last executing test programs: 3m54.764522747s ago: executing program 1 (id=79): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) execve(0x0, 0x0, 0x0) 3m54.601717658s ago: executing program 1 (id=81): r0 = openat$bpf(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) preadv(r0, &(0x7f0000000200), 0x0, 0x78dabc0a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) mlockall(0x2) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) mlockall(0x2) sysarch$I386_SET_LDT(0x1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r2 = semget$private(0x0, 0x4, 0x102) __semctl$SETVAL(r2, 0x981f250082ac26b2, 0x8, &(0x7f0000001140)=0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) fchflags(0xffffffffffffffff, 0x40008) sync() fchflags(r1, 0x40008) accept$unix(r3, &(0x7f0000000140)=@file={0x20b, 0x0, ""/521}, &(0x7f0000000080)=0x20b) sync() 3m54.07381625s ago: executing program 1 (id=87): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@echo={0x8, 0x0, 0x0, 0x3, 0xe642}}}}}) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, 0x0, 0x8) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(0x0, &(0x7f0000000240)='./file0\x00') setreuid(0xee00, 0x0) setreuid(0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r2 = open(0x0, 0x615, 0x0) writev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) msgget(0x0, 0x784) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x13, 0x0, 0x0) 3m53.661625715s ago: executing program 1 (id=91): kqueue() mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) fork() openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1014, 0x0, 0x0) open(0x0, 0x80000000000206, 0x0) fspacectl(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x7, 0x7cfe1424}, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x40000, 0x110) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xb05, 0x3, &(0x7f0000000180)={&(0x7f0000000040), 0x0, 0x0}, 0x0, 0x1c) setuid(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r0, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cf", 0x0, &(0x7f0000000040), 0xb, 0x7, 0x0, 0x7, 0x0, 0x0, 0x3, 0x3, "00ff03ff8e3500"}, 0x40) linkat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0xffffffffffffffff, 0x0, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x1000) r1 = open$dir(0x0, 0x202, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) rfork(0x85000) 3m53.547163531s ago: executing program 1 (id=92): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = kqueue() r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe080, 0x3) open$dir(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400000, 0x30) kevent(r0, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x800000, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f9, 0x8000000000000000]}], 0x34, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x14, &(0x7f0000000000)={0x8, [0x6, 0x4, 0x0, 0x8, 0xff, 0x6, 0x8, 0xff]}, 0x14) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r3, 0x6, 0x29, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040)=0x1, 0x4) openat$smbus(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = shm_open2(&(0x7f0000000000)='./file0\x00', 0x200, 0x140, 0x5, 0x0) ioctl$FIOSSHMLPGCNF(r4, 0x80306664, &(0x7f0000000040)={0x6, 0x4}) 3m53.001208885s ago: executing program 1 (id=94): r0 = openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0xcc7994e1cca99bd5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) cpuset(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x1}, 0x8) openat$crypto(0xffffffffffffff9c, 0x0, 0x100000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$DIOCRADDADDRS(r2, 0xc0184415, 0x0) preadv(r0, 0x0, 0x0, 0x78dabc0a) socketpair$unix(0x1, 0x2, 0x0, 0x0) bindat$unix(0xffffffffffffff9c, 0xffffffffffffffff, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) r3 = __specialfd$inotify(0x2, &(0x7f0000000040)={0x4}, 0x4) inotify_add_watch_at(r3, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xa4000004) unlink(0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x40, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0xa7, 0x0, 0x0, {[@md5sig={0x13, 0x12, "ca4fb93dfd2425f12b6d7170392ccfc5"}, @window={0x3, 0x3, 0x4}]}}}}}}}) 3m52.893761139s ago: executing program 32 (id=94): r0 = openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0xcc7994e1cca99bd5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) cpuset(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x1}, 0x8) openat$crypto(0xffffffffffffff9c, 0x0, 0x100000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$DIOCRADDADDRS(r2, 0xc0184415, 0x0) preadv(r0, 0x0, 0x0, 0x78dabc0a) socketpair$unix(0x1, 0x2, 0x0, 0x0) bindat$unix(0xffffffffffffff9c, 0xffffffffffffffff, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) r3 = __specialfd$inotify(0x2, &(0x7f0000000040)={0x4}, 0x4) inotify_add_watch_at(r3, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xa4000004) unlink(0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x40, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0xa7, 0x0, 0x0, {[@md5sig={0x13, 0x12, "ca4fb93dfd2425f12b6d7170392ccfc5"}, @window={0x3, 0x3, 0x4}]}}}}}}}) 25.904117672s ago: executing program 2 (id=1023): bindat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) syz_emit_ethernet(0x66, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000080)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdefffff, [0x0, 0x0, 0x0, 0xb1]}) __semctl$GETNCNT(0x0, 0x0, 0x3) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ktimer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x10001}}, 0x0) open$dir(0x0, 0x80, 0x22) thr_new(&(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, &(0x7f0000000440)={0xa, 0x6}, [0x20000000000008, 0x3, 0x14]}, 0x68) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000100)={0x10, 0x2, 0x1, @rand_addr=0x5573}, 0x10) freebsd11_lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r2, r3, 0x2c, 0x4, 0x0, 0xa}, 0xc13, 0x8, 0x1, 0xffff, 0x8, 0xdfbd}) getgroups(0x0, 0x0) sync() r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000040)={0x0, 0x0, 0x70, 0x30038, &(0x7f0000000180), 0x0, 0x0, 0x0}) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 24.295856584s ago: executing program 2 (id=1026): bindat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) syz_emit_ethernet(0x66, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000080)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdefffff, [0x0, 0x0, 0x0, 0xb1]}) __semctl$GETNCNT(0x0, 0x0, 0x3) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ktimer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x10001}}, 0x0) open$dir(0x0, 0x80, 0x22) thr_new(&(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, &(0x7f0000000440)={0xa, 0x6}, [0x20000000000008, 0x3, 0x14]}, 0x68) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000100)={0x10, 0x2, 0x1, @rand_addr=0x5573}, 0x10) freebsd11_lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r2, r3, 0x2c, 0x4, 0x0, 0xa}, 0xc13, 0x8, 0x1, 0xffff, 0x8, 0xdfbd}) getgroups(0x0, 0x0) sync() r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000040)={0x0, 0x0, 0x70, 0x30038, &(0x7f0000000180), 0x0, 0x0, 0x0}) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 24.180230089s ago: executing program 2 (id=1028): getgroups(0x3, &(0x7f0000001f40)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) symlink(0x0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) ioctl$DIOCADDSTATE(r0, 0xc0f24425, &(0x7f0000000500)="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") ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x29, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xfdffffff}) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x19, 0x0, 0x10, &(0x7f0000000040)="0100743adeff", 0xfffffffffffffea9, 0x0, 0x0, 0x7d86619a, [0x0, 0x7]}) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000001500)={0x0, 0x1, 0x0, 0x3f, &(0x7f0000000400), 0x0, 0x0, &(0x7f00000014c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000000080)={{"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", "8b07104218f22b3a1f8dffffb1192ca2a08f69f000000034ed02da4ba667b85f"}, 0x0}) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x2008f) setgroups(0x228, &(0x7f0000000040)) r4 = socket(0x1c, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x2000004, @rand_addr="01c5e3829960961ccfe3bc34f71fa9b1", 0x1ff}, 0x1c) 23.266171387s ago: executing program 2 (id=1030): bindat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) syz_emit_ethernet(0x66, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000080)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdefffff, [0x0, 0x0, 0x0, 0xb1]}) __semctl$GETNCNT(0x0, 0x0, 0x3) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ktimer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x10001}}, 0x0) open$dir(0x0, 0x80, 0x22) thr_new(&(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, &(0x7f0000000440)={0xa, 0x6}, [0x20000000000008, 0x3, 0x14]}, 0x68) getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000300)) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x2, 0x1, @rand_addr=0x5573}, 0x10) freebsd11_lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r1, r2, 0x2c, 0x4, 0x0, 0xa}, 0xc13, 0x8, 0x1, 0xffff, 0x8, 0xdfbd}) getgroups(0x0, 0x0) sync() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000040)={0x0, 0x0, 0x70, 0x30038, &(0x7f0000000180), 0x0, 0x0, 0x0}) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 22.921034556s ago: executing program 2 (id=1031): freebsd11_mknod(&(0x7f0000000280)='./file0\x00', 0x672cda28f543e327, 0x3) lchown(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, 0x0) cap_rights_limit(r0, &(0x7f0000000580)=[0x20000207fffffdc, 0x400000000000005]) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kqueue() kevent(0xffffffffffffffff, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x100, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) getsockopt$inet6_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0xf, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r2, 0x8004745b, &(0x7f0000000080)) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) lio_listio(0x1, &(0x7f0000000080)=[{0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0, [0x100, 0x7], 0x5, 0x26, 0x9, {0x4000000000000004, 0xffff, 0x0}, {0x3, 0x15, @sival_ptr=0x1, @spare=[0xffffffff, 0x8, 0x8, 0x100, 0x8, 0x3, 0x1000, 0x8]}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [0x2, 0x10000], 0x9, 0x8, 0xb, {0x7, 0x1000000b, 0x0}, {0x1, 0xfffffffe, @sival_int=0x3, @thr={0x0, 0x0}}}, {0xffffffffffffffff, 0x4, 0x0, 0x0, [0x7, 0x40], 0x6, 0x5, 0x110, {0x7f, 0x9, 0x0}, {0x3, 0x10, @sival_int, @ke_flags=0x40a6}}], 0x3, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x54, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x21596174, @loopback, 0xfffffffc}}, {{0x1c, 0x1c, 0x3, 0x2, @local={0xfe, 0x80, '\x00', 0x0}, 0x68}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x53, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x2, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}}}, 0x108) open$dir(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1b) 22.704469472s ago: executing program 2 (id=1033): r0 = kqueue() kevent(r0, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff5, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)) clock_settime(0xe, 0x0) sigqueue(0x0, 0x63, @sigval_ptr=0x4) sigqueue(0x0, 0x73, @sival_int=0xfffffff5) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f00000005c0)={0x1, 0xacf, 0x2, 0x0, 0xffffffff, 0xfffff000, 0x6, 0x7fffffffffffffff, 0xc, 0x5, 0x0, [0x80000001, 0x7, 0xf85a, 0x2, 0x2, 0x2, 0x1c000000, 0x6, 0x0, 0x100001, 0x4, 0x2, 0xfffffffc, 0x6, 0x2, 0xffffffff, 0x1, 0x6, 0x100, 0x100, 0x7fff, 0xa, 0x9, 0x4, 0x4, 0x7d, 0x501, 0x1, 0xff, 0x1400000, 0x0, 0x9, 0x6, 0x9, 0x401, 0x5, 0x2, 0x3ff, 0xfff, 0x2, 0x8001, 0x400, 0x9, 0x2040, 0xc47, 0x9, 0x3, 0x0, 0x5, 0x7, 0xb, 0xffffffb0, 0x10004, 0x0, 0x591, 0x7, 0x4032, 0x400, 0x2000081, 0x2000007, 0x3, 0x1, 0x8d5a, 0x40, 0x3, 0xfee7, 0x0, 0x2, 0x1, 0x5, 0x9, 0xfffffffd, 0xfffffffe, 0x8, 0xfffffffb, 0xfff, 0x7, 0x8, 0x0, 0x5, 0x3ff, 0xfd7d, 0xa7, 0x0, 0x8, 0x71f, 0x8, 0x3, 0x2, 0x4, 0x7, 0x3ff, 0x5, 0x9, 0xf1, 0x1ff]}) r2 = openat$md(0xffffff9c, &(0x7f0000000040), 0x4, 0x0) freebsd11_fstatfs(r2, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$CIOCCRYPT(r3, 0x8002440b, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x66, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') setreuid(0xee00, 0x0) getuid() munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) 22.666140065s ago: executing program 33 (id=1033): r0 = kqueue() kevent(r0, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff5, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)) clock_settime(0xe, 0x0) sigqueue(0x0, 0x63, @sigval_ptr=0x4) sigqueue(0x0, 0x73, @sival_int=0xfffffff5) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f00000005c0)={0x1, 0xacf, 0x2, 0x0, 0xffffffff, 0xfffff000, 0x6, 0x7fffffffffffffff, 0xc, 0x5, 0x0, [0x80000001, 0x7, 0xf85a, 0x2, 0x2, 0x2, 0x1c000000, 0x6, 0x0, 0x100001, 0x4, 0x2, 0xfffffffc, 0x6, 0x2, 0xffffffff, 0x1, 0x6, 0x100, 0x100, 0x7fff, 0xa, 0x9, 0x4, 0x4, 0x7d, 0x501, 0x1, 0xff, 0x1400000, 0x0, 0x9, 0x6, 0x9, 0x401, 0x5, 0x2, 0x3ff, 0xfff, 0x2, 0x8001, 0x400, 0x9, 0x2040, 0xc47, 0x9, 0x3, 0x0, 0x5, 0x7, 0xb, 0xffffffb0, 0x10004, 0x0, 0x591, 0x7, 0x4032, 0x400, 0x2000081, 0x2000007, 0x3, 0x1, 0x8d5a, 0x40, 0x3, 0xfee7, 0x0, 0x2, 0x1, 0x5, 0x9, 0xfffffffd, 0xfffffffe, 0x8, 0xfffffffb, 0xfff, 0x7, 0x8, 0x0, 0x5, 0x3ff, 0xfd7d, 0xa7, 0x0, 0x8, 0x71f, 0x8, 0x3, 0x2, 0x4, 0x7, 0x3ff, 0x5, 0x9, 0xf1, 0x1ff]}) r2 = openat$md(0xffffff9c, &(0x7f0000000040), 0x4, 0x0) freebsd11_fstatfs(r2, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$CIOCCRYPT(r3, 0x8002440b, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x66, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') setreuid(0xee00, 0x0) getuid() munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) 10.591225914s ago: executing program 3 (id=1064): r0 = socket(0x1c, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000380)={0x1c, 0x1c, 0x0, 0x4, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) getpeername$unix(r0, &(0x7f00000002c0)=@abs={0x8}, &(0x7f0000000340)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) nanosleep(&(0x7f0000000100)={0xfffffffffffffffd, 0x50}, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f00000000c0)={0x15, 0x0, 0x17, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755aedaacdd4743c7e", 0x0, 0x0, 0x0, 0x7d86699a}) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x10000, &(0x7f0000000100), 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getpgrp(0xffffffffffffffff) procctl$PROC_PDEATHSIG_CTL(0x0, 0x0, 0xb, &(0x7f0000000840)=0x81) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) sync() thr_suspend(&(0x7f0000000240)={0x8, 0xc}) fpathconf(0xffffffffffffff9c, 0x0) sync() mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) 9.074447502s ago: executing program 0 (id=1065): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x4) socket$inet6_udplite(0x1c, 0x2, 0x88) kqueue() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x10000000000003, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_emit_ethernet(0x7e, 0x0) sendto$unix(r1, &(0x7f0000000140)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c70c932fedd0fa62d416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a300a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x4, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0) syz_extract_tcp_res(0x0, 0x6, 0xc) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) thr_suspend(&(0x7f0000000200)={0x100000001, 0x7ff}) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) r2 = socket$inet6(0x11, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, &(0x7f0000000340)) openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mkdir(0x0, 0xe5b65c82281e0e9d) unlink(&(0x7f0000000040)='./file0\x00') socket(0x1b, 0x3, 0x0) 9.074050992s ago: executing program 4 (id=1066): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) msync(&(0x7f0000920000/0x2000)=nil, 0x2000, 0x2) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000440), 0x1) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x80000001, @loopback, 0x2}, 0x1c) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) sendto$inet6(r0, &(0x7f00000020c0)="d1", 0xffef, 0x20184, 0x0, 0x0) sigtimedwait(0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff, 0xfffffffffffffffe}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x1) open(0x0, 0x205, 0x0) access(&(0x7f0000000680)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0xd, 0x0) socket(0x2, 0x1, 0x0) r1 = fork() mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sigqueue(r1, 0xf, @sival_int=0x8000) fcntl$lock(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x3, 0x4, 0x403, 0x0, r1}) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 9.069417754s ago: executing program 3 (id=1067): syz_emit_ethernet(0xa3, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) syz_emit_ethernet(0x0, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x8000, 0x4) r1 = socket(0x1c, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x1c, 0x3, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x80, &(0x7f0000000200)=0x4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x8000, 0x2f000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) sendto(r4, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) procctl$PROC_ASLR_STATUS(0x0, 0x0, 0xe, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 7.458524187s ago: executing program 0 (id=1068): openat$md(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000380)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x6}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x3, &(0x7f0000000340)={0xffff, 0x3, 0x1, 0x3}, 0x8) connect$inet(r3, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x5410, 0xffffffffffffffff, 0x0) r4 = open$dir(0x0, 0x1, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_timeval(r5, 0xffff, 0x1005, 0x0, 0x0) sendto(r1, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="c3b58b132350", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000100", 0x34, 0x3a, 0x0, @rand_addr="f6ec06afdf466c130afc590bdb9e4ff6", @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "8f79f7", 0x0, 0x6, 0x0, @mcast1, @rand_addr="dfa7f5ff3bcb22ddb457a19444d9d6f6", [], "d04015f6"}}}}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) rfork(0x0) 7.457076203s ago: executing program 4 (id=1069): syz_emit_ethernet(0xa3, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) syz_emit_ethernet(0x0, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0, &(0x7f0000000140)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f", 0x48) r0 = open(&(0x7f0000000480)='./file0\x00', 0x8000, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x1c, 0x3, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80, &(0x7f0000000200)=0x4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x8000, 0x2f000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) sendto(r3, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) procctl$PROC_ASLR_STATUS(0x0, 0x0, 0xe, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 7.456587426s ago: executing program 3 (id=1071): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) truncate(0x0, 0x80) open(0x0, 0x80000000000206, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) open$dir(0x0, 0x200, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r3, 0x14000000) syz_emit_ethernet(0x0, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') sync() sync() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) 5.74764207s ago: executing program 0 (id=1072): bindat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) syz_emit_ethernet(0x66, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000080)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdefffff, [0x0, 0x0, 0x0, 0xb1]}) __semctl$GETNCNT(0x0, 0x0, 0x3) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ktimer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x10001}}, 0x0) open$dir(0x0, 0x80, 0x22) getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000300)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000100)={0x10, 0x2, 0x1, @rand_addr=0x5573}, 0x10) freebsd11_lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r2, r3, 0x2c, 0x4, 0x0, 0xa}, 0xc13, 0x8, 0x1, 0xffff, 0x8, 0xdfbd}) getgroups(0x0, 0x0) sync() r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000040)={0x0, 0x0, 0x70, 0x30038, &(0x7f0000000180), 0x0, 0x0, 0x0}) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 5.746316035s ago: executing program 4 (id=1073): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) syz_emit_ethernet(0x11a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ef258162e50cffffffffffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB]) socket$inet6_udp(0x1c, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) kqueue() setsockopt$sock_int(r2, 0xffff, 0x1001, 0x0, 0x0) ioctl$DIOCGETRULES(r2, 0xcbe04406, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x395e9c817565919e, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) 5.745546221s ago: executing program 3 (id=1074): openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setrlimit(0x7, &(0x7f00000001c0)={0x1}) setreuid(0xee00, 0x0) fork() r3 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x24, &(0x7f0000000080)="f4", 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x5, @rand_addr="ad8a76e6cf444f6eac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x0, @empty, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x52, 0x0, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) rfork(0x85000) freebsd11_kevent(r4, &(0x7f00000002c0)=[{0xfffffffffffffe00, 0xfffffffffffffff3, 0x0, 0x1, 0xfff, 0x7}, {0x1bf, 0xfffffffffffffffc, 0x80b0, 0x1, 0x101, 0x64}, {0x9, 0xffffffffffffffff, 0x40, 0xc0000000, 0x6}], 0x3, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000240)={0x1, 0x2}) 3.936099389s ago: executing program 0 (id=1075): bindat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) syz_emit_ethernet(0x66, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000080)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdefffff, [0x0, 0x0, 0x0, 0xb1]}) __semctl$GETNCNT(0x0, 0x0, 0x3) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ktimer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x10001}}, 0x0) open$dir(0x0, 0x80, 0x22) thr_new(&(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, &(0x7f0000000440)={0xa, 0x6}, [0x20000000000008, 0x3, 0x14]}, 0x68) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000100)={0x10, 0x2, 0x1, @rand_addr=0x5573}, 0x10) freebsd11_lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r2, r3, 0x2c, 0x4, 0x0, 0xa}, 0xc13, 0x8, 0x1, 0xffff, 0x8, 0xdfbd}) getgroups(0x0, 0x0) sync() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000040)={0x0, 0x0, 0x70, 0x30038, &(0x7f0000000180), 0x0, 0x0, 0x0}) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 3.935650056s ago: executing program 4 (id=1076): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) ktimer_create(0x4, 0x0, &(0x7f0000000440)=0x0) ktimer_settime(r1, 0x0, &(0x7f0000000580)={{0x100000000, 0x6}, {0x100000000006, 0x3b9aca00}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f00000001c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="9f4c4662c957", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x1, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@mask_request}}}}) ioctl$DIOCNATLOOK(0xffffffffffffffff, 0xc04c4417, &(0x7f00000000c0)) fork() kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) r5 = getppid() fcntl$setown(r4, 0x6, r5) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @tid=r5}) 3.935370134s ago: executing program 3 (id=1077): setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x51, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x100000, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000000)={0xb, 0x22, 0x10, &(0x7f0000000940)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d86699a, [0x0, 0x5]}) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x400, 0x10000, &(0x7f0000000380), 0x0, 0x0, 0x0}) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x1000) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0) pwritev(r1, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x4, 0x0, 0x0) r4 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x31, &(0x7f0000000440)=ANY=[@ANYBLOB="360200000000000004013b0401021f0500000000000502fffb"], 0x20) listen(0xffffffffffffffff, 0x14040000) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000080)={0x10, 0x1d, 0x1, &(0x7f0000000740)='\x00', 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x7d86619b, [0x0, 0x9, 0xc]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x81, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r4, 0x84, 0x24, &(0x7f0000000380)={r5, @in6={{0x1c, 0x1c, 0x2, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}}}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 2.024179271s ago: executing program 0 (id=1078): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r1, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}}) mlockall(0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r4 = kqueue() kevent(r4, &(0x7f0000000280)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x1, 0x8, 0x9]}], 0x1, 0x0, 0x0, 0x0) ktimer_create(0x4, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r5, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1, [0x0, 0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) aio_writev(&(0x7f0000001200)={0xffffffffffffffff, 0x8, 0x0, 0x0, [0x8, 0x1ff], 0x1, 0x5, 0x3, {0x24d9339b, 0x6, 0x0}, {0x3, 0x20, @sigval_int=0x2}}) 2.023435183s ago: executing program 4 (id=1079): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) open(0x0, 0x80000000000206, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r3 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x406, @loopback}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000500)="182a187d094b09d5c2da5cb8b9e2629e18cc9e3f6a7690dabf8beb4abc1aa91a8f6646c64bdc3faf4d4aeece25e52ccfd49df6d49097189852e4fa84bd736151cdc165065d080000b71be2ced1dcaf7a729c730eea0600000000000000c94492ca6327e640d79c969f9b78f9235da433e80ac467889eadd506ccd40d703ae975e8fec78719d96b11828506baa1e92f506ed50ebe15e12e5d7da0b71b919682456af4c711ff34ffd5cc133a95774922c8", 0xb0}, {0x0}], 0x2, 0x0, 0x0, 0x149}, 0x0) writev(r3, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r4 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x106, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) truncate(&(0x7f0000000080)='./file0\x00', 0x7ffe) dup2(r4, r5) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) freebsd11_fstatat(r3, 0x0, &(0x7f00000000c0), 0x0) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.022386202s ago: executing program 3 (id=1080): openat$md(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000380)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x6}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f0000000340)={0xffff, 0x3, 0x1, 0x3}, 0x8) connect$inet(r2, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x5410, 0xffffffffffffffff, 0x0) r3 = open$dir(0x0, 0x1, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_timeval(r4, 0xffff, 0x1005, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="c3b58b132350", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000100", 0x34, 0x3a, 0x0, @rand_addr="f6ec06afdf466c130afc590bdb9e4ff6", @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "8f79f7", 0x0, 0x6, 0x0, @mcast1, @rand_addr="dfa7f5ff3bcb22ddb457a19444d9d6f6", [], "d04015f6"}}}}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) rfork(0x0) 2.540468ms ago: executing program 0 (id=1081): syz_emit_ethernet(0xa3, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) syz_emit_ethernet(0x0, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0, &(0x7f0000000140)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f", 0x48) r0 = socket(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x3, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x80, &(0x7f0000000200)=0x4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x8000, 0x2f000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) sendto(r3, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) procctl$PROC_ASLR_STATUS(0x0, 0x0, 0xe, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 0s ago: executing program 4 (id=1082): r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = open$dir(0x0, 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = fork() sigqueue(r2, 0xf, @sival_int=0x8000) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f00000000c0)={0x16, 0x43d5e758ccc2a34, 0x8, &(0x7f0000000340)="0b6fac4103e7a00d", 0x0, 0x0, 0x0, 0x7d8e699a}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000000080)=0x2, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x6, 0xe739}}}}}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f00000000c0)=0x1000, 0x4) kqueue() cpuset_setaffinity(0x3, 0x4, 0x1e, 0x8, &(0x7f0000000380)={[0x1]}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000000)={0x0, 0xd, 0xf8}) freebsd11_lstat(&(0x7f0000001940)='./file1\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x8006, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0x100, &(0x7f0000000000)={0x0, 0xfffffffb, 0xf, 0x2, 0x806, 0xa, 0xb, 0x1b, {@in6={{0x1c, 0x1c, 0x1, 0x6, @mcast2, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x15, 0x4}}, 0x0) cpuset_setaffinity(0x3, 0x2, 0x0, 0x6c, &(0x7f0000000040)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) preadv(r0, &(0x7f0000001780), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 Out of ktrace request objects. vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006df84000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 8, writecount 6, refcount 25 seqc users 0Expensive callout(9) function: 0xffffffff846fe450(0xfffffe0077929178) 0.003294939 s hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005412b5d0 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe0054125000 (pid 892, syz-executor, tid 100191) nlink=1, effnlink=1, size=697472, extsize 0 generation=3954cd97, uid=0, gid=0, flags=0x40008 ino 74, on dev gpt/rootfs Expensive callout(9) function: 0xffffffff81494ae0(0xfffffe006ddd5500) 0.013048718 s ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 762 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 876 ktrace write failed, errno 27, tracing stopped for pid 1 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 md1: truncating fractional last sector by 1 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 vnode_pager_putpages: zero-length write at 0 resid 14434 0xfffffe0059ad6000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 5, writecount 4, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0054105000 ref 1 pages 4 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0054124780 (pid 949, syz-executor, tid 100288) nlink=1, effnlink=1, size=14434, extsize 0 generation=583e3e5c, uid=0, gid=0, flags=0x40008 ino 94, on dev gpt/rootfs lock order reversal: 1st 0xfffffe005989eac0 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3386 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:185 lock order proctree -> ufs established at: #0 0xffffffff81681891 at witness_checkorder+0x781 #1 0xffffffff814e8946 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81dc327b at ffs_lock+0x18b #3 0xffffffff8232a5e7 at VOP_LOCK1_APV+0x57 #4 0xffffffff817f2d9e at _vn_lock+0x14e #5 0xffffffff817f3648 at vn_close1+0x1e8 #6 0xffffffff814da23a at ktrops+0x41a #7 0xffffffff814d99ad at sys_ktrace+0xaed #8 0xffffffff82165702 at amd64_syscall+0x4e2 #9 0xffffffff82109d4b at fast_syscall_common+0xf8 lock order ufs -> proctree attempted at: #0 0xffffffff81682762 at witness_checkorder+0x1652 #1 0xffffffff81572ddf at _sx_slock_int+0x13f #2 0xffffffff8163f08d at uprintf+0x14d #3 0xffffffff81def5df at ufs_rmdir+0xdf #4 0xffffffff8232928d at VOP_RMDIR_APV+0xcd #5 0xffffffff817e789a at kern_frmdirat+0x87a #6 0xffffffff82165702 at amd64_syscall+0x4e2 #7 0xffffffff82109d4b at fast_syscall_common+0xf8 vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe0078bb6a50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 7, writecount 5, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541311f0 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe0054124000 (pid 965, syz-executor, tid 100316) nlink=1, effnlink=1, size=697472, extsize 0 generation=e4cc77ae, uid=0, gid=0, flags=0x40008 ino 97, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006df84000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 8, writecount 6, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00540c4000 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005413a780 (pid 984, syz-executor, tid 100343) nlink=1, effnlink=1, size=697472, extsize 0 generation=ad85e32, uid=0, gid=0, flags=0x40008 ino 99, on dev gpt/rootfs tap4: Ethernet address: 58:9c:fc:10:d3:96 tap4: link state changed to UP arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.0.170 on tap0! if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 nd6_na_input: duplicate IP6 address fe80:7::4aa if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 arp: ff:ff:ff:ff:ff:ff is multicast arp: ff:ff:ff:ff:ff:ff is multicast if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 nd6_na_input: duplicate IP6 address fe80:4::2aa Warning! syz-executor[1104] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.2.170 on tap2! nd6_na_input: duplicate IP6 address fe80:3::aa arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.3.170 on tap3! vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe0078c68898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 7, writecount 5, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541586c8 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005414c000 (pid 1129, syz-executor, tid 100572) nlink=1, effnlink=1, size=697472, extsize 0 generation=891f4bf2, uid=0, gid=0, flags=0x40008 ino 151, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 arp: ff:ff:ff:ff:ff:ff is multicast if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 nd6_na_input: duplicate IP6 address fe80:6::3aa nd6_na_input: duplicate IP6 address fe80:3::aa vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe0077760000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 7, writecount 5, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0054152ba0 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005416d000 (pid 1173, syz-executor, tid 100643) nlink=1, effnlink=1, size=697472, extsize 0 generation=43e20af9, uid=0, gid=0, flags=0x40008 ino 154, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0078dc5898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 8, writecount 6, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005412c2e8 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe0054159780 (pid 1192, syz-executor, tid 100675) nlink=1, effnlink=1, size=697472, extsize 0 generation=a7dcbbb5, uid=0, gid=0, flags=0x40008 ino 162, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 nd6_na_input: duplicate IP6 address fe80:4::2aa if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 arp: ff:ff:ff:ff:ff:ff is multicast if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 nd6_na_input: duplicate IP6 address fe80:7::4aa pid 1278 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - coredumpsize limit is 0) nd6_na_input: duplicate IP6 address fe80:6::3aa arp: packet with unknown hardware format 0x15 received on tap4 arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.2.187 on tap2 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 FreeBSD/amd64 (ci-freebsd-main-5.us-central1-b.c.syzkaller.internal) (ttyu0) login: ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 983 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 762 ktrace write failed, errno 27, tracing stopped for pid 876 ktrace write failed, errno 27, tracing stopped for pid 1 arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.4.187 on tap4 arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) pid 1426 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 arp: packet with unknown hardware format 0x15 received on tap2 arp: packet with unknown hardware format 0x15 received on tap3 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 762 ktrace write failed, errno 27, tracing stopped for pid 1 ktrace write failed, errno 27, tracing stopped for pid 983 ktrace write failed, errno 27, tracing stopped for pid 876 arp: packet with unknown hardware format 0x15 received on tap0 vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe0078c69370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 7, writecount 5, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541fdba0 ref 1 pages 184 cleanbuf 23 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe00541e2780 (pid 1585, syz-executor, tid 101407) nlink=1, effnlink=1, size=697472, extsize 0 generation=282162ab, uid=0, gid=0, flags=0x40008 ino 241, on dev gpt/rootfs arp: ff:ff:ff:ff:ff:ff is multicast if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 ip6_ctloutput: mbuf limit hit arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.0.187 on tap0 arp: packet with unknown hardware format 0x15 received on tap2 arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.3.187 on tap3 arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.0.187 on tap0 nd6_na_input: duplicate IP6 address fe80:4::2aa arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.4.187 on tap4 nd6_na_input: duplicate IP6 address fe80:3::aa if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.2.187 on tap2 Expensive callout(9) function: 0xffffffff81a5cc10(0xfffffe00777c0540) 0.014739844 s ktrace write failed, errno 27, tracing stopped for pid 1259 ktrace write failed, errno 27, tracing stopped for pid 1198 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 ktrace write failed, errno 27, tracing stopped for pid 1215 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 ktrace write failed, errno 27, tracing stopped for pid 1430 ktrace write failed, errno 27, tracing stopped for pid 1418 ktrace write failed, errno 27, tracing stopped for pid 1416 ktrace write failed, errno 27, tracing stopped for pid 1404 ktrace write failed, errno 27, tracing stopped for pid 1401 ktrace write failed, errno 27, tracing stopped for pid 1392 ktrace write failed, errno 27, tracing stopped for pid 1379 ktrace write failed, errno 27, tracing stopped for pid 1348 ktrace write failed, errno 27, tracing stopped for pid 1358 ktrace write failed, errno 27, tracing stopped for pid 1356 ktrace write failed, errno 27, tracing stopped for pid 1335 ktrace write failed, errno 27, tracing stopped for pid 1328 ktrace write failed, errno 27, tracing stopped for pid 1312 ktrace write failed, errno 27, tracing stopped for pid 1285 ktrace write failed, errno 27, tracing stopped for pid 1302 ktrace write failed, errno 27, tracing stopped for pid 1286 ktrace write failed, errno 27, tracing stopped for pid 1294 ktrace write failed, errno 27, tracing stopped for pid 1272 ktrace write failed, errno 27, tracing stopped for pid 1291 ktrace write failed, errno 27, tracing stopped for pid 1263 ktrace write failed, errno 27, tracing stopped for pid 1281 ktrace write failed, errno 27, tracing stopped for pid 1257 ktrace write failed, errno 27, tracing stopped for pid 1274 ktrace write failed, errno 27, tracing stopped for pid 1255 ktrace write failed, errno 27, tracing stopped for pid 1268 ktrace write failed, errno 27, tracing stopped for pid 1253 ktrace write failed, errno 27, tracing stopped for pid 1256 ktrace write failed, errno 27, tracing stopped for pid 1241 ktrace write failed, errno 27, tracing stopped for pid 1247 ktrace write failed, errno 27, tracing stopped for pid 1220 ktrace write failed, errno 27, tracing stopped for pid 1236 ktrace write failed, errno 27, tracing stopped for pid 1208 ktrace write failed, errno 27, tracing stopped for pid 1207 ktrace write failed, errno 27, tracing stopped for pid 1214 ktrace write failed, errno 27, tracing stopped for pid 1213 ktrace write failed, errno 27, tracing stopped for pid 1196 ktrace write failed, errno 27, tracing stopped for pid 1184 ktrace write failed, errno 27, tracing stopped for pid 1163 ktrace write failed, errno 27, tracing stopped for pid 1169 ktrace write failed, errno 27, tracing stopped for pid 1164 ktrace write failed, errno 27, tracing stopped for pid 1156 ktrace write failed, errno 27, tracing stopped for pid 1142 ktrace write failed, errno 27, tracing stopped for pid 1151 ktrace write failed, errno 27, tracing stopped for pid 1137 ktrace write failed, errno 27, tracing stopped for pid 1141 ktrace write failed, errno 27, tracing stopped for pid 1120 ktrace write failed, errno 27, tracing stopped for pid 1127 ktrace write failed, errno 27, tracing stopped for pid 1093 ktrace write failed, errno 27, tracing stopped for pid 1118 ktrace write failed, errno 27, tracing stopped for pid 1088 ktrace write failed, errno 27, tracing stopped for pid 1094 ktrace write failed, errno 27, tracing stopped for pid 1065 ktrace write failed, errno 27, tracing stopped for pid 1084 ktrace write failed, errno 27, tracing stopped for pid 1035 ktrace write failed, errno 27, tracing stopped for pid 1051 ktrace write failed, errno 27, tracing stopped for pid 1008 ktrace write failed, errno 27, tracing stopped for pid 1037 ktrace write failed, errno 27, tracing stopped for pid 999 ktrace write failed, errno 27, tracing stopped for pid 1016 ktrace write failed, errno 27, tracing stopped for pid 971 ktrace write failed, errno 27, tracing stopped for pid 957 ktrace write failed, errno 27, tracing stopped for pid 1006 ktrace write failed, errno 27, tracing stopped for pid 911 ktrace write failed, errno 27, tracing stopped for pid 978 ktrace write failed, errno 27, tracing stopped for pid 905 ktrace write failed, errno 27, tracing stopped for pid 974 ktrace write failed, errno 27, tracing stopped for pid 884 ktrace write failed, errno 27, tracing stopped for pid 1235 ktrace write failed, errno 27, tracing stopped for pid 944 ktrace write failed, errno 27, tracing stopped for pid 769 ktrace write failed, errno 27, tracing stopped for pid 919 ktrace write failed, errno 27, tracing stopped for pid 899 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 Expensive callout(9) function: 0xffffffff819a33f0(0) 0.030981212 s arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.2.187 on tap2 arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.3.187 on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.4.187 on tap4 ktrace write failed, errno 27, tracing stopped for pid 983 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 762 ktrace write failed, errno 27, tracing stopped for pid 1 ktrace write failed, errno 27, tracing stopped for pid 876 SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /dev/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=5 req=1035 state=1 status=67 (errno 35: Resource temporarily unavailable)