last executing test programs: 730.153095ms ago: executing program 2 (id=1056): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x4a, 0x0, 0x0) 666.116656ms ago: executing program 2 (id=1057): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000080)=@in={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[{0x14, 0x5b, 0x4}], 0xa1}, 0x2010a) 604.365019ms ago: executing program 2 (id=1060): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BIOCGDLTLIST32(r0, 0xc0084279, &(0x7f00000000c0)={0x3, 0xca}) 560.338645ms ago: executing program 2 (id=1064): r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x27, &(0x7f0000000000)=0xb62, 0x4) 491.424149ms ago: executing program 2 (id=1075): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) fcntl$lock(r0, 0x0, &(0x7f0000000180)={0x3, 0x2, 0x2000000000000200, 0x400000000000002}) 462.120479ms ago: executing program 2 (id=1071): freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x1) mount(&(0x7f0000000080)='ufs\x00', &(0x7f00000000c0)='.\x00', 0x8000000b, &(0x7f0000000100)) 403.0678ms ago: executing program 3 (id=1074): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fstatfs(r0, &(0x7f00000012c0)) 354.937721ms ago: executing program 1 (id=1076): r0 = open(&(0x7f0000000340)='./file0\x00', 0x80400000000206, 0x0) fspacectl(r0, 0x1, &(0x7f00000000c0)={0x4, 0x78ec}, 0x0, &(0x7f0000000300)) 320.211304ms ago: executing program 1 (id=1078): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) cpuset_setdomain(0x3, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={[0x1, 0x0, 0x1000000]}, 0x3) 315.698204ms ago: executing program 3 (id=1079): r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{0x2, 0xfffffffffffffff8, 0x10, 0xffffff, 0x8, 0x242, [0x6, 0xb7, 0x0, 0x9]}], 0x1, 0xffffffffffffffff, 0x2b, &(0x7f0000000040)={0xc70, 0x4}) 231.750626ms ago: executing program 1 (id=1080): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) cpuset_setaffinity(0x2, 0x2, 0x0, 0x6c, &(0x7f0000000040)) 230.536794ms ago: executing program 0 (id=1088): r0 = socket(0x11, 0x3, 0x26) shutdown(r0, 0x2) 198.100963ms ago: executing program 1 (id=1081): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000440)={0xb, 0x21, 0x10, &(0x7f0000000200)="3c022e61792eecb07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x8000003, 0x0, 0x7]}) 164.396584ms ago: executing program 0 (id=1082): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) extattr_set_fd(r0, 0x1, &(0x7f00000004c0)='%\\\x00', 0x0, 0x0) 164.321727ms ago: executing program 3 (id=1083): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) renameat(0xffffffffffffffff, &(0x7f0000002680)='./file0\x00', 0xffffffffffffffff, 0x0) 81.333887ms ago: executing program 0 (id=1084): r0 = semget$private(0x0, 0x7, 0x3c0) __semctl$SETVAL(r0, 0x530751d0f10e2bde, 0x8, &(0x7f0000000100)=0x0) 75.909236ms ago: executing program 3 (id=1085): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1023, 0x0, &(0x7f0000000080)) 41.891141ms ago: executing program 3 (id=1087): r0 = open(&(0x7f0000000340)='./file0\x00', 0x80400000000206, 0x0) fspacectl(r0, 0x1, &(0x7f00000000c0)={0x4, 0x78ec}, 0x0, &(0x7f0000000300)) 40.675847ms ago: executing program 0 (id=1095): setregid(0x0, 0xee00) setresgid(0x0, 0xee00, 0x0) 39.657486ms ago: executing program 1 (id=1089): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000880)={&(0x7f00000004c0)=@un=@file={0xa, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x88, 0x65}], 0x10}, 0x20000) 16.702569ms ago: executing program 0 (id=1090): ktimer_create(0x10, 0x0, &(0x7f0000000240)=0x0) ktimer_settime(r0, 0x1, &(0x7f00000000c0)={{0x1000000000000002, 0x5c}, {0x0, 0x2}}, 0x0) 2.146992ms ago: executing program 0 (id=1091): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) pathconf(&(0x7f00000004c0)='./file0\x00', 0x6) 2.057167ms ago: executing program 3 (id=1092): r0 = socket$unix(0x1, 0x5, 0x0) shutdown(r0, 0x1) 0s ago: executing program 1 (id=1099): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x84) cpuset_setaffinity(0x3f, 0x2, 0x0, 0x6c, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe005806a000 md0: truncating fractional last sector by 1 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0007a74000 Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe005806c800 md1: truncating fractional last sector by 8 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe005806b800 ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe005806a000 ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe0059528800 md3: truncating fractional last sector by 8 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe005806a000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a74000 if_delmulti_locked: detaching ifnet instance 0xfffffe005806b800 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) FreeBSD/amd64 (ci-freebsd-main-5.us-central1-b.c.syzkaller.internal) (ttyu0) login: set $lines = 0 Password: Login incorrect login: show registers Password: Login incorrect login: ps Jan 1 00:05:25 ci-freebsd-main-5 login[747]: 2 LOGIN FAILURES ON ttyu0 Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl