last executing test programs: 6.475372758s ago: executing program 3 (id=4): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getsockopt$inet_sctp_SCTP_EXPLICIT_EOR(r0, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) cap_rights_limit(r1, &(0x7f0000000580)=[0x20000207fffffdc, 0x400000000000005]) sigaction(0x6, &(0x7f0000000200)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfffffffe]}}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x1, 0x6, @sival_ptr, @thr={0x0, 0x0}}) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) semget(0x2, 0x2, 0x682) socket$inet6_sctp(0x1c, 0x1, 0x84) ktrace(0x0, 0xb4b4bc386c036afd, 0x30a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0xa, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc008}}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) open(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400000, 0x12c) setsid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) aio_write(&(0x7f00000006c0)={0xffffffffffffffff, 0x57c, 0x0, 0x0, [0x5, 0xfffffff9], 0x0, 0x0, 0x3fffffd, {0x2, 0x10, 0x0}, {0x0, 0x0, @sival_ptr=0x21e379bf, @ke_flags=0x4}}) open$dir(&(0x7f0000000240)='./file0\x00', 0x400000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x42) open(0x0, 0x80000000000206, 0x0) 4.147069145s ago: executing program 2 (id=7): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = __specialfd$eventfd(0x1, &(0x7f00000003c0)={0x7, 0x5}, 0x8) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cfe19f0da4833728dc14", 0x0, &(0x7f0000000040)="cf", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "00ff03ff8e3500"}, 0x40) sendto$inet(r2, &(0x7f0000000000)="727f4c98e6e3b6d62e469a3ba2e66dba9106d9b78a10424b958051429e1dce150e1970605333c5f442aa7ab1e26f9aecabf014a76c0000e80000000000", 0x100a4, 0x185, &(0x7f0000000280)={0xfffffffffffffeac, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) aio_write(0x0) rename(0x0, 0x0) r3 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r3, 0x29, 0x17, &(0x7f00000001c0)=0x100, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79aaaaaa86dd6015f2ff00220000eee21f0000003c00000500004c58053bfe80000000000000d38a6cee000000aa00000011000000000000002b00000000000000a64700"/88]) openat$md(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) connectat(r2, r1, &(0x7f0000000100)=@un=@abs={0x8, 0x0, 0x0, 0x2}, 0x8) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) procctl$PROC_ASLR_STATUS(0x0, 0x0, 0xe, &(0x7f0000000440)) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) listen(r4, 0x1) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x31, 0x0, 0x8) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0xffffffffffffffff}, {0x1fff, 0xfffffffffffffffc}}, 0x2000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) kevent(r0, &(0x7f00000005c0)=[{0x0, 0xfffffffffffffffb, 0x80a9, 0x40, 0x2, 0x7ff, [0x0, 0x3e72, 0x100000000, 0x7]}, {0x4, 0xfffffffffffffffc, 0x10, 0x400, 0x4e, 0x400, [0xf, 0x2, 0xf, 0xe1]}, {0xa6f6, 0xffffffffffffffff, 0x4001, 0x200, 0x9, 0x0, [0x2ec, 0x8, 0x40, 0x100]}, {0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x2040000000000000, 0x10, [0x57405cc2, 0xa951, 0xfff, 0xffffffff7fffffff]}, {0xfffffffffffffff9, 0xfffffffffffffff3, 0xc4, 0x0, 0x48, 0x4, [0xfffffffffffffffa, 0xd4de, 0x3, 0xfff]}, {0x4, 0xfffffffffffffff3, 0x80, 0x200, 0x3, 0xf5, [0x5, 0x8, 0xc, 0x4]}, {0xc9bb, 0xfffffffffffffffb, 0x20, 0x10, 0x39, 0x10000, [0x77, 0x8, 0x7, 0x1]}, {0x8, 0xfffffffffffffff3, 0x8001, 0x10, 0xfff, 0x4, [0x7fffffffffffffff, 0x0, 0xf, 0xb1]}, {0x40000, 0xfffffffffffffffa, 0x51, 0x80000000, 0x2, 0x8, [0x8, 0x9, 0x8000000000000000, 0x3]}], 0x9, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000240)={0xfbd, 0x6}) getsockopt$sock_int(r6, 0xffff, 0x1, &(0x7f0000001080), &(0x7f0000000340)=0x4) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') 4.039602544s ago: executing program 3 (id=8): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r1, 0x1000) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r2, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000280)='./file0\x00', 0x10000, 0x8, 0xa3d, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0xfffffffe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1]}) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) extattr_list_file(&(0x7f0000000100)='./file0\x00', 0x6, &(0x7f0000000140)=""/250, 0xfa) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1019, 0x0, 0x0) sendto(r5, 0x0, 0x0, 0x20100, 0x0, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000dc0)={0x20, 0x1, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) fchflags(r3, 0x40008) sync() r6 = socket$inet6_udplite(0x1c, 0x2, 0x88) bind$inet6(r6, &(0x7f0000001140)={0x1c, 0x1c, 0x3, 0x0, @mcast2}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x30f5}, 0x1c) r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) shmat(r7, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmat(r7, &(0x7f0000fed000/0x4000)=nil, 0x7000) extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000040)='%[\x00', 0x0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) 3.330213636s ago: executing program 2 (id=10): open(&(0x7f0000000200)='./file/file0\x00', 0x4, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) freebsd12_shm_open(0x0, 0xd9cff1cbcc18e11c, 0x1) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000001e00)="80ed8c89917bf628", 0x8, 0xc, &(0x7f0000001f00)={0x1c, 0x1c, 0x0, 0xfff, @loopback, 0x7}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = open(0x0, 0x200000, 0xd2) r7 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000400000002c2, 0x0) r8 = socket$inet6_tcp(0x1c, 0x1, 0x0) mlockall(0x3) listen(r8, 0x0) accept(r3, 0x0, 0x0) renameat(r7, 0x0, r7, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r6, 0x0) r9 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r9, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) ioctl$MDIOCATTACH(r5, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8, 0x3e, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}) freebsd12_shm_open(&(0x7f0000000280)='./file0\x00', 0x2, 0x40) r10 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) copy_file_range(r10, &(0x7f0000000300)=0x1ff, r10, 0x0, 0x81, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) fspacectl(r0, 0x1, &(0x7f0000000040)={0x3ff, 0x7ffffffffffffc00}, 0x0, 0x0) 3.057949023s ago: executing program 3 (id=11): r0 = socket$inet6(0x1c, 0x2, 0x0) ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc0306367, &(0x7f00000004c0)={0xf414, 0x1, 0x6, 0x3aa6, &(0x7f00000002c0)="f4c40d964b26a47419bfefce66223fd1895532bcc8369821cda12e2933af00e254152cd0c8f01821f5199ccfeb217bf6c38beb539fd357800c4dd22867e1ec3271c15f409d869fc5bc9ecccd642b23e23e4881e0a5294cfe8e1c0e4fbf663db8546fcf225716c7a5afec8e1eadf4cf3eda85c88e2c75419fecbfd8649a64c6b01a7ad68f48eda2bc53cde0eca66b3626bb63074d2191b7ec4908500d20d9177b099e563c544bbdf4569c3ddda3632ec4cbdff38441ed6cde0ea7a6a7", &(0x7f0000000200)="8c0b1430d1e0fcdb21076b73bcaf2c335c784379c49fcd275fd5a72f9c44389883de38779a1d394ccc0c4949effa864d658c04c99ed90b3793f025d5072fa3b127019df6b809b31d390b1807a998b485811297f201f9a096d99c54de4fb3001bb0237324101635dc83809874497b2c0e367567e5b1f9", &(0x7f0000000100)="3a52453a72838ed870b50fe20fc80741f633fb683ff891841dbcb678d09fd76de35dff2a6ee925e4ce4ab0078c2d59ca82247a", &(0x7f0000000440)="130d6d2015fcca7313dadcabae4aa32623ef8a86d6e2a38bfde418f0f38074c25cb0330bd1152aa1d1f9c01b215286a1066a92c42b766eaed44fda353a31e7e47fe5bf93507575ab4f284134799d97f5370a40d390d28d65d0e45dba84c798928dc44419cdbf"}) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="c3b58b132350aaaaaa590bdb9e4ff6ff0200000000000000000000000000010103907800000000608f79f70000062eb77686bdc8cdde000000000000000001d6f6d04015f600"/81]) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @rand_addr="feb65a5074b2b30000000001000000dc"}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x0, &(0x7f0000000000)={{0x101, 0x4}, {0x958, 0x1}}, &(0x7f0000000080)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) flock(r2, 0x8) aio_readv(&(0x7f0000000380)={r2, 0x8000000000000001, 0x0, 0x0, [0x101, 0x9], 0xcc, 0x18, 0x4, {0x4, 0x7, 0x0}, {0x1, 0x4, @sival_int, @spare=[0x2, 0x2, 0x9, 0x8e000000, 0x81, 0x40, 0x8, 0x10000]}}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRESHEX, @ANYRES64=r1], 0x18) socket(0x11, 0x10000000000003, 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000003780), 0x80, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x28, &(0x7f0000000140)=0xf, 0x4) ioctl$BIOCSETFNR32(r3, 0x80084282, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x5, 0x0, 0x0, '\x00', {0x8, 0x6, "f1e078", 0x6, 0x44, 0xff, @mcast2, @mcast1}}}}}}}) socket(0x1b, 0x3, 0x0) r4 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f00000000c0)={0xb, 