffffff}, {0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x0, [0x0, 0x0, 0x1, 0x400, 0x1, 0x8001, 0x0, 0x2ffff]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fcffffffffffffff2673f02550e7f787"}, 0x1c) r2 = socket(0x1c, 0x1, 0x0) ioctl$SMB_PCALL(0xffffffffffffffff, 0xc01c6909, &(0x7f0000000040)={0xb6, 0x3, 0x9, @word=0x3, @word=0x4, 0xda, &(0x7f0000000280)=0x4, 0x1, &(0x7f00000002c0)=0xb, 0x1}) pipe2(0x0, 0x100004) execve(0x0, &(0x7f0000000100)=[&(0x7f0000000000)='\x00'], 0x0) ioctl$BIOCSHDRCMPLT(0xffffffffffffffff, 0x80044275, &(0x7f0000000380)=0x100003) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) 18.991726315s ago: executing program 1 (id=538): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0) socket(0x1c, 0x1, 0x0) pipe2(0x0, 0x100004) aio_waitcomplete(0x0, 0x0) socket(0x1c, 0x1, 0x0) socket$inet6_sctp(0x1c, 0x800000000000005, 0x84) socket(0x1c, 0x1, 0x0) sysarch$I386_SET_PKRU(0xc, &(0x7f0000000040)={0x1, 0x8, 0x7000, 0x8}) sysarch$I386_GET_LDT(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KDGETMODE(r0, 0x40046676, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in6={0x1c, 0x1c, 0x1, 0x4, @empty, 0x2}, 0x1c) sysarch$I386_SET_LDT(0x1, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) socket(0x1c, 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) pipe2(0x0, 0x100004) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000000)=0x7fffffff, 0x4) sigaction(0x7e, &(0x7f0000000280)={0x0, 0x20, {[0x5, 0x3, 0x4, 0x8]}}, 0x0) connect(r2, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x0, 0x6, @empty, 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x1c, 0x2, 0x8, @mcast1, 0x1}, 0x1c) getsockopt$inet_mreqn(r1, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)={@remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, 0xc) minherit(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0xd, &(0x7f00000001c0)={@loopback, @rand_addr=0x3}, 0xc) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00002) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x49, &(0x7f0000000180)={@multicast1, @remote={0xac, 0x14, 0x0}}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) 8.629991818s ago: executing program 0 (id=546): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x2}], 0x1, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) aio_waitcomplete(0x0, 0x0) profil(0x0, 0x0, 0x1, 0xd6) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28000000ffff080001", @ANYRESHEX=r2, @ANYRES8=r1], 0x28, 0x3010b}, 0x0) r4 = socket(0x1c, 0x1, 0x0) r5 = socket(0x1, 0x5, 0xfc) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x20108}, 0x20105) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x4) mount(&(0x7f0000000040)='msdosfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) r6 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1b, &(0x7f00000001c0), 0x4) setresuid(0xffffffffffffffff, 0xee01, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000300)=ANY=[@ANYBLOB="9f4c4662c157ffff09ffffff08004500004200680000010290780000ef4ce000000211089078e0000001020000135e7204ed3f3f4d139efae6a44493c4669e87204fac6c917c9100c552c1a3c7ac4e20ebfc098a35335805"]) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) cpuset_getid(0x1, 0x3, 0x0, 0x0) cpuset(&(0x7f0000000000)) r7 = socket(0x2, 0x20000000, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x0, 0x20008}, 0x191) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) r8 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r8, 0x0) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) 7.090087214s ago: executing program 0 (id=547): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000f80)=[{0x0, 0xfffffffffffffff5, 0xc0e3}], 0x1, 0x0, 0x0, 0x0) kevent(r1, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff5, 0x1, 0xc135b11e8fe222be, 0x6, 0xffffffffffffffff, [0x0, 0x100, 0x4000000000000000, 0xf]}], 0x1, 0x0, 0x13, 0x0) sigaction(0x14, 0x0, &(0x7f00000001c0)={0x0}) setsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, 0x0) 5.460190761s ago: executing program 0 (id=548): ftruncate(0xffffffffffffffff, 0x3862) aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, &(0x7f0000000300)="58a9", 0x2, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x2ac8000, @ke_flags=0x8010}}) setrlimit(0x7, &(0x7f0000000040)={0x2, 0x7}) setreuid(0xee00, 0x0) vfork() socket$inet6_udplite(0x1c, 0x2, 0x88) socket(0x1b, 0x3, 0x0) __specialfd$eventfd(0x1, &(0x7f0000000040)={0x3a1, 0xff}, 0x8) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0xca0706ee3fd5d6f6) r1 = openat$filemon(0xffffff9c, &(0x7f0000000a80), 0x40, 0x0) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000a40)=r0) r2 = socket(0x1c, 0x1, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x8, 0xfffffffd) extattr_set_link(&(0x7f0000000380)='./file0\x00', 0x2, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\r\xa3\xa0\x01D\x9e\xca\f\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef/\x91\xcd\xc3\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xa0b9x\\\'\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xb8\x99\xe7\x1c\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) extattr_delete_link(&(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c') r3 = socket(0x1c, 0x1, 0x0) chdir(0x0) kevent(0xffffffffffffffff, &(0x7f0000000740)=[{0x8000, 0xfffffffffffffff3, 0xc005, 0x2, 0xc4a4, 0x1, [0x2, 0x10001, 0x5, 0x81]}, {0x5, 0xfffffffffffffffd, 0x6, 0x20000000, 0x80, 0x8, [0x0, 0x3, 0x800000000003, 0x7]}, {0x8001, 0xfffffffffffffff8, 0x8001, 0xc0000201, 0xa9f, 0xffff, [0x8, 0x0, 0x8, 0x7]}, {0x4, 0xfffffffffffffff3, 0xba, 0x200, 0x9, 0x4, [0x0, 0x8, 0xc477, 0x4000000000001]}, {0x6, 0xfffffffffffffffa, 0x8078, 0x80, 0x4, 0x6, [0x81, 0xe72, 0x2, 0x2]}, {0xd8, 0xfffffffffffffff5, 0x4, 0xc0000000, 0x0, 0x10001, [0x2cd2, 0x8, 0x1, 0xfffffffffffffffd]}, {0xbd8, 0xfffffffffffffffc, 0x8005, 0x40, 0xffffffffffffffff, 0x1, [0x7e, 0x0, 0xc, 0x80]}, {0x1, 0xfffffffffffffffe, 0x28, 0xc0000000, 0x7, 0x2c, [0x2, 0x8d, 0x6, 0xd]}, {0x504fcb44, 0xfffffffffffffffb, 0x96, 0x0, 0x9, 0x7, [0x0, 0x9, 0x82]}], 0x9, 0x0, 0x0, 0x0) aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, &(0x7f0000000300)='\x00', 0x1, [0x0, 0xc9], 0x101, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x10, @sival_ptr=0x80000000, @spare=[0x0, 0x0, 0x8000]}}) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) aio_write(&(0x7f0000000140)={r4, 0x40000000006, &(0x7f0000000240)="a3", 0x1, [0x5], 0x8000, 0x0, 0x1, {0x4, 0xffffffffffffffff, 0x0}, {0x3, 0x0, @sigval_int=0x10001}}) ksem_open(&(0x7f0000002580), &(0x7f0000000100)='\x00\xee\xd4\x94\\]\xaa\xf2\x1b<\x89\xb2p\x8ci\x1f\xc6\x9e\xa4\x9foXK\x03\x00\x00\x00\x00\x00\x00\x00\xecw\x0f\xd2\xadk\x00W\x86\x02\x05\x85\xfc&\xbf\t\xae\xe1\xa2\xea0\xfa\xa9\'\xca\xe1\xda\xec\xd8k\xb5\x93e\x1e\x8d}{&\x8b', 0xa00, 0x34, 0x9) copy_file_range(r4, &(0x7f0000000000)=0x80000001, r4, 0x0, 0x100000, 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) procctl$PROC_REAP_RELEASE(0x0, 0x0, 0x3, 0x4) getpid() shmctl$IPC_STAT(0x0, 0x2, 0x0) aio_read(&(0x7f0000000180)={r2, 0x0, &(0x7f0000000500)="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", 0x121, [0xc7, 0x4], 0x80, 0x8, 0x4, {0x8000000f, 0x7, 0x0}, {0x0, 0xa, @sival_int=0x10, @spare=[0x9, 0x80, 0x1, 0xd46, 0x5, 0x6, 0x9, 0x10]}}) 3.777460321s ago: executing program 0 (id=549): aio_waitcomplete(0x0, 0x0) profil(0x0, 0x0, 0x1, 0xd6) r0 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x3b, 0x4}, 0x8) write(r0, &(0x7f0000001040)="2304e930371f32d4", 0x8) write$bt_hci(r0, &(0x7f0000002c80)="d7f2c115052f7680", 0x8) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x3010b}, 0x0) r3 = socket(0x1c, 0x1, 0x0) r4 = socket(0x1, 0x5, 0xfc) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1b, &(0x7f00000001c0), 0x4) setresuid(0xffffffffffffffff, 0xee01, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) cpuset_getid(0x1, 0x3, 0x0, 0x0) cpuset(&(0x7f0000000000)=0x0) cpuset_setid(0x5, 0xffffffffffffffff, r6) cpuset(&(0x7f0000000080)) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) r7 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000001480)={&(0x7f0000000100)=@in={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r7], 0x24, 0x20180}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) kqueue() open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) procctl$PROC_PDEATHSIG_CTL(0x0, 0x0, 0xb, &(0x7f0000000200)=0x200) 1.92983689s ago: executing program 0 (id=550): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r0 = openat$md(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f00000003c0)={0x0, 0x7fffff7f, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x26, 0x0, 0x0, 0x0, [0x0, 0x2, 0x3, 0x0, 0x40, 0x0, 0x3ff, 0x0, 0x2, 0xb32c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0xe122, 0x8000000, 0x2, 0x42f, 0xfffffffd, 0x0, 0xffffffff, 0x400000, 0xf, 0xfffffffd, 0x0, 0x3ff, 0xc4, 0x4, 0x0, 0xa7, 0xc37b, 0x7, 0x0, 0x9, 0x0, 0x2000, 0x0, 0x0, 0xfffffffe, 0x0, 0x200004, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6cdd1400, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0xae, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x7fed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800006, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xfffffffb]}) socket(0x1c, 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r1, 0x0, 0x0) writev(r1, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x8012, 0x4f, 0xfffffffffffffffe, 0x0, [0x0, 0x0, 0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) open(0x0, 0x80400000000206, 0x4) aio_waitcomplete(0x0, 0x0) socket(0x2, 0x3, 0x4) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0) r3 = socket(0x1c, 0x1, 0x0) fpathconf(r3, 0x3f) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DIOCCHANGERULE(r4, 0x8048756d, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) rfork(0x1000) r5 = socket(0x11, 0x3, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg(r5, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="100000b54de8fbcba1ce6900"], 0x10}, 0x4) 0s ago: executing program 0 (id=551): socket$inet_icmp_raw(0x2, 0x3, 0x1) mount(&(0x7f0000000000)='msdosfs\x00', 0x0, 0x25, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000001500082c00e1aaa2241dc0fb000000000000000000fe8000000000000000000000000000aa3300010100010000"]) pipe2(0x0, 0xd505eb4556f41fdb) aio_waitcomplete(0x0, 0x0) cpuset_setid(0x2, 0x0, 0x0) socket(0x1c, 0x2, 0x5) openat$bpf(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socket(0x1c, 0x1, 0x0) r0 = socket(0x1c, 0x1, 0x0) lio_listio(0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000d80)={0x1, 0x20, @sival_int=0x4, @spare=[0x0, 0x5, 0x9, 0x1, 0x8, 0x7, 0xfd926ff, 0xfffffffe]}) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) semget$private(0x0, 0x1, 0x1) rfork(0x85000) fhopen(&(0x7f0000000000)={{[0x5c8951ac, 0x3bea9983]}, {0xfffe, 0x1, "0a0000009a165d5900"}}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x2, 0x0, @loopback, 0xf7ffffff}, {0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x0, [0x0, 0x0, 0x1, 0x400, 0x1, 0x8001, 0x0, 0x2ffff]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fcffffffffffffff2673f02550e7f787"}, 0x1c) r3 = socket(0x1c, 0x1, 0x0) ioctl$SMB_PCALL(0xffffffffffffffff, 0xc01c6909, &(0x7f0000000040)={0xb6, 0x3, 0x9, @word=0x3, @word=0x4, 0xda, &(0x7f0000000280)=0x4, 0x1, &(0x7f00000002c0)=0xb, 0x1}) pipe2(0x0, 0x100004) execve(0x0, &(0x7f0000000100)=[&(0x7f0000000000)='\x00'], 0x0) ioctl$BIOCSHDRCMPLT(0xffffffffffffffff, 0x80044275, &(0x7f0000000380)=0x100003) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 Expensive callout(9) function: 0xffffffff81a3ea00(0xfffffe00586ec340) 0.002576600 s Aug 27 17:25:44 ci-freebsd-i386-2 kernel: arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.2.187 on tap2 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006de0d000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83716b20 usecount 7, writecount 6, refcount 69 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00540d90f8 ref 1 pages 536 cleanbuf 64 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe0054111780 (pid 861, syz-executor, tid 100221) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=74c2e97e, uid=0, gid=0, flags=0x48008 ino 84, on dev gpt/rootfs lock order reversal: (sleepable after non-sleepable) 1st 0xfffffe006dddf688 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1641 2nd 0xffffffff83cc7a40 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1340 lock order tun_ioctl -> tun_mtx established at: #0 0xffffffff81664981 at witness_checkorder+0x781 #1 0xffffffff814ea187 at __mtx_lock_flags+0x187 #2 0xffffffff8184e06c at tunifioctl+0x15c #3 0xffffffff818294fe at ifhwioctl+0xefe #4 0xffffffff8182d672 at ifioctl+0xde2 #5 0xffffffff8167372a at kern_ioctl+0x4ca #6 0xffffffff8167316e at sys_ioctl+0x36e #7 0xffffffff82145702 at amd64_syscall+0x4e2 #8 0xffffffff820ea3eb at fast_syscall_common+0xf8 lock order tun_mtx -> tun_ioctl attempted at: #0 0xffffffff81665852 at witness_checkorder+0x1652 #1 0xffffffff81553d49 at _sx_xlock+0x139 #2 0xffffffff8184df9a at tunifioctl+0x8a #3 0xffffffff8182a36d at ifhwioctl+0x1d6d #4 0xffffffff8184bb88 at tunioctl+0xd38 #5 0xffffffff811c5406 at devfs_ioctl+0x266 #6 0xffffffff82307b87 at VOP_IOCTL_APV+0x87 #7 0xffffffff817d0c67 at vn_ioctl+0x3c7 #8 0xffffffff811c62c9 at devfs_ioctl_f+0x69 #9 0xffffffff8167372a at kern_ioctl+0x4ca #10 0xffffffff8167316e at sys_ioctl+0x36e #11 0xffffffff80440dd7 at freebsd32_ioctl+0x607 #12 0xffffffff822cfab2 at ia32_syscall+0x4d2 #13 0xffffffff820eac4f at int0x80_syscall_common+0x9c ZFS filesystem version: 5 ZFS storage pool version: features support (5000) if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058572800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058572000 Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0058571800 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 Expensive callout(9) function: 0xffffffff81abac00(0) 0.005575985 s if_delmulti_locked: detaching ifnet instance 0xfffffe0058571800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077e9000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058572800 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058572800 ip6_pcbopts: all specified options are cleared. lock order reversal: 1st 0xfffffe007ae42228 ufs (ufs, lockmgr) @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:3380 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/i386/kernel/sys/kern/subr_prf.c:185 lock order proctree -> ufs established at: #0 0xffffffff81664981 at witness_checkorder+0x781 #1 0xffffffff814cc276 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81da46bb at ffs_lock+0x18b #3 0xffffffff8230a487 at VOP_LOCK1_APV+0x57 #4 0xffffffff817d5b3e at _vn_lock+0x14e #5 0xffffffff817d63e8 at vn_close1+0x1e8 #6 0xffffffff814bdb6a at ktrops+0x41a #7 0xffffffff814bd2dd at sys_ktrace+0xaed #8 0xffffffff822cfab2 at ia32_syscall+0x4d2 #9 0xffffffff820eac4f at int0x80_syscall_common+0x9c lock order ufs -> proctree attempted at: #0 0xffffffff81665852 at witness_checkorder+0x1652 #1 0xffffffff8155661f at _sx_slock_int+0x13f #2 0xffffffff8162217d at uprintf+0x14d #3 0xffffffff81dd0a1f at ufs_rmdir+0xdf #4 0xffffffff8230912d at VOP_RMDIR_APV+0xcd #5 0xffffffff817ca63a at kern_frmdirat+0x87a #6 0xffffffff822cfab2 at ia32_syscall+0x4d2 #7 0xffffffff820eac4f at int0x80_syscall_common+0x9c if_delmulti_locked: detaching ifnet instance 0xfffffe00077e9000 md0: truncating fractional last sector by 3 bytes Jan 1 00:01:23 ci-freebsd-i386-2 kernel: pid 1357 (syz-executor), jid 0, uid 0, was killed: exceeded maximum CPU limit Jan 1 00:01:23 ci-freebsd-i386-2 kernel: pid 1359 (syz-executor), jid 0, uid 0, was killed: exceeded maximum CPU limit if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 Jan 1 00:01:25 ci-freebsd-i386-2 kernel: attempted source route from 255.255.255.255 to 172.20.1.170 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 if_delmulti_locked: detaching ifnet instance 0xfffffe006dde4000 SYZFAIL: too much cover cov=603979873 (errno 4: Interrupted system call) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=1 req=538 state=1 status=67 (errno 9: Bad file descriptor) FreeBSD/amd64 (ci-freebsd-i386-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: set $lines = 0 Password: Login incorrect login: show registers Password: Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl