last executing test programs: 14.634270271s ago: executing program 0 (id=34): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x18) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) posix_fadvise(r0, 0x80000000, 0x7fffffff, 0x3) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000180)=0x7) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x4b, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x5f9]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xcb4, 0x9, 0x38, 0x7ffffffffffffffc]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r4, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf69", 0x0, 0x19, 0x1, 0x4, 0x1c, 0x700, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) r5 = socket(0x1c, 0x1, 0x0) listen(r5, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x30004, 0x10, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x10000000000, 0x4000000}, 0x0) rfork(0x95020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000140)=r6) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x85000) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000180)='./file1/../file0\x00') 12.24624237s ago: executing program 0 (id=34): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x18) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) posix_fadvise(r0, 0x80000000, 0x7fffffff, 0x3) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000180)=0x7) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x4b, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x5f9]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xcb4, 0x9, 0x38, 0x7ffffffffffffffc]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r4, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf69", 0x0, 0x19, 0x1, 0x4, 0x1c, 0x700, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) r5 = socket(0x1c, 0x1, 0x0) listen(r5, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x30004, 0x10, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x10000000000, 0x4000000}, 0x0) rfork(0x95020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000140)=r6) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x85000) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000180)='./file1/../file0\x00') 9.741227413s ago: executing program 0 (id=34): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x18) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) posix_fadvise(r0, 0x80000000, 0x7fffffff, 0x3) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000180)=0x7) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x4b, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x5f9]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xcb4, 0x9, 0x38, 0x7ffffffffffffffc]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r4, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf69", 0x0, 0x19, 0x1, 0x4, 0x1c, 0x700, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) r5 = socket(0x1c, 0x1, 0x0) listen(r5, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x30004, 0x10, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x10000000000, 0x4000000}, 0x0) rfork(0x95020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000140)=r6) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x85000) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000180)='./file1/../file0\x00') 9.629217204s ago: executing program 1 (id=159): r0 = kqueue() kevent(r0, &(0x7f0000000380)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x6}, {0x9, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x101, [0x1, 0x8000000000000001, 0x1, 0xa42f]}], 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000340)={0x8003}, 0x8) connect$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000040)={0xffff, 0x4720, 0xc, 0x2000000}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CRIOGET(r2, 0xc0046364, &(0x7f0000000040)=0x4bb) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d86699a}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x1, &(0x7f0000000040)='\x00', 0xfffffe67, [0x80000001], 0x10001, 0x5, 0x0, {0xfffffffffffff802, 0x4, 0x0}, {0x4, 0x15, @sigval_int=0x66}}) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r4, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BIOCLOCK(r5, 0x2000427a) ioctl$BIOCFLUSH(r5, 0x20004268) minherit(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000140)={0x10, 0x2, 0x0, @loopback}, 0x10) aio_read(&(0x7f0000000380)={r6, 0x3, 0x0, 0x0, [], 0x0, 0x0, 0x9, {0x40000, 0x3, 0x0}, {0x0, 0x0, @sigval_int=0x65, @ke_flags}}) r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r7, 0x0, 0x0) renameat(r7, 0x0, r7, &(0x7f0000000140)='./file0/file0\x00') minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) madvise(&(0x7f0000c9b000/0x4000)=nil, 0x4000, 0x5) 7.66331051s ago: executing program 1 (id=160): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) access(&(0x7f0000000680)='./file0\x00', 0x0) r1 = socket(0x2, 0x1, 0x0) open$dir(0x0, 0x40000400001803c1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) sysarch$I386_SET_IOPERM(0x4, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000200)={'rack\x00'}, 0x24) r2 = kqueue() kevent(r2, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1}, {0x3, 0xffffffffffffffff}], 0x2, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x5, 0x0) semop(r3, &(0x7f0000000000)=[{0x3, 0x8a}], 0x1) semop(r3, &(0x7f0000001240)=[{0x3}], 0x1) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r6, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x19, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet6_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r7}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={r7, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000003c0)=0x3, 0x4) r8 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) r9 = dup(r8) ioctl$CIOCGSESSION2(r8, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="70638953e90cef7e00080000000b000000000000916d99e9", 0x0, 0xfdffffff}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000140)={'bbr\x00', 0x9}, 0x24) ioctl$CIOCCRYPT(r9, 0xc0306367, &(0x7f0000000800)={0x0, 0x2, 0x100, 0x4510, &(0x7f0000000000), 0x0, 0x0, 0x0}) 7.308849191s ago: executing program 3 (id=165): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x18) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) posix_fadvise(r0, 0x80000000, 0x7fffffff, 0x3) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000180)=0x7) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x4b, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x5f9]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xcb4, 0x9, 0x38, 0x7ffffffffffffffc]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r4, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf69", 0x0, 0x19, 0x1, 0x4, 0x1c, 0x0, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x38) r5 = socket(0x1c, 0x1, 0x0) listen(r5, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x30004, 0x10, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x10000000000, 0x4000000}, 0x0) rfork(0x95020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000140)=r6) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x85000) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000180)='./file1/../file0\x00') 6.942458557s ago: executing program 2 (id=166): setuid(0xffffffffffffffff) r0 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x11, 0x16, &(0x7f00000001c0)=0xa50b, 0x4) 6.890704979s ago: executing program 2 (id=167): r0 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = semget$private(0x0, 0x7, 0x3c0) semop(r2, &(0x7f0000000180)=[{0x0, 0x43, 0x1800}, {0x2, 0x5, 0x800}, {0x0, 0xfd, 0x1000}, {0x1, 0x21, 0x1800}, {0x0, 0x3ffd, 0x1000}, {0x0, 0x8, 0x1000}], 0x6) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./file1\x00', 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DIOCBEGINADDRS(r0, 0x8004667e, &(0x7f0000000440)="c14e9c27111c3f2f3a0ee702ffebabf1703470a97fd27ec9cf098799d68b830c0b79756fa161307222b76a5e00002000000000444d5b776eec384b310e5c03ce79ecb73fc1bebb011309505c2b191750e05e4347afaa5c08692e6735ac08674f1a68cd818362ab889b9d72273253f96b067ea000e83841aa4bb800000000020000000000000000000000004c1693735168883763dd35706acf706c9c4ca20222872ec9a5fa4b0fbb397e8d74de156fc30000000000000000cd3a90edfd642872c8b1a22c67e277be63334734f2e4680ca30b45459325e38f93bf1accdaeab38aa8397e05148c8f77b39538ebad84bf686bce6b483d10b8e086a6d5eae073123c5cc24da2f66ede7fdafd6b607edcc5d2e3") 6.847332176s ago: executing program 0 (id=34): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x18) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) posix_fadvise(r0, 0x80000000, 0x7fffffff, 0x3) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000180)=0x7) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x4b, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x5f9]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xcb4, 0x9, 0x38, 0x7ffffffffffffffc]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r4, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf69", 0x0, 0x19, 0x1, 0x4, 0x1c, 0x700, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) r5 = socket(0x1c, 0x1, 0x0) listen(r5, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x30004, 0x10, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x10000000000, 0x4000000}, 0x0) rfork(0x95020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000140)=r6) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x85000) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000180)='./file1/../file0\x00') 4.711481043s ago: executing program 1 (id=168): r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x200, 0x4) pwritev(r0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x9e) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000000014410000000000080001000000001b00000000fe8000000000000000000000000000aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000a3209e1402651a850dc46717b25262829de311353ac61539a23c5acad436dd23f0ef136970ef889e3c4fcde47a2146452502f8cee7d98a13a398c5b372a2ac49c3cd47894828cf87f90ca2e47449"]) freebsd11_stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000000500)=@file={0x2, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES8, @ANYRES16, @ANYRESHEX=r0, @ANYRES32, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES16=r1], 0x118}, 0x0) r2 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8) r3 = socket(0x1c, 0x3, 0x80) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000340)={'rack\x00', 0x1}, 0x24) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r5 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_sctp_SCTP_RTOINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x4}, 0x10) open(&(0x7f0000000280)='./file0\x00', 0x1, 0x1d7) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r6 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24) r7 = socket$inet6_sctp(0x1c, 0x5, 0x84) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r8 = kqueue() syz_emit_ethernet(0x2e, &(0x7f0000000880)=ANY=[@ANYBLOB="ed5bda55f7afae4397b5cffbf0629e618e14a55e7a18a20f8a8b212a70022d03e42f9aa451d5ab275d875f05bdbe1b8be4c146528aaf8468520f12456c7bdc7d94193e6b84b99dbeacd91bb8011a1427d364170b5de7a373bc7887f0d3c4fb054f55c73a8a56ab402b94fc258a1d1f7ddf33d67e7e2f23a3af3d7d1c608de2bdb1884514f902c1bf8932f377eb1fc743b61f6ddfc7bd231cb81607c903815e26dd8b6b1b7b3b268d321fc9e46a44975655e8f3b2933dd19db68109e45e4a10e98fd55118c628fc4d", @ANYRES64=r3, @ANYRESDEC=r5, @ANYBLOB, @ANYBLOB="c383ac0fd1ed819121246544f36bc51b716ac935843965c35277fa6b9577913ffbb0ae2256c5338825efbe5a7ebe1c373304924cb4f514f6581b43e06367fa7c44cc35a1baa9e3a4a5255f6faba0d8895c3a14037c0c910c32bd1ada3d3b7e8923f64e6e834c7928cbea57e6750bf9c13be7d8710605f4e6590a8f35c9529a1515fd0e9430cb34926e71b0ca74327377", @ANYRES64=r4, @ANYRES8=r7, @ANYRESDEC=r2]) kevent(r8, &(0x7f0000000040)=[{0x8, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x613, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xa1) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) r9 = open$dir(0x0, 0x400000, 0x2b) fcntl$lock(r9, 0x16, &(0x7f0000000000)={0x570}) connect$inet(r6, &(0x7f0000000100)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x8) 4.711023962s ago: executing program 2 (id=169): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) posix_fallocate(r1, 0x0, 0x8) posix_fallocate(r1, 0x0, 0x10007) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) bindat$unix(r0, r2, &(0x7f0000000100)=@abs={0x8, 0x0, 0x0, 0x2}, 0x8) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2, 0xfffffffd, @loopback}, 0x1c) extattr_delete_file(&(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000080)='&#\x00') fcntl$lock(0xffffffffffffffff, 0xe, 0xfffffffffffffffe) ioctl$EVIOCGVERSION(r1, 0x40044501, 0x457) bind(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, 0x8}, 0x1c) r3 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x1f, &(0x7f00000000c0)=0xe, 0x4) rfork(0x85000) 4.709871479s ago: executing program 3 (id=170): socket$inet6_sctp(0x1c, 0x1, 0x84) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2, 0x1, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x2, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24) r2 = fork() socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = kqueue() sigqueue(r2, 0x57, @sigval_int=0x8) kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f00000000c0)={0xb, 0x1d, 0x10, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755a", 0x0, 0x0, 0x0, 0x7d866997}) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000a00), 0x0, 0x0, 0x0}) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_waitcomplete(&(0x7f0000000100)=&(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x0, 0x0, [0x640, 0x9], 0x0, 0x6, 0x1, {0x3000000000000000, 0x0, &(0x7f0000000300)="eed140699e4c2181c1efb9092fe7f6f8ab419c2945a1491820c3a59aa8b3773bb082a160d2cfa6f52b86e1b0190f7061196289e8b32c464e30da51a804dfff4362cab160871d7e7bae0b55b1046cbbb7e796d0654dcd34e281ef9ba711bd7d6d9de41d5971ab52"}, {0x3, 0xb, @sigval_int=0x4, @ke_flags=0x1}}, &(0x7f0000000440)={0x8000000000000000, 0x4c2}) mmap(&(0x7f0000121000/0x12000)=nil, 0x12000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sync() 4.274651006s ago: executing program 3 (id=171): r0 = kqueue() setitimer(0x2, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x2, 0x0, @mcast1}, {0x1c, 0x1c, 0x0, 0x0, @loopback}}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(r1, &(0x7f0000000000)={0xffd7, 0x1c, 0x3, 0x0, @rand_addr="fe00000000000000000000080a4000"}, 0x1c) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x3, [0x7ff, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EXPLICIT_EOR(r4, 0x84, 0x1b, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) cpuset_getaffinity(0x3, 0x7, 0x8627, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) cpuset_setaffinity(0x2, 0x6, 0x5, 0x8, &(0x7f0000000100)={[0x3]}) cpuset_setaffinity(0x1, 0x3, 0x2, 0x0, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_buf(r6, 0x29, 0x46, 0x0, 0x0) sysarch$I386_GET_LDT(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) cpuset_getaffinity(0x2, 0x8, 0x80000000, 0x8, &(0x7f0000000240)) ioctl$DIOCRADDTABLES(0xffffffffffffffff, 0xc450443d, &(0x7f0000000300)={{"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", "4ee87f67091ea44acbd9ae823e2270ee1abca922bad0bc06d796b6faacf5868c", 0x6, 0xff}, &(0x7f0000000280)="fd3b83da3621f9b3205db9ec8faad25af303d4f4f9ba858801e2e9a699a1b622f1f6cba0cfd96716b64563f46dd56dc5d2ba1b6cb50371", 0xfffffffffffffffe, 0x3, 0x6, 0x0, 0xd6, 0xbdd, 0x3}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x23, &(0x7f00000008c0)={@in={{0x10, 0x2, 0x2, @multicast2}}, 0x0, 0x8001, 0x7, 0x8}, &(0x7f0000000980)=0x90) lseek(0xffffffffffffffff, 0x1, 0x3) execve(0x0, 0x0, &(0x7f0000000280)=[0x0, &(0x7f0000000480)='\x00']) writev(r3, &(0x7f0000000280), 0x26) r7 = socket(0x2, 0x3, 0x0) setsockopt(r7, 0x0, 0x6a, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) 4.191953933s ago: executing program 2 (id=172): socket$inet6_sctp(0x1c, 0x1, 0x84) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2, 0x1, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x2, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24) r2 = fork() socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = kqueue() sigqueue(r2, 0x57, @sigval_int=0x8) kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f00000000c0)={0xb, 0x1d, 0x10, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755a", 0x0, 0x0, 0x0, 0x7d866997}) ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000a00), 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) aio_waitcomplete(&(0x7f0000000100)=&(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x0, 0x0, [0x640, 0x9], 0x0, 0x6, 0x1, {0x3000000000000000, 0x0, &(0x7f0000000300)="eed140699e4c2181c1efb9092fe7f6f8ab419c2945a1491820c3a59aa8b3773bb082a160d2cfa6f52b86e1b0190f7061196289e8b32c464e30da51a804dfff4362cab160871d7e7bae0b55b1046cbbb7e796d0654dcd34e281ef9ba711bd7d6d9de41d5971ab52"}, {0x3, 0xb, @sigval_int=0x4, @ke_flags=0x1}}, &(0x7f0000000440)={0x8000000000000000, 0x4c2}) mmap(&(0x7f0000121000/0x12000)=nil, 0x12000, 0x3, 0x20011, r5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sync() 4.156388789s ago: executing program 3 (id=173): r0 = kqueue() kevent(r0, &(0x7f0000000380)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x6}, {0x9, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x101, [0x1, 0x8000000000000001, 0x1, 0xa42f]}], 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000340)={0x8003}, 0x8) connect$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000040)={0xffff, 0x4720, 0xc, 0x2000000}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CRIOGET(r2, 0xc0046364, &(0x7f0000000040)=0x4bb) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7d86699a}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x1, &(0x7f0000000040)='\x00', 0xfffffe67, [0x80000001], 0x10001, 0x5, 0x0, {0xfffffffffffff802, 0x4, 0x0}, {0x4, 0x15, @sigval_int=0x66}}) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r4, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BIOCLOCK(r5, 0x2000427a) ioctl$BIOCFLUSH(r5, 0x20004268) minherit(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000140)={0x10, 0x2, 0x0, @loopback}, 0x10) aio_read(&(0x7f0000000380)={r6, 0x3, 0x0, 0x0, [], 0x0, 0x0, 0x9, {0x40000, 0x3, 0x0}, {0x0, 0x0, @sigval_int=0x65, @ke_flags}}) r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r7, 0x0, 0x0) renameat(r7, 0x0, r7, &(0x7f0000000140)='./file0/file0\x00') minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) madvise(&(0x7f0000c9b000/0x4000)=nil, 0x4000, 0x5) 3.584871215s ago: executing program 1 (id=174): r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f00000000c0)={'bbr\x00'}, 0x24) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) 3.511377635s ago: executing program 0 (id=34): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x18) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) posix_fadvise(r0, 0x80000000, 0x7fffffff, 0x3) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000180)=0x7) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x4b, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x5f9]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xcb4, 0x9, 0x38, 0x7ffffffffffffffc]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r4, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf69", 0x0, 0x19, 0x1, 0x4, 0x1c, 0x700, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) r5 = socket(0x1c, 0x1, 0x0) listen(r5, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x30004, 0x10, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x10000000000, 0x4000000}, 0x0) rfork(0x95020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000140)=r6) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x85000) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000180)='./file1/../file0\x00') 702.228967ms ago: executing program 1 (id=175): clock_settime(0x0, &(0x7f0000001980)={0xc2, 0x5}) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xfffffffffffffed2, 0x1c, 0x2, 0xfffffffd, @mcast1}, 0x1c) setresuid(0xffffffffffffffff, 0xee01, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x80000000000209, 0x0) r3 = open$dir(0x0, 0x0, 0x0) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) preadv(r3, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x611, 0x171) r4 = kqueue() kevent(r4, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0x55}], 0x1, 0x0, 0x0, 0x0) kevent(r4, &(0x7f0000000b80)=[{0x0, 0xfffffffffffffffb}], 0x1, &(0x7f0000000c40)=[{}], 0x1, 0x0) rfork(0x85000) r5 = socket(0x2, 0x1, 0x0) r6 = openat$bpf(0xffffffffffffff9c, 0x0, 0x100000, 0x0) readv(r6, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) 691.018003ms ago: executing program 2 (id=176): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000600)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x4, {0x6, 0x4, 0x3, 0x1c, 0xa, 0x67, 0x800, 0x6, 0x14, 0x9, @empty, @multicast1, {[@generic={0x88, 0x2}]}}}}}}}) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) r2 = kqueue() aio_error(&(0x7f0000000880)={r0, 0x9, &(0x7f00000002c0)="e760e92f7061c6475bea2ac3c793327e42aee189a63ad97d1e55df6ccacd1c1bac82f5d8d1d16a15e9104689b3999e6153518d92850f297d9e88f0ff7a87c66292229738614134bdea27abb2c61943a2d4d7264fade3b134e51237a9564bf5c218041e1825d865b05fc7042b35c782d4626c7e1565da05159187a53ac11014cb59a52c577d819ff65485c6c784ffa71d8466b83d81263e", 0x97, [0x23ffc, 0x7], 0x6603, 0x4, 0xfffffff9, {0x6, 0x100000000, &(0x7f0000000380)="e880ea439ca143cca054c6be5dbd53d65d4d7151f037659844ed2ca10adedb8494375dd374aa2d72fd97498ae097b685db70ea8a3a6d67bf824184e32e712dd8c7a0bf1aa2f195e9c69706f1b296d266af9992815135a1f40de5b50ae95232801d4e5dfab3d915cca8b386ed445f0c0c98623580f90412b3b7c5b8b04b9b27df99c6336751bdd21bc7dbb7e75040099d53eb06abbe9d4760265f0bd89d74585eedad520a62a288bdabbac2c4b1718fe69a9a38"}, {0x3, 0xe, @sival_int=0x100, @thr={&(0x7f0000000100)="6a0df30fc7fa13198b6c3a000221c44275b99b0000010036460fa167400fa7c0660f3a0caf860000003a43d8f6", &(0x7f0000000280)="ec51225511349e1f15bd7b8e2170e2c595f0d170b5d1"}}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x400000, 0xce) syz_emit_ethernet(0x32, &(0x7f00000005c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @generic="2f3f140b4600"/16}}}}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f00000002c0)=[{0x61}, {0x2, 0x0, 0x40}]}) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, &(0x7f0000000240)={0x4b}, 0x8) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setreuid(0xee00, 0x0) r5 = getuid() setreuid(0x0, r5) sendto$inet(r1, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) readlinkat(r3, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)=""/82, 0x52) chflagsat(r2, &(0x7f0000000000)='./file0\x00', 0x201, 0x400) 658.536824ms ago: executing program 3 (id=177): ksem_init(&(0x7f0000000000)=0x0, 0x7) ksem_destroy(r0) ksem_init(&(0x7f0000000040)=0x0, 0xc00) ksem_post(r0) ksem_close(r0) socket$inet6_sctp(0x1c, 0x1, 0x84) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f0000000100)={&(0x7f0000000080)="91ef1d43c6ac9995f67f140ec9487091f484f2fb4fc91709e97baff8ff2c913461701a45045cbffeb513205a8b400e0844b347edaed65de1c3da70a3395bef9dbc73f6702964ec2d7134e573b40ee162b72ea320bf1ad97199e6cacad79ebd64ee5289624f5c495647a71d13a5", 0x6d, 0x101}) ksem_close(r1) sysarch$AMD64_SET_PKRU(0x85, &(0x7f0000000200)={&(0x7f0000000140)="bbc33f46ea0992bbcba7673f2a1fdf80ddecb3c68624772004e42ffe8b8775f6a42a3114514af9f72b9f1e00ca98cd54279a82cd05964c34f5c5d82f83ed612ad41360bac5ad4c00abede26c0a438440820673524347f20c01584c4e5aeaf7b125c7039b7dcd24e6b3f8b6f69d092cf55395cdfd05c0ba2b15e10921954ba52d195cc393cb1badc1d9070200e840827fab6e42e6c961cce0d5751dab7b0e0c13dfad86c5eed459f1b9abe01f6c278ad14963dd1b", 0xb4, 0x3, 0x2}) sysarch$I386_GET_IOPERM(0x3, &(0x7f0000000240)) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sysarch$I386_GET_IOPERM(0x3, &(0x7f0000000280)) socket$inet6_udp(0x1c, 0x2, 0x0) r2 = socket(0x2, 0x10000000, 0xb3) ksem_destroy(r0) freebsd10_pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$BIOCSETWF32(r3, 0x8008427b, &(0x7f0000000300)={0xffffffff, 0x7fffffff}) ksem_close(r1) ksem_wait(r0) minherit(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x1) lseek(r2, 0x7, 0x4) minherit(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x1) sysarch$AMD64_SET_PKRU(0x85, &(0x7f00000003c0)={&(0x7f0000000340)="5483e65582f927525f4e65be70d4ae462479f77f8aa18c4231424e208239824118a9ee6ea8401f60a896ab2299dfcbcb8bdb361f55382e8c8bb59a45a4c6874e1ad9bd7a2d99f9bb7d55ee469457", 0x4e, 0x9, 0x1}) ksem_open(&(0x7f0000000400), &(0x7f0000000440)='u)*\x00', 0x200, 0x140, 0x0) ksem_wait(r0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000480)={0xb, 0xa, 0x1}) ksem_trywait(r1) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000680)={0x17, 0x13, 0xab, &(0x7f00000004c0)="a0a94553858915981d90e7c60b7ba53e21cd2af35c4c9ef2125f7a2a355a21f4ba7ea24bb65b9801f5a0bdcda380cd5df0b2c7d8a13ca145a615ea906035037c1a78746366336eaceed984c585c35404add1acefee23b5d2a1937b3c454c2257830cb076429642c2ed653fe2e0175fb8fb4f793c61f36898e95138029bf092a9f3595e5dfefd330c4bffc547fa47eda4790d8fc755f8adf172a46c65ea74eb8359c65a6e6bc03002e35290", 0xf6, &(0x7f0000000580)="3e685d7221f95ea98e9b33cf7e1cab585e7e3c0b97a8e2b52a540ce6a51c1e515bd05a9a61dac2a66ced0a3baf073e016bca21346471ce87a7c9b0d55e5838c1511bf15bbef6d7756d563ec8321897bd050ee57947f2a2ae6ba68fd7514d946493adf55c74b4f0b4cc06cabae0a7847c0e80b504c56a82328a47d0fe6571f4c194eed3db7fb5ba566b061eee2ad4ba631592e5366483cd74bd1341e9c93dd12b73f692cade3e5d26df66ade91a28cd057f33dd17cba83098e0cda4adb53166978235921157928ef4318779ea75d47a6235458e023cfa1a6753937ae7f7a25eb0cae0fd7740b4dff724866c9a6483b7cff633c9f3040e", 0x1, 0x6, [0x8, 0x5, 0x6, 0x7084]}) ksem_destroy(r1) connect$inet(r3, &(0x7f00000006c0)={0x10, 0x2, 0x2, @broadcast}, 0x10) 343.22615ms ago: executing program 1 (id=178): r0 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = semget$private(0x0, 0x7, 0x3c0) semop(r2, &(0x7f0000000180)=[{0x0, 0x43, 0x1800}, {0x2, 0x5, 0x800}, {0x0, 0xfd, 0x1000}, {0x1, 0x21, 0x1800}, {0x0, 0x3ffd, 0x1000}, {0x0, 0x8, 0x1000}], 0x6) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./file1\x00', 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DIOCBEGINADDRS(r0, 0x8004667e, &(0x7f0000000440)="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") 177.733701ms ago: executing program 3 (id=179): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7c", 0x6) lseek(r0, 0x800000000000004, 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) close(r1) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') chroot(&(0x7f0000000000)='./file0\x00') r2 = open$dir(&(0x7f0000000300)='./file0/file0/..\x00', 0x20000, 0x6) getfhat(r2, &(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000080), 0x0) rfork(0x85000) 175.149605ms ago: executing program 2 (id=180): setuid(0xffffffffffffffff) freebsd11_fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x200, 0xdc) freebsd11_stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000000500), 0xa, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES8, @ANYRES16, @ANYRES64=r4, @ANYRESHEX=r1, @ANYRES32, @ANYRES8=r2, @ANYRES8=r2, @ANYBLOB="18efc0c1833edb26", @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRESDEC], 0x118}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) readv(r7, &(0x7f0000000940)=[{&(0x7f0000000280)=""/53, 0x35}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000880)=""/165, 0xa5}], 0x7) fstat(r6, &(0x7f0000000540)) r8 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8) r9 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r9, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x6b) setsockopt$inet_tcp_int(r9, 0x6, 0x22, &(0x7f0000000200)=0x3, 0x4) connect$inet(r9, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000300)=0xc9, 0x4) sendto(r9, &(0x7f0000000580)="1d77c57c16eb5158caed03d9c0f6dca317dffc1d3274f66f21ae7c59f1ee36dfd4937ea42fcc31cb20e43d2d855805008764d272582aaa8e01850752a4ef2bf19ce924bc6abfa885ce3bb82db3049521de0dcadd05090b74beb5001cc836fa6a6df5a439bbd9f6e99853d26df8f1556d7f04d639b9608adf0c8a2160f6c84cb6465394f135182bd779fca31bd722fc8452862c193bd74a492389f1a6500f3f6cd32f8e3e2348640cf138e8d8fbd568b750a6590010e379273f4535083f61c543831816d5cd1c4c0964e45de2f0d8c80d98e7b7820f1087956616a031c3ce09e02719de4eb3c7b7521469c86d1e4f4422aeadfdc10f9281d64f1ae344a1a557a97e9a7732b5cb1b0f6e4603be46ec05d26db9302240f6341885308c9f5d3b53f88e", 0x121, 0x0, &(0x7f0000000480)=@in6={0x1c, 0x1c, 0x2, 0x0, @mcast2}, 0x1c) shutdown(r9, 0x1) setsockopt$inet_tcp_int(r9, 0x6, 0x10, &(0x7f0000000000)=0xfffffffd, 0x4) sendmsg$unix(0xffffffffffffff9c, &(0x7f00000016c0)={&(0x7f0000000040)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f00000009c0)=ANY=[@ANYRES32=r9, @ANYBLOB="24cdbc680b0a2f69aa605c16a768f58c6e6dfb16391e94ffee9d5b75e477a2a087b15f22086b15e6a918c7986c3e762fcb64f2b787d47a7c06dc7b78ef13bfe6c1a14a2560a60189eae136eb2c566086baa373a62aa1f368c58feb7e81cabfe67f35d3216ad1fe193af678e30db4225373f96a7b502e00beac7eaff5fad833ef39311197dbd7f991a62e5facbe3ed18a0959e4571b2c20cf8b56ec5b72b7001c13eacf108bf3f0e11d486ea859b41738f02c3b962fba0e6c77ac596545e9794be9a729fc163ab518b78663d1f47b445b559ad78dc9f7dd2b64720e0e6e6681b7cc6e07989f265e5fa783e65ff347db8247", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ee4052addcdd6e0200407254b82b451e7a6097", @ANYRES32, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYBLOB="0a781819126e3b3aedaaa471089e218398938e5479f3ce39f7567c715a77c9721bde6b77697e9e81d79939a5a0c9638ee3ebf4824495deee355340fb371127879a1fc2bc247cb64eac53552539b37b9deedd28223b52bc4c2b55e45ed2df4392b3b09ed59d38e71dfed85b6770727db0a84e86dd7820a925d3064a8cfd639d245eb758840d3d42dbc48c14998513c764b089ca15ed184d5d5c7ee817c1604fc337030e346a4a772ef85592a80b3c916450ec1f02882f94a898cfab550adc9b0e6d04dd109562bd1da9c29f5bd5b090336c6cad6ef6f8397486321feef280", @ANYRES32=0x0, @ANYRES64, @ANYRES8=r8, @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r4, @ANYRES32, @ANYBLOB="8a169bef642df8311d2534c3730a93f7ce6a69e302344b8939c9a4dbb6fed6ca8f3232ffba4dcc87e567284f6a0589a87fcc415abc520f", @ANYRES32, @ANYRES32=r9, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2a5dff8038b3c67fde5b27c8b15cb53c5d5ec0f1aa0c0c26d5eed5318403be8626d07d38a8962614503e8487cdc47bfffb93c1b86155a2dfc727ad4336b24ef1799e8f0917e68076ba32ebfeab936e27eb07966b46e7d4e4179aa2ffeca7680cbf5cccaf338c41746509a0b85376d4ce7305862d5391523f2639bc77117aebd68f22fe3ae3b69afb4464618a82b11333f9860db2a3641b9e5b18656e08d860003bd42e3993d44826d8dd8e27c2b694eba016d0bfccb3c32e", @ANYRES8=r9, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e8ff0100"], 0x238}, 0x0) __semctl$SEM_STAT(0xffffffffffffffff, 0x2, 0xa, &(0x7f0000000100)=&(0x7f00000000c0)={{0x0, 0x0, 0x0}}) r11 = fcntl$getown(0xffffffffffffff9c, 0x5) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, r4, r10, 0x0, 0x40, 0xffc0}, 0x8, 0x0, 0x2, 0xae, r11, 0x0, 0xefb4}) r12 = socket$inet6(0x1c, 0x2, 0x0) r13 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$BIOCSETWF(r13, 0x8010427b, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x8, 0xe, 0x5}, {0x400, 0x3, 0xa, 0x6}, {0x4, 0x1, 0xdc, 0x7ff}]}) freebsd10_pipe(&(0x7f0000000340)) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f00000001c0)=0xa50b, 0x4) 0s ago: executing program 0 (id=34): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x18) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) posix_fadvise(r0, 0x80000000, 0x7fffffff, 0x3) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000180)=0x7) r3 = kqueue() kevent(r3, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x4b, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x5f9]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xcb4, 0x9, 0x38, 0x7ffffffffffffffc]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r4, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf69", 0x0, 0x19, 0x1, 0x4, 0x1c, 0x700, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) r5 = socket(0x1c, 0x1, 0x0) listen(r5, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x30004, 0x10, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x10000000000, 0x4000000}, 0x0) rfork(0x95020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000140)=r6) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) rfork(0x85000) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000180)='./file1/../file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe005464a000 Mar 29 14:25:10 ci-freebsd-main-0 dhclient[820]: Interface tap0 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 is down, dhclienif_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 t exiting Expensive callout(9) function: 0xffffffff81a53fd0(0) 0.007745073 s if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 Mar 29 14:25:10 ci-freebsd-main-0 dhclient[820]: connection closed Mar 29 14:25:10 ci-freebsd-main-0 dhclient[820]: exiting. if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054647000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 md0: truncating fractional last sector by 1 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054648000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054646000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8e000 if_delmulti_locked: detaching ifnet instance 0xfffffe005464a000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8c800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8c800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8c800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8c800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8c800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8c800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: No error: 0) SYZFAIL: repeatedly failed to execute the program proc=0 req=34 state=3 status=67 (errno 35: Resource temporarily unavailable) FreeBSD/amd64 (ci-freebsd-main-0.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d8d000 set $lines = 0 Password: Login incorrect login: show registers Password: Login incorrect login: ps Password:Jan 1 00:03:19 ci-freebsd-main-0 login[748]: 2 LOGIN FAILURES ON ttyu0 Login incorrect login: show malloc Password: Login incorrect