last executing test programs: 3.153691963s ago: executing program 0 (id=154): r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) rfork(0x85000) extattr_get_fd(r0, 0x0, &(0x7f0000000000)='bbr\x00', 0x0, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000000)={0x9, 0x1, 0xffffffffffffffff, 0x46, 0xffffffffffffffff}) 2.757055351s ago: executing program 0 (id=156): posix_fadvise(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x43) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) (async) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00', 0x3d6}, 0x24) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00', 0x3d6}, 0x24) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x4}, 0x1c) sendto$inet(r2, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x10000000000003, 0x0) setsockopt$sock_int(r3, 0xffff, 0x8000, 0x0, 0x0) getsockopt$inet_udplite(r3, 0x88, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendto$unix(r3, &(0x7f0000000140)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(r3, &(0x7f0000000140)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0x101, &(0x7f0000000380)={@in={{0x10, 0x2, 0x0, @multicast2}}, r5, 0x1, 0x4819f9df, 0x1000000, 0x8368, 0x7fffffff}, &(0x7f00000002c0)=0x98) (async) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0x101, &(0x7f0000000380)={@in={{0x10, 0x2, 0x0, @multicast2}}, r5, 0x1, 0x4819f9df, 0x1000000, 0x8368, 0x7fffffff}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000000)={r5, 0x4}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000000)={r5, 0x4}, &(0x7f0000000140)=0x8) r6 = socket(0x1c, 0x1, 0x0) kmq_unlink(0x0) bind$inet6(r6, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) setrlimit(0x9, &(0x7f0000000100)) connect$inet6(r6, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) procctl$PROC_REAP_GETPIDS(0x0, 0x0, 0x5, &(0x7f0000000380)={0x0, '\x00', 0x0}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, &(0x7f0000000100)={'rack\x00', 0x200005}, 0x5b) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, &(0x7f0000000100)={'rack\x00', 0x200005}, 0x5b) sendfile(r0, r6, 0x89b9, 0x0, 0x0, 0x0, 0x11) (async) sendfile(r0, r6, 0x89b9, 0x0, 0x0, 0x0, 0x11) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) getuid() 2.401535896s ago: executing program 0 (id=169): setrlimit(0x2, &(0x7f0000000000)={0x6, 0xffffffffffffffff}) setresgid(0xee00, 0x0, 0x0) setegid(0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x19, 0xf, 0x18, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735", 0x0, 0x0, 0x0, 0xfdffffff, [0xffffffff, 0x1005c32, 0x1]}) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x10000000) setsockopt$inet6_group_source_req(r1, 0x29, 0x53, &(0x7f0000000240)={0x3, {{0x1c, 0x1c, 0x1, 0xe, @rand_addr="5124051fc2a14650bff86ff3c0b507a1", 0x9d}}, {{0x1c, 0x1c, 0x0, 0x800, @rand_addr="88c1ee244a5915c89911b37de4c74435", 0x1}}}, 0x108) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x3, 0x4, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000300)}) r2 = socket(0x26, 0x2, 0x0) r3 = dup2(r2, r2) readv(r2, &(0x7f0000001680)=[{&(0x7f0000002780)=""/4104, 0x1008}], 0x1) recvmsg(r3, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082) getpeername$inet6(r1, &(0x7f0000000100)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) 1.910967441s ago: executing program 1 (id=176): r0 = dup(0xffffffffffffffff) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000000)) ioctl$UI_SET_MSCBIT(r0, 0x20045568) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (rerun: 32) ioctl$BIOCGDLTLIST32(r1, 0xc0084279, &(0x7f0000000080)={0x60766310, 0x1}) (async) r2 = socket(0x1c, 0x10000000, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0x40, &(0x7f00000000c0)='dctcp\x00', 0x6) (async, rerun: 32) getgroups(0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0]) (rerun: 32) getgroups(0x9, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) __semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=&(0x7f0000000180)={{0x0, 0x0, 0x0}}) setgroups(0x8, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6, 0x0, 0x0, r9]) (async) cpuset_setaffinity(0x2, 0x0, 0x9, 0x8, &(0x7f0000000240)={[0x2]}) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000280)) r11 = getppid() aio_fsync(0x1000000, &(0x7f0000000440)={r1, 0x9, &(0x7f00000002c0)="98a7f299d623040d9e61a7d5a950f73667dad44d8f420b18b3f60c772336b7b5bd2654b235e60c3902901727c5037c28239d5d31cca4835cbd17dd9c5aff636a11d8f7a72053268e3159a18afe416622b886c79201269d34319bec1ccc402642", 0x60, [0x7fc3, 0x8], 0xb, 0x6, 0x6, {0x9, 0x7, &(0x7f0000000340)="c4aeb1583fbac032f1e4aa242565012fb533c1315c896b72623541858a7d9239153ab06fe8fab296b6aad79920058d6f4e7069888ec53aa8e3231fd830861cf1d529f417c9c55d0e6be483a5a91e2bb64cf1df12447ae31dfd0eb244b6560b1cb4f6739e50fde5bc2c3938be5418f31577f813825f65b818eb29585d30d320f33ccf7bf790b5792721164d502dd000c97e429b1c979363b745a043fa7910aac432ebcc40279ccca0b2627c6f1158704b3be23bf8adb96a41779f331d77b35082989d845d3a0470bb1f420d799fc4ca0b9c3d2106172e04b37a52d6c89895208b8647e6deef86d404569e9fc70b"}, {0x3, 0x1e, @sival_ptr=0xa9, @tid=r11}}) (async) cpuset_getaffinity(0x3, 0x5, 0x3, 0x8, &(0x7f0000000500)) r12 = msgget(0x3, 0x2a8) (async, rerun: 64) r13 = getsid(r11) (rerun: 64) msgctl$IPC_SET(r12, 0x1, &(0x7f0000000540)={{r8, r3, r8, r5, 0x8b, 0x7, 0x0, 0x4}, 0x5, 0x200, 0x40, 0xb5ab, 0xfffffffffffffffb, 0x6, r11, r13}) (async) r14 = shm_open2(&(0x7f00000005c0)='./file0\x00', 0x2, 0xc, 0x6, &(0x7f0000000600)='#+#\x00') fcntl$lock(r14, 0xd, &(0x7f0000000640)={0x1, 0x4, 0x3, 0xa9d, r11}) (async) r15 = __specialfd$eventfd(0x1, &(0x7f0000000680)={0x9, 0x5}, 0x8) freebsd11_kevent(r15, &(0x7f00000006c0)=[{0x4e, 0xfffffffffffffff5, 0x0, 0x1, 0x80000001}, {0x8, 0xfffffffffffffffa, 0x10, 0x1, 0x1, 0x9}, {0x80, 0xfffffffffffffff9, 0x2, 0x0, 0x3, 0x7}, {0x5, 0xfffffffffffffffb, 0x82, 0x1, 0x2, 0x5}, {0xffffffffffffff10, 0xfffffffffffffffd, 0x8, 0x40000000, 0xc3}, {0x5, 0xfffffffffffffff9, 0x4020, 0x1, 0x6}, {0x8000000000000000, 0xfffffffffffffff5, 0x40, 0xffffff, 0x8, 0x6}, {0x2b9bb7e0, 0xfffffffffffffffa, 0x1, 0x0, 0x1}, {0x8, 0xfffffffffffffff3, 0x0, 0x41000008, 0x3, 0xa25}, {0xf4, 0xfffffffffffffffe, 0x80a0, 0x20000000, 0x12905e9e, 0x4}], 0xa, &(0x7f0000000800)=[{}, {}], 0x2, &(0x7f0000000840)={0x86d, 0xf}) (async) fchownat(r15, &(0x7f0000000880)='./file0\x00', r10, r7, 0x200) mknodat(r0, &(0x7f00000008c0)='./file0\x00', 0x2, 0x8) (async) listen(r15, 0x2) (async) __realpathat(r0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=""/4, 0x4, 0x0) (async, rerun: 32) freebsd11_lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) (async, rerun: 32) freebsd11_mknodat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x1000, 0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000b00)={0x0, 0x9}, &(0x7f0000000b40)=0x8) 1.863394523s ago: executing program 1 (id=178): mkdir(&(0x7f0000000040)='./file0\x00', 0x10) setrlimit(0x8, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mount(&(0x7f00000000c0)='cd9660\x00', &(0x7f0000000000)='./file0\x00', 0x40000409, &(0x7f00000001c0)) open$dir(&(0x7f0000000040)='./file1\x00', 0x4000040000100ac2, 0x100) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffff19ffff00000000000086dd60cc58da00182300ff010000000000000000000000000001ff0200000000000000000000000000013a000000000000008c00907800"/78]) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') 1.721332711s ago: executing program 2 (id=181): sigwaitinfo(&(0x7f0000000000)={[0x8, 0x8, 0x10000, 0xdc]}, 0x0) (async) sigwaitinfo(&(0x7f0000000000)={[0x8, 0x8, 0x10000, 0xdc]}, 0x0) r0 = kqueue() kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x2a4, &(0x7f0000ffc000/0x3000)=nil) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000100)={@multicast1, @rand_addr=0x8, @rand_addr=0x2}, 0xc) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000100)={@multicast1, @rand_addr=0x8, @rand_addr=0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000400)={@multicast1, @rand_addr=0x9}, 0xc) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000400)={@multicast1, @rand_addr=0x9}, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2, @broadcast}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2, @broadcast}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x2e, &(0x7f0000000100)={@empty}, 0x14) (async) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x2e, &(0x7f0000000100)={@empty}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x2e, &(0x7f0000000000)={@loopback}, 0x14) setsockopt$inet_mreqsrc(r1, 0x0, 0x48, 0x0, 0x0) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x48, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x48, &(0x7f0000000040)={@empty, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f00000000c0)={'rack\x00', 0x2}, 0x24) setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f0000000100)={@multicast1, @rand_addr=0x1, @remote={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr=0xfffffffd, @multicast1}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x48, &(0x7f0000000400)={@multicast1, @rand_addr=0x6, @multicast1}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f0000000080)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) rfork(0x85000) openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) (async) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f0000000080)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdefffff, [0x0, 0x0, 0x0, 0xb1]}) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000040)={0x0, 0x0, 0x70, 0x30038, &(0x7f0000000180), 0x0, 0x0, 0x0}) (async) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000040)={0x0, 0x0, 0x70, 0x30038, &(0x7f0000000180), 0x0, 0x0, 0x0}) fdatasync(0xffffffffffffffff) (async) fdatasync(0xffffffffffffffff) 1.681549865s ago: executing program 1 (id=182): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async) r0 = kqueue() chroot(&(0x7f0000000080)='./file0\x00') (async) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) aio_fsync(0x80, &(0x7f0000000400)={r1, 0x8000df, 0x0, 0x0, [0x6, 0x3], 0x9, 0x8, 0xfffffffc, {0x932, 0x497, 0x0}, {0x0, 0x20, @sigval_int=0x9}}) (async) aio_fsync(0x1000000, &(0x7f0000000e00)={r1, 0x8000, 0x0, 0x0, [0x101, 0xfffc], 0x6, 0x18, 0x4, {0x5, 0x7fffffff, 0x0}, {0x4, 0x18, @sival_int=0x8, @ke_flags=0xfc}}) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000140)={0x0, 0xbd1, 0xfffffffc}) (async) r2 = socket$inet6_udplite(0x1c, 0x2, 0x88) bind$inet6(r2, &(0x7f0000001140)={0x1c, 0x1c, 0x3, 0x0, @mcast2}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x30f5}, 0x1c) socket(0x2, 0x3, 0x0) (async) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fchmod(0xffffffffffffffff, 0x189) 1.621505123s ago: executing program 2 (id=183): rfork(0x1000) r0 = open(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000000000209, 0x0) ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x100, 0x0, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x200000, 0x0, 0x1, 0x2, 0x81, 0x0, 0x40, 0x0, 0x0, 0x400, 0x0, 0x0, 0x8000, 0x8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0xd6df65, 0xfffffffc, 0x0, 0x0, 0x5, 0x73, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401, 0x101]}) lio_listio(0x1, &(0x7f0000000580)=[{r0, 0x0, &(0x7f0000000180), 0x0, [0x0, 0x3], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x4, 0x0, @sival_ptr, @ke_flags=0x54}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [0x0, 0xfffffffd], 0x0, 0x0, 0x3, {0xbf55, 0x0, 0x0}, {0x0, 0x1c, @sival_ptr}}, {r0, 0x0, 0x0, 0x0, [0x0, 0x4], 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0}, {0x1, 0x100000a, @sival_int=0xfa8d}}], 0x3, 0x0) aio_waitcomplete(0x0, &(0x7f0000000940)={0x40000000000000, 0x9}) 1.617923981s ago: executing program 1 (id=184): r0 = socket(0x26, 0x2, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f00000001c0)=0x101, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x8000, {0x1, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x3ef7}}) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) fpathconf(r3, 0x9) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) setitimer(0x1, &(0x7f0000000140)={{0x8}, {0xfffffffffffffffd, 0x8000}}, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) cpuset_getid(0x3, 0x3, 0x54, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0xf33a}, {0x0, 0x10001}}, 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) aio_writev(&(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}}) r7 = accept$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000180)=0x1c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r8, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) r9 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet_mreqn(r8, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x2e, &(0x7f0000000040)={@empty, r10}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x2e, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @broadcast}, r10}, 0x14) copy_file_range(r5, 0x0, r5, &(0x7f0000000100)=0x3, 0x1, 0x0) rfork(0x1000) r11 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1c, 0x5, 0x7) setsockopt$sock_int(r11, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) setitimer(0x0, 0x0, 0x0) ioctl$SMB_WRITEB(r5, 0x80306905, &(0x7f00000003c0)={0xe, 0xb3, 0x4, @buf="01a0", @buf='wc', 0x0, &(0x7f0000000340)=0xf, 0x1, &(0x7f0000000380)=0x6, 0x1}) 1.571506934s ago: executing program 2 (id=185): openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x40, 0x0) (async) kqueue() (async) kevent(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x10000000007, 0x40000000000000]}, {0x7f, 0xfffffffffffffff5, 0x4050, 0x8, 0x6, 0x79, [0x80000001, 0x29af, 0x100000000000002]}, {0x7, 0xffffffffffffffff, 0x4, 0x400, 0x810, 0x0, [0x200, 0x2, 0xfff, 0x160]}], 0x3, 0x0, 0x0, 0x0) (async) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) (async) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x100, &(0x7f0000000100)) (async) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) freebsd11_getdents(r0, &(0x7f0000000140)=""/53, 0x35) (async) r1 = __specialfd$eventfd(0x1, &(0x7f0000000100)={0x2, 0x3}, 0x8) accept4$inet(r1, &(0x7f00000001c0)={0x10, 0x2, 0xffffffffffffffff, @multicast2}, &(0x7f0000000200)=0x10, 0x20000000) (async) r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) (async) kmq_notify(0xffffffffffffffff, 0x0) (async) kqueue() (async) freebsd11_kevent(r2, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0) (async) r3 = open(0x0, 0x0, 0x19) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000001e00)="0300000000000000", 0x8, 0xc, &(0x7f0000000180)={0x1c, 0x1c, 0x0, 0x9, @loopback, 0xb}, 0x1c) (async) ftruncate(r3, 0x2) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) clock_nanosleep(0x4, 0x0, &(0x7f0000000040)={0x80000000004, 0x7}, &(0x7f0000000200)) (async) rfork(0x80040) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r2) getsockopt$inet6_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x15, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) getsockopt$inet6_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000340)={r8, 0x1b, 0x1, 0x1000, 0x4000, 0x9}, &(0x7f0000000380)=0x14) (async) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) (async) sendfile(r9, r5, 0x0, 0x0, 0x0, 0x0, 0x7) (async) setgroups(0x3, &(0x7f0000000f80)=[0x0, 0xffffffffffffffff, 0x0]) openat$md(0xffffffffffffff9c, &(0x7f0000000400), 0x100000, 0x0) 1.571029913s ago: executing program 2 (id=186): cpuset_getdomain(0x2, 0x4, 0x0, 0x20, &(0x7f00000000c0), 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0xc0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x50) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@random="8f6f77ede655", @random="e7f9555df160", [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0xf, 0x2b, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x9}, [@routing={0x64, 0x2, 0x0, 0x73, 0x0, [@loopback]}]}}}}}}}) freebsd11_mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x60a3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000000100)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r3) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) sendfile(r6, r3, 0x2862, 0x6, 0x0, 0x0, 0x15) r7 = socket(0x1c, 0x2, 0x0) r8 = setsid() fcntl$setown(r7, 0x6, r8) rfork(0x85000) r9 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x2020040, 0x0) sendfile(r9, r5, 0x1f00, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000380)={@local, @random="c61801b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, r10, r10, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x6b, {[@timestamp={0x8, 0xa, 0x8, 0x7fffffff}, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x800}]}}, {"0e66c380fdf8115f3c1cbe79fe997e8f32a69cca94a31c039afa57add9e3b651ff2b6582c00096ed727191ec52ea7e8a257aa8f2c27312ba6da8bf759eb3b167746277c16d4ecd"}}}}}}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344}, 0x7fffffff, 0x10001) syz_emit_ethernet(0x133, &(0x7f0000000340)={@remote, @random="0edb03eed54f", [], {@ipv4={0x800, {{0x1d, 0x4, 0x2, 0x1e, 0x125, 0x65, 0x9, 0x81, 0x58, 0x0, @multicast2, @loopback, {[@generic={0x94, 0xc, "caae67265bd7af52eb25"}, @lsrr={0x83, 0x27, 0x2, [@empty, @rand_addr=0x200, @loopback, @multicast1, @multicast2, @multicast1, @multicast1, @empty, @empty]}, @timestamp={0x44, 0x10, 0x5, 0x0, 0x7, [{[], 0x7}, {[], 0x9}, {[], 0x9}]}, @timestamp={0x44, 0x8, 0x5, 0x0, 0x5, [{[], 0x1e60}]}, @ssrr={0x89, 0x13, 0x3, [@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @loopback]}]}}, @tcp={{0x0, 0x0, r10, r11, 0x1, 0x0, 0x10, 0x8, 0x2795, 0x0, 0x6, {[@fastopen={0x22, 0x12, "643ecd699558420c2cfa7ecad276d6f5"}, @eol, @eol, @mss={0x2, 0x4, 0xfff8}, @md5sig={0x13, 0x12, "7fa10572d16dc11362240a6d37835078"}]}}, {"afbe69bbef64caa64c7bce63ae756a8ed35a12bd71521a9df95e41cbd42cad4089cf2ed170bfe75ae56639a01b8dc2fae118d45774d03dccff77f4a5013a2a950d70e41245324710c2a888bbd6e9d16ef8c7935b595d1cbedd01e7aa0b0980d4a85144aef36f76025a01c54706c63f2a3c"}}}}}}) 1.521600364s ago: executing program 0 (id=187): r0 = openat$filemon(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) thr_self(&(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fork() wait4(r2, 0x0, 0x8, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, 0x0) setsid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x4, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='.\x00', 0x4, 0x0) mkdirat(r6, &(0x7f0000000100)='./file1\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') renameat(r7, &(0x7f0000000200)='./file1\x00', r7, &(0x7f0000000140)='./file0/file0\x00') __getcwd(&(0x7f0000000440)=""/79, 0xfffffffffffffdf7) renameat(r3, &(0x7f0000000400)='./file0\x00', r5, &(0x7f00000003c0)='./file0\x00') ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) kqueue() r8 = kqueue() kevent(r8, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) msgget(0x1, 0x240) socket$inet(0x2, 0x4000000000000001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) 1.137455558s ago: executing program 2 (id=186): cpuset_getdomain(0x2, 0x4, 0x0, 0x20, &(0x7f00000000c0), 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0xc0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x50) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@random="8f6f77ede655", @random="e7f9555df160", [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0xf, 0x2b, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x9}, [@routing={0x64, 0x2, 0x0, 0x73, 0x0, [@loopback]}]}}}}}}}) freebsd11_mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x60a3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000000100)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r3) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) sendfile(r6, r3, 0x2862, 0x6, 0x0, 0x0, 0x15) r7 = socket(0x1c, 0x2, 0x0) r8 = setsid() fcntl$setown(r7, 0x6, r8) rfork(0x85000) r9 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x2020040, 0x0) sendfile(r9, r5, 0x1f00, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000380)={@local, @random="c61801b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, r10, r10, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x6b, {[@timestamp={0x8, 0xa, 0x8, 0x7fffffff}, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x800}]}}, {"0e66c380fdf8115f3c1cbe79fe997e8f32a69cca94a31c039afa57add9e3b651ff2b6582c00096ed727191ec52ea7e8a257aa8f2c27312ba6da8bf759eb3b167746277c16d4ecd"}}}}}}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344}, 0x7fffffff, 0x10001) syz_emit_ethernet(0x133, &(0x7f0000000340)={@remote, @random="0edb03eed54f", [], {@ipv4={0x800, {{0x1d, 0x4, 0x2, 0x1e, 0x125, 0x65, 0x9, 0x81, 0x58, 0x0, @multicast2, @loopback, {[@generic={0x94, 0xc, "caae67265bd7af52eb25"}, @lsrr={0x83, 0x27, 0x2, [@empty, @rand_addr=0x200, @loopback, @multicast1, @multicast2, @multicast1, @multicast1, @empty, @empty]}, @timestamp={0x44, 0x10, 0x5, 0x0, 0x7, [{[], 0x7}, {[], 0x9}, {[], 0x9}]}, @timestamp={0x44, 0x8, 0x5, 0x0, 0x5, [{[], 0x1e60}]}, @ssrr={0x89, 0x13, 0x3, [@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @loopback]}]}}, @tcp={{0x0, 0x0, r10, r11, 0x1, 0x0, 0x10, 0x8, 0x2795, 0x0, 0x6, {[@fastopen={0x22, 0x12, "643ecd699558420c2cfa7ecad276d6f5"}, @eol, @eol, @mss={0x2, 0x4, 0xfff8}, @md5sig={0x13, 0x12, "7fa10572d16dc11362240a6d37835078"}]}}, {"afbe69bbef64caa64c7bce63ae756a8ed35a12bd71521a9df95e41cbd42cad4089cf2ed170bfe75ae56639a01b8dc2fae118d45774d03dccff77f4a5013a2a950d70e41245324710c2a888bbd6e9d16ef8c7935b595d1cbedd01e7aa0b0980d4a85144aef36f76025a01c54706c63f2a3c"}}}}}}) 861.579332ms ago: executing program 3 (id=193): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xffffffffffffffff) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0xca0706ee3fd5d6f6) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) 811.218908ms ago: executing program 3 (id=194): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0x19, 0x12, 0x73, &(0x7f0000000040)="e5509306616053c5cf35cfbdb81fb4e09fd404c4d41f2199934968574bcbb00ef421f7107a2ca67b61d7c6a6b563c0c46f9657d59d2d55dc462a2b7dd3e3e8a61c2d7cddfd8278c0df5d5d9662a2f61b8e8b43d15171752956e943a750092c8848904b1e2802160cda348ad4c2e709e9ac5eea", 0x4e, &(0x7f00000000c0)="bc254e16e699d56283587dcffb8223dbbd057988289d4c10dce3019f9f7a52c5ead435dd721fb0762b50deee7565dcc1e3962814d9f002926a0a17d066dce6d6be744ed4a6d7cab6b9c853ed1ede", 0xffff, 0xfffffffd, [0x5, 0xffff, 0x7, 0x25188674]}) __cap_rights_get(0x9, r0, &(0x7f0000000180)) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1011, &(0x7f00000001c0)=0xfffffff3, 0x4) r2 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000240)={0x8, 0x3, {0x50, 0x3, 0x1, {0xfc00, 0x200}, {0x4, 0x10}, @condition=[{0x401, 0x2, 0xf, 0x2, 0xb, 0x5c5a}, {0x4, 0x8, 0x3, 0x7f4c, 0x8c69, 0x111}]}, {0x56, 0xfebc, 0x258, {0x1, 0x2cf}, {0x7f, 0xd}, @constant={0x5, {0x2, 0x401, 0x2, 0x2}}}}) procctl$PROC_REAP_STATUS(0x2, 0xffffffffffffffff, 0x4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lio_listio(0x0, &(0x7f0000000780)=[{r0, 0x63e, &(0x7f00000002c0)="826fc33cd6ca45d764014975dc543e2cf311b21e6e2a2516a6380b2f0be8e952f76c211f6d36deb3443ef47c3085bae53544093f07b34d06446b10036081733f635db6ca9886c5b897765d5781b178993ff1ba48e589400326aecb9eb2826153251089eba03f12f62a7e499eb7802d776a891f6f629257e32d62d54f5cddfb7245d2a88a07d02faae6", 0x89, [0x4, 0x80], 0x7, 0x6, 0x10, {0x2, 0x5, &(0x7f0000000380)="024ce95b6310330833d6849f5aac839537f7872d50b3f8698d85a8b749689fdaf655dec05ba3e7929f5ada2a62ceb1988cd08bc4653e362771a69917cf201a4e196dfcefb95e14d4093748d5a5a5056bfdd1c6b6af123bd3733f62b2803eba930e3f4ffca1203a6726a9334cc9dd0a58727c5306e41445887842f67d821ee1ed7f36bdf9ce36d7d9358accd122ea18d639f2e0172c7229a7492068d50039465d23d8f73aa8173f63f3101e10fea9c7e90a52aaf0aacb51afb6372acc7abd547c1b9de1b8fba4624f90adbb28918c1a6c62dcfc26bba4a5daa98fab24068b34da6c"}, {0x1, 0xa, @sival_ptr=0x2, @tid=r3}}, {r5, 0x10000000000000, &(0x7f0000000540)="a59bcd32f88f63c3afd2ad0c7798a4a3883e6eb71df311241e7ce199371d72164992579854afd56707569bbc92ea46", 0x2f, [0x3, 0x3], 0x1, 0x4, 0xeb, {0x7fffffffffffffff, 0x1, &(0x7f0000000580)="7ae0e50bb9888cf3a2da08364cb005edd9fb4b5d00afac0ecf55019b3ec3a5b6a748141200d4885647ab1fe792530fad4efbd0e37114c704a6432202666a5c2653caaa7450cfad5a67fee4ed0aa8cb741f5974861b283645bba3c8397cd4ccde62d7a9c83c656e944dda1b11992e43f1f91d0dbca02747114030fbac5827b0d316340aebb54dab0c02d343d199bf75f0ac9518eaacb460599ed83b978db6476c4883106be5e607837c4072f1f6c2be194743796cbfd29a"}, {0x0, 0x4, @sigval_int=0xf, @ke_flags=0x2}}, {r0, 0x37, &(0x7f0000000640)="3b98a0b405e64a5fee7bc0eb70504f73e86e4a1169acf6db3d486df7a3b54972e11ea4afcc0ea45b5754151cfadccb058c11b6989d01e37fc0020e664d4f45c29ad6a68a3050", 0x46, [0x4, 0xd], 0xffffffffffffff78, 0x4, 0x4, {0x9, 0xf891, &(0x7f00000006c0)="7ef575a6cd0fa691853e838f1ea9fc87384b14b3db183efd64cdf9987b3d29cfe851b2beca4a6080b896487322676383b2f44623fa1513e436e4f592085f3eb359a2f5789085d4507a670f8e45e6b51a13a7c4aadd86ef565c02f4fe5e5003692aea4dc5e114e706d78c8782c8c07e21a2c181a37ee7aad35ee5cf9bcec1b80678b55450a7a3012102b82c4a50616c18321c69cdee201617618bc192de8429e6dfbc7ede3a6b779fade5a2d92da2f7a10623b15d130b4461"}, {0x0, 0x14, @sigval_int=0x4, @spare=[0x5, 0x0, 0x3, 0x6, 0x4, 0x1, 0x6]}}], 0x3, &(0x7f0000000a00)={0x1, 0xe, @sigval_int=0x80, @thr={&(0x7f0000000980)="c4a10d6886000000006464650faeee8fc878c05a007c84f5c4c2dd96529f2ef2440f7cf966420f3a0c30be4b0f7ea9040000003e3a1d2a00000043dbce", &(0x7f00000009c0)}}) r6 = socket$inet6(0x1c, 0x0, 0x4) cpuset_setaffinity(0x1, 0x8, 0x3, 0x8, &(0x7f0000000a80)={[0x4]}) syz_emit_ethernet(0xda, &(0x7f0000000ac0)={@empty, @local, [{[{0x88a8, 0x1, 0x1}], {0x8100, 0x5, 0x1, 0x3}}], {@ipv4={0x800, {{0x24, 0x4, 0x1, 0x1, 0xc4, 0x65, 0x4, 0x7, 0x18, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0xf, 0xb, [@remote={0xac, 0x14, 0x0}, @multicast2, @loopback]}, @ssrr={0x89, 0xb, 0x8, [@multicast1, @remote={0xac, 0x14, 0x0}]}, @rr={0x7, 0x2b, 0xff, [@loopback, @empty, @rand_addr=0x800, @rand_addr=0xf861, @multicast2, @empty, @rand_addr=0x9, @local={0xac, 0x14, 0x0}, @rand_addr=0x4, @rand_addr=0x10000]}, @rr={0x7, 0x17, 0x6d, [@empty, @multicast2, @empty, @multicast2, @multicast1]}, @rr={0x7, 0xf, 0xbc, [@remote={0xac, 0x14, 0x0}, @loopback, @local={0xac, 0x14, 0x0}]}, @generic={0x0, 0x4, 'v['}, @ra={0x94, 0x6, 0x3}, @end, @ra={0x94, 0x6, 0x3}]}}, @udp={{0x3, 0x0, 0x8}, {"66da624575d5bd475b5567e5351de41dd02aa85dfa4430d610a5696eeadc1d5564896404c3a4271787145d7a"}}}}}}) r7 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x2004556a) cpuset_setaffinity(0x1, 0x7, 0x3, 0x8, &(0x7f0000000c00)) open(&(0x7f0000000c40)='./file0\x00', 0x2, 0x10) cpuset_getaffinity(0x3, 0x2, 0x0, 0x8, &(0x7f0000000c80)) rfork(0x90000) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x33, &(0x7f0000000cc0)={0x26, 0x4, 0x0, 0x7, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @mcast1]}, 0x28) listen(r1, 0x9) lseek(r1, 0x67, 0x1) ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc0306367, &(0x7f0000001f40)={0xd, 0x3, 0x2, 0x80, &(0x7f0000000d00)="4d30f057b9c8c620a4d03c89c42152d113148357de16ebeaf4a2e03771dfbbe755a9ad7cb6effc9a550332add9faf779565d93e9517e6ffd", &(0x7f0000000d40)="cf3032ea8d24e2954428c4184c7a0b63fae951db77d31eaada2ff9a2a57665a73d94b64611cf8a5b2351b866bc892d0ee6d597c6c359dc04892caa0575fec21ad835dd5dd8beadb1b43d31ad4561c67c04af7a78f49a31f837ac5a041402b1ad766fd18a1b378cacef002a84a741c6e2421d6b3d31d168f160c04caa57101fd9c445cc673aff774d7b0adf900e1e0958448474ee7d32aad8025e5834f2591266e1a5f24f6d7fb2de2b9cd2447a9155ffaef5918e692af7eaccbe9f9e4279cd905a7efd152ffe9e6ab1495c9d2d8e539064601cb00ea4", &(0x7f0000000e40)="0064885783f436ba83244bc21eb262b0b4b01b328989ce6682623d7c5599de6394d1481aeecd0ea4c1d534ed521584d0332c8f417460a1ba0a546ffbaccecd697f722b38a2a6723d5c2ec7b1341a79ff41152fc08a9336d2e6f2b18b41a59a008cbfa242d9df91984ada5b6bea706319e6a7445104782204b2de3a9874453fc62a28f5f89b0910e98ea889cb68b77744f5b8c84c6cb02766dc1cc49d4c2f994a61f0100bf70cf9361d4ff60545657e86ca9b17308224bf3f1c66fa15de9d086f389c8e85ad1e9415e46d02686f91fedfd2c2711ac4f0c49cb69127cd", &(0x7f0000000f40)="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"}) sendmsg$unix(r4, &(0x7f0000002100)={&(0x7f0000001f80)=@abs={0x8, 0x1, 0x0, 0x0}, 0x8, &(0x7f00000020c0)=[{&(0x7f0000001fc0)="b5909153964004119e0fb38ef090f527531b102140696c7bf2778c7dec054e6d6eff633809f5a4990716e2ecdc77a3bb11e545f7c3a633f9600ab66d3ca49068d58d5e7008c0d785384160cee0ed09dd5cf2eb56de79508776b0dcf4aa7cc5a440c88ebd61744b1a09c11f6dfcdfb74c93dd99f39dcdc32541b32a491ff3690fe182601e8b14cd2930ca4f0b6063cd74550bd47ad19c70b82080f9117a59d4cf949eeaf0b462ba075ed23fa324e652dd85625b26db750ec25f96b100fac31d655306fb6993", 0xc5}], 0x1, 0x0, 0x0, 0x4}, 0x20000) chflagsat(r5, &(0x7f0000002140)='./file0\x00', 0x18101, 0x400) setsockopt$inet6_int(r6, 0x29, 0x9, &(0x7f0000002180)=0x3ff, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x26, &(0x7f00000021c0)={0x0, 0xff}, &(0x7f0000002200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0x101, &(0x7f0000002240)={@in={{0x10, 0x2, 0x2}}, r8, 0x400, 0x2, 0x2, 0xff, 0x55}, &(0x7f0000002300)=0x98) r9 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0x101, &(0x7f0000002340)={@in={{0x10, 0x2, 0x1}}, r8, 0x9a, 0x4, 0x81, 0x10, 0x4}, &(0x7f0000002400)=0x98) 810.801775ms ago: executing program 3 (id=195): sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x5, 0x0, 0xfffffffc}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) aio_write(&(0x7f0000000240)={r0, 0x80001001, 0x0, 0x0, [], 0x6, 0x8, 0x80000000, {0x0, 0x10000, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}) r1 = socket(0x1c, 0x1, 0x0) aio_read(&(0x7f0000000180)={r1, 0xca1, 0x0, 0x0, [0xc7, 0x18], 0x7, 0x5, 0x4, {0xf, 0x6, 0x0}, {0x1, 0x8, @sigval_int=0x3, @ke_flags=0x804c}}) aio_error(&(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x10000, @sigval_ptr}}) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1014, &(0x7f0000000140), 0x4) sysarch$I386_GET_IOPERM(0x3, &(0x7f0000000200)) 771.501225ms ago: executing program 3 (id=196): socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x0, 0x0, @loopback}, {0x1c, 0x1c, 0x0, 0x4, @mcast2}, 0x0, [0x0, 0x0, 0x9, 0x800, 0x2000, 0x2000, 0x0, 0xfffb]}, 0x5c) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000140)) openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0xe, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x100000004}) ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc0306367, 0x0) kqueue() r0 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8) r1 = fcntl$getown(r0, 0x3) r2 = kqueue() kmq_notify(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0xc, @sival_ptr=0xfffffffffffffffb}) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) kevent(r2, &(0x7f0000000040)=[{0x9, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x80, 0x350) socket$inet6_udp(0x1c, 0x2, 0x0) freebsd11_fstatat(0xffffffffffffffff, 0x0, 0x0, 0x4000) setregid(0x0, 0x0) posix_fadvise(0xffffffffffffffff, 0x24, 0x2, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1fc], 0x0, 0x0, 0x0, {0xe, 0x7, 0x0}, {0x0, 0x0, @sigval_int=0x1000, @ke_flags=0x9fc040a3bd859cca}}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rfork(0x96014) write(r4, &(0x7f0000000080)="ba", 0x100000) sigqueue(r1, 0x14, @sival_ptr=0xe03) sigqueue(r1, 0x15, @sival_ptr) extattr_delete_fd(r0, 0x2, &(0x7f0000000140)='\b') 757.839866ms ago: executing program 1 (id=197): symlink(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000e40)='./file0\x00') 701.445743ms ago: executing program 1 (id=198): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x8000, {0x100000000000001, 0x7, 0x0}, {0x0, 0x3, @sival_ptr=0x3ef7}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) symlink(0x0, 0x0) extattr_set_fd(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(0x0, 0x0, 0x110) r3 = __specialfd$inotify(0x2, 0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r4, 0x0, 0x12) r5 = kqueue() vfork() r6 = fork() wait4(r6, 0x0, 0x4, 0x0) select(0xc9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f00000005c0)) ktimer_create(0x4, 0x0, &(0x7f0000000400)) sysarch$I386_SET_PKRU(0xc, 0xfffffffffffffffe) ktimer_create(0x4, &(0x7f00000000c0)={0x3, 0x1f, @sigval_int=0x2, @ke_flags=0x5}, &(0x7f0000000140)=0x0) ktimer_settime(r7, 0x1, &(0x7f0000000240)={{0x0, 0x6ff4}, {0x0, 0x20000002}}, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @thr={&(0x7f0000000180)="c40179135d838fe91801fd42c031aa660f383391f7ecb7d7c442418e220f3a0fd5002e66420ff3bce6008000000f0f54f5e18ef30f1ecc2ef2470f2b0c0d00000000", &(0x7f00000004c0)="4f6d14e249fd93a08a23f0e638bd89a320dcbeeca4c61d26e1fbb200fa750d4f820e399967e994cff4f90d64acbc78faeff20c1b6daecf6b34cef97846f0a9bb1c9a58536fef3916cf1ba8ab67c04192eb6f09a4a6629f35c0f1950a5a25ba2e794d91a8479f404c078a95881ea7544f8fc9ba7efe98d57c190366700b7247270d49754fec8e27eb117bed00d7d277ab16438e3aa595dc26a31d0ad52ebbc2cd2da5c59acef71f5e490bdcf6c00f715f3cf4bb105afac17cec06a13c95fe01f9df7bf9a901569946df12a2474210ab7f99510d933888"}}) kevent(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10000, 0x0, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000001000), 0x0) inotify_add_watch_at(r3, r2, 0x0, 0x42) open$dir(0x0, 0x0, 0x0) setreuid(0x0, 0x0) cpuset_setdomain(0x3, 0x5, 0x80000, 0x0, 0x0, 0x2) rename(0x0, 0x0) mmap(&(0x7f0000029000/0x800000)=nil, 0x800000, 0x3, 0x20011, r1, 0x0) 700.802508ms ago: executing program 2 (id=186): cpuset_getdomain(0x2, 0x4, 0x0, 0x20, &(0x7f00000000c0), 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0xc0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x50) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@random="8f6f77ede655", @random="e7f9555df160", [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0xf, 0x2b, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x9}, [@routing={0x64, 0x2, 0x0, 0x73, 0x0, [@loopback]}]}}}}}}}) freebsd11_mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x60a3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000000100)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r3) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) sendfile(r6, r3, 0x2862, 0x6, 0x0, 0x0, 0x15) r7 = socket(0x1c, 0x2, 0x0) r8 = setsid() fcntl$setown(r7, 0x6, r8) rfork(0x85000) r9 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x2020040, 0x0) sendfile(r9, r5, 0x1f00, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000380)={@local, @random="c61801b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, r10, r10, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x6b, {[@timestamp={0x8, 0xa, 0x8, 0x7fffffff}, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x800}]}}, {"0e66c380fdf8115f3c1cbe79fe997e8f32a69cca94a31c039afa57add9e3b651ff2b6582c00096ed727191ec52ea7e8a257aa8f2c27312ba6da8bf759eb3b167746277c16d4ecd"}}}}}}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344}, 0x7fffffff, 0x10001) syz_emit_ethernet(0x133, &(0x7f0000000340)={@remote, @random="0edb03eed54f", [], {@ipv4={0x800, {{0x1d, 0x4, 0x2, 0x1e, 0x125, 0x65, 0x9, 0x81, 0x58, 0x0, @multicast2, @loopback, {[@generic={0x94, 0xc, "caae67265bd7af52eb25"}, @lsrr={0x83, 0x27, 0x2, [@empty, @rand_addr=0x200, @loopback, @multicast1, @multicast2, @multicast1, @multicast1, @empty, @empty]}, @timestamp={0x44, 0x10, 0x5, 0x0, 0x7, [{[], 0x7}, {[], 0x9}, {[], 0x9}]}, @timestamp={0x44, 0x8, 0x5, 0x0, 0x5, [{[], 0x1e60}]}, @ssrr={0x89, 0x13, 0x3, [@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @loopback]}]}}, @tcp={{0x0, 0x0, r10, r11, 0x1, 0x0, 0x10, 0x8, 0x2795, 0x0, 0x6, {[@fastopen={0x22, 0x12, "643ecd699558420c2cfa7ecad276d6f5"}, @eol, @eol, @mss={0x2, 0x4, 0xfff8}, @md5sig={0x13, 0x12, "7fa10572d16dc11362240a6d37835078"}]}}, {"afbe69bbef64caa64c7bce63ae756a8ed35a12bd71521a9df95e41cbd42cad4089cf2ed170bfe75ae56639a01b8dc2fae118d45774d03dccff77f4a5013a2a950d70e41245324710c2a888bbd6e9d16ef8c7935b595d1cbedd01e7aa0b0980d4a85144aef36f76025a01c54706c63f2a3c"}}}}}}) 641.478484ms ago: executing program 0 (id=199): syz_emit_ethernet(0x4e, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"]) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') syz_emit_ethernet(0xfef2, &(0x7f0000000000)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local={0xac, 0x14, 0x0}, @empty, @multicast2}}}}) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc000, 0x0) setgroups(0x0, 0x0) setreuid(0xee00, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x1, 0xaf36}, 0xc) sendmsg$inet6_sctp(r2, &(0x7f0000000740)={&(0x7f0000000380)=@in6={0x1c, 0x1c, 0x2, 0x87, @local={0xfe, 0x80, '\x00', 0x0}, 0x10}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)="8cd9b8", 0x3}], 0x1, 0x0, 0x0, 0x108}, 0x20003) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) open(0x0, 0x800, 0x76) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x94659db2cce5c9d8, 0x0) cpuset_setaffinity(0x3, 0x2, 0x0, 0x6c, &(0x7f0000000040)) __realpathat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) execve(0x0, &(0x7f0000000480), &(0x7f00000004c0)=[&(0x7f00000000c0)='\x00']) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x3], 0x3, 0x0, 0x0, {0x6, 0x84, 0x0}, {0x0, 0x4, @sival_int=0x8, @spare=[0x2cb270ba, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x2) madvise(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r4, 0x0) 83.941043ms ago: executing program 3 (id=200): sigprocmask(0x2, 0xfffffffffffffffe, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0xf5fbbcdef939e6ea, 0x700) writev(r0, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x100, 0x48) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x7, @rand_addr="00000000000000080cd000e9ffffff00"}, 0x1c) sendmsg$inet6_sctp(r1, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x64}}, 0x1c, 0x0}, 0x0) flock(r1, 0x0) ioctl$CIOCGSESSION(0xffffffffffffffff, 0xc0306365, &(0x7f0000000100)={0x36, 0x20, 0x2, &(0x7f0000000040)="08c5", 0x0, 0x0, 0xffff7fff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = semget$private(0x0, 0x3, 0x388) __semctl$SETVAL(r2, 0x0, 0x8, &(0x7f0000000040)=0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x205, 0x8) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) getsockopt$inet6_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000180)={0x0, 0x10}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x21, &(0x7f0000000280)={0x2, 0x4000, 0x10000, 0xffff, r4}, &(0x7f00000002c0)=0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x30) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) flock(r3, 0x3) flock(r5, 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x2f9, 0x0) ioctl$MDIOCATTACH(0xffffffffffffff9c, 0xc1c06d00, &(0x7f00000004c0)={0x7, 0x2, 0x3, &(0x7f0000000300)='./file0\x00', 0x6e, 0x1, 0x10000, 0x7, 0x8, 0x1, &(0x7f0000000380)='^\x1b\'\\2\\\x00', [0x1, 0xffffffff, 0x6, 0x10, 0x4, 0x5, 0x180, 0x153, 0x9, 0xffffceb5, 0x5, 0x7, 0x2, 0x5, 0x5, 0x7fffffff, 0x1, 0x1c9, 0x7, 0x7, 0x4, 0x1ff, 0x271e, 0x10001, 0x0, 0x3, 0x3, 0x3, 0x6, 0xb, 0x8, 0x5, 0x6, 0x119, 0x7ff, 0xe, 0xfffffffb, 0x6, 0x3, 0x3ff, 0xffff, 0x7, 0x3561, 0x2, 0x7, 0x7, 0x7, 0x40000, 0xe8a, 0x3, 0x9, 0xd, 0x8, 0x3, 0x0, 0xd, 0x8, 0x7d, 0x5, 0x7fffffff, 0x4, 0x219, 0x10, 0x0, 0x2, 0x9, 0x8, 0xc, 0x2, 0x8, 0x4, 0x3, 0x4, 0x3, 0x4, 0xe4, 0x54d, 0xb1b, 0x2, 0x100, 0x400, 0x594, 0x0, 0x8, 0xffe00000, 0xfffffffb, 0x4, 0x688e, 0x4, 0x9, 0x7fffffff, 0x34b6, 0x0, 0x400, 0x7, 0x6]}) rfork(0x85000) getppid() 64.064529ms ago: executing program 0 (id=201): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r2 = socket(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20100, &(0x7f0000000200)={0x10, 0x2, 0x2, @rand_addr=0x7ffffffe}, 0x10) setsockopt$sock_splice(r2, 0xffff, 0x1023, &(0x7f0000000040)={r2, 0x40000, {0x0, 0x6}}, 0x20) getsockopt$sock_int(r2, 0xffff, 0x1011, 0x0, &(0x7f00000000c0)) setsockopt$sock_splice(r2, 0xffff, 0x1023, &(0x7f00000001c0)={r0, 0x7fff, {0x7, 0x6}}, 0x20) r3 = socket(0x1c, 0x1, 0x0) r4 = msgget$private(0x0, 0x278) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) getppid() r5 = accept$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r5, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, &(0x7f0000000cc0)) open$dir(0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) open$dir(&(0x7f0000000180)='./file0\x00', 0x310000, 0xee) socket(0x2, 0x1, 0x0) kqueue() pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=202): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) fchmod(r0, 0x9c) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f0000000500)={{"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", "ad260e62eccbc83b60a5d15edaad23e85e28f1f7f9832b3ca0df6b5a8e067405", 0x1, 0xc}, &(0x7f0000000080)="684f04b05da7aea95b6557a3614f0039033af225b34485063f9d7958b88c965e74f5f2ed5722af476fa0e8e16b3aec1a078c413f948b6d5e0e462b925b56f641a49fef47f4733ae03c9f9b449a7c0b4d4ea2b9ca05174ed3c53a7100315a60d33a5552d083b126727ea3ed2220185629564e99080d436fb4f9d40d2446ca0a1ed8178d68374b1f822557891781694aa2a07694", 0xfffffffffffffffa, 0x0, 0x1, 0x7, 0x3, 0x16, 0x3ff, 0x9}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080), 0x4) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x46, 0x0, &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x20800, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) dup(0xffffffffffffffff) r2 = kqueue() setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr=0xfffffffd, @multicast1}, 0xc) socket$inet6_udp(0x1c, 0x2, 0x0) kqueue() kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x2, 0x0, @broadcast}, 0x10) clock_getres(0x1, 0x0) sigqueue(0x0, 0x10, @sival_int=0x8000) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2) r4 = open$dir(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000300000fdffff009078ac1400aae000000105039078ac1400bb457c644700640005fc700c430000050000000800"]) unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff8146b6a0(0xfffffe006dd9f5a0) 0.003619288 s Expensive callout(9) function: 0xffffffff81a30060(0xfffffe006df1fa80) 0.004570156 s if_delmulti_locked: detaching ifnet instance 0xfffffe006dddd800 Warning! syz-executor[897] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: Aug 9 18:58:28 ci-freebsd-main-2 kernel: arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.3.170 on tap3! ip6_pcbopts: all specified options are cleared. Aug 9 18:58:28 ci-freebsd-main-2 kernel: pid 911 (syz-executor), jid 0, uid 0, was killed: exceeded maximum CPU limit vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe00598d71b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83713000 usecount 8, writecount 5, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00540df2e8 ref 1 pages 264 cleanbuf 29 dirtybuf 4 lock type ufs: EXCL by thread 0xfffffe005410a000 (pid 939, syz-executor, tid 100379) nlink=1, effnlink=1, size=1048576, extsize 0 generation=f750bff8, uid=0, gid=0, flags=0x60091 ino 81, on dev gpt/rootfs Out of ktrace request objects. lock order reversal: 1st 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/kern_ktrace.c:1151 2nd 0xfffffe0077b24228 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:581 lock order ufs -> proctree established at: #0 0xffffffff816539a1 at witness_checkorder+0x781 #1 0xffffffff8154566f at _sx_slock_int+0x13f #2 0xffffffff8161119d at uprintf+0x14d #3 0xffffffff81dc0d5f at ufs_rmdir+0xdf #4 0xffffffff822f912d at VOP_RMDIR_APV+0xcd #5 0xffffffff817b95da at kern_frmdirat+0x87a #6 0xffffffff82135702 at amd64_syscall+0x4e2 #7 0xffffffff820da73b at fast_syscall_common+0xf8 lock order proctree -> ufs attempted at: #0 0xffffffff81654872 at witness_checkorder+0x1652 #1 0xffffffff814bb5f6 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81d94aab at ffs_lock+0x18b #3 0xffffffff822fa487 at VOP_LOCK1_APV+0x57 #4 0xffffffff817c4a3e at _vn_lock+0x14e #5 0xffffffff817c52e8 at vn_close1+0x1e8 #6 0xffffffff814aceea at ktrops+0x41a #7 0xffffffff814ac65d at sys_ktrace+0xaed #8 0xffffffff82135702 at amd64_syscall+0x4e2 #9 0xffffffff820da73b at fast_syscall_common+0xf8 if_delmulti_locked: detaching ifnet instance 0xfffffe00077e1800 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006df1b1b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83713000 usecount 9, writecount 8, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00540c04d8 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe0054135000 (pid 1019, syz-executor, tid 100498) nlink=1, effnlink=1, size=697472, extsize 0 generation=412fb967, uid=0, gid=0, flags=0x40008 ino 105, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe00584e6800 Connection to 10.128.0.114 closed by remote host. if_delmulti_locked: detaching ifnet instance 0xfffffe00584e8000 FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: ifaddr cache = 0xfffffe00593ba600 is deleted tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe006e564300 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.0.170 on tap0! ifaddr cache = 0xfffffe006deeac00 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe006ddde000 Kernel page fault with the following non-sleepable locks held: exclusive sleep mutex if_addr_lock (if_addr_lock) r = 0 (0xfffffe006ddde1a0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:1401 exclusive sleep mutex in6_multi_list_mtx (in6_multi_list_mtx) r = 0 (0xffffffff83ce7ba0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:1387 shared rw udpinp (udpinp) r = 0 (0xfffffe0059af9020) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1487 stack backtrace: #0 0xffffffff81655266 at witness_debugger+0x156 #1 0xffffffff81657796 at witness_warn+0x876 #2 0xffffffff821336d2 at trap_pfault+0x162 #3 0xffffffff8213256e at trap+0x78e #4 0xffffffff820d9e48 at calltrap+0x8 #5 0xffffffff81a77baf at in6_leavegroup_locked+0x1ef #6 0xffffffff81a83086 at in6_pcbpurgeif0+0x2f6 #7 0xffffffff81a721ae at _in6_ifdetach+0x18e #8 0xffffffff8181416a at if_detach_internal+0x3aa #9 0xffffffff81813a76 at if_detach+0xb6 #10 0xffffffff8183f7c4 at tun_destroy+0x1b4 #11 0xffffffff8183c9c2 at tun_clone_destroy+0x112 #12 0xffffffff818272c8 at if_clone_destroyif_flags+0xc8 #13 0xffffffff81827126 at if_clone_destroy+0x1f6 #14 0xffffffff8181d86a at ifioctl+0x112a #15 0xffffffff8166274a at kern_ioctl+0x4ca #16 0xffffffff8166218e at sys_ioctl+0x36e #17 0xffffffff82135702 at amd64_syscall+0x4e2 Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x0 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff81a75d40 stack pointer = 0x28:0xfffffe0056c6e2c0 frame pointer = 0x28:0xfffffe0056c6e330 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 1111 (ifconfig) rdi: 0000000000000000 rsi: 0000000000000000 rdx: 0000000000000000 rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001 rax: fffffe0000000000 rbx: 0000000000000000 rbp: fffffe0056c6e330 r10: 1b66264d3bf21fac r11: 0000000000000003 r12: fffffe0077839400 r13: fffffe006ddde000 r14: fffffe0077839424 r15: 0000000000000000 trap number = 12 panic: page fault cpuid = 0 time = 1754765920 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c6daf0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c6dc50 vpanic() at vpanic+0x257/frame 0xfffffe0056c6de10 panic() at panic+0xb5/frame 0xfffffe0056c6ded0 trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056c6e010 trap() at trap+0x78e/frame 0xfffffe0056c6e1f0 calltrap() at calltrap+0x8/frame 0xfffffe0056c6e1f0 --- trap 0xc, rip = 0xffffffff81a75d40, rsp = 0xfffffe0056c6e2c0, rbp = 0xfffffe0056c6e330 --- in6m_disconnect_locked() at in6m_disconnect_locked+0x140/frame 0xfffffe0056c6e330 in6_leavegroup_locked() at in6_leavegroup_locked+0x1ef/frame 0xfffffe0056c6e450 in6_pcbpurgeif0() at in6_pcbpurgeif0+0x2f6/frame 0xfffffe0056c6e550 _in6_ifdetach() at _in6_ifdetach+0x18e/frame 0xfffffe0056c6e630 if_detach_internal() at if_detach_internal+0x3aa/frame 0xfffffe0056c6e720 if_detach() at if_detach+0xb6/frame 0xfffffe0056c6e760 tun_destroy() at tun_destroy+0x1b4/frame 0xfffffe0056c6e7b0 tun_clone_destroy() at tun_clone_destroy+0x112/frame 0xfffffe0056c6e7e0 if_clone_destroyif_flags() at if_clone_destroyif_flags+0xc8/frame 0xfffffe0056c6e830 if_clone_destroy() at if_clone_destroy+0x1f6/frame 0xfffffe0056c6e870 ifioctl() at ifioctl+0x112a/frame 0xfffffe0056c6eab0 kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056c6eb90 sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056c6ed10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056c6ef30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056c6ef30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x8239672ca, rsp = 0x820914fc8, rbp = 0x820914fe0 --- KDB: enter: panic [ thread pid 1111 tid 100089 ] Stopped at kdb_enter+0x6e: movq $0,0x25c3f57(%rip) db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827cd960 .str.27 rsp 0xfffffe0056c6dc30 rbp 0xfffffe0056c6dc50 rsi 0 rdi 0xffffffff81615109 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe005400e000 r13 0xfffffffffffffffe r14 0xffffffff827cd960 .str.27 r15 0 rip 0xffffffff815fec3e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c3f57(%rip) db> show proc Process 1111 (ifconfig) at 0xfffffe0054003ab8: state: NORMAL uid: 0 gids: 0, 5 parent: pid 1108 at 0xfffffe00540cb568 ABI: FreeBSD ELF64 flag: 0x10004000 flag2: 0 arguments: ifconfig tap2 destroy reaper: 0xfffffe0007809010 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe00540d1b68 (map 0xfffffe00540d1b68) (map.pmap 0xfffffe00540d1c08) (pmap 0xfffffe00540d1c78) threads: 1 100089 Run CPU 0 ifconfig db> ps pid ppid pgrp uid state wmesg wchan cmd 1114 766 766 0 R (threaded) syz-executor 100094 RunQ syz-executor 100611 RunQ syz-executor 1112 763 763 0 R (threaded) syz-executor 100262 RunQ syz-executor 100608 S select 0xfffffe0059665c40 syz-executor 100610 S uwait 0xfffffe00584bb680 syz-executor 1111 1108 1108 0 R CPU 0 ifconfig 1110 1109 764 0 S uwait 0xfffffe0058236900 syz-executor 1109 1105 764 0 SV wait 0xfffffe0054124008 syz-executor 1108 762 1108 0 S wait 0xfffffe00540cb568 syz-executor 1105 764 764 0 T (threaded) syz-executor 100091 s syz-executor 100604 D ppwait 0xfffffe0054124508 syz-executor 100607 s syz-executor 1093 1 766 0 S uwait 0xfffffe00584bb080 syz-executor 1077 1 763 0 S uwait 0xfffffe0058238980 syz-executor 1063 0 0 0 DL (threaded) [so_splice] 100270 D - 0xfffffe005855e900 [thr_0] 100560 D - 0xfffffe005855e940 [thr_1] 1053 1 764 0 S uwait 0xfffffe0058236a00 syz-executor 1041 1 1041 0 Ss+ ttyin 0xfffffe00593c1cb0 getty 1040 1 1040 0 Ss+ ttyin 0xfffffe00593c18b0 getty 1039 1 1039 0 Ss+ ttyin 0xfffffe00593c14b0 getty 1038 1 1038 0 Ss+ ttyin 0xfffffe00593c10b0 getty 1037 1 1037 0 Ss+ ttyin 0xfffffe00593c0cb0 getty 1036 1 1036 0 Ss+ ttyin 0xfffffe00593c08b0 getty 1035 1 1035 0 Ss+ ttyin 0xfffffe00593c04b0 getty 1034 1 1034 0 Ss+ ttyin 0xfffffe00077f58b0 getty 1033 1 1033 0 Ss+ ttyin 0xfffffe00077f68b0 getty 1026 1 764 0 S uwait 0xfffffe0058237b80 syz-executor 1025 1 1022 0 S uwait 0xfffffe0058238f00 syz-executor 1024 1 766 0 S uwait 0xfffffe000778ab80 syz-executor 1023 1 766 0 S uwait 0xfffffe0058235680 syz-executor 1016 1 764 0 S uwait 0xfffffe000778a500 syz-executor 987 1 766 0 S uwait 0xfffffe00584bc200 syz-executor 858 0 0 0 DL mdwait 0xfffffe006ddea000 [md6] 847 0 0 0 DL (threaded) [KTLS] 100121 D - 0xfffffe006e462100 [thr_0] 100186 D - 0xfffffe006e462180 [thr_1] 100187 D - 0xffffffff83cb5628 [reclaim_0] 821 806 821 0 Ss select 0xfffffe00585eb540 dhclient 806 782 423 65 S select 0xfffffe00585eb240 dhclient 805 0 0 0 DL aiordy 0xfffffe00540e7560 [aiod4] 804 0 0 0 DL aiordy 0xfffffe00540e7ab8 [aiod3] 803 0 0 0 DL aiordy 0xfffffe00540cb010 [aiod2] 802 0 0 0 DL aiordy 0xfffffe00540e8010 [aiod1] 782 1 423 0 S wait 0xfffffe00540e9018 sh 766 762 766 0 R syz-executor 764 762 764 0 R syz-executor 763 762 763 0 R syz-executor 762 760 760 0 RE CPU 1 syz-executor 760 1 760 0 Ss sigsusp 0xfffffe00540e60b0 csh 736 1 17 0 S+ nanslp 0xffffffff83ba3c00 sleep 16 0 0 0 DL syncer 0xffffffff83cc1820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0054002558 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100093 D sdflush 0xfffffe00596b88e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0ac80 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf0d48 [dom0] 100080 D launds 0xffffffff83cf0d54 [laundry: dom0] 100081 D umarcl 0xffffffff81de2bd0 [uma] 7 0 0 0 DL - 0xffffffff8391c5d8 [rand_harvestq] 6 0 0 0 TL pftm 0xffffffff843efbd0 [pf purge] 5 0 0 0 DL waiting 0xffffffff848f9700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e6340 [doneq0] 100046 D - 0xffffffff838e62c0 [async] 100075 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cec640 [crypto] 100043 D crypto_ 0xfffffe0057d38030 [crypto returns 0] 100044 D crypto_ 0xfffffe0057d38080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b4c600 [g_event] 100038 D - 0xffffffff83b4c620 [g_up] 100039 D - 0xffffffff83b4c640 [g_down] 2 0 0 0 LL (threaded) [clock] 100031 L *in6_mul 0xfffffe0007805a80 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83ced0e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c40ff0 [swapper] 100005 D - 0xfffffe0007770a00 [softirq_0] 100006 D - 0xfffffe0007770200 [softirq_1] 100007 D - 0xfffffe0007770100 [if_io_tqg_0] 100008 D - 0xfffffe0007770000 [if_io_tqg_1] 100009 D - 0xfffffe000776fe00 [if_config_tqg_0] 100010 D - 0xfffffe00077d2700 [kqueue_ctx taskq] 100011 D - 0xfffffe00077d2600 [jail_remove taskq] 100012 D - 0xfffffe00077d2500 [bus taskq] 100015 D - 0xfffffe00077d2000 [thread taskq] 100017 D - 0xfffffe00077d1c00 [aiod_kick taskq] 100018 D - 0xfffffe00077d1b00 [deferred_unmount ta] 100019 D - 0xfffffe00077d1a00 [inm_free taskq] 100020 D - 0xfffffe00077d1900 [in6m_free taskq] 100021 D - 0xfffffe00077d1800 [linuxkpi_irq_wq] 100022 D - 0xfffffe00077d1700 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00077d1700 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00077d1700 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00077d1700 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00077d1600 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00077d1600 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00077d1600 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00077d1600 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00077d1100 [firmware taskq] 100040 D - 0xfffffe00077d1000 [crypto_0] 100041 D - 0xfffffe00077d1000 [crypto_1] 100056 D - 0xfffffe00083ff900 [vtnet0 rxq 0] 100057 D - 0xfffffe00083ff800 [vtnet0 txq 0] 100058 D - 0xfffffe00083ff700 [vtnet0 rxq 1] 100059 D - 0xfffffe00083ff600 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057dc1200 [virtio_balloon] 100065 D - 0xffffffff827d2041 [deadlkres] 100069 D - 0xfffffe00593b9200 [acpi_task_0] 100070 D - 0xfffffe00593b9200 [acpi_task_1] 100071 D - 0xfffffe00593b9200 [acpi_task_2] 100073 D - 0xfffffe00077d4100 [mca taskq] 100074 D - 0xfffffe00083ffe00 [CAM taskq] 100076 D - 0xfffffe005962f500 [ipsec_offload] db> show all locks Process 1114 (syz-executor) thread 0xfffffe0054115780 (100611) exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0077b273e0) locked @ /syzkaller/managers/main/kernel/sys/ufs/ufs/ufs_vnops.c:1312 exclusive lockmgr rename (rename) r = 0 (0xfffffe0054014090) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3843 Process 1111 (ifconfig) thread 0xfffffe005400e000 (100089) exclusive sleep mutex if_addr_lock (if_addr_lock) r = 0 (0xfffffe006ddde1a0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:1401 exclusive sleep mutex in6_multi_list_mtx (in6_multi_list_mtx) r = 0 (0xffffffff83ce7ba0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:1387 shared rw udpinp (udpinp) r = 0 (0xfffffe0059af9020) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1487 exclusive sx in6_multi_sx (in6_multi_sx) r = 0 (0xffffffff83ce7be0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:682 exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 1 (0xffffffff83cc2000) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:1082 Process 2 (clock) thread 0xfffffe000781a780 (100031) shared rw vnet_rwlock (vnet_rwlock) r = 0 (0xffffffff83cc5de0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/mld6.c:1307 db>