last executing test programs: 15.929479011s ago: executing program 2 (id=66): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r7, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 15.452126343s ago: executing program 3 (id=67): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 15.446407261s ago: executing program 0 (id=68): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r3, 0x0, 0x2, &(0x7f0000000580)="7215a382", 0x4) r4 = dup(r2) sendmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@cred={0x60, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}, @rights={0x10, 0xffff, 0x1, [r3]}], 0x70}, 0x0) socket$inet6(0x1c, 0x3, 0x7) 13.478636223s ago: executing program 2 (id=70): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r7, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 13.193192148s ago: executing program 1 (id=71): mkdir(0x0, 0xa0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0x10) r2 = getpid() ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x4000357c, r2) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0) mlockall(0x1) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f000005f000/0x3000)=nil, 0x3000) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) mmap(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0x1c) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3) fork() ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, 0x0) open$dir(0x0, 0x2540000, 0x0) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f0000000100)={0x0}) ioctl$BIOCLOCK(r1, 0x2000427a) renameat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file2\x00') __getcwd(&(0x7f0000000440)=""/79, 0xfffffffffffffdf7) __getcwd(&(0x7f0000000240)=""/152, 0x98) pipe2(0x0, 0x0) aio_waitcomplete(0x0, 0x0) sigaction(0x5c, &(0x7f0000000200)={0x0, 0x34, {[0x5, 0x20a2, 0xfdffffff, 0x2]}}, 0x0) 12.869994563s ago: executing program 0 (id=72): openat$bpf(0xffffffffffffff9c, 0x0, 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 12.869191656s ago: executing program 3 (id=73): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, 0x0) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 11.45576294s ago: executing program 1 (id=74): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r6, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 11.253738336s ago: executing program 3 (id=75): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 10.269779067s ago: executing program 2 (id=76): mkdir(0x0, 0xa0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) open(&(0x7f0000000300)='./file0\x00', 0x615, 0x10) r1 = getpid() ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x4000357c, r1) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0) mlockall(0x1) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f000005f000/0x3000)=nil, 0x3000) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) mmap(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0x1c) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3) fork() ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, 0x0) open$dir(0x0, 0x2540000, 0x0) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f0000000100)={0x0}) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000140)='./file2\x00') __getcwd(&(0x7f0000000440)=""/79, 0xfffffffffffffdf7) __getcwd(&(0x7f0000000240)=""/152, 0x98) pipe2(0x0, 0x0) aio_waitcomplete(0x0, 0x0) sigaction(0x5c, &(0x7f0000000200)={0x0, 0x34, {[0x5, 0x20a2, 0xfdffffff, 0x2]}}, 0x0) 10.081813638s ago: executing program 0 (id=77): mkdir(0x0, 0xa0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) open(&(0x7f0000000300)='./file0\x00', 0x615, 0x10) r1 = getpid() ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x4000357c, r1) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0) mlockall(0x1) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f000005f000/0x3000)=nil, 0x3000) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) mmap(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0x1c) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3) fork() ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, 0x0) open$dir(0x0, 0x2540000, 0x0) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f0000000100)={0x0}) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000140)='./file2\x00') __getcwd(&(0x7f0000000440)=""/79, 0xfffffffffffffdf7) __getcwd(&(0x7f0000000240)=""/152, 0x98) pipe2(0x0, 0x0) aio_waitcomplete(0x0, 0x0) sigaction(0x5c, &(0x7f0000000200)={0x0, 0x34, {[0x5, 0x20a2, 0xfdffffff, 0x2]}}, 0x0) 10.024121719s ago: executing program 1 (id=78): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040100"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r7, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 7.695265118s ago: executing program 2 (id=79): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, 0x0) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 7.672051087s ago: executing program 3 (id=80): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r6, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 7.374707056s ago: executing program 0 (id=81): aio_waitcomplete(0x0, 0x0) socket(0x1c, 0x1, 0x0) semget$private(0x0, 0x5, 0x40) r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="bf67c8b4b2", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x8008427b, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000180)=ANY=[@ANYBLOB]) freebsd11_getfsstat(0x0, 0x0, 0x1) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) socket(0x1c, 0x1, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x18289, 0x114) ftruncate(r2, 0x10000) socket(0x1c, 0x5, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x7, 0x12, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000156000/0xc00000)=nil, 0xc00000, &(0x7f0000001640)=""/4096) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{0x2007, 0xfffffffffffffffe, 0x147, 0x1000000, 0xfefffffffffffff6, 0x0, [0x2, 0x400, 0x0, 0x4]}], 0x1, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x0) r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) r4 = socket(0x1c, 0x1, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) r6 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x31, &(0x7f0000001500)={0x1f}, 0x8) sendto$inet6(r6, &(0x7f00000004c0)="d791f39c6bb4dcb718df4062ba784d5cbca7d31bd3aba3f2db6908751defa111cc842b9c27aa15e4934f83684112f5efa36b97333e5825a3d142be2300d8", 0x3e, 0x20008, &(0x7f0000002380)={0x1c, 0x1c, 0x0, 0x5, @loopback}, 0x1c) ioctl$CIOCGSESSION(0xffffffffffffffff, 0xc0306365, 0x0) dup2(r5, r3) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) 7.374392322s ago: executing program 1 (id=82): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 6.653747491s ago: executing program 2 (id=83): mkdir(0x0, 0xa0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0x10) r2 = getpid() ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x4000357c, r2) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0) mlockall(0x1) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f000005f000/0x3000)=nil, 0x3000) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) mmap(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0x1c) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3) fork() ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, 0x0) open$dir(0x0, 0x2540000, 0x0) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f0000000100)={0x0}) ioctl$BIOCLOCK(r1, 0x2000427a) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000140)='./file2\x00') __getcwd(&(0x7f0000000440)=""/79, 0xfffffffffffffdf7) pipe2(0x0, 0x0) aio_waitcomplete(0x0, 0x0) sigaction(0x5c, &(0x7f0000000200)={0x0, 0x34, {[0x5, 0x20a2, 0xfdffffff, 0x2]}}, 0x0) 5.292426364s ago: executing program 3 (id=84): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 5.201292594s ago: executing program 0 (id=85): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r0 = socket(0x1c, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300201, 0xd0) open(&(0x7f0000000480)='./file0\x00', 0x2, 0x0) r1 = socket(0x1c, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x1c, 0x3, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x100, &(0x7f0000000200)=0x5, 0x4) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="4b00000000190000"], 0x8) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r4 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) freebsd11_fstatfs(r4, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) setsockopt$inet_mreq(0xffffffffffffff9c, 0x0, 0x9, &(0x7f0000000280)={@broadcast, @broadcast}, 0x8) openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) sendto$inet(r3, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mmap(&(0x7f00001d8000/0x1000)=nil, 0x1000, 0x4, 0x80010, r5, 0x0) r6 = open(&(0x7f00000004c0)='./file0\x00', 0x8000, 0xb4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r6, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0x7d6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 2.515554445s ago: executing program 2 (id=86): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @tid=r1}}) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', &(0x7f0000000140)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f81", 0xff22) extattr_delete_link(&(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c') socket$inet6_udp(0x1c, 0x2, 0x0) socket(0x1c, 0x20000000, 0x0) recvmsg(r0, &(0x7f0000001100)={&(0x7f0000000200)=@in={0x10, 0x2, 0xffffffffffffffff, @loopback}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000000f00)=""/24, 0x18}, {&(0x7f0000000f40)=""/174, 0xae}], 0x7, &(0x7f0000001040)=""/182, 0xb6}, 0x3) 2.477313058s ago: executing program 1 (id=87): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setegid(0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x2, 0xfffffffffffffff9, 0x4009, 0x8, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lchflags(0x0, 0x300810) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f00000005c0)={0xc, 0xacf, 0x3, 0x0, 0xffffffff, 0xfffff000, 0x6, 0x7fffffffffffffff, 0x8000c, 0x8, 0x0, [0x80000001, 0x6, 0xf85c, 0x2, 0x2, 0x4, 0x1c000000, 0x2, 0x8, 0x1, 0x80, 0x2, 0xfffffffc, 0x6, 0x2, 0x3, 0x2, 0x6, 0x100, 0x3, 0x7fff, 0xa, 0x9, 0x4, 0x0, 0x7f, 0x101, 0x1, 0xff, 0x1400000, 0x0, 0x9, 0x6, 0x9, 0x9, 0x5, 0x2, 0x3ff, 0xfff, 0x2, 0x8001, 0x400, 0x9, 0x203f, 0xc47, 0x4, 0x3, 0x5, 0x5, 0x100, 0xb, 0xffffffb0, 0xffff, 0x0, 0x591, 0x200, 0x32, 0x400, 0x81, 0x7, 0x3, 0x5ea, 0x40, 0x140, 0x3, 0xfee7, 0x0, 0x2, 0x1, 0x4, 0x9, 0x6, 0xfffffffe, 0x8, 0xfffffffb, 0xffd, 0x7, 0x8, 0x0, 0xb, 0x3ff, 0xfd7d, 0xbf, 0x0, 0x8, 0x71f, 0x2000000, 0x5, 0x4, 0x4, 0x7, 0xa6, 0x100, 0xff, 0xf1, 0x1ff]}) r1 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', 0x10000000, &(0x7f0000001fc0)="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") freebsd11_fstatfs(r1, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$CIOCCRYPT(r2, 0x8002440b, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0}) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc030636a, &(0x7f0000001f80)={0x0, 0x18, 0x0, 0x0, 0x8, &(0x7f0000001e80)="4ad9eb55e039e2a1", 0x0, 0x559edd83, [0x0, 0x1, 0x0, 0x4]}) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x1, 0x0) r5 = socket(0x1c, 0x1, 0x0) sigaction(0xc, &(0x7f0000000200)={0x0, 0x25, {[0x7, 0x50e5, 0xfdfffffc]}}, 0x0) lgetfh(0x0, 0x0) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={&(0x7f00000001c0)=@in={0x10, 0x2, 0x2, @multicast2}, 0x10, 0x0}, 0x185) socket(0x1c, 0x1, 0x0) 1.142721871s ago: executing program 0 (id=88): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x2a, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x400c, 0x400, &(0x7f00000005c0), 0x0, 0x0, 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x51, &(0x7f00000002c0)="72ef928f", 0x4) r3 = socket(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, 0x0, 0x5, 0x0) 258.444807ms ago: executing program 3 (id=89): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 0s ago: executing program 1 (id=90): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000340)='./file0/file0\x00', 0xaa480) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0284504, &(0x7f0000000200)={0x4, 0xa, 0x3, 0x7, "96853fa6f2800ae07d361b996720546f14491a6c94a1e5d0c29cde597898ae74"}) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) r1 = fork() r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000a27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f00000005c0)={@loopback}, 0x14) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x101, @empty}}, {{0x1c, 0x1c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1]) aio_waitcomplete(0x0, 0x0) rfork(0x85000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04010000ff"], 0x104}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xff77, 0x0, 0x0, 0x0}, 0xc0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r7, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0007795000 Stopping cron. Stopping sshd. panic: failed to reclaim memory cpuid = 1 time = 1762279758 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056de1470 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056de15d0 vpanic() at vpanic+0x257/frame 0xfffffe0056de1790 panic() at panic+0xb5/frame 0xfffffe0056de1860 vm_pageout_oom() at vm_pageout_oom+0xce4/frame 0xfffffe0056de18f0 vm_pageout_worker() at vm_pageout_worker+0xf9b/frame 0xfffffe0056de1ea0 vm_pageout() at vm_pageout+0x2ce/frame 0xfffffe0056de1ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056de1f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056de1f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 8 tid 100077 ] Stopped at kdb_enter+0x6e: movq $0,0x25898e7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff82825b80 .str.27 rsp 0xfffffe0056de15b0 rbp 0xfffffe0056de15d0 rsi 0 rdi 0xffffffff8165b2c9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x1ff r12 0xfffffe0058607780 r13 0xfffffffffffffffd r14 0xffffffff82825b80 .str.27 r15 0 rip 0xffffffff816446ae kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25898e7(%rip) db> show proc Process 8 (pagedaemon) at 0xfffffe0058602558: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b58040 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b58040 reapsubtree: 8 sigparent: 20 vmspace: 0xffffffff83b59020 (map 0xffffffff83b59020) (map.pmap 0xffffffff83b590c0) (pmap 0xffffffff83b59130) threads: 3 100077 Run CPU 1 [dom0] 100080 D laundp 0xffffffff8282a260 [laundry: dom0] 100081 D umarcls 0xffffffff8282a261 [uma] db> ps pid ppid pgrp uid state wmesg wchan cmd 1119 1116 938 0 D+ pfault 0xffffffff83003480 sh 1118 1106 765 0 S uwait 0xfffffe006e715380 syz-executor 1117 764 764 0 D (threaded) syz-executor 100438 D vmmaps 0xfffffe00586cc528 syz-executor 100447 D pfault 0xffffffff83003480 syz-executor 1116 938 938 0 D+ pfault 0xffffffff83003480 sh 1113 766 766 0 D (threaded) syz-executor 100114 D vm map 0xfffffe00586cd2a8 syz-executor 100446 D vmwait 0xffffffff83003480 syz-executor 1107 763 763 0 DL (threaded) syz-executor 100279 D vm map 0xfffffe0007810738 syz-executor 100442 S lockf 0xfffffe005421cc00 syz-executor 100444 D vmwait 0xffffffff83003480 syz-executor 1106 765 765 0 D (threaded) syz-executor 100116 D vmwait 0xffffffff83003480 syz-executor 100440 S lockf 0xfffffe005421ce80 syz-executor 100441 S select 0xfffffe0007787f40 syz-executor 100443 S uwait 0xfffffe00084f7380 syz-executor 100445 S uwait 0xfffffe00778c3200 syz-executor 1064 1 766 0 S uwait 0xfffffe0058589400 syz-executor 1053 1 764 0 S uwait 0xfffffe0058306e00 syz-executor 1036 1 766 0 S uwait 0xfffffe00778c2580 syz-executor 1032 1 765 0 S uwait 0xfffffe0058589180 syz-executor 1021 1 763 0 S uwait 0xfffffe0058306800 syz-executor 1020 1 764 0 S uwait 0xfffffe00778c2680 syz-executor 1011 1 765 0 S uwait 0xfffffe006e714a80 syz-executor 1001 1 766 0 S uwait 0xfffffe0058305880 syz-executor 995 1 764 0 S uwait 0xfffffe0058308400 syz-executor 984 1 763 0 S uwait 0xfffffe00778c2780 syz-executor 978 1 766 0 S uwait 0xfffffe0058305780 syz-executor 975 1 764 0 S uwait 0xfffffe0058306100 syz-executor 974 1 765 0 S uwait 0xfffffe0058306d00 syz-executor 951 1 764 0 S uwait 0xfffffe005858a280 syz-executor 947 1 766 0 S uwait 0xfffffe0058307a00 syz-executor 944 1 763 0 S uwait 0xfffffe006e714780 syz-executor 943 941 938 0 S+ nanslp 0xffffffff83baf001 sleep 941 938 938 0 S+ wait 0xfffffe00586e2560 sh 938 1 938 0 Ss+ wait 0xfffffe005878d018 sh 937 1 765 0 S uwait 0xfffffe00778c2d80 syz-executor 933 1 764 0 S uwait 0xfffffe0058589600 syz-executor 932 1 763 0 S uwait 0xfffffe0058308a00 syz-executor 931 1 766 0 S uwait 0xfffffe006e715080 syz-executor 929 1 765 0 S uwait 0xfffffe00084f7280 syz-executor 925 1 764 0 S uwait 0xfffffe0058308700 syz-executor 923 1 766 0 S uwait 0xfffffe0058308600 syz-executor 922 1 764 0 S uwait 0xfffffe0058308300 syz-executor 921 1 765 0 S uwait 0xfffffe0058589e00 syz-executor 916 1 763 0 S uwait 0xfffffe0058589d80 syz-executor 915 1 764 0 S uwait 0xfffffe0058308b00 syz-executor 910 1 766 0 S uwait 0xfffffe0058305180 syz-executor 909 1 763 0 S uwait 0xfffffe0058308c00 syz-executor 908 1 764 0 S uwait 0xfffffe0058308500 syz-executor 907 1 765 0 S uwait 0xfffffe0058308f00 syz-executor 902 1 766 0 S uwait 0xfffffe006e714d80 syz-executor 901 1 765 0 S uwait 0xfffffe0058589900 syz-executor 900 1 763 0 S uwait 0xfffffe0058589080 syz-executor 896 1 764 0 S uwait 0xfffffe0058308e00 syz-executor 895 1 763 0 S uwait 0xfffffe0058308d00 syz-executor 894 1 766 0 S uwait 0xfffffe0058305200 syz-executor 889 1 764 0 S uwait 0xfffffe0058305100 syz-executor 888 1 763 0 S uwait 0xfffffe0058589300 syz-executor 885 1 766 0 S uwait 0xfffffe005858af00 syz-executor 882 1 765 0 S uwait 0xfffffe0058589d00 syz-executor 881 1 764 0 S uwait 0xfffffe00084f7c00 syz-executor 879 1 763 0 S uwait 0xfffffe00084f7680 syz-executor 877 1 766 0 S uwait 0xfffffe00084f7780 syz-executor 875 1 764 0 S uwait 0xfffffe0058305a80 syz-executor 873 1 765 0 S uwait 0xfffffe005858a680 syz-executor 870 1 766 0 S uwait 0xfffffe005858a000 syz-executor 869 1 763 0 S uwait 0xfffffe0058589800 syz-executor 867 1 765 0 S uwait 0xfffffe0058589700 syz-executor 863 1 763 0 S uwait 0xfffffe005858ae00 syz-executor 862 1 764 0 S uwait 0xfffffe0058305b80 syz-executor 861 1 766 0 S uwait 0xfffffe006e714e00 syz-executor 860 1 765 0 S uwait 0xfffffe0058306900 syz-executor 853 1 763 0 S uwait 0xfffffe005858ad00 syz-executor 852 1 766 0 S uwait 0xfffffe0058306a00 syz-executor 848 1 765 0 S uwait 0xfffffe005858a580 syz-executor 847 1 766 0 S uwait 0xfffffe006e714f00 syz-executor 844 1 763 0 S uwait 0xfffffe0058589c00 syz-executor 843 1 764 0 S uwait 0xfffffe00084f7480 syz-executor 839 1 765 0 S uwait 0xfffffe005858aa00 syz-executor 835 1 766 0 S uwait 0xfffffe00084f7180 syz-executor 834 1 763 0 S uwait 0xfffffe006e715280 syz-executor 832 1 764 0 S uwait 0xfffffe005858ab00 syz-executor 831 1 765 0 S uwait 0xfffffe006e715180 syz-executor 827 1 764 0 S uwait 0xfffffe00084f7a80 syz-executor 826 1 763 0 S uwait 0xfffffe00084f7980 syz-executor 825 1 766 0 S uwait 0xfffffe00084f7880 syz-executor 823 1 765 0 S uwait 0xfffffe0058305380 syz-executor 820 0 0 0 DL aiordy 0xfffffe005870dab8 [aiod4] 819 0 0 0 DL aiordy 0xfffffe0058603ab8 [aiod3] 818 0 0 0 DL aiordy 0xfffffe005870e010 [aiod2] 817 0 0 0 DL aiordy 0xfffffe005870e568 [aiod1] 816 1 764 0 S uwait 0xfffffe00084f7d00 syz-executor 815 805 815 0 Ss select 0xfffffe0007787a40 dhclient 811 1 811 0 Ss select 0xfffffe00077879c0 dhclient 805 786 423 65 S select 0xfffffe0007787ac0 dhclient 786 423 423 0 S wait 0xfffffe0058604010 sh 766 762 766 0 S wait 0xfffffe00586e1558 syz-executor 765 762 765 0 S wait 0xfffffe00586e1000 syz-executor 764 762 764 0 S wait 0xfffffe0058605570 syz-executor 763 762 763 0 S wait 0xfffffe0058604ac0 syz-executor 762 760 760 0 S select 0xfffffe0007787dc0 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00586050c8 csh 758 1 758 0 Ss select 0xfffffe0007787ec0 sshd 494 1 494 0 Ss select 0xfffffe0054232f40 syslogd 423 1 423 0 Ss wait 0xfffffe0058604568 devd 422 1 422 65 Ss select 0xfffffe00077883c0 dhclient 337 1 337 0 Ss select 0xfffffe0007788040 dhclient 334 1 334 0 Ss select 0xfffffe0054233040 dhclient 16 0 0 0 DL syncer 0xffffffff83cdcc20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cdb160 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100093 D sdflush 0xfffffe005808a0e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d1c040 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100077 Run CPU 1 [dom0] 100080 D laundp 0xffffffff8282a260 [laundry: dom0] 100081 D umarcls 0xffffffff8282a261 [uma] 7 0 0 0 DL - 0xffffffff839275b0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843f4f60 [pf purge] 5 0 0 0 DL waiting 0xffffffff84893700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f1340 [doneq0] 100046 D - 0xffffffff838f12c0 [async] 100075 D - 0xffffffff838f1140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cfd9e0 [crypto] 100043 D crypto_ 0xfffffe0007b17030 [crypto returns 0] 100044 D crypto_ 0xfffffe0007b17080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b57600 [g_event] 100038 D - 0xffffffff83b57620 [g_up] 100039 D - 0xffffffff83b57640 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 Run CPU 0 [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83cfe480 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c52ff0 [swapper] 100005 D - 0xfffffe00077f7a00 [softirq_0] 100006 D - 0xfffffe00077f7800 [softirq_1] 100007 D - 0xfffffe00077f7600 [if_io_tqg_0] 100008 D - 0xfffffe00077f7400 [if_io_tqg_1] 100009 D - 0xfffffe00077f7200 [if_config_tqg_0] 100010 D - 0xfffffe00077f7000 [kqueue_ctx taskq] 100011 D - 0xfffffe00077f6d00 [jail_remove taskq] 100012 D - 0xfffffe00077f6b00 [bus taskq] 100015 D - 0xfffffe00077f6500 [thread taskq] 100017 D - 0xfffffe00077f6100 [aiod_kick taskq] 100018 D - 0xfffffe00077f5e00 [deferred_unmount ta] 100019 D - 0xfffffe00077f5c00 [inm_free taskq] 100020 D - 0xfffffe00077f5a00 [in6m_free taskq] 100021 D - 0xfffffe00077f5800 [linuxkpi_irq_wq] 100022 D - 0xfffffe00077f5600 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00077f5600 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00077f5600 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00077f5600 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00077f5100 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00077f5100 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00077f5100 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00077f5100 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00077f4400 [firmware taskq] 100040 D - 0xfffffe0007bcc100 [crypto_0] 100041 D - 0xfffffe0007bcc100 [crypto_1] 100056 D - 0xfffffe00077f8200 [vtnet0 rxq 0] 100057 D - 0xfffffe00541f1500 [vtnet0 txq 0] 100058 D - 0xfffffe00541f1400 [vtnet0 rxq 1] 100059 D - 0xfffffe00541f1300 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe00580bb200 [virtio_balloon] 100065 D - 0xffffffff8282a261 [deadlkres] 100069 D - 0xfffffe0058590000 [acpi_task_0] 100070 D - 0xfffffe0058590000 [acpi_task_1] 100071 D - 0xfffffe0058590000 [acpi_task_2] 100073 D - 0xfffffe00077f8100 [mca taskq] 100074 D - 0xfffffe0007bcba00 [CAM taskq] 100076 D - 0xfffffe0007bcc500 [ipsec_offload] db> show all locks Process 1113 (syz-executor) thread 0xfffffe00587a5000 (100446) exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00586cc060) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4373 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00586cd2a8) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4369 shared sx killpg racer (killpg racer) r = 0 (0xfffffe00586d43a0) locked @ /syzkaller/managers/i386/kernel/sys/kern/kern_fork.c:961 Process 1107 (syz-executor) thread 0xfffffe0058795000 (100444) shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe0007810738) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4998 Process 1106 (syz-executor) thread 0xfffffe00586fc000 (100116) exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe005879a4f0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:2813 db> serialport: VM disconnected.