0x0, 0x20, &(0x7f0000000100)="0b6fac4103e7a00d4689e8090000005aedaacdd4743c7eaa2c7300d05fe86026", 0x0, 0x0, 0x0, 0x7d86699a, [0x0, 0x0, 0x0, 0x1]}) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x3, 0x8060, &(0x7f0000000380), 0x0, 0x0, 0x0}) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f0000000040)={0x2a, 0x0, 0x17, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc37", 0x0, 0x0, 0x0, 0xfdffffff}) ioctl$BIOCLOCK(0xffffffffffffffff, 0x2000427a) ioctl$BIOCSTSTAMP(0xffffffffffffffff, 0x80044284, &(0x7f00000000c0)=0x2) ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0}) 2.825982313s ago: executing program 1 (id=12): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x2, 0x7}) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = semget$private(0x0, 0x6, 0x8bffac5b1829c4e8) semop(r1, &(0x7f0000000080)=[{0x3, 0xd1, 0x1800}], 0x1) __semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000b80)=[0xea2, 0x24]) r2 = socket(0x26, 0x3, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x8000, {0x1, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x3ef7}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x2000000, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0xf33a}, {0x0, 0x10001}}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f00000000c0)={0x17, 0x1d, 0xb, &(0x7f0000000940)="0b6fac4103e7a00d4689e8", 0x0, 0x0, 0x0, 0x7d86699a}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, 0x0, 0x0) ioctl$CIOCCRYPT(r4, 0xc0306367, 0x0) kqueue() aio_writev(0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) freebsd12_shm_open(&(0x7f0000000100)='./file0\x00', 0x400, 0x50) close(r5) socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)={@empty, @random="0010000800", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x25, 0x4, 0x0, 0xfb, 0xffffff84, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @generic="ba2602712b0181f0fe6eb82c46a04a5120"}}}}) rfork(0x1000) setitimer(0x0, 0x0, 0x0) 2.599292554s ago: executing program 3 (id=13): r0 = socket$inet6(0x1c, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000002c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(0xffffffffffffff9c, r1, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001900)={@in={{0x10, 0x2, 0x1, @multicast1}}, r2}, 0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x900, &(0x7f0000000340)={r2, 0xd0}, &(0x7f0000000580)=0x8) setsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x24, &(0x7f0000000140)={r2, @in={{0x10, 0x2, 0x3}}, 0x2}, 0x90) getsockopt$inet6_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000)={r2, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000cc0), 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0x101, 0x0, 0x0) r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x64) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r5 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r6 = socket(0x1c, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0xbc0, @loopback, 0x7}, 0x1c) connect$inet6(r6, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) sendfile(r4, r6, 0x4, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x109, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x100003, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x1}, 0x0) setsockopt$sock_splice(r6, 0xffff, 0x1023, &(0x7f0000000040)={r6, 0x0, {0x1, 0x4}}, 0x20) rfork(0x3000) 2.595127408s ago: executing program 0 (id=14): freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x7, 0xffffffffffffff00, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = kqueue() kevent(0xffffffffffffffff, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0) fchown(r2, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = fork() getsid(r3) symlink(&(0x7f0000000000)='.\x00', 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_set_file(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000040)='\x8c][\xc7\\\x00', &(0x7f00000002c0)="3cda5e28ab52cc562df4943a87fc383d04a2346c77214632321f0d6562a5ee98c58d4e7ba197ea31e5529f8a9dce34649f3790d9886d79892bd5f5d8814826c17832843452eeb42a69da4978aa96a5821528e7eee65f702711335af2e7b6b01b9e7db319b2f603a857a839090125c995100d797c5fd21a21f458ab77253ff3ee11e14ca3541739b07e0ab6867b99ce6606a34b43683cec46f41345a052ed51edfcaa6d32b83299e4392408ddfdf0", 0xae) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', &(0x7f0000000140), 0x0) kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fork() openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket(0x1, 0x1, 0x9) kevent(0xffffffffffffffff, &(0x7f0000000380)=[{0x7fffffffffffffff, 0xfffffffffffffffa, 0x1, 0x1, 0x101, 0x3, [0x5, 0x5, 0x7fffffffffffffff, 0x5282aee3]}], 0x1, 0x0, 0x0, 0x0) fork() fork() recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) 2.377506002s ago: executing program 1 (id=15): r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x2000, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x400000, 0x0) kqueue() kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{0x3, 0xfffffffffffffffd, 0x40c2, 0x2, 0x4fda, 0xc6, [0x101, 0x2, 0xb, 0x9]}], 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000001c0)=0x2, 0x4) setuid(0xee01) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @multicast1}, 0x10) ioctl$DIOCSETLIMIT(0xffffffffffffffff, 0xc0084428, &(0x7f0000000080)={0x0, 0x3}) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r4 = getpgrp(0xffffffffffffffff) aio_fsync(0x0, &(0x7f0000000440)={r3, 0x2, &(0x7f0000000280)="a9f7cb420b6f2c7c2da9cc78d48be223b87db0f409293748d35dab25a5dda97e9baa327470a8fc2b89e551496a8f372a95e1e8126b9cf335f41716e017b595bb5314189df966426beccb750336dad1ae6f989a9c62b24bfc8c758678e84984a6e5855d6c3b039af624cf20f1199e3c", 0x6f, [0x0, 0x9], 0x0, 0x5, 0x200, {0xb8, 0xc, &(0x7f0000000300)="f085331e0d5cf27a3c175078aa18972c1a996eddf582ffec79b48e3292f9493ee722831f8634c3d8c6feb5c5eca370d4ddb8afd375213c46f82c859de6484963e5dedf6609a67dfbc180bb2b52804419b5ca3422726b0167194c4c8a985efbce790bf1e12859ca37898b7821483b614079023a7dd5d4d438fe2cbb44df574a305a0bc505c0b12a8889d52762b505a63a6a4389e1a8f67d05bcc6ed3edf7e591676b8c9782d7fec151380297f872d722cf50a8586d85b84ab1de44e3345323e0b5bdbf1831e3eada0c4ee69bffa7f0625ee80"}, {0x3, 0xa, @sigval_int=0xc0000, @tid=r4}}) r5 = socket(0x1c, 0x5, 0x0) dup2(r5, 0xffffffffffffffff) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x4, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x1, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) 2.197837197s ago: executing program 1 (id=16): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff0000"], 0x9}, 0x0) fcntl$getown(0xffffffffffffffff, 0x5) aio_write(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x4b, &(0x7f0000000080)=0x2, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) r3 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x6, 0xe739}}}}}) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) kqueue() open(0x0, 0x0, 0xe) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="4b00000000000000f0d0092a78e8bfc4e5a1488f80298906704676d2be441a965268331f98b186e51bb38578619a0165e6d463fc3e525ec9c20adab5acb53529706779b8480845997a38c11738d3a6f97a1b2517ff46cff9123153c67680191aa8b91c255089284dd7bc73d942868698baba4a0d"], 0x8) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x2}, 0x1c) r4 = socket$inet6(0x1c, 0x1, 0xaa) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="46000000000000001f7647fd80b035dbfa4517cd7d399a66125e53"], 0x8) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f00000002c0)={0x1e, 0x1, 0xffffffffffffffff, 0x8}) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket(0x1c, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) mount(&(0x7f0000000180)='hammer2\x00', &(0x7f00000001c0)='./file0\x00', 0x8000240, &(0x7f0000000200)="c5752fef05ab594b9b76249a121c470d629ded8845958092a4d56e38fbf3a881e884956cbabb24748cd51a6b") socket(0x26, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x44, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x2, @loopback, 0x801}, 0x1c) socket$inet6_sctp(0x1c, 0x5, 0x84) 2.010791888s ago: executing program 0 (id=17): socketpair(0x1, 0x30000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) writev(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)="6a75184735cf6621446cb1ec13a08c7835f7092d4a964216791750665bed1aad6d226c4651f4c5088826514a9f1ba9dedb35d2ecd33ecb664e84e4acbefb07aaa1c03dbf4ece90fc705b6d774153242ff4b619d79a482c5844b543336be8af764b517ef05872017e5450fcf255e2baf400b95049457632600766645ab4ab9b3966bf87aa6d6348ffc1e001eec581d235212772596dcba95a0b7bda1855bc7380f2259998767048e2088c04f1f6ffc8896553b2ee", 0xb4}, {&(0x7f0000000380)="8e8c4335629a13b1aadbc138b878a053a938d7651a6f8766e7844389fb58beb459353b253474c900b9d48c9758dc95494b3d5e80d449a31deb3fc7", 0x3b}, {&(0x7f00000003c0)="b3577b281c99b330f73ceaebdb716deb8fd0801dda9213510e5ed31c1aaaa23fd2af9cf30994908643c824843d5b6f793ceb016b1df9a711b94d5eb19985ed61667efd66f309853a00865bc0d15d3a9e620af8595ce2f2c101665a76a13803e52cd80fbb84619a86b2c5c38de2d5c5efdf56b0245181a0c4b1dd4257e5be200b259938ce7aa723abbd39b00b88484377f2b564760bb294585648bb0cf6aa502e25d4e47742388eb18daa66cf54d1f1988f09ed3034a77706bf5d85427c", 0xbd}, {&(0x7f0000000540)="cde65f5e0f43ac8d2be618fff9bc4a4f076d097125145d5e543dfe20986b6c475d05654eb5c3ff58c9c5ede8816c7c66000000000000000000", 0x39}], 0x4) socket$inet6_udp(0x1c, 0x2, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r2, 0x1000) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000280)='./file0\x00', 0x10000, 0x8, 0xa3d, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0xfffffffe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1]}) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) extattr_list_file(&(0x7f0000000100)='./file0\x00', 0x6, &(0x7f0000000140)=""/250, 0xfa) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) r6 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1019, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x20100, 0x0, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000dc0)={0x20, 0x1, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) __semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000000)) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x2000) fchflags(r4, 0x40008) sync() sync() r8 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MDIOCRESIZE(r8, 0xc1c06d04, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) 1.821579766s ago: executing program 2 (id=18): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x400, 0x18) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fork() connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24) socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x400, 0xffffffffffffffff, 0x9, 0x8, 0xe8c5, 0x5, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x400000000000147, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x800, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20104, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) pwritev(r3, &(0x7f0000000040), 0x0, 0xed5) freebsd11_fstatfs(r1, &(0x7f00000004c0)) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)) getgroups(0x0, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) getgid() freebsd11_stat(&(0x7f0000000180)='./file0\x00', 0x0) r5 = fork() sigqueue(r5, 0x50, @sival_int=0x6) ioctl$GETFKEY(0xffffffffffffffff, 0xc0146b00, &(0x7f00000000c0)={0x10, "cd8936b60e762b60470bc3bc7f056cc4", 0x7}) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) freebsd11_stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) socket$inet6_tcp(0x1c, 0x1, 0x0) 1.188887218s ago: executing program 0 (id=19): r0 = socket(0x2, 0x1, 0x0) ktimer_create(0x4, 0x0, &(0x7f0000000480)) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x28, 0x2, 0x3, @rand_addr=0x10dfa767}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) aio_write(&(0x7f0000000140)={r1, 0x40000000006, &(0x7f0000000240)="a3", 0x1, [0x5], 0x0, 0x0, 0x1, {0x0, 0xffffffffffffffff, 0x0}, {0x0, 0x0, @sival_ptr=0x5, @spare=[0x400000000, 0x9, 0x9, 0x7, 0x7, 0x1, 0x2, 0x8]}}) freebsd11_getfsstat(&(0x7f0000000000), 0xffffffffffffff50, 0x1) ioctl$DIOCGETSTATES(0xffffffffffffffff, 0xc0106663, &(0x7f0000000040)) sendto(r0, &(0x7f0000000800)="1bfe1bb9f6f0c3db13c1e53b95fb67dfc14f25de2e3da1648c73b42d6a33927b9aa057026fc39696d452a342148d1057ef169818d074def46013e65ad173a590989cda483d8950f634f4acb65a5423247cf5c91b327dd24646f3752bdf05df1ec4404e97f1a858dda038de2d630ad86fa1bb7ae940e42e95f30c4a2b8c050894c4721503b171246ccaaaad5de55bfb121491814f7a3eea8a93f6bdcf4aa6a1e993c71d7ac40299ba5442e23e76d9e7cb4322929ad6685756d5978397e4e7d934645c2c2abef433fda4086bfd649ae80f176b5890c47ce1ae147032d3398e80fa26b0d0ce4533681f3a510f802eeb7269834c740e02d4e2bb3bc4fdb877e6f6556989e143ac2e4e652b2da76d82e53d5542c4196fd238757fee960f4f3ed35b73202b4f0ffb83cbe45a61c90e38e89091e7df1a347c73fbd3c2cd01f8a8b3e648db015bd0336222e8cc6d48528051b8d5a284a79dcd37532c102da9655702bcc0a78b74acad123c9368fe4b12e621054e5fee5df3fdf964f114b420422c6dd9f663dd6391b14094aa3b17b68ddf57beb2d8fcfbe17bf20a63009e640054484437c894d5dbf9267bef8d9f7f1d343d5c6bd8e8672e283380ecd14cff773903f24c839202fae6e37dcfadd857e18056e241360363c0af4a6be26cfaea43d22d1088ff81434559fb11f25ac14d8f436fa9e48a55a677aa16a26a0f22e9bcf127938560bde4d83c6e1e0d30befbf5d9f128a516d4195261b8ab348328f8782ba427a8bff93a011a5559bedaa326f30684758f56b52e6828578070041550d657dc717b520aded1e13c2a29ea28b19d916d8c7ec20d7a0ea65d7c69308b573f1afd96b15ab2d4d4bd3d9e8e901366eef5693e60bfe17e10cc6aa3ea4f77c9061c2bb645789c9fefb6f0ccb7938f3943b8f634d03dc5c90cfcf533068f35f4be2172870084e7574eb344386acce93f57ad54be55786dc02c92af0758cb6cc1e202cb5e22145b20ab268058d781102024af7a628211739308fd7c42de157870dcf803e4e789eba6b44b061431d3b7358d1958d09fcd3f251a81d1bd834386a4e918909836e4593daca8cf6a7a43d0f6acf1615f96d9f3d6a7f357ba4194c4f4a5b356dfdcb3268d0143fed84695b64f3def255d1214b33e141789fe7dfb036d2f0d766082867f9b402684749c9076bbc213957ec2ca45f5c7c619e1a6c4f866eee7e1288487c27604efe90aabb896b685e787807ceeaff598ed2d10d6031002fcfe45a711bc3301a960db6526b533d22bd02b639fd60a847f09eb6c40b266520645b09ee8b786a0ca68cc2996287801620674f2d9b85a8adbf6501270bef9fa6d0112acc01138144ba13f5d1a945ed5c02e14b1802863bb0f081a7d523b7224d444f2a7d05b07d6716c8f2d8373bfb3889385e33ba63bc3a3af2d82073c36b8d4f11aad18e30508b9ef5ccae4ff3213446835c5d5924f312613d7f89dfa30a243ab699a6388257769a9ee3e9ebf6472ccfc95d636bff45d916503ad22b17822492732f88a239db2bf575ce2fa8fee5d2f7c9db9d02c6a0af1e69e2f8a3ffa86deabd086a6564fa6b2ac9f564fc4d22825e9dcbb1aad2cd94a1e414bc356ec19df7d5fb324a3976feed3ef476530c2eaa523f14b2c864c89b7d8c804bca72538e77ba7824010515c8f5edbcca86adc517bb7e2410cf532944628e4365a2180b81b609d254d8c8c2e471995dea28424e8efd63f736ca19049e0b54429ac915e65f1ebe45a2a1dc75272ffd5d111e175b6ddcb79c3e4952414d267a096bdb8687ed5fa1a856723fd8976e8e8974ff17b8e6529af6f2585a3329a68f7b49551c015160fc758da31b3fb57a66cae79ae1b5451bd0debabd61b2e75e6eccd531730406ad0e07d5f2165a9a8977a3581dae7053ca1f8d2c6ca48b7349015e0258034d776c015d39e2a6916b3c05118735b35a7773f0b665f9a2df79a0a66e0ea14b977dc7bc9b96e413b2e1c49f688", 0x587, 0x0, &(0x7f00000001c0)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) fork() open$dir(0x0, 0x80200, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0x1c, 0x3, 0x0) r3 = fork() wait4(0x0, 0x0, 0x2, 0x0) sigqueue(r3, 0x49, @sival_int=0x8000) setsockopt$inet6_int(r2, 0x29, 0x25, 0x0, 0x0) syz_emit_ethernet(0x400e, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 1.188455277s ago: executing program 1 (id=20): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) sigaction(0x6, &(0x7f0000000200)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x3, {[0xfffff801, 0x50e1, 0x5, 0x6]}}, 0x0) lio_listio(0x1, 0x0, 0x0, &(0x7f0000000a00)={0x1, 0x6, @sival_ptr=0x5, @spare=[0x101, 0x3, 0x0, 0x2e1, 0x7, 0x3, 0x5, 0x8]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @random="34ed432a7a6e", [], {@ipv6={0x86dd, {0x0, 0x6, "090010", 0x30, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x81, '\x00', {0x9, 0x6, "45e128", 0x8, 0x5a, 0x0, @rand_addr="f0a8550f04fed9b43740b3dba37e1fe2", @mcast2}}}}}}}) r2 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file2/file0\x00') freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_get_link(&(0x7f0000000340)='./file0/file1\x00', 0x1, &(0x7f00000005c0)='\x90\xcf\x87+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"^Z\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1\x11\xb8\xf0\'\x1f\xdaW\x82\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\xee\v\x00\x00\x00\x00\x00\x00\a\xf6\xcap\xbf\xd4?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7*/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\tS\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c\xebSj\xfa\x96X\x8d\x00\xdeYJl\x8bh\xb2\xea5$?\xbe\x17b]\x1d\xa9', 0x0, 0x0) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, 0x0) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000a00), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r2, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DIOCSETIFFLAG(r4, 0xc0284459, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}) mlockall(0x2) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 987.625353ms ago: executing program 1 (id=21): socket(0x1c, 0x1, 0x0) (async) r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000040)=0x7f, 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="4b00000000000000420d9c562fd3687841aa7d3b435b10c8a1d818189d98bcc61113317836a19f3bd86734c1fb61801fecddcdfad3bb38edf77ce04ebffd22"], 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="4b00000000000000420d9c562fd3687841aa7d3b435b10c8a1d818189d98bcc61113317836a19f3bd86734c1fb61801fecddcdfad3bb38edf77ce04ebffd22"], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r2, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}}) freebsd10_pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r3) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mlockall(0x2) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x80) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x80) aio_write(&(0x7f0000000240)={r1, 0x80001001, &(0x7f0000000180)="e2", 0x1, [], 0x4, 0x8, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0xfffffff8, @spare=[0x0, 0x1, 0x0, 0x200000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) (async) setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) access(&(0x7f0000000680)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000140)=ANY=[], 0x1010) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) sendto$inet(r0, &(0x7f0000001500)="53a08335f777171a2d7a20a9a2b2b418610abe66903c2701661a3500d97fc371f4bc9850af1353f68b8d1277aa8ea3158d9ed7c4cfaad619e9a07ac525c4feb680e6dc121154f67cf77360d8909ec2b5a7ff4ea7ce19f3152db97d16cfc3b9db73a1cb4aa5a2b2319ccb370f265a444f6db1f21b9f54f84e4be4eabdb3dceba54d79ff4101f808ce425a734a015c9cf2360e4b7c9d527eeaf241ce4df1bf1322b6866b71c24cafb4e03952085b5dd3b06545cba5218c015f0a16ff7dcf97b460bb96a8d192e0bf7f4cd3abd2e63b7c79ddda8e55c6ffe045ed59b773a5d772f697ae8d9c9378e21e8ce97760faea21cfd3d9d9fc55d0c0e2052ce980790ad4b76609cea88a2030f088e516c3503d917c5f360a959ff5958f06fc1b7d3358db390a227d96ecedca86b918a3b98c1353bb9549fe58141087247513927078de1209143769201a909b4f17837737fad9f72039d6f61e684515a802ae93b53154738421f18de9d22a4bb3ac8b8eac7a1cb8b058350b85f0eab0ba040efc24b260032e836d5248347cdd52b24a06c8f28a643f70d9d6980fa3e52bc7bfbe9ba877bcd9dbe49bad2eccdb87015689fcb3e260c0c7607da117d6719bc2a1467d08d412f3856700e04d816e87eb07a1e830fc77b086cca977bc1d2a1ef7a25167ab83e008eeb42dcc9b3b173f27fec67f9dac82bcce9a0b802ac1b6f9d54b1740dc603570f27449b9d0ab4b29dc813a5cf0017d3545f4bc96f3a6871cfb89207302e43b2be1e72dedb9e7a5d4f36bebdc4318e478e2b6b3c5fded37bd5f7bfcf76fffb5d03063ae98d048c9ae1a7581ef11c6c557c4c215e77099db4859bcbd9b46ed044bc0bd0cee95805f432223573568e56dd48fdf571d26fa2bb1cde18c672b3e8dad6cf085bb9943e03b481685a6b3557590cd5b3122f20a96c6f32c102c8cf041e4254cebe7ec061fdd9f28974e396a2c64d9298b69c622e209417e6c58bf6dbed36193ab2244c9070e67f9b06dd84d247fa478829f3546cfb96cd5c554c51ca1c52a850dab70c4eb6d786bed53c3477517173a30ca1f19260980f54bb73fb1ce38423a0bcdcdd97596322753739daf119bb6bd1a6a45d10a563fdcff09f4a56238cceec54e77b325d4efa75c07ae7f5d18066f3df3ed992d922dabde91b3b50e7b266f53463ee00cc3a7d7dcf6e290cf89aa0a600468902aceda04f6fafae57e2b61936b9f08a189632d707f0ed9d8696382cb53abe32b0f663f3ea08b8d431f77f70c75440bf181e4c9709a187b7ff923f66b489acc2167554fda87fd85c55f8ac7367b4cb28e59ae496a640a0584107abb1c6a542d02ae228b32ddc8a3acef4e5666135e9311d58f94cf2be774781d16086d199b0df5830b1c631e63cddb7ba8edf6c1b61c13998204729eb7df295b119e011d1c4e55f0b32c370695cb802050fbb2e75f97faa0276009f1ff9a9f719699bfdb23a43f74383779a55c48b0a29702b79e67ebb359f55ee0c530056b55e8047665826ba1d21d76410f078a8f874ccc333cd92f04d85490f42b7b3d3571dd1631f07d08f4d9e20fbf17b8571701c1fdf3c431afb4b907501460e6fc781ac31f1d295e4690bd85ed4ee382f214034b4bafb90c9389ff03d12b1ae3a371bb012eaad1733242afe160c5670a1830502a87a50319e295d082cbd0ca98c44a1c244cdd1eece68ed6b36b0706aaf70ad0d137c70bffd48d45d145e26845ae10817e2eae843a58bfc3a3712136572602258a078e29b3dfee30cb22a20ad1b9426c49041f18b4c1b3d98cae149f2ba8200e815d8ae90a236e3290dbc4854000f8e5fa7a871cad827a04e2a6cc62b16c5873d32945e220ecab4ddb31e8e67ea96d30470f8557d4adbb6dc5cb23358a4ca730806e1221d647570f4b886494d34effa69f86fdfe5bf2550d5949dcab6a2d0c6eb31722ffbd577e8b0c096332b56769b2b87f185d0a02b90bf9e3", 0x579, 0x100, &(0x7f0000000200)={0x10, 0x2, 0x2, @rand_addr=0xdcc9}, 0x10) 984.865981ms ago: executing program 3 (id=22): r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r1 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r1, 0xc1b46d00, &(0x7f0000000500)={0x0, 0x0, 0x2, &(0x7f0000000280)='./file0\x00', 0x803, 0x0, 0xf, 0x2000000, 0x80000, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x2, 0xd8b, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffffc, 0x0, 0x0, 0x84, 0x21, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10, 0xfffffffd, 0x0, 0x0, 0x2000000, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x56, 0x2, 0x0, 0x1, 0xf6, 0x0, 0x20, 0x0, 0x1000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ba7, 0x3, 0xe, 0x0, 0x0, 0x2, 0x80, 0x0, 0x3, 0xfffffff9, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x5196, 0x0, 0xfffffffc]}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x100000) aio_fsync(0x4fb6c9497fdf3192, &(0x7f00000001c0)={0xffffffffffffffff, 0xfff, 0x0, 0x0, [0xc, 0x2], 0xa, 0x8, 0x2, {0x92, 0xbac7, &(0x7f0000000100)="6f3ff43c7a16a74d1458064d0a9bea2054e66a56c02b2c22b79531a85bb5caff7bcb67fd4b0b86517f1f0cd8b1668dd2516aa56914da6b3b9b81afdf52035772a5c1ac5a186b0bc2024cdae5d15371eb98f58c4f1ae59a3410c5004ab788c449462e3a24141b2c1d1dedd9aabdaa07b93659e52c4ca6eb70058495f60e9182787f86a405f549fa2459868264f3"}, {0x4, 0xc, @sival_int=0x32bc3360, @spare=[0x5, 0x1, 0xffff, 0x8, 0x5be4d9a9, 0x100000000, 0x7, 0x6]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x46, &(0x7f0000000640)={@loopback, @broadcast, @rand_addr=0x9}, 0xc) kevent(r3, &(0x7f0000000300)=[{0x1, 0xfffffffffffffffa, 0x0, 0x8, 0x5f08, 0x1000000000081, [0x7ff, 0x1, 0x3, 0xffffffffffff8001]}, {0x1, 0xfffffffffffffff5, 0x30, 0x20, 0xc, 0x6, [0x4, 0x7, 0x6, 0x6]}, {0x2, 0xffffffffffffffff, 0xc0e0, 0x10, 0x2, 0x5, [0xd, 0x7, 0x1, 0xde26]}, {0x4c81ecea, 0xfffffffffffffff5, 0xc0a3, 0x0, 0x7, 0x8, [0x7, 0x5, 0xffff, 0x5]}, {0x81, 0xfffffffffffffff5, 0x0, 0x40, 0x7, 0xfffffffffffffffa, [0x5, 0x7, 0x80, 0xffffffff]}], 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000001500902cffe1aaa2241dc0fb000000000000000178ff02000000000000000000000000000102009078000000066718deb30000710100000000000000000000000000000001000000000000000000000000000000000606000400000000000000000000000000000000000000010000000000000000000000001fa514b16d39e38f00000001ff010000000000000000000000000001700000000000000004010000000000004b02000500000000ff01000000000000"]) write(0xffffffffffffffff, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) posix_fallocate(r3, 0x0, 0x10007) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f00000000c0)={0x15, 0x26, 0x10, &(0x7f0000000180)="72e8d658aeb000"/16, 0x20, &(0x7f0000000080)='d', 0x0, 0x7d8661db}) nanosleep(&(0x7f00000001c0)={0xe3, 0x3}, &(0x7f0000000280)) rfork(0x1000) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x31, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000680), 0xa604, 0x7fff) r6 = vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r6}) kmq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x0, @sigval_ptr, @spare=[0x3eb, 0x0, 0x1, 0x7, 0x3ff, 0x4, 0x6, 0x5]}) cpuset_setaffinity(0x3, 0x8, 0x0, 0x53, &(0x7f0000000040)) rtprio(0x0, 0x0, &(0x7f0000000080)={0x4, 0x9}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) sendto(r5, &(0x7f0000000e40)="b9d5cf29033fda9f0d47f14a030000005e2f1027c01466b7a90116180f8365ae6047308780f3f80890af100e69002e57a9e620e17489f5763edb6df4781e510cbe9f1bb7f218f4c42a4ed5bc6103931b9e", 0x51, 0x100, &(0x7f0000000040)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) 897.656486ms ago: executing program 0 (id=23): r0 = socket(0x1, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x6) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) (async, rerun: 32) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) (async, rerun: 32) rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2, 0xf}) writev(r2, &(0x7f0000000280), 0x26) (async, rerun: 64) writev(r2, 0x0, 0x0) (async, rerun: 64) select(0x40, &(0x7f00000000c0)={0x7, 0xf, 0x4800000, 0x3, 0x3, 0x5, 0x3, 0x396e}, &(0x7f0000000140)={0x6, 0xa87, 0x7, 0x7, 0x3, 0x4, 0x3, 0x3}, &(0x7f0000000180)={0x2, 0x7, 0x3, 0x80000000, 0x3, 0x7, 0x7fffffff, 0xa}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000300)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xeb, '\x00', {0x5, 0x6, "64809b", 0x80, 0x4d, 0x1, @loopback, @loopback}}}}}}}) (async, rerun: 32) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x128) (async, rerun: 32) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x10000, 0x0) (async, rerun: 32) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/file1\x00', 0x80, 0x120) (async) renameat(r3, &(0x7f0000000040)='./file1\x00', r4, &(0x7f0000000140)='./file0\x00') (async) ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) r5 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r5, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) (async) bind$inet6(r5, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x825, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20}, 0x1c) (async) sendmsg$inet6_sctp(r5, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x64}}, 0x1c, 0x0}, 0x81) setresuid(0x0, 0xee01, 0x0) r6 = socket(0x1c, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) r7 = socket(0x1c, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r7, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) (async) bind$inet6(r7, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) socket(0x1c, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) 733.244361ms ago: executing program 0 (id=24): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) r1 = dup(r0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x0, 0x7, 0xfffffffffffffff8, 0x0, 0x2, &(0x7f0000000040)='pc', 0x9, 0xfdffffff, [0x0, 0x80, 0x0, 0x3]}) fstatat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4400) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={@in6={{0x1c, 0x1c, 0x2, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x58, 0x1000301010005}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r5, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x80000000007, 0x1000301010005}) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x100000001}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) flock(r2, 0x8) ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x450c, &(0x7f0000000000), 0x0, 0x0, 0x0}) 723.851412ms ago: executing program 1 (id=25): readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/255, 0xff}], 0x1) open(&(0x7f0000000580)='./file0\x00', 0x300, 0x2) open(0x0, 0x80000000000209, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0xa182fdacd32160a9, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0xc1) setgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) setgid(0xffffffffffffffff) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = open(0x0, 0x80400000000206, 0x0) mlockall(0x2) unlink(0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r3, 0x3862) open$dir(&(0x7f0000000040)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f00000000c0)={r4, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x2, 0x1ff], 0x0, 0x20, 0x0, {0x0, 0x7, 0x0}, {0x0, 0xfffffffe, @sigval_int=0x4003e, @ke_flags=0x9fc040a3bd859cca}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) msync(&(0x7f00001e6000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) fchflags(r1, 0x40008) sync() syz_emit_ethernet(0x2a, &(0x7f0000000500)={@broadcast, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="4c6fa57c306b", @remote={0xac, 0x14, 0x0}, @random="128767a9aced"}}}}) sync() 722.250235ms ago: executing program 2 (id=26): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x188) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ftruncate(r0, 0x80002) (async) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x3) (async) dup2(r3, 0xffffffffffffffff) (async) getegid() (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0), 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000020000000800470000300000000002069078ffffffffe000000244040623070303004e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000a790781406"]) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) open(0x0, 0x80000000000206, 0x0) mlockall(0x2) (async) thr_new(&(0x7f0000000540)={&(0x7f00000005c0)="09c9a22d1c00000066460ffeb224130000660f3829441b990fae819989999967410f0f2fb767643e656564660f7d3493672e2e46ff1b47da84ce000080000f699800b0ecfa4cc4c281bc6b81", 0x2, &(0x7f0000000280)="3c101aedd6cd38ee1ee9e9bcd0412fb5c55d009225dfe734e793543f44de4ffc0d4a22fef5e83112c17d33947cad5fb5d28b1e9e0ca1b07c0700000000000000be41093bdb0d4550cc707fde692a7e6aba7de101138bfbfa86c04a5294d548f4d5a84bacad75b0f787b99f2b88315b1ee7", 0x71, &(0x7f0000000380)="9a42e31a4c25e4b96f6b507a571843d969b44c7b95f286ac19e39e56a1dcbcce4260e094b0c8ebd47734cca18c5d58511318cd7b9db12d587354c09fa1e4276754673b9b821725b064c1d8d61ae15bbca2329fd45c110526846605f4d873653624b86358ef0e7d604e52b475a80ac55a810cef02d2bb934447128dce3515518394e1948457c35b27cd73745ffeb4aabf1d702513ec0b528210fcfd22f153d3c1d0e2c019dfea96717044a2ca2e776e5c75a48b3a751ef6fecdaecea07ea3d33c9a10c5cd", 0xc4, &(0x7f0000000480), &(0x7f0000000200), 0x1, &(0x7f0000000500)={0x3, 0x10}, [0x4, 0x4, 0x4]}, 0x68) (async) sendto(r5, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) (async) clock_settime(0x0, &(0x7f00000001c0)={0x8000, 0x2f000000}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) (async) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) (async) r6 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r6, r0) 527.711765ms ago: executing program 0 (id=27): setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x7, 0xfffffffffffffff9, 0x19, 0x1, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) freebsd11_mknod(0x0, 0x1000, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2010c00, 0x53) fcntl$lock(r2, 0x16, &(0x7f0000000000)={0x570}) cpuset(0xffffffffffffffff) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x246, @ipv4, 0x2}}}, 0x108) setrlimit(0x7, &(0x7f00000001c0)={0x1}) setreuid(0xee00, 0x0) fork() madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x0, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x1, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x0, @rand_addr="7a22bc85f3a618d91a7c76a87e6d8077", 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x0, @rand_addr="000000000000000b0500009300", 0x2}}}, 0x108) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x81) open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x96) open$dir(&(0x7f0000000140)='./file0\x00', 0x80000, 0x88) rfork(0x85000) r6 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x4, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0xffffd}}, {{0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}}}, 0x108) 294.361741ms ago: executing program 3 (id=22): r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r1 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r1, 0xc1b46d00, &(0x7f0000000500)={0x0, 0x0, 0x2, &(0x7f0000000280)='./file0\x00', 0x803, 0x0, 0xf, 0x2000000, 0x80000, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x2, 0xd8b, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffffc, 0x0, 0x0, 0x84, 0x21, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10, 0xfffffffd, 0x0, 0x0, 0x2000000, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x56, 0x2, 0x0, 0x1, 0xf6, 0x0, 0x20, 0x0, 0x1000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ba7, 0x3, 0xe, 0x0, 0x0, 0x2, 0x80, 0x0, 0x3, 0xfffffff9, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x5196, 0x0, 0xfffffffc]}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x100000) aio_fsync(0x4fb6c9497fdf3192, &(0x7f00000001c0)={0xffffffffffffffff, 0xfff, 0x0, 0x0, [0xc, 0x2], 0xa, 0x8, 0x2, {0x92, 0xbac7, &(0x7f0000000100)="6f3ff43c7a16a74d1458064d0a9bea2054e66a56c02b2c22b79531a85bb5caff7bcb67fd4b0b86517f1f0cd8b1668dd2516aa56914da6b3b9b81afdf52035772a5c1ac5a186b0bc2024cdae5d15371eb98f58c4f1ae59a3410c5004ab788c449462e3a24141b2c1d1dedd9aabdaa07b93659e52c4ca6eb70058495f60e9182787f86a405f549fa2459868264f3"}, {0x4, 0xc, @sival_int=0x32bc3360, @spare=[0x5, 0x1, 0xffff, 0x8, 0x5be4d9a9, 0x100000000, 0x7, 0x6]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x46, &(0x7f0000000640)={@loopback, @broadcast, @rand_addr=0x9}, 0xc) kevent(r3, &(0x7f0000000300)=[{0x1, 0xfffffffffffffffa, 0x0, 0x8, 0x5f08, 0x1000000000081, [0x7ff, 0x1, 0x3, 0xffffffffffff8001]}, {0x1, 0xfffffffffffffff5, 0x30, 0x20, 0xc, 0x6, [0x4, 0x7, 0x6, 0x6]}, {0x2, 0xffffffffffffffff, 0xc0e0, 0x10, 0x2, 0x5, [0xd, 0x7, 0x1, 0xde26]}, {0x4c81ecea, 0xfffffffffffffff5, 0xc0a3, 0x0, 0x7, 0x8, [0x7, 0x5, 0xffff, 0x5]}, {0x81, 0xfffffffffffffff5, 0x0, 0x40, 0x7, 0xfffffffffffffffa, [0x5, 0x7, 0x80, 0xffffffff]}], 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000001500902cffe1aaa2241dc0fb000000000000000178ff02000000000000000000000000000102009078000000066718deb30000710100000000000000000000000000000001000000000000000000000000000000000606000400000000000000000000000000000000000000010000000000000000000000001fa514b16d39e38f00000001ff010000000000000000000000000001700000000000000004010000000000004b02000500000000ff01000000000000"]) write(0xffffffffffffffff, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) posix_fallocate(r3, 0x0, 0x10007) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f00000000c0)={0x15, 0x26, 0x10, &(0x7f0000000180)="72e8d658aeb000"/16, 0x20, &(0x7f0000000080)='d', 0x0, 0x7d8661db}) nanosleep(&(0x7f00000001c0)={0xe3, 0x3}, &(0x7f0000000280)) rfork(0x1000) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x31, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000680), 0xa604, 0x7fff) r6 = vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r6}) kmq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x0, @sigval_ptr, @spare=[0x3eb, 0x0, 0x1, 0x7, 0x3ff, 0x4, 0x6, 0x5]}) cpuset_setaffinity(0x3, 0x8, 0x0, 0x53, &(0x7f0000000040)) rtprio(0x0, 0x0, &(0x7f0000000080)={0x4, 0x9}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) sendto(r5, &(0x7f0000000e40)="b9d5cf29033fda9f0d47f14a030000005e2f1027c01466b7a90116180f8365ae6047308780f3f80890af100e69002e57a9e620e17489f5763edb6df4781e510cbe9f1bb7f218f4c42a4ed5bc6103931b9e", 0x51, 0x100, &(0x7f0000000040)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) 37.863027ms ago: executing program 2 (id=28): setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x73b, [0x0, 0xb]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffefaaaaaaaaaabb86dd6000000000943aff00000000000000000000ffffffffffffff02000000000000000000000000000103019078810000006945e12800085a00f0a8550fe8fdff0800000000000000e2ff020000000000000000000000000001d2caba35aed14bcb10b820ff326dcdf20992d21d4795dd5787cc5950dc1d5e950a86451d806ff1be552ffd2fbb3148bb0b406d072c1b4d50e2794afc376bfeb2cc5d7ca77da2b51298ee4082607899f1cabb46d6358e025397ec6effa8b995aeb766ecd3"]) r1 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file2/file0\x00') freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_get_link(&(0x7f0000000100)='./file0\x00', 0x1, &(0x7f00000006c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"^Z\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f{\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7*/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c\xebSj\xfa\x96X\x8d\x00\xde', 0x0, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, 0x0) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000a00), 0x0, 0x0, 0x0}) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x40000000, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x50, &(0x7f0000000680)={0x1, {{0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}}}, 0x88) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f00000000c0)={0xb, 0xe, 0x20, &(0x7f0000000100)="0b6fac4103e7a00d4689e8090000005aedaacdd4743c7eaa2c7300d05fe86026", 0x0, 0x0, 0x0, 0x7d86699a, [0x0, 0x0, 0x0, 0x1]}) setsockopt$inet_int(r4, 0x0, 0x4b, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) r6 = kqueue() kevent(r6, &(0x7f0000000080)=[{0x7, 0xfffffffffffffffa, 0x31, 0x10, 0x1000000009, 0x885, [0x8001, 0x5, 0xfffffffffffffff8, 0x6]}], 0x1, 0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags}) socket(0x1c, 0x1, 0x0) r7 = socket(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x51, 0x0, 0x0) 0s ago: executing program 2 (id=29): socket$inet_udplite(0x2, 0x2, 0x88) r0 = kqueue() select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x20000000, 0xe8c2, 0x0, [0x0, 0x2, 0x2, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x0) setgroups(0x0, 0x0) access(&(0x7f0000000680)='./file0\x00', 0x0) sysarch$I386_CLEAR_PKRU(0xd, 0x0) cpuset_setaffinity(0x3, 0x7, 0x9, 0x8, &(0x7f0000000000)={[0x2]}) shmctl$IPC_STAT(0x0, 0x2, 0x0) aio_write(&(0x7f00000000c0)={0xffffffffffffffff, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x2, 0x1ff], 0x0, 0x20, 0x9, {0x0, 0x7, 0x0}, {0x0, 0xfffffffc, @sigval_int=0x4003e, @ke_flags=0x9fc040a3bd859cca}}) syz_emit_ethernet(0x2106, &(0x7f0000000080)=ANY=[]) close(0xffffffffffffffff) kqueue() open(0x0, 0x2, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x10, 0x2, 0x3, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x1, @rand_addr=0xffffff7f}, 0xd) socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = kqueue() setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x200, 0x0, 0x0) kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0x5000e8c6, 0x0, [0x3, 0x0, 0x4000009, 0x3fffffffffffff]}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) fork() setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) sync() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff81a2c670(0xfffffe006df81000) 0.006133161 s ktrace write failed, errno 27, tracing stopped for pid 804 ktrace write failed, errno 27, tracing stopped for pid 744 ktrace write failed, errno 27, tracing stopped for pid 742 ktrace write failed, errno 27, tracing stopped for pid 740 ktrace write failed, errno 27, tracing stopped for pid 746 ktrace write failed, errno 27, tracing stopped for pid 747 ktrace write failed, errno 27, tracing stopped for pid 741 ktrace write failed, errno 27, tracing stopped for pid 737 ktrace write failed, errno 27, tracing stopped for pid 681 ktrace write failed, errno 27, tracing stopped for pid 743 ktrace write failed, errno 27, tracing stopped for pid 735 ktrace write failed, errno 27, tracing stopped for pid 423 ktrace write failed, errno 27, tracing stopped for pid 422 ktrace write failed, errno 27, tracing stopped for pid 1 ktrace write failed, errno 27, tracing stopped for pid 745 ktrace write failed, errno 27, tracing stopped for pid 739 ktrace write failed, errno 27, tracing stopped for pid 685 ktrace write failed, errno 27, tracing stopped for pid 334 FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe00776d9898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837123e0 usecount 7, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00541130f8 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe005410a780 (pid 850, syz-executor, tid 100147) nlink=1, effnlink=1, size=1048576, extsize 0 generation=ce3c146f, uid=0, gid=0, flags=0x40008 ino 83, on dev gpt/rootfs pid 880 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 736 ktrace write failed, errno 27, tracing stopped for pid 770 vnode_pager_putpages: zero-length write at 0 resid 14434 0xfffffe00776d7c08: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837123e0 usecount 7, writecount 4, refcount 2 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00540eb4d8 ref 1 pages 4 cleanbuf 0 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe005412b000 (pid 899, syz-executor, tid 100170) nlink=1, effnlink=1, size=14434, extsize 0 generation=32de23a2, uid=0, gid=0, flags=0x40008 ino 79, on dev gpt/rootfs FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0) login: ifaddr cache = 0xfffffe006e4b5000 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe005814f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005814f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005814f000 tap3: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe005814f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005814f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005814f000 tap3: Ethernet address: 58:9c:fc:10:89:47 tap3: link state changed to UP ifaddr cache = 0xfffffe006e50ec00 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0058581000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058581000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058581000 tap3: link state changed to DOWN panic: ASan: Invalid access, 8-byte read at 0xfffffe005814f398, UMAUseAfterFree(fd) cpuid = 1 time = 1752349082 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056dfd050 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056dfd1b0 vpanic() at vpanic+0x257/frame 0xfffffe0056dfd370 panic() at panic+0xb5/frame 0xfffffe0056dfd430 kasan_report() at kasan_report+0xdf/frame 0xfffffe0056dfd500 ip6_freemoptions() at ip6_freemoptions+0x1ff/frame 0xfffffe0056dfd560 in_pcbfree() at in_pcbfree+0x682/frame 0xfffffe0056dfd5b0 sorele_locked() at sorele_locked+0x264/frame 0xfffffe0056dfd5f0 soclose() at soclose+0x41f/frame 0xfffffe0056dfd6e0 _fdrop() at _fdrop+0x5c/frame 0xfffffe0056dfd710 closef() at closef+0x655/frame 0xfffffe0056dfd8f0 fdescfree() at fdescfree+0xa5e/frame 0xfffffe0056dfdad0 fork1() at fork1+0x833/frame 0xfffffe0056dfdbf0 sys_rfork() at sys_rfork+0x1b7/frame 0xfffffe0056dfdd10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056dfdf30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056dfdf30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a1afa, rsp = 0x82af36f08, rbp = 0x82af36f80 --- KDB: enter: panic [ thread pid 931 tid 100209 ] Stopped at kdb_enter+0x6e: movq $0,0x25c2d27(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0070200000 rdx 0x7ffff rbx 0xffffffff827bfdc0 .str.27 rsp 0xfffffe0056dfd190 rbp 0xfffffe0056dfd1b0 rsi 0x80001 rdi 0xffffffff816128e9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x1f r12 0xfffffe0054128780 r13 0xfffffffffffffffd r14 0xffffffff827bfdc0 .str.27 r15 0 rip 0xffffffff815fc46e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c2d27(%rip) db> show proc Process 931 (syz-executor) at 0xfffffe0054106020: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 763 at 0xfffffe005400d060 ABI: FreeBSD ELF64 flag: 0x10480180 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0007809040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe0007810b68 (map 0xfffffe0007810b68) (map.pmap 0xfffffe0007810c08) (pmap 0xfffffe0007810c78) threads: 5 100159 s syz-executor 100204 s syz-executor 100206 s syz-executor 100207 s syz-executor 100209 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 943 765 765 0 R (threaded) syz-executor 100184 Run CPU 0 syz-executor 100212 S select 0xfffffe00593fcdc0 syz-executor 100213 RunQ syz-executor 941 940 940 0 D ifnet_d 0xffffffff83cbe600 ifconfig 940 762 940 0 S wait 0xfffffe00540fd560 syz-executor 939 938 938 0 D tun_con 0xfffffe006e4b6828 ifconfig 938 762 938 0 S wait 0xfffffe0007809b00 syz-executor 931 763 763 60928 T (threaded) syz-executor 100159 s syz-executor 100204 s syz-executor 100206 s syz-executor 100207 s syz-executor 100209 Run CPU 1 syz-executor 921 1 763 0 S uwait 0xfffffe0058275900 syz-executor 917 1 917 0 Ss+ ttyin 0xfffffe0058630cb0 getty 916 1 916 0 Ss+ ttyin 0xfffffe005950fcb0 getty 915 1 765 0 S uwait 0xfffffe0058276e80 syz-executor 914 1 914 0 Ss+ ttyin 0xfffffe00586314b0 getty 913 1 913 0 Ss+ ttyin 0xfffffe00586310b0 getty 912 1 912 0 Ss+ ttyin 0xfffffe0007a7b8b0 getty 911 1 911 0 Ss+ ttyin 0xfffffe0007a7b0b0 getty 909 1 909 0 Ss+ ttyin 0xfffffe0007a7f0b0 getty 908 1 908 0 Ss+ ttyin 0xfffffe005950f8b0 getty 905 1 905 0 Ss+ ttyin 0xfffffe0007a7b4b0 getty 900 0 0 0 DL mdwait 0xfffffe00083f7000 [md2] 898 1 763 0 S uwait 0xfffffe00584fa100 syz-executor 897 1 763 0 S uwait 0xfffffe0058274480 syz-executor 896 1 763 0 S uwait 0xfffffe0058276680 syz-executor 894 0 0 0 DL (threaded) [so_splice] 100098 D - 0xfffffe0058277f00 [thr_0] 100167 D - 0xfffffe0058277f40 [thr_1] 892 1 763 0 S uwait 0xfffffe0058275b00 syz-executor 889 0 0 0 DL mdwait 0xfffffe006e4b2000 [md1] 888 1 764 0 S uwait 0xfffffe00584f9700 syz-executor 881 1 423 0 S kqread 0xfffffe0053f67700 rtsol 854 0 0 0 DL mdwait 0xfffffe006e4b3000 [md0] 853 0 0 0 DL (threaded) [KTLS] 100119 D - 0xfffffe0007773900 [thr_0] 100148 D - 0xfffffe0007773980 [thr_1] 100149 D - 0xffffffff83cb1c28 [reclaim_0] 834 1 764 0 SV uwait 0xfffffe00584f9300 syz-executor 830 0 0 0 DL aiordy 0xfffffe00540fe580 [aiod4] 829 0 0 0 DL aiordy 0xfffffe00540feae0 [aiod3] 828 0 0 0 DL aiordy 0xfffffe00540fd000 [aiod2] 827 0 0 0 DL aiordy 0xfffffe0054100060 [aiod1] 817 815 765 0 S uwait 0xfffffe00584fa400 syz-executor 815 1 765 0 SV uwait 0xfffffe0058274f00 syz-executor 804 1 764 0 S uwait 0xfffffe00584fa000 syz-executor 765 762 765 0 S nanslp 0xffffffff83ba0341 syz-executor 763 762 763 0 S nanslp 0xffffffff83ba0341 syz-executor 762 760 760 0 S select 0xfffffe000778ebc0 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00540fe0d0 csh 758 1 758 0 Ss select 0xfffffe000778fa40 sshd 16 0 0 0 DL syncer 0xffffffff83cbde20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0054005060 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbc360 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100093 D sdflush 0xfffffe00596cfce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d07280 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83ced348 [dom0] 100080 D launds 0xffffffff83ced354 [laundry: dom0] 100081 D umarcl 0xffffffff81dde890 [uma] 7 0 0 0 DL - 0xffffffff83918cd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff848569e0 [pf purge] 5 0 0 0 DL waiting 0xffffffff84499700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e3340 [doneq0] 100046 D - 0xffffffff838e32c0 [async] 100075 D - 0xffffffff838e3140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83ce8c00 [crypto] 100043 D crypto_ 0xfffffe0057d72030 [crypto returns 0] 100044 D crypto_ 0xfffffe0057d72080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b48d00 [g_event] 100038 D - 0xffffffff83b48d20 [g_up] 100039 D - 0xffffffff83b48d40 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce96a0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c34ff0 [swapper] 100005 D - 0xfffffe0007a8de00 [softirq_0] 100006 D - 0xfffffe0007a8dd00 [softirq_1] 100007 D - 0xfffffe0007a8dc00 [if_io_tqg_0] 100008 D - 0xfffffe0007a8db00 [if_io_tqg_1] 100009 D - 0xfffffe0007a8da00 [if_config_tqg_0] 100010 D - 0xfffffe0007771700 [kqueue_ctx taskq] 100011 D - 0xfffffe0007771500 [jail_remove taskq] 100012 D - 0xfffffe0007771300 [bus taskq] 100015 D - 0xfffffe0007770c00 [thread taskq] 100017 D - 0xfffffe0007770800 [aiod_kick taskq] 100018 D - 0xfffffe0007770600 [deferred_unmount ta] 100019 D - 0xfffffe0007770400 [inm_free taskq] 100020 D - 0xfffffe0007770200 [in6m_free taskq] 100021 D - 0xfffffe0007770000 [linuxkpi_irq_wq] 100022 D - 0xfffffe000776fd00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe000776fd00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe000776fd00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe000776fd00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe000776f800 [linuxkpi_long_wq_0] 100027 D - 0xfffffe000776f800 [linuxkpi_long_wq_1] 100028 D - 0xfffffe000776f800 [linuxkpi_long_wq_2] 100029 D - 0xfffffe000776f800 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0053eef100 [firmware taskq] 100040 D - 0xfffffe0053eeeb00 [crypto_0] 100041 D - 0xfffffe0053eeeb00 [crypto_1] 100056 D - 0xfffffe0053eede00 [vtnet0 rxq 0] 100057 D - 0xfffffe0053eedd00 [vtnet0 txq 0] 100058 D - 0xfffffe0053eedc00 [vtnet0 rxq 1] 100059 D - 0xfffffe0053eedb00 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0007790680 [virtio_balloon] 100065 D - 0xffffffff827c51a0 [deadlkres] 100069 D - 0xfffffe0058500100 [acpi_task_0] 100070 D - 0xfffffe0058500100 [acpi_task_1] 100071 D - 0xfffffe0058500100 [acpi_task_2] 100073 D - 0xfffffe0007772300 [mca taskq] 100074 D - 0xfffffe0053eee500 [CAM taskq] 100076 D - 0xfffffe0053eec800 [ipsec_offload] 100129 D - 0xfffffe0007773600 [netlink_socket (PID] 841 834 764 0 Z syz-executor db> show all locks Process 943 (syz-executor) thread 0xfffffe005412f000 (100213) exclusive sx intrsrc (intrsrc) r = 0 (0xffffffff83d15a80) locked @ /syzkaller/managers/main/kernel/sys/x86/x86/intr_machdep.c:400 Process 939 (ifconfig) thread 0xfffffe00540c4780 (100096) exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83cbe600) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:3000 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5071K 502 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4215 sysctloid 35221 2075K 35296 vtbuf 24 1968K 46 kobj 330 1320K 521 newblk 18 1029K 798 vfscache 3 1025K 3 pcb 31 674K 98 inodedep 31 524K 159 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 filedesc 39 309K 176 subproc 137 266K 1023 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 1189 acpica 1674 184K 54426 vmem 5 144K 7 tidhash 3 141K 3 pagedep 17 132K 64 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 110 110K 129 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 umtx 320 40K 320 kdtrace 204 40K 1159 hostcache 1 32K 1 shm 1 32K 4 DEVFS3 128 32K 139 msg 4 30K 4 kbdmux 6 28K 6 temp 31 21K 1996 DEVFS_RULE 56 20K 56 routetbl 195 18K 605 ifaddr 64 18K 77 ufs_mount 4 17K 5 proc 3 17K 3 LRO 16 17K 20 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1647 GEOM 82 14K 570 eventhandler 163 14K 163 ifnet 7 13K 8 lltable 40 12K 51 md_disk 3 12K 3 ether_multi 149 12K 200 kenv 95 12K 95 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 in6_multi 60 9K 77 bmsafemap 2 9K 125 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 3 pfs_vncache 1 8K 1 plimit 21 8K 721 audit_evclass 240 8K 303 taskqueue 72 8K 81 kqueue 64 7K 1000 cred 25 7K 216 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 pf_ifnet 11 5K 25 UMA 269 5K 269 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 pwddesc 58 4K 951 acpisem 28 4K 28 DEVFSP 52 4K 89 kcovinfo 45 3K 63 terminal 11 3K 11 diradd 20 3K 109 acpidev 20 3K 20 uidinfo 4 3K 9 hhook 8 3K 10 clone 9 3K 9 proc-args 70 3K 2062 sctp_stro 2 2K 2 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 selfd 31 2K 13276 sctp_ifa 13 2K 16 ip6ndp 11 2K 16 Unitno 26 2K 60 session 13 2K 58 CAM XPT 22 2K 543 sctp_atcl 4 2K 16 dirrem 6 2K 87 mkdir 12 2K 100 tun 4 2K 5 toponodes 6 2K 6 ipsecpolicy 2 2K 2 in_multi 5 2K 9 BPF 7 2K 16 msi 9 2K 9 newdirblk 9 2K 50 netlink 2 2K 99 lockf 9 2K 65 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 14 NFSD session 1 1K 1 CAM periph 4 1K 271 ipsec 3 1K 3 freefile 6 1K 60 mld 6 1K 7 igmp 6 1K 7 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 114 pci_link 10 1K 10 sctp_ifn 5 1K 16 crypto 4 1K 17 encap_export_host 12 1K 12 select 5 1K 35 osd 9 1K 49 CC Mem 4 1K 32 cdev 2 1K 2 inpcbpolicy 15 1K 230 lkpikmalloc 8 1K 9 counter_rate 14 1K 14 chacha20random 1 1K 1 biobuf 1 1K 1 freework 2 1K 88 sctp_atky 6 1K 18 freeblks 1 1K 59 indirdep 1 1K 122 vnodes 1 1K 3 ktls 1 1K 5 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 cryptodev 3 1K 54 frag6 2 1K 3 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 sctp_aadr 2 1K 4 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 ip6_msource 2 1K 2 in6_mfilter 2 1K 4 aio 4 1K 4 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 sctp_athm 4 1K 16 sctp_map 4 1K 4 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 36 acpiintr 1 1K 1 cpus 2 1K 2 ip6_moptions 1 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 mqdata 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 filemon 0 0K 3 sctp_mcore 0 0K 0 sctp_socko 0 0K 3 sctp_iter 0 0K 17 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 17 sctp_stri 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 4 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 118 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 5 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 31 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 1 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 2 ipsecrequest 0 0K 0 ip6opt 0 0K 10 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 1 in_mfilter 0 0K 1 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 190 namei_tracker 0 0K 0 inotify 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 11 lio 0 0K 5 acl 0 0K 0 soname 0 0K 3324 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 10 iov 0 0K 14097 ioctlops 0 0K 104 eventfd 0 0K 1 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 324 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 676 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 filecaps 0 0K 78 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 90 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 13054 0 254 38494208 0 mbuf 256 8620 1042 19933 0 254 2473472 0 BUF TRIE 152 237 11567 902 0 62 1794208 0 malloc-384 384 4118 52 4118 0 30 1601280 0 tcp_log 416 1303 2513 8036 0 254 1587456 0 malloc-128 128 11568 150 12065 0 126 1499904 0 malloc-4096 4096 333 7 1005 0 2 1392640 0 UMA Slabs 0 112 10962 12 10962 0 126 1229088 0 RADIX NODE 152 6690 221 31510 0 62 1050472 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 vmem btag 56 16529 142 16529 0 254 933576 0 malloc-65536 65536 9 2 20 0 1 720896 0 FFS inode 1168 537 23 600 0 8 654080 0 sctp_ep 1152 2 509 14 0 254 588672 0 sctp_asoc 2256 2 253 2 0 254 575280 0 pbuf 2624 0 202 0 0 2 530048 0 socket 1024 24 484 1470 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 malloc-65536 65536 6 0 6 0 1 393216 0 malloc-16384 16384 21 2 277 0 1 376832 0 256 Bucket 2048 148 12 1069 0 8 327680 0 VM OBJECT 248 1001 247 14915 0 62 309504 0 malloc-4096 4096 69 5 958 0 2 303104 0 THREAD 1860 144 16 213 0 8 297600 0 malloc-64 64 4150 449 5365 0 254 294336 0 VNODE 440 574 92 641 0 30 293040 0 malloc-2048 2048 106 14 299 0 8 245760 0 malloc-16 16 14591 409 16133 0 254 240000 0 DEVCTL 1024 44 176 169 0 0 225280 0 malloc-64 64 155 3184 14367 0 254 213696 0 malloc-32768 32768 0 6 94 0 1 196608 0 malloc-2048 2048 8 88 1059 0 8 196608 0 sctp_raddr 736 2 262 2 0 254 194304 0 UMA Zones 768 241 3 241 0 16 187392 0 malloc-32 32 5452 218 5876 0 254 181440 0 malloc-128 128 1222 173 28670 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 5 511 1189 0 254 165120 0 FFS2 dinode 256 537 93 600 0 62 161280 0 malloc-256 256 81 549 948 0 62 161280 0 MAP ENTRY 96 1100 538 47125 0 126 157248 0 FPU_save_area 832 146 34 270 0 16 149760 0 malloc-1024 1024 115 29 134 0 16 147456 0 S VFS Cache 104 1017 270 1113 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 0 2 60 0 1 131072 0 malloc-32768 32768 4 0 4 0 1 131072 0 mbuf_packet 256 3 505 678 0 254 130048 0 g_bio 408 0 300 6818 0 30 122400 0 ksiginfo 112 58 986 174 0 126 116928 0 malloc-128 128 675 224 982 0 126 115072 0 PROC 1376 58 19 944 0 8 105952 0 malloc-32768 32768 0 3 6 0 1 98304 0 filedesc0 1072 59 25 951 0 8 90048 0 UMA Kegs 384 227 6 227 0 30 89472 0 malloc-4096 4096 16 4 225 0 2 81920 0 sctp_chunk 152 2 518 2 0 254 79040 0 128 Bucket 1024 46 21 254 0 16 68608 0 malloc-64 64 515 556 15764 0 254 68544 0 malloc-128 128 301 226 308 0 126 67456 0 malloc-128 128 352 175 981 0 126 67456 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-32768 32768 0 2 122 0 1 65536 0 malloc-32768 32768 1 1 12 0 1 65536 0 64 Bucket 512 93 35 2625 0 30 65536 0 malloc-256 256 135 120 189 0 62 65280 0 malloc-256 256 193 62 1226 0 62 65280 0 malloc-384 384 79 71 248 0 30 57600 0 malloc-8192 8192 5 2 136 0 1 57344 0 malloc-8192 8192 7 0 8 0 1 57344 0 malloc-64 64 465 354 670 0 254 52416 0 malloc-64 64 74 745 1572 0 254 52416 0 ttyoutq 256 72 123 512 0 62 49920 0 malloc-256 256 60 135 578 0 62 49920 0 malloc-256 256 58 137 781 0 62 49920 0 32 Bucket 256 71 124 710 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 13841 0 16 49152 0 malloc-16384 16384 3 0 3 0 1 49152 0 malloc-2048 2048 6 18 69 0 8 49152 0 malloc-1024 1024 28 20 37 0 16 49152 0 malloc-1024 1024 12 36 1589 0 16 49152 0 malloc-384 384 75 45 1118 0 30 46080 0 malloc-384 384 103 17 114 0 30 46080 0 da_ccb 544 0 84 1799 0 16 45696 0 syncache 168 0 264 3 0 254 44352 0 tcp_inpcb 1304 4 29 32 0 8 43032 0 malloc-4096 4096 7 3 101 0 2 40960 0 pcpu-8 8 4713 407 5057 0 254 40960 0 VMSPACE 584 33 37 920 0 16 40880 0 pipe 736 17 38 336 0 16 40480 0 ttyinq 160 135 115 960 0 62 40000 0 udp_inpcb 408 7 83 177 0 30 36720 0 hostcache 64 2 565 2 0 254 36288 0 malloc-64 64 25 542 85 0 254 36288 0 malloc-64 64 222 345 296 0 254 36288 0 malloc-64 64 49 518 138 0 254 36288 0 malloc-128 128 16 263 54 0 126 35712 0 malloc-128 128 132 147 644 0 126 35712 0 malloc-128 128 46 233 273 0 126 35712 0 routing nhops 256 23 112 38 0 62 34560 0 malloc-256 256 61 74 80 0 62 34560 0 malloc-256 256 81 54 489 0 62 34560 0 malloc-256 256 26 109 158 0 62 34560 0 malloc-8192 8192 4 0 4 0 1 32768 0 malloc-8192 8192 4 0 4 0 1 32768 0 malloc-2048 2048 2 14 3 0 8 32768 0 malloc-2048 2048 6 10 7 0 8 32768 0 malloc-2048 2048 6 10 70 0 8 32768 0 malloc-2048 2048 10 6 42 0 8 32768 0 malloc-1024 1024 9 23 220 0 16 32768 0 malloc-1024 1024 4 28 23 0 16 32768 0 malloc-1024 1024 8 24 9 0 16 32768 0 malloc-512 512 9 55 9 0 30 32768 0 malloc-512 512 3 61 173 0 30 32768 0 malloc-512 512 4 60 55 0 30 32768 0 malloc-512 512 2 62 4 0 30 32768 0 malloc-512 512 0 64 15 0 30 32768 0 pcpu-64 64 498 14 498 0 254 32768 0 PGRP 120 18 246 65 0 126 31680 0 sctp_laddr 48 8 580 28 0 254 28224 0 rl_entry 48 6 582 7 0 254 28224 0 malloc-32 32 334 548 410 0 254 28224 0 16 Bucket 144 60 136 305 0 62 28224 0 4 Bucket 48 5 583 6 0 254 28224 0 AIO 208 1 132 13 0 62 27664 0 TURNSTILE 136 161 28 161 0 62 25704 0 cpuset 200 8 120 9 0 62 25600 0 malloc-8192 8192 1 2 6 0 1 24576 0 ertt_txseginfo 40 0 606 857 0 254 24240 0 PWD 40 19 587 128 0 254 24240 0 rtentry 168 26 118 38 0 62 24192 0 Files 80 131 169 7759 0 126 24000 0 8 Bucket 80 54 246 328 0 126 24000 0 malloc-384 384 1 59 3 0 30 23040 0 malloc-384 384 11 49 26 0 30 23040 0 ripcb 376 3 57 18 0 30 22560 0 SLEEPQUEUE 88 161 95 161 0 126 22528 0 clpbuf 2624 0 8 26 0 4 20992 0 ertt 72 4 276 32 0 126 20160 0 malloc-32 32 41 589 64 0 254 20160 0 malloc-32 32 73 557 282 0 254 20160 0 malloc-32 32 184 446 240 0 254 20160 0 malloc-32 32 37 593 718 0 254 20160 0 malloc-32 32 49 581 3056 0 254 20160 0 malloc-32 32 17 613 1576 0 254 20160 0 2 Bucket 32 66 564 380 0 254 20160 0 AIOCB 552 0 35 15 0 16 19320 0 ktls_session 256 0 75 1 0 62 19200 0 L VFS Cache 320 0 60 5 0 30 19200 0 AIOLIO 272 0 70 5 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 2 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 0 2 19 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 63 0 2 16384 0 malloc-4096 4096 0 4 8 0 2 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-1024 1024 0 16 3 0 16 16384 0 malloc-1024 1024 1 15 2 0 16 16384 0 malloc-512 512 4 28 10 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 1 287 1 0 254 16128 0 kenv 258 17 43 1065 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 udplite_inpcb 408 1 35 3 0 30 14688 0 SMR SHARED 24 8 503 8 0 254 12264 0 KNOTE 160 3 72 76 0 62 12000 0 malloc-16 16 31 719 113 0 254 12000 0 malloc-16 16 10 740 141 0 254 12000 0 malloc-16 16 305 445 462 0 254 12000 0 malloc-16 16 22 728 30 0 254 12000 0 malloc-16 16 183 567 2909 0 254 12000 0 malloc-16 16 18 732 25172 0 254 12000 0 malloc-16 16 37 713 163 0 254 12000 0 itimer 352 0 33 2 0 30 11616 0 splice 184 0 63 1 0 62 11592 0 malloc-384 384 1 29 1 0 30 11520 0 Mountpoints 2816 2 2 2 0 4 11264 0 malloc-4096 4096 0 2 1 0 2 8192 0 malloc-4096 4096 1 1 1 0 2 8192 0 vtnet_tx_hdr 24 0 334 1657 0 254 8016 0 pcpu-16 16 4 252 4 0 254 4096 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-384 384 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl