last executing test programs: 9.670311736s ago: executing program 1 (id=52): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) close(r0) (async, rerun: 64) aio_waitcomplete(0x0, 0x0) (async, rerun: 64) r1 = socket(0x1c, 0x1, 0x0) lio_listio(0x0, &(0x7f0000000a80)=[{r1, 0x0, 0x0, 0x0, [0x2, 0x10000], 0x9, 0x4, 0x7fff, {0x4, 0x10000007, 0x0}, {0x0, 0x1, @sival_ptr=0x2, @spare=[0x3, 0xffffffff, 0x7ff, 0x3, 0xfffffff9, 0x9, 0x5, 0x36]}}, {0xffffffffffffffff, 0xf, 0x0, 0x0, [0x7, 0x40], 0x800006, 0x6, 0x3, {0x7f, 0x9, 0x0}, {0x4, 0x10, @sival_ptr=0xffffffff, @ke_flags=0x6}}, {0xffffffffffffffff, 0xd, 0x0, 0x0, [0x0, 0xffffffdc], 0xcbbb, 0x4, 0x3, {0x8, 0xec, 0x0}, {0x3, 0x1a, @sigval_ptr=0x9, @thr={0x0, 0x0}}}], 0x3, &(0x7f0000000d80)={0x1, 0x20, @sival_ptr=0x6, @spare=[0x4005, 0x5, 0x6, 0x5, 0x0, 0x7, 0xfd926ff, 0x9]}) (async) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_sctp_SCTP_MAXSEG(r2, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x21}, 0x8) (async, rerun: 64) bind(r2, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000002c0)="6642104bbc937f5c9a6b8b0bc4e4800755a75d41ffeea54a7e3fabdc34e8412b7428", 0x22, 0x10d, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x85) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x3, 0x81, @local={0xfe, 0x80, '\x00', 0x0}, 0x10000002}, 0x1c, 0x0, 0x0, 0x0, 0x168}, 0x0) (async, rerun: 64) r3 = socket$inet6(0x1c, 0x2, 0x0) (rerun: 64) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r3, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x1, 0x5, @rand_addr="ff5a24fc000000000000000000e700", 0xffffffc5}, 0x1c) (async, rerun: 64) socket(0x26, 0x3, 0xe4) (async, rerun: 64) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x2e, &(0x7f0000001840)=""/53, &(0x7f0000000440)=0x35) (async) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) truncate(&(0x7f00000000c0)='./file0\x00', 0xfffff) setreuid(0x0, 0xee01) (async, rerun: 32) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)=',\x00'], 0x0) (rerun: 32) 9.64959205s ago: executing program 3 (id=53): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = socket$inet6(0x1c, 0x2, 0x7) cpuset_getid(0x2, 0x8, 0x6, 0xffffffffffffffff) sendmsg$inet6_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3, 0x4000006, @mcast2, 0x99f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES32=r0], 0x14}, 0x20105) getdirentries(0xffffffffffffffff, &(0x7f0000000140)=""/97, 0xffffffffffffff83, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) fork() aio_waitcomplete(0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x41) socket(0x1c, 0x1, 0x0) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1b46d00, &(0x7f0000000280)={0x97d, 0x8008, 0x3, &(0x7f0000000140)='./file0\x00', 0x1, 0x81, 0x3, 0x6, 0xab6, 0x5755, &(0x7f00000001c0)='\xc5/{\x00\x0eF\xc2\xdb\x03\xe8C3\x85\xb5g\xc6\x86\x80\x1a\xfcH\xd7(?\xcai\x06\xc6\x87j\xe1\x06\x90F\x94\x11\x8f\xed\x03\xa3!\xbc', [0x0, 0x9, 0xfffffff4, 0x7, 0x6, 0xff, 0xb, 0xa9, 0x9, 0xad, 0x9, 0x3ff, 0x91, 0x3, 0x5, 0x1, 0x5, 0x0, 0x400, 0x5, 0x364b, 0x5, 0x3ff, 0x9b, 0x2000000, 0x34, 0x5, 0x5, 0x7fffffff, 0x6, 0x4c, 0x0, 0x7, 0x5, 0x3, 0xffff3315, 0x6, 0xe15, 0xe43, 0x9, 0x6, 0x4, 0xa, 0x10000, 0xfefffff7, 0xfffffff0, 0x100e, 0x6, 0x7a5, 0x4, 0x20000000, 0x1311b, 0x6, 0xd40, 0x6, 0x7, 0x1, 0x6, 0xa00, 0x3, 0x6, 0x8001, 0x8000, 0x8, 0x200, 0x6, 0xed, 0x100000, 0x7, 0xfffffff9, 0x793, 0x3, 0x8001, 0x7, 0x4, 0x1, 0x5, 0x3, 0x3, 0xc81, 0xaf, 0x0, 0x72b, 0x80000008, 0x20, 0x9, 0xa9a5, 0x0, 0x7, 0x94, 0x2, 0x1, 0x0, 0x8000000, 0x7, 0x9d92]}) fstat(0xffffffffffffffff, &(0x7f0000000440)) r2 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$smbus(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) shm_open2(&(0x7f0000000000)='./file0\x00', 0x200, 0x140, 0x5, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) vfork() r3 = fork() wait4(r3, 0x0, 0x4, 0x0) ktimer_create(0x0, 0x0, &(0x7f0000000400)=0x0) ktimer_settime(r4, 0x1, &(0x7f0000000240)={{0x0, 0x3eb}, {0x2, 0x7}}, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x6}) socket$inet_udplite(0x2, 0x2, 0x88) 9.61514213s ago: executing program 1 (id=54): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000100)={@multicast2, @multicast2, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @broadcast, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000040)={@multicast2}, 0xc) 9.61367498s ago: executing program 1 (id=55): openat$bpf(0xffffffffffffff9c, 0x0, 0x462, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) (async) mlockall(0x3) (async, rerun: 64) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async, rerun: 64) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) (async) minherit(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) (async, rerun: 64) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async) aio_write(&(0x7f0000000340)={r0, 0x80000001, 0x0, 0x0, [0xfffffffe, 0xffffffff], 0x0, 0x0, 0xf, {0x5, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x400, @spare=[0x9, 0x9, 0xf, 0x2, 0x100000000, 0xd24, 0x10000, 0x6b]}}) (async, rerun: 64) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0x5f7}, &(0x7f0000000040), 0x0, 0x0) (async) r2 = kqueue() dup2(r2, r1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) (async) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r4, 0x0) (async) getpeername$unix(r3, 0x0, &(0x7f0000000180)) (async) cap_rights_limit(0xffffffffffffffff, &(0x7f00000011c0)=[0x7fffffffffffffff, 0x3]) (async) lpathconf(&(0x7f0000000000)='./file0\x00', 0x6) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) socket(0x1c, 0x1, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000200)={0xd, &(0x7f0000000240)=[{0x6}, {0x8}, {0x8}, {0x70}, {0x2}, {0x7fa7}, {0xb}], 0x7}) (async) socket$inet6_udp(0x1c, 0x2, 0x0) (async) socket(0x1c, 0x1, 0x0) 9.565197645s ago: executing program 1 (id=56): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$SMB_READB(r0, 0x8004667d, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @buf="de32", 0x0, 0x0, 0x0, 0x0}) 9.564583538s ago: executing program 1 (id=57): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x53, &(0x7f0000000140)="471ca61871cc6bec580272720c4aabebd6cbf324a5cfbfde296ab658ecc2612f374e0c8f49276edc2986050ce20bb502134b2131d525a8f495c34d51e92d98547eab5aa11de6798d714861dc192b84288409693d9bfe08fd7985dc2be5977136321a3b562d900bda893009907fbb14c8", 0x70) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0xa200408, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) chflags(&(0x7f0000000280)='./file0\x00', 0x40000) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x6) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080), 0x4) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) socket(0x1c, 0x3, 0x4) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd12_shm_open(&(0x7f0000000100)='./file0\x00', 0x800, 0x41) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f00000001c0)={0x101, 0x800000b35d}) mlockall(0x2) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) 8.665024773s ago: executing program 1 (id=61): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) setresgid(0x0, 0x0, 0x0) mlockall(0x3) pipe2(&(0x7f0000000040), 0x100000) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() socket$inet6_udp(0x1c, 0x2, 0x0) socket$inet6(0x1c, 0x2, 0x0) aio_waitcomplete(0x0, 0x0) minherit(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) semget$private(0x0, 0x5, 0x40) socket(0x1c, 0x20000000, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x2768c724b44f58aa) access(&(0x7f0000006640)='./file0\x00', 0x7) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8, 0x59) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) close(r0) freebsd11_getfsstat(0x0, 0x0, 0x2) open(0x0, 0x18289, 0x114) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 8.464963783s ago: executing program 2 (id=62): pipe2(0x0, 0xd505eb4556f41fdb) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) fhstatfs(&(0x7f0000000000)={{[0x52fb, 0x8]}, {0xa711, 0x4, "d5b3f338bc2f5d3c8044ab86e7ee0386"}}, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffa, 0xfffffffffffffffe}) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64, @ANYRES32=r0]) r1 = socket(0x1c, 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) chdir(&(0x7f0000000400)='./file/file0/..//file0\x00') setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)={@remote={0xac, 0x14, 0x0}, @loopback}, 0xc) minherit(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) sysarch$I386_SET_FSBASE(0x8, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) chflagsat(r3, &(0x7f0000000100)='./file/file0/..//file0/file0\x00', 0x40004, 0x400) socket(0x1c, 0x1, 0x0) select(0x40, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x88ba}, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r4 = openat$md(0xffffff9c, &(0x7f0000000040), 0x4, 0x0) freebsd11_fstatfs(r4, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) mkdirat(r5, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) clock_settime(0x100000000000000, &(0x7f0000000000)={0xde1ecc7f, 0x5}) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) 7.084810769s ago: executing program 2 (id=64): r0 = semget$private(0x0, 0x2, 0x7de) __semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000080)=[0x199, 0xfffd]) aio_waitcomplete(0x0, 0x0) openat$bpf(0xffffff9c, &(0x7f0000000180), 0x200, 0x0) r1 = socket(0x1c, 0x3, 0x0) lio_listio(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = kqueue() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/185, 0x4000}], 0x1) writev(r4, &(0x7f0000000080), 0x1000000000000014) kevent(r2, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) setegid(0x0) r5 = kqueue() kevent(r5, &(0x7f0000000040)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0xffffffffffffffff]}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x1c, 0x1, 0x0) r7 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f00000000c0)=0x80000000, 0x4) r8 = socket(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) connect$inet(r8, &(0x7f0000000400)={0x10, 0x2, 0x0, @multicast1}, 0x10) sendmsg$unix(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000580)="5fc569a8c675b654fd57abf35632761a4bf610ee91b8145d508fafff76e490f71828e0fddae8968b5ab3ef95ce5846a1fd7c0c1b21189493867fd43f61b11c04d9e78e96fab1f17e5a17e9cb453a423a0e117db2392bf4b2e9d9e93531cc86f8fcee4acb45f4036a93430d5169924f88c1d7d72490543df480191e2856267d69d35977ca90f5c22f1e1d74995858c1331776011195909d3469", 0x99}, {&(0x7f0000000680)="096387a8a3cb72f0163b31ba8d78267eb84f6dba11cc9af24172ce", 0x1b}], 0x2, 0x0, 0x0, 0x180}, 0x105) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r9, 0x0, 0x0, 0x40184, &(0x7f00000000c0)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) r10 = socket$inet6_udp(0x1c, 0x2, 0x0) shutdown(r10, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r10, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="717dc35b11bfc61800b0000008004500001c0000000000119078ac1400bbac14000041204e1100089078ad5046292bcafa208a7f5ef90ace9a3d286ec465f319c81c9ef30f1564b1514f831257341df68d182abd05a770ce7d131d37441349cf4c6f"]) ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000) 6.544933602s ago: executing program 0 (id=65): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$SMB_READB(r0, 0x8004667d, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @buf="de32", 0x0, 0x0, 0x0, 0x0}) 6.544274129s ago: executing program 3 (id=66): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chflags(&(0x7f0000000080)='./file0\x00', 0x60014) ppoll(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x861b, 0x2, 0x3, 0x80000000]}, 0x10) (async) ppoll(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x861b, 0x2, 0x3, 0x80000000]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) kqueue() (async) r0 = kqueue() kevent(r0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) (async) kevent(r0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x9, &(0x7f0000000080)={@empty, @rand_addr=0x8}, 0x8) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x3, 0x1, 0x0) (async) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x3, 0x1, 0x0) ioctl$KDGETMODE(r4, 0x40044b09, 0x2) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x1f, 0x1d, 0x20, &(0x7f0000000180)="ec7b00000900ff2425c1f0a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x0, 0xffe, 0xfffffffc]}) setfib(0xff) minherit(&(0x7f0000692000/0x4000)=nil, 0x4000, 0x0) (async) minherit(&(0x7f0000692000/0x4000)=nil, 0x4000, 0x0) __realpathat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x20, 0x0) (async) __realpathat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x20, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x141) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') ioctl$KDGETMODE(r1, 0x40046676, 0xeb) (async) ioctl$KDGETMODE(r1, 0x40046676, 0xeb) sendmsg$inet6_sctp(r1, 0x0, 0x20100) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xfffffffffffffebd, &(0x7f0000000000)=[{&(0x7f00000000c0)="8264e57ff63c1c2ea910b363a32b43f3fe2e182913470c1d1837ce31a75d358b55d69e90758d74a6cb415b81607e1fce402b809b9838117fd3f671a54e230ccd1ae9d9e1092ee5748be70847bafb8a45116bc28f8d96f3050af97cd51e3748da181f51823571e77949422d3e1b137f1b4731ceb41c59cd5482ffc9f00173a549fe89854fe76a259099fded3bd720c9fcf53bc9e9d29a2a5cf045c639ae1121a13e31e134abf01f8e92847244e55e6fb39e6ea80b7c63c058dffac1a5e33d0d849f84ddc028e9b9efc9e7b94b100ddc922bc098de4f43129efa568181a9be8a866e2348ff", 0xe4}], 0x1, 0x0}, 0x0) socket(0x1c, 0x1, 0x0) (async) r5 = socket(0x1c, 0x1, 0x0) r6 = open$dir(&(0x7f0000001100)='./file0/file0\x00', 0x200000, 0x190) rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') inotify_add_watch_at(0xffffffffffffffff, r6, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000410) freebsd11_getdents(r6, 0x0, 0x0) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) 5.967619043s ago: executing program 0 (id=67): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0xa200408, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x80000001, 0xfffffffffffffff9, 0x1, 0x8, 0xe8c5}], 0x1, 0x0, 0x60, 0x0) close(r3) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f00000002c0)=@file={0xa, 0x1, './file1\x00'}, 0xa) listen(r5, 0x7ff) pipe2(0x0, 0x100004) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) chflags(&(0x7f0000000280)='./file0\x00', 0x40000) open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)="f8bd45155165febb5a878c2fbaf6e5229db45ef47d1caeda584dac5d0f073025f0a771ccb20caba6cc49e284e9fc24262297f46539d96d62d4eab9e077ff0c6a004278edc6b5a1fc19ba37dde00b4b0a21fd1939a8ba499658a5d3788eee1940c05cd57c52196595967a269f7a710c724b71a10201006acb1f50e47382979db2503583a0faae2f47be469a22ef4c113ee9bef83189087a87acaa155dad83751a", 0xa0}], 0x1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x80000081, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="4b420055bfb403f04ef8f6ebbb5a59f3f11b820796181cdff7763f03e1a5d88f694eb55da319ff10c826c56285f4cfd22baa0aa1abdc07c99819785e77adf8995898943a7c5a6fbfbcb3e20de74b065778026b84ad70a1307649cbedea76a2ad140c78809942d0e4b182d212b9577274c5aaae915f503d5ed9cbfb063e2eaa4ef80a6e868806d48fc86c635f0eaedcf2c45ecb547078e32a43e9010000000000000045c896801b7b6abcab811058f62fbe549081c92c", 0xb6, 0xf8c14ce03ad0ef7c, &(0x7f0000001200)={0x10, 0x2, 0x2, @multicast2}, 0x10) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) socket(0x1c, 0x3, 0x4) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.967157075s ago: executing program 2 (id=68): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0xa200408, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) chflags(0x0, 