last executing test programs: 1m28.776014537s ago: executing program 3 (id=1899): open(&(0x7f0000000480)='./file0\x00', 0x80000000000246, 0x40) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff) setitimer(0x0, &(0x7f0000000280)={{0x70f3, 0x10}, {0xffffffff}}, 0x0) 1m28.619904587s ago: executing program 3 (id=1905): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000180)={0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x1]}) ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) 1m28.50452062s ago: executing program 3 (id=1913): freebsd11_getfsstat(0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) kmq_open(&(0x7f0000000080)='./file0\x00', 0x200, 0x102, 0x0) 1m28.387713521s ago: executing program 3 (id=1916): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x1, @rand_addr="fc71f9b4601baa44bc3ee841312634c0"}, 0x1c) freebsd10_pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 1m28.299567252s ago: executing program 3 (id=1919): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x1000, 0x0) 1m28.101925107s ago: executing program 3 (id=1924): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0xd, &(0x7f0000000080)={0x10807ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) 1m28.070653259s ago: executing program 32 (id=1924): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0xd, &(0x7f0000000080)={0x10807ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) 10.503189681s ago: executing program 1 (id=4148): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)) fork() accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x0) fork() getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 10.473148641s ago: executing program 1 (id=4150): open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) mount(&(0x7f0000000400)='ufs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) 10.264862129s ago: executing program 1 (id=4157): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000080)={0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffff85}) socket$unix(0x1, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f00000005c0)=@in6={0x1c, 0x1c, 0x3, 0x0, @rand_addr="11969e44c1d7433c8d0c2684e8f05918"}, 0x1c) open$dir(0x0, 0x40000, 0x0) ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0}) 10.248500744s ago: executing program 1 (id=4158): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) fspacectl(r0, 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) 9.802425348s ago: executing program 1 (id=4168): r0 = openat$filemon(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FILEMON_SET_FD(r0, 0xc0045301, &(0x7f0000000040)=r1) r2 = getpid() ioctl$FILEMON_SET_PID(r0, 0xc0045302, &(0x7f0000000000)=r2) open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) 9.708785591s ago: executing program 1 (id=4179): r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) mknodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xe004, 0x0) chown(&(0x7f0000000240)='./file0/file0/file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x0) freebsd11_stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) 6.760751074s ago: executing program 0 (id=4219): openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1b2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000180)='./file1/../file0\x00') 6.732733648s ago: executing program 0 (id=4220): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="16", 0x1}], 0x1, 0xb542) lchflags(&(0x7f0000000040)='./file0\x00', 0x60091) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) 6.481050054s ago: executing program 0 (id=4222): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) 5.959190375s ago: executing program 0 (id=4233): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x8abd, &(0x7f0000000040)="e2", 0x1, [], 0x0, 0x1, 0x2f7, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) sync() 5.850682346s ago: executing program 0 (id=4235): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000100)='./file2\x00', r0, &(0x7f0000000140)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000280)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000500)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknodat(r0, &(0x7f00000009c0)='./file2\x00', 0xb6a0a5d5283be59a, 0x0) 5.622797131s ago: executing program 0 (id=4240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x47, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, 0x10) sendto$inet(r0, &(0x7f0000000340)="017a88ca8330d4f5ef2e52a27f685a1722ec5ec9d67a6015a0e6a0db75dddaa395dc8ad6ad357a23bc2e62ce7f337680f84936d556374f9eee59c76751277129fbd3b79351767a317387f641529ae7dcf61fd7b6719203f15cd30c4a5306811406f996883a6c71e7e979fd78965a2fcc16fc6c4baad81eb619aed659186a91324cdf2cc4b4671410f520fdf219b067afdc2bbcf7c56b42efa753f918a6cfc27260ee0b4931bd0a7cfd7838913079ca36bcd35ea9bf836192f527ab7daa650daa6c0e4893b979ef12526bb99d46155a9e6c1a7350a9cc51e9", 0xd8, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2, @broadcast}, 0x10) shutdown(r0, 0x1) 5.616322471s ago: executing program 33 (id=4240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x47, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, 0x10) sendto$inet(r0, &(0x7f0000000340)="017a88ca8330d4f5ef2e52a27f685a1722ec5ec9d67a6015a0e6a0db75dddaa395dc8ad6ad357a23bc2e62ce7f337680f84936d556374f9eee59c76751277129fbd3b79351767a317387f641529ae7dcf61fd7b6719203f15cd30c4a5306811406f996883a6c71e7e979fd78965a2fcc16fc6c4baad81eb619aed659186a91324cdf2cc4b4671410f520fdf219b067afdc2bbcf7c56b42efa753f918a6cfc27260ee0b4931bd0a7cfd7838913079ca36bcd35ea9bf836192f527ab7daa650daa6c0e4893b979ef12526bb99d46155a9e6c1a7350a9cc51e9", 0xd8, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2, @broadcast}, 0x10) shutdown(r0, 0x1) 1.88997453s ago: executing program 4 (id=4300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) preadv(r1, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1) 1.668963039s ago: executing program 4 (id=4301): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r2, r1) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r3, r1, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=[{&(0x7f00000005c0)="cf9f9719f7dc", 0x6}], 0x1, 0x0}, &(0x7f0000000000), 0x0) 1.197120492s ago: executing program 5 (id=4309): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000100)=@in6={0xffffffffffffff95, 0x1c, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x2, 0x0, @loopback}, 0x1c) r2 = dup2(r0, r1) accept$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0xffffffffffffffff, @loopback}, &(0x7f00000000c0)=0x10) 1.159874112s ago: executing program 5 (id=4310): socket$inet6_udp(0x1c, 0x2, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) kqueue() setitimer(0x2, &(0x7f00000001c0)={{0x6, 0x1}, {0x14b3, 0xf94}}, 0x0) freebsd10_pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SMB_PCALL(r0, 0x8004667e, &(0x7f0000002400)={0x4, 0x0, 0x0, @word=0x2000, @byte=0xfc, 0x0, 0x0, 0x0, 0x0}) 1.141424455s ago: executing program 5 (id=4311): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, 0x0, 0x0) __semctl$SETVAL(r0, 0x2, 0x8, 0x0) getsockopt$inet_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) freebsd12_shm_open(0x0, 0x2, 0xf) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000000)=""/62) 985.810468ms ago: executing program 5 (id=4312): syz_emit_ethernet(0x2d, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "9ac9d0", 0x0, 0x0, 0x0, @rand_addr="03498c7d3c88732762c5bbfb418dbe5c", @rand_addr="b82957248c3701367c9909fa96bf7cb7"}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x3, 0x0) getsockopt(r0, 0x0, 0x67, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000), 0x10) 817.031295ms ago: executing program 4 (id=4314): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) freebsd11_mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x20) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') __realpathat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x34, 0x0) 771.312991ms ago: executing program 4 (id=4316): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) setresuid(0xee01, 0x0, 0x0) r1 = getuid() setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) 754.754826ms ago: executing program 4 (id=4317): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @broadcast, @loopback}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000040)={@multicast2, @remote={0xac, 0x14, 0x0}, @loopback}, 0xc) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000100)={@multicast1, @local}, 0x8) setsockopt$inet_mreqn(r2, 0x0, 0xd, &(0x7f00000001c0)={@multicast2, @multicast2}, 0xc) 733.288988ms ago: executing program 4 (id=4318): msgget(0x1, 0x48) r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0xffff}, 0x10) sendto(r0, &(0x7f0000001480)="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", 0x1b5, 0x4, &(0x7f0000001280)=@in={0x10, 0x2, 0x3}, 0x10) shutdown(r0, 0x1) 570.943333ms ago: executing program 2 (id=4319): open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x0) msync(&(0x7f0000197000/0x3000)=nil, 0x3000, 0x2) 509.598857ms ago: executing program 2 (id=4320): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000040)=r2) r3 = setsid() ioctl$FILEMON_SET_PID(r1, 0xc0045302, &(0x7f0000000140)=r3) openat(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x28) 495.669258ms ago: executing program 2 (id=4321): r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f00000016c0)=ANY=[@ANYBLOB="0004000000000000040100040100c2"], 0x28) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000040)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_TCP_FASTOPEN(r0, 0x6, 0x401, &(0x7f0000000000)={0x6, "fda1076645ee4a1ec4dd162f1327d0e8"}, 0x14) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000180)={'freebsd\x00', 0x3}, 0x24) sendto$inet6(r0, &(0x7f0000000040)="14", 0x1, 0x5, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="fee3a38e5cac1c51deba3c6b07a430a0"}, 0x1c) 473.092864ms ago: executing program 2 (id=4322): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/..\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0/..\x00') r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') 453.770057ms ago: executing program 2 (id=4323): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) 139.573623ms ago: executing program 5 (id=4324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) 139.481545ms ago: executing program 2 (id=4325): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000400000002c2, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r1, 0x0) close(r0) accept(r1, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$BIOCGDLT(r2, 0x4004426a, 0x0) 0s ago: executing program 5 (id=4326): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x1fe, 0x4) setsockopt$inet6_sctp_SCTP_EXPLICIT_EOR(r0, 0x84, 0x1b, &(0x7f0000000240)=0x80000001, 0x4) sendmsg$inet6_sctp(r0, &(0x7f0000000680)={&(0x7f0000000640)=@in6={0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="fcc6aa3e9e3fc42bb89bf3e676910677c03283fea24a3d5fe916bc7c6afe25e7491c26a4ea436cf99ab7b559fc19289a8707b32558044f8ad0d26800eb6676cf436aa054be3b092f7f1c0130888b129058b2cd07fea6332a40e45fc2d4a08fb11548d2e77070cbbf18fb019685b7e3466f8a75c268e6", 0x76}, {&(0x7f00000007c0)="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", 0x189}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rfork(0x82040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. Nov 19 15:45:33 ci-freebsd-i386-3 kernel: tap0: DAD detected duplicate IPv6 address fe80:3::aa: NS in/out/loopback=0/1/0, NA in=1 Nov 19 15:45:33 ci-freebsd-i386-3 kernel: tap0: DAD complete for fe80:3::aa - duplicate found Nov 19 15:45:33 ci-freebsd-i386-3 kernel: tap0: manual intervention required Nov 19 15:45:33 ci-freebsd-i386-3 kernel: arp: 04:d8:98:d8:30:1f attempts to modify permanent entry for 172.20.2.187 on tap2 UDP6: M_MCAST is set in a unicast packet. Nov 19 15:45:34 ci-freebsd-i386-3 kernel: attempted source route from 255.255.255.255 to 172.20.3.170 Nov 19 15:45:35 ci-freebsd-i386-3 kernel: attempted source route from 255.255.255.255 to 224.0.0.2 md1: truncating fractional last sector by 183 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 md2: truncating fractional last sector by 183 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe00079f7800 md4: truncating fractional last sector by 183 bytes md5: truncating fractional last sector by 4791 bytes md6: truncating fractional last sector by 1024 bytes md7: truncating fractional last sector by 183 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0058782800 Out of ktrace request objects. ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f7800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 ip6_pcbopts: all specified options are cleared. md8: truncating fractional last sector by 508 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0058782000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058782800 ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058782800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f7800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe0058782800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f7800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000 vnode_pager_putpages: zero-length write at 0 resid 12288 0xfffffe006e544370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83500380 usecount 4, writecount 3, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0077e1a210 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe0077e06000 (pid 5441, syz-executor, tid 105471) nlink=1, effnlink=1, size=1048576, extsize 0 generation=d049b897, uid=0, gid=0, flags=0x40008 ino 198723, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800 FreeBSD/amd64 (ci-freebsd-i386-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: set $lines = 0 Password: Login incorrect login: show registers Password: Login incorrect login: ps Jan 1 00:06:22 ci-freebsd-i386-3 login[748]: 2 LOGIN FAILURES ON ttyu0 Password: Login incorrect login: show malloc Password: Login incorrect