0x40000) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) sendto$inet(r4, &(0x7f0000000140)="4b420055bfb403f04ef8f6ebbb5a59f3f11b820796181cdff7763f03e1a5d88f694eb55da319ff10c826c56285f4cfd22baa0aa1abdc07c99819785e77adf8995898943a7c5a6fbfbcb3e20de74b065778026b84ad70a1307649cbedea76a2ad140c78809942d0e4b182d212b9577274c5aaae915f503d5ed9cbfb063e2eaa4ef80a6e868806d48fc86c635f0eaedcf2c45ecb547078e32a43e9010000000000000045c896801b7b6abcab811058f62fbe549081c92c", 0xb6, 0xf8c14ce03ad0ef7c, &(0x7f0000001200)={0x10, 0x2, 0x2, @multicast2}, 0x10) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) socket(0x1c, 0x3, 0x4) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd12_shm_open(&(0x7f0000000100)='./file0\x00', 0x800, 0x41) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f000072a000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x16) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) 5.935013411s ago: executing program 3 (id=69): socket(0x26, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x800000000, 0x7, 0x0}, {0x0, 0x8, @sival_int=0xe, @thr={0x0, 0x0}}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x1010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESHEX, @ANYRES64]) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN(0xffffffffffffffff, 0x6, 0x401, 0x0, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) sync() sync() sync() sync() sync() sync() sync() aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) 4.376587865s ago: executing program 0 (id=70): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x30) setrlimit(0x6, &(0x7f0000000000)={0x1, 0x7}) mlockall(0x1) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) munlock(&(0x7f0000079000/0x3000)=nil, 0x3000) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() open$dir(&(0x7f0000000580)='./file0/file0/file0\x00', 0x4, 0x2) socketpair(0x1, 0x1, 0x0, 0x0) aio_waitcomplete(0x0, 0x0) socket(0x1c, 0x1, 0x5) r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) r1 = openat$ptmx(0xffffff9c, &(0x7f00000009c0), 0x10000, 0x0) rfork(0x1000) cap_fcntls_limit(r1, 0x8) freebsd11_mknod(0x0, 0x1000, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0xc8, 0xffffffffffffffff, 0x4007, 0x0, 0x7ff, 0x2, [0x3, 0x7fffffffffffffff]}], 0x1, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0xa1ba, 0x0, 0x1c0, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r3) extattr_set_link(&(0x7f0000000380)='./file0\x00', 0x2, 0x0, 0x0, 0x0) r4 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) inotify_add_watch_at(0xffffffffffffffff, r4, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) unlinkat(r4, &(0x7f0000000400)='./file0\x00', 0x2000) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) 4.376078948s ago: executing program 2 (id=71): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, 0x0, 0xa200408, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) chflags(&(0x7f0000000280)='./file0\x00', 0x40000) open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000ffff0000", @ANYRES32=r5], 0x10}, 0x0) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/129, 0x81}, 0x0) r6 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r6, 0xffff, 0x20, &(0x7f0000000080), 0x4) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) socket(0x1c, 0x3, 0x4) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd12_shm_open(&(0x7f0000000100)='./file0\x00', 0x800, 0x41) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 4.369106258s ago: executing program 3 (id=72): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x11) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x60) kevent(r1, &(0x7f0000000080)=[{0xbaa5, 0xfffffffffffffff3, 0xa5, 0xc0000000, 0x8, 0x3, [0x3, 0x2f9, 0x5, 0x1]}], 0x1, &(0x7f00000000c0)=[{}, {}], 0x2, &(0x7f0000000140)={0x9, 0x6}) r2 = kmq_open(&(0x7f0000000180)='./file0\x00', 0x4, 0x52, &(0x7f00000001c0)={0xfbb, 0x3, 0x5}) open(&(0x7f0000000200)='./file0\x00', 0x10000, 0x8f) r3 = inotify_add_watch_at(r1, r0, &(0x7f0000000240)='./file0\x00', 0x4) inotify_rm_watch(r1, r3) freebsd10_pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r4) ioctl$BIOCSRTIMEOUT32(r2, 0x8008426d, &(0x7f00000002c0)={0x4, 0xffff}) symlinkat(&(0x7f0000000300)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00') extattr_set_file(&(0x7f0000000380)='./file0\x00', 0x1, &(0x7f00000003c0)='.E@[,\x00', &(0x7f0000000400)="88ce918bb623c5117e10262441e566dffe77335da7836562e8ba2d4f81320e5a954f35c15524ee3a4746481628997b332edad1226261a60d73d3e37bf141ca85275ed1785f015b4b4e3866237de424224958e897e12a4ad9e7f43bac5c59a4d175345fdd5bef0d788658018b1d89ee3d85cc622826261aa5851b8604e763fff2f7a576a83976e722d8ec50ef9c15cd42a61a88a3754e09a1331b82852dc209e69085a573e25ed6b2af18cc10b0fe169a550ce18964060dbf6096ae08d43410dca47de3b86bcd8a1ecf785b2e7a279a4da292e62f044936b3547c7a6c8e654c", 0xdf) chflagsat(r5, &(0x7f0000000500)='./file0\x00', 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000540)=@file={0xa, 0x1, './file0\x00'}, 0xa) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000580)={0x0, 0xfffe}, 0x8) sendto$inet(r4, &(0x7f00000005c0)="fddff9b5454975335a3b13c89fb5993d279d5f0f940dc93bb331ab3115e868d3a04f0ff6702b49501a8c6c990b2333534c6e7d99937a943448468d4f7445872559ed07c9fc05e030e133412c3ff619e236", 0x51, 0x80, 0x0, 0x0) lgetfh(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(r1, 0x84, 0x8003, &(0x7f0000000700)={0x0, &(0x7f00000006c0)=[@in={0x10, 0x2, 0xffffffffffffffff, @local}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @empty}]}, &(0x7f0000000740)=0x8) getsockopt$inet6_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000780)={r7, 0x98b}, &(0x7f00000007c0)=0x8) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000800)=@file={0xa, 0x1, './file0\x00'}, 0xa) open(&(0x7f0000000840)='./file0\x00', 0x100, 0x40) ioctl$DIOCADDADDR(r0, 0xc4584434, &(0x7f0000000880)="6147fc9578ba583d7a80d3b440762a6b724d96999d4eb7e8cf61941b7b470f9a3b92dff7a10a2caac93c5bbfa705028ee6a68469bffa1ea00c3bc744f98eb002d55e8d7e064cc831bfc58ad98730ba425fc39958d50dd646d87197d93f5ca8987d") getfh(&(0x7f0000000900)='\x00', &(0x7f0000000940)) extattr_delete_file(&(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0)='.E@[,\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(r4, 0x84, 0x8003, &(0x7f0000000a40)={r7, &(0x7f0000000a00)=[@in={0x10, 0x2, 0xffffffffffffffff, @multicast1}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, @in={0x10, 0x2, 0xffffffffffffffff, @multicast2}]}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp_SCTP_EVENT(r1, 0x84, 0x1e, &(0x7f0000000ac0)={r9, 0xd, 0x2}, 0x8) shmctl$IPC_RMID(0x0, 0x0) 3.46525732s ago: executing program 0 (id=73): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0xa200408, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) chflags(&(0x7f0000000280)='./file0\x00', 0x40000) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1, 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) sendto$inet(r4, 0x0, 0x0, 0xf8c14ce03ad0ef7c, &(0x7f0000001200)={0x10, 0x2, 0x2, @multicast2}, 0x10) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) socket(0x1c, 0x3, 0x4) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000407000/0x1000)=nil, 0x1000, 0x0) freebsd12_shm_open(&(0x7f0000000100)='./file0\x00', 0x800, 0x41) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) mount(&(0x7f0000000140)='cd9660\x00', &(0x7f0000000180)='./file0\x00', 0x9080000, &(0x7f00000001c0)="f172eae376ee5a5ec821f92179eb983ddb162b609d488a168b3c6b680d804e570c8433ce6fe88cba2a01f7e1d25f432f5293fba9280ea2a2888519ba430b4bed8f00b75a22d90b5c701a9911dac941a24a2a0955114137ee4c26") truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) 3.464191457s ago: executing program 2 (id=74): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x1) r0 = socket(0x1c, 0x1, 0x0) r1 = dup(r0) ioctl$MDIOCATTACH(r1, 0xc1b46d00, &(0x7f0000000280)={0x97d, 0x8008, 0x3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x81, 0x1, 0x6, 0xab6, 0x5755, &(0x7f0000000100)='\xc5/{\x00', [0x0, 0xd, 0xfffffff4, 0x7, 0x6, 0xff, 0xfffffff7, 0xa9, 0x9, 0xad, 0x9, 0x3ff, 0x0, 0x3, 0x5, 0x1, 0x5, 0x0, 0x400, 0x5, 0x364b, 0x5, 0x3ff, 0x9b, 0x0, 0x34, 0x5, 0x5, 0x7ffffbff, 0x6, 0x4c, 0x0, 0x7, 0x5, 0x3, 0xffff3319, 0x6, 0xe05, 0xe43, 0x9, 0x6, 0x8, 0xa, 0x10000, 0xfefffff7, 0x0, 0x100e, 0x6, 0x7a8, 0x4, 0x20000000, 0x311b, 0x6, 0x6, 0x6, 0x7, 0x1, 0x6, 0x800, 0x0, 0x6, 0x8001, 0x8000, 0x8, 0x200, 0x6, 0xed, 0x1, 0x7, 0xfffffff9, 0x6, 0x2, 0x8, 0x7, 0x4, 0x1, 0x5, 0x3, 0x3, 0xc81, 0x44c, 0x0, 0x72b, 0x8, 0x20, 0x9, 0xa9a5, 0x0, 0x7, 0x90, 0x2, 0x1, 0x0, 0x8000000, 0x7, 0x9d92]}) fstat(0xffffffffffffffff, &(0x7f0000000440)) r2 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$smbus(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) shm_open2(&(0x7f0000000180)='./file0\x00', 0x200, 0x140, 0x5, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x602, 0x0) ftruncate(r3, 0x3862) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) mkdir(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(0x0, 0x200000, 0x26) 3.45408938s ago: executing program 3 (id=75): ioctl$SMB_OLD_TRANS(0xffffffffffffffff, 0xc01c690c, &(0x7f00000000c0)={0x6c, 0x6f, 0x30, @buf="db47", @byte=0xf9, 0x3, 0x0, 0x29, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$SMB_READB(r0, 0x8004667d, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @buf="de32", 0x0, 0x0, 0x0, 0x0}) 2.454744057s ago: executing program 0 (id=76): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = kqueue() fcntl$setstatus(r0, 0x4, 0x4c) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) 2.4540831s ago: executing program 2 (id=77): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000100)={@multicast2, @multicast2, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000040)={@local={0xac, 0x14, 0x0}, @rand_addr=0x1010001, @multicast2}, 0xc) socket$inet6_udp(0x1c, 0x2, 0x0) kqueue() aio_mlock(&(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x3, 0x4, @sigval_ptr, @thr={0x0, 0x0}}}) rfork(0x85000) r1 = semget$private(0x0, 0x4, 0x7de) __semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000080)=[0x199, 0xfffd]) openat$bpf(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) r2 = socket(0x1c, 0x3, 0x0) lio_listio(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)={0x3, 0x5, @sival_int=0x1fe, @spare=[0xff, 0x367d, 0x8, 0x1000, 0x101, 0x291a7efd, 0x4, 0x4bc9]}) kqueue() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/185, 0x4000}], 0x1) writev(r4, &(0x7f0000000080), 0x1000000000000014) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) setegid(0x0) kqueue() open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) extattr_set_link(&(0x7f0000000080)='./file0/file0\x00', 0x1, 0x0, 0x0, 0x0) kqueue() kevent(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x12ea, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x143140, 0x4) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') socket(0x2, 0x3, 0x10) link(&(0x7f0000001940)='.\x02\x00', &(0x7f0000001980)='.\x02\x00') open$dir(&(0x7f0000000840)='./file0\x00', 0x40000400000002c2, 0x5a) 2.453236765s ago: executing program 3 (id=78): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chflags(&(0x7f0000000080)='./file0\x00', 0x60014) ppoll(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x861b, 0x2, 0x3, 0x80000000]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) kevent(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$CIOCGSESSION2(r1, 0xc030636a, &(0x7f0000000080)={0x1f, 0x1d, 0x20, &(0x7f0000000180)="ec7b00000900ff2425c1f0a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x0, 0xffe, 0xfffffffc]}) setfib(0xff) minherit(&(0x7f0000692000/0x4000)=nil, 0x4000, 0x0) __realpathat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x20, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x141) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) msgget(0x3, 0x620) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) sendmsg$inet6_sctp(r0, 0x0, 0x0) r2 = socket(0x1c, 0x1, 0x0) r3 = open$dir(&(0x7f0000001100)='./file0/file0\x00', 0x200000, 0x190) rmdir(0x0) open(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x85) inotify_add_watch_at(0xffffffffffffffff, r3, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000410) freebsd11_getdents(r3, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) 0s ago: executing program 0 (id=79): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000180)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r0 = socket(0x2, 0x8c2a4800d0a5be36, 0x2) ioctl$SMB_SENDB(r0, 0xc0106924, &(0x7f0000000080)={0x14, 0x3, 0x0, @word=0xff, @byte, 0x0, 0x0, 0x0, 0x0}) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) syz_emit_ethernet(0x5b, &(0x7f0000000280)=ANY=[@ANYBLOB="4b8f3a6f6f98aaaaaaaaaabb86dd6000000000253aff00000000000000000000ffffac14008fb80b9fe8bbff020000000000000000000000000098f711e61d186e536f4ee4dc0c8514a1f8a553974801c98664b478ef08c3bff7fb"]) aio_waitcomplete(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x10c) connectat$unix(0xffffffffffffffff, r1, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) munmap(&(0x7f000049b000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000308000/0x4000)=nil, 0x4000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1, 0x0) socket(0x1c, 0x1, 0x0) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) rmdir(0x0) cpuset_getid(0x1, 0x3, 0x0, 0x0) cpuset(&(0x7f0000000000)=0x0) cpuset_setid(0x4, 0x0, r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0054208000 Expensive callout(9) function: 0xffffffff81a7cf90(0xfffffe00778d3a80) 0.008026548 s if_delmulti_locked: detaching ifnet instance 0xfffffe00541bf000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054208000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054208000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054208800 if_delmulti_locked: detaching ifnet instance 0xfffffe00541bf000 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0077b7b370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837205c0 usecount 10, writecount 8, refcount 69 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00587617c0 ref 1 pages 536 cleanbuf 64 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe005875c780 (pid 968, syz-executor, tid 100249) nlink=1, effnlink=1, size=2147483650, extsize=0 generation=21f79833, uid=0, gid=0, flags=0x48008 ino 86, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0054209000 if_delmulti_locked: detaching ifnet instance 0xfffffe00541bf000 if_delmulti_locked: detaching ifnet instance 0xfffffe00541bf000 vnode_pager_putpages: zero-length write at 0 resid 1 0xfffffe0077b7c528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837205c0 usecount 3, writecount 3, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005871f7c0 ref 2 pages 1 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0058748780 (pid 994, syz-executor, tid 100298) nlink=1, effnlink=1, size=1, extsize=0 generation=1790000f, uid=0, gid=0, flags=0x40000 ino 110, on dev gpt/rootfs Out of ktrace request objects. vnode_pager_putpages: zero-length write at 0 resid 1 0xfffffe00599c11b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837205c0 usecount 3, writecount 3, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00587509b0 ref 2 pages 1 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe005876d780 (pid 1027, syz-executor, tid 100360) nlink=1, effnlink=1, size=1, extsize=0 generation=c78fcab4, uid=0, gid=0, flags=0x40000 ino 128, on dev gpt/rootfs SYZFAIL: invalid kcov comp type type=ffffffff816a58dc (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=1 req=61 state=1 status=67 (errno 9: Bad file descriptor) FreeBSD/amd64 (ci-freebsd-i386-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: set $lines = 0 Password: Login incorrect login: show registers Password: Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl