last executing test programs: 1.087579446s ago: executing program 2 (id=81): mprotect(&(0x7f000014d000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000355000/0x4000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x220018a, 0x0) fchmod(r0, 0x157) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x0) ioctl$DIOCGETSTATES(r1, 0xc0106663, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000080)="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", 0xfe, 0x100, &(0x7f0000000000)={0x10, 0x2, 0x0, @multicast1}, 0x10) fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 967.260901ms ago: executing program 2 (id=83): sysarch$I386_SET_LDT(0x1, &(0x7f0000000080)={0x1fa}) rename(&(0x7f0000000000)='./file0/file0/../file0\x00', 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dbbc6c00b00003fe80000000000000000001e6000000aaff0200000000000000000000000000012b158de7"]) cpuset_getaffinity(0x3, 0x3, 0x1, 0x8, &(0x7f0000000100)) cpuset_setdomain(0x3, 0x9, 0xffffffffffffffff, 0x20, &(0x7f0000000080)={[0x1]}, 0x2) setgroups(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) fork() rfork(0x0) fork() r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="9e6757ccf2f013c77e35a8799235d6bd4155c225f3ba2e1faf43ef96c95bc5801cf13c4d229e4ae2f88fb3dfbd79c523e37b33e0f2ce7d98fba17cd69652213b0a4ac3d96955f6cfd8cc24d4c3d06eca6ba3990908bbce84043d625fe42734e819a62db10efe26f1a8ae0173b0b1504862140a024c1c1673b2779a334e3131d1daf584665f34d2b66b99f59f89ec676f79856e322b4496889bee6bb52819a937593229894379444ac0966f7d6c434ebae4ea5f90c79851fcd4a1c66874f31752fe865bf3c3c05662bdd189359b9bce399be32a5991289583b9", 0xd9, 0x109, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x1aa, @remote={0xfe, 0x80, '\x00', 0x0}, 0x9}, 0x1c) shutdown(r0, 0x1) open$dir(&(0x7f0000000240)='./file0\x00', 0x40080, 0x0) cpuset_getdomain(0x1, 0x2, 0x2, 0x20, &(0x7f00000000c0), &(0x7f0000000140)) r1 = geteuid() r2 = socket(0x11, 0x10000000000003, 0x8) setsockopt$sock_int(r2, 0xffff, 0x40, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000180)=0x4, 0x4) seteuid(r1) r3 = socket(0x1c, 0x1, 0x0) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x14}, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x3ee, @rand_addr="0000000005000800000077a400000030"}, 0x1c) r4 = __specialfd$eventfd(0x1, &(0x7f00000001c0)={0x4, 0x1}, 0x8) getegid() syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}) read(r4, &(0x7f0000000240)=""/171, 0xab) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x2fb, &(0x7f0000000000)=[{0x1a274eb9}], 0x1}) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) 749.707194ms ago: executing program 2 (id=88): r0 = socket(0x1c, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x6f2, @rand_addr="fee3a38e5cac1c51deba3c6b07a430a0", 0x8}, 0x1c) r1 = socket$inet6(0x1c, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x2, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1, 0x10000, @remote={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x6, 0x1081}], 0x10}, 0x104) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) r2 = socket(0x1b, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="02140102020000008e4ca277fce00d8f", 0x10, 0x8, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="02140102020000008e4ca277fce00d8f", 0x10, 0x8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = kqueue() ppoll(&(0x7f00000000c0)=[{r4, 0x40}], 0x20000000000001f3, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r4, 0x40}], 0x20000000000001f3, 0x0, 0x0, 0x0) kevent(r4, &(0x7f0000000000)=[{0x0, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) ioctl$SMB_SENDB(r3, 0xc020697c, &(0x7f0000000100)={0x67, 0x69, 0x5, @word=0x6, @byte=0x9, 0x40000fff, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r5, &(0x7f00000005c0)="82d08762364333d7", 0x8, 0x4, &(0x7f00000006c0)={0x1c, 0x1c, 0x3, 0x2, @loopback, 0x7fffffff}, 0x1c) (async) sendto$inet6(r5, &(0x7f00000005c0)="82d08762364333d7", 0x8, 0x4, &(0x7f00000006c0)={0x1c, 0x1c, 0x3, 0x2, @loopback, 0x7fffffff}, 0x1c) mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$SMB_SENDB(r6, 0xc020697c, &(0x7f0000000100)={0x0, 0x5, 0x0, @word=0x98b, @buf="d7d3", 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SMB_SENDB(r6, 0xc020697c, &(0x7f0000000100)={0x0, 0x5, 0x0, @word=0x98b, @buf="d7d3", 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000100)='./file0\x00') 697.7518ms ago: executing program 3 (id=89): open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0xaa) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setitimer(0x2, &(0x7f0000000100)={{0x7}, {0x0, 0x8000}}, 0x0) 697.400448ms ago: executing program 1 (id=90): r0 = kqueue() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) aio_writev(&(0x7f00000015c0)={r1, 0xffffffffffffffff, 0x0, 0x0, [0xffff0001, 0x2b], 0x7fffffff, 0x8, 0x0, {0x0, 0xffff, 0x0}, {0x1, 0x2}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$DIOCOSFPGET(r2, 0xc0884450, &(0x7f00000003c0)="4f8088a98fc115ab88a631a3e2377ff808bd417e1d612e9bbf098b376ed5248dd8efe3f8bd217d0b5f7446efa0cc9477d684eb2a4720dea76c95ecf62d86255332df3dcf1e46af2f0013640382712f09832a") r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000000)={0x17, 0x1e, 0x10, &(0x7f0000000940)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d86699a, [0x0, 0x0, 0x0, 0x3]}) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000380), 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/146, 0x92}, {&(0x7f0000000140)=""/255, 0xff}, {&(0x7f0000000240)=""/203, 0xcb}], 0x3, 0xfffffffffffff800) kevent(r0, &(0x7f0000000100)=[{0x3, 0xfffffffffffffffb, 0x80c3, 0xc0000000, 0x0, 0x0, [0xfffffffffffffffd]}], 0x1, 0x0, 0x0, 0x0) 690.727153ms ago: executing program 3 (id=91): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="ee08665d19ac14d5e51348770200ff418420aef617be001900d4b38311001b0000000000000000006a89dbde", 0x2c) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffb}, 0x1c) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x5}, 0x24) (async) sendto$inet6(r1, &(0x7f00000001c0)="16c6bcec8d66", 0xa75f, 0x0, 0x0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="83746b4dfa973262902247e80077ad60de59a62628ab0000000000000000617ad7133967b899e44c45dd3b95e1d92cfd6cb09e4300110c51ffdad9cc4f7b82169bb78afa362a029c7226340f2a3c04fa9a63976e566d2dd68ea59c1ab57a7fcd747df35f1c85ad", 0x67) 637.645685ms ago: executing program 2 (id=92): open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0xaa) r0 = getpid() ioctl$SMB_OLD_TRANS(0xffffffffffffffff, 0xc01c690c, &(0x7f00000000c0)={0x6c, 0x6f, 0x30, @buf="db47", @byte=0xf5, 0x3, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$SMB_READB(r1, 0xc0286938, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @buf="de32", 0x0, 0x0, 0x0, 0x0}) ktrace(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x510, r0) setitimer(0x2, &(0x7f0000000100)={{0x7}, {0x0, 0x8000}}, 0x0) 637.031914ms ago: executing program 2 (id=93): r0 = kqueue() r1 = kqueue() fcntl$lock(r1, 0x16, &(0x7f0000000080)={0x570}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5, 0x1010, 0xffffffffffffffff, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000001180)={0x1f, 0x0, 0x10, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505", 0x0, 0x0, 0x4, 0x0, [0x8, 0x0, 0xfffffffd]}) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0xd, &(0x7f0000000080)={0x54007ff, {{0x1c, 0x1c, 0x1, 0x9, @loopback}}, {{0x1c, 0x1c, 0x3, 0x10002, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0x108) ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, &(0x7f0000000080)={0x3ff, [{0x566e, [0xee0d, 0xd871, 0x7, 0xff, 0x7fff, 0x3, 0xfffffff7, 0xaa8, 0x7ff, 0x9, 0xfffffffc, 0x9, 0x7, 0x2, 0x4, 0x8, 0x5, 0x0, 0x0, 0x3, 0x0, 0xf, 0xd6, 0x8, 0x1de, 0xfffffffb, 0x5, 0x2, 0x7f, 0x10001, 0x9, 0x6, 0x3, 0x5, 0x4, 0x5, 0x4, 0x401, 0x5, 0xba5c, 0xe8c, 0x80000001, 0x8, 0xfffffffd, 0x3, 0xedf, 0x1, 0xffffffff, 0x4c02, 0x4, 0x3, 0x10001, 0xffffffde, 0x0, 0x10, 0x400, 0x715, 0x7e1, 0x4, 0xd, 0xa, 0xa09, 0x2, 0x3, 0x4, 0x5131, 0x4, 0x1, 0xbe9a, 0xfff, 0x731, 0x9, 0xbc, 0xb, 0xc74f, 0x0, 0x9, 0x5, 0x4, 0x101, 0xfffffff8, 0x2, 0x0, 0x5, 0x5229, 0x9, 0x7, 0xfffffffb, 0x81, 0x8001, 0xf, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5, 0xe0, 0x7ff, 0x2, 0x0, 0x8000008, 0xc, 0x8]}, {0x5c, [0x15, 0x6, 0x0, 0xbae, 0x2, 0x4, 0x86f13b53, 0x401, 0x1000, 0x7, 0x6, 0x7, 0x7fff, 0x0, 0x5, 0x400, 0x9, 0x96a9, 0xbe, 0xfffffffe, 0x0, 0x8, 0xae0, 0x6, 0x7, 0x40000, 0x40, 0x9, 0x7fff, 0x3, 0x200000, 0x7, 0x0, 0x5, 0x3b5, 0x6, 0x2, 0x58, 0x2, 0x1, 0xffffff00, 0x4, 0x4, 0x6, 0x3, 0x3, 0x8, 0x100, 0x0, 0x907, 0x101, 0xc, 0x6, 0xc95, 0x6, 0xc, 0x4, 0x2, 0xb, 0x3eb, 0x0, 0x7fff, 0x0, 0xff8, 0x9, 0x7, 0x8, 0x9, 0x61a, 0x2, 0x80000001, 0x90fd, 0x6, 0xd, 0x6eed, 0x0, 0x4, 0x1, 0x7, 0x5, 0x0, 0x10001, 0x12, 0x80000001, 0x9, 0x4b2, 0x100, 0x7fffffff, 0x2, 0x0, 0x207, 0x5, 0x1000, 0x0, 0x8, 0x6, 0x2, 0x1, 0x4, 0x1, 0x3ff, 0x1000, 0x1, 0x4]}, {0x0, [0x1, 0x6, 0x3, 0x2, 0x800, 0x0, 0xff, 0x6, 0x7, 0x3, 0xc, 0x1, 0xdd, 0x538, 0x7bac, 0xa, 0xd, 0x9, 0x10001, 0x8, 0x8, 0xff, 0x6, 0x2, 0x800000, 0x2, 0x4, 0x8, 0x4, 0xb, 0x9, 0x1, 0x3, 0xfff, 0x343d3543, 0x400000, 0xfffffff8, 0x9, 0xa87f, 0x800, 0x3, 0x2, 0x0, 0xdb4, 0x101, 0xb369000, 0xb89b, 0x92, 0x4, 0x0, 0x98, 0x3d104cc0, 0x52, 0x8, 0xc, 0x0, 0x437, 0x3, 0x3, 0x1, 0x1000, 0x8001, 0xfff, 0x17e7, 0x8, 0x7, 0x6, 0x0, 0x5, 0x5, 0x5, 0x1, 0xffffffb8, 0x7fff, 0x9, 0xfffffffd, 0xfffffffe, 0x3158, 0x5, 0x2, 0x8, 0x36d5, 0x9, 0x1, 0xfffffffb, 0x2, 0x8, 0x8000, 0x5, 0x3, 0x1, 0xfffffffd, 0x4, 0x1, 0xfffffff7, 0x40, 0x5, 0x3, 0x6, 0x1ff, 0x4, 0x9, 0x9, 0x39]}, {0x3, [0x7, 0x5, 0x8, 0xfc, 0x12, 0xd683, 0x8, 0x5, 0x8, 0xadd, 0x5, 0xdb, 0x80000001, 0xc, 0x0, 0xfffffff7, 0xffffffff, 0x2, 0x5, 0x2, 0x3eb3, 0x0, 0x7, 0x7, 0x7, 0x6, 0x5, 0x7673faf3, 0x0, 0x9, 0x9, 0x2, 0xffffffff, 0x1, 0x4f124442, 0x8, 0x0, 0x2, 0x8007, 0x190, 0x5, 0x3, 0x1, 0x800, 0x9, 0x9, 0x3, 0x7, 0x5, 0x7, 0x8, 0x7, 0x8, 0x10001, 0x0, 0x0, 0x7ff, 0xe, 0x9, 0x2df, 0xe7, 0x7fffffff, 0x80000001, 0x4, 0x3, 0x3, 0x1, 0x496a, 0x7, 0x7fffffff, 0x74, 0x2, 0x9, 0x3, 0x6, 0xf3, 0x1, 0xa3, 0x49d, 0xec0, 0x100, 0x3, 0x6, 0x9, 0x2, 0x0, 0x6, 0x6, 0x9, 0x1, 0x0, 0x5, 0xa, 0x2, 0x4, 0x3b, 0x3, 0x40, 0x224, 0x80, 0x4, 0x4, 0x7fff, 0x2]}, {0xe8bc, [0x5, 0x4, 0x8, 0x5, 0x4, 0x80, 0x9, 0x1ff, 0xfff, 0xfffffff9, 0x1ff, 0x1, 0x800, 0x80000000, 0x8, 0x7, 0x7ff, 0x6, 0x8, 0x9, 0x0, 0x8, 0x13, 0x2, 0x0, 0x7f, 0x401, 0x8, 0x7, 0x8, 0x4, 0x5, 0xffffe6ff, 0x7, 0x80000000, 0x6f88, 0x2, 0x9, 0x7f, 0xa5de, 0x0, 0x8, 0x3, 0x800, 0x5, 0x79fea323, 0x54, 0x80, 0xf, 0x3ff, 0x8, 0xfffffffa, 0x9, 0x0, 0x800, 0x8, 0x1, 0x4, 0x6, 0x8, 0x3, 0x5, 0x5, 0x2, 0x1, 0xb26, 0x6, 0x81, 0x1, 0x101, 0x3, 0x2, 0x6, 0x200, 0x7, 0x5, 0x3, 0x2, 0x1ff, 0x3, 0x1, 0x800, 0x5, 0x7, 0x468, 0x7f, 0x94, 0x7, 0x6, 0x3, 0x8, 0x7ff, 0xfffffffe, 0x10000, 0x4, 0x4b, 0x435c9460, 0x3ff, 0x7ff, 0x4b, 0x40, 0x0, 0x6, 0x4]}, {0x3, [0x7, 0x10, 0x1, 0x5, 0xf, 0x40, 0x6, 0x1000, 0x4, 0x3, 0x5, 0x8, 0xfffffffe, 0x5, 0xa, 0x81, 0x7, 0x8, 0x8, 0x6, 0x80000000, 0x60, 0x0, 0xd2, 0xa, 0x9, 0x10001, 0x6, 0xc, 0x6, 0x200, 0x5, 0x3, 0x52fd0a00, 0x8, 0x3, 0xfffff1b2, 0x15, 0x8, 0xff, 0x2000, 0x4b, 0x808f, 0x5, 0xb, 0xfffffffa, 0x3, 0x7ff, 0x430c, 0x1000, 0xb35, 0x0, 0x3, 0x9, 0x1ff, 0x6, 0x400000, 0x5, 0x10001, 0x1, 0x6, 0x1, 0xffff, 0x10, 0x0, 0x9, 0x3, 0xce94, 0x4, 0x0, 0xfffffc01, 0x80, 0x200007ff, 0x2, 0x3, 0x4, 0x8, 0x400, 0x8, 0x81, 0xfffffff7, 0x0, 0x6, 0x7ff, 0x7, 0x0, 0x124f8, 0x7fffffff, 0x6, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x4ab464c, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x5, 0x9, 0x5b8b7924, 0x7ac5]}, {0xffffff7f, [0x1, 0x4, 0x131f, 0x1, 0x8, 0x6, 0x0, 0x7, 0x3, 0x3, 0x1, 0x200, 0x4a2, 0x49, 0xfd, 0xd0, 0x39e, 0x3, 0x5, 0xffff, 0x2c, 0x3, 0x0, 0x9, 0xffffffff, 0x7, 0xffffffff, 0x4, 0xc, 0x9, 0x263, 0xabd1, 0x3, 0x2, 0x9, 0x6, 0xb7af, 0x6, 0x2, 0x6, 0x1ff, 0x7, 0x10000, 0x2, 0x80000000, 0x4, 0xfffffff5, 0x1, 0x3041, 0x8, 0x6f, 0x2, 0x7, 0x3, 0xfff, 0x1, 0x8, 0x1, 0x5, 0x52, 0x3, 0x80, 0xe5, 0x7, 0x3f, 0x10, 0x6, 0x5, 0x4, 0xfffffff8, 0x4, 0x8001, 0x4220c0b8, 0xfff, 0x7, 0x6, 0x6, 0x80, 0x6, 0xc9, 0x2, 0x7, 0x52, 0x8000, 0xc, 0x6, 0x5, 0xe, 0x9, 0x8, 0xffffffff, 0x5, 0x5, 0x7, 0x5, 0x6, 0x1d33945, 0xd, 0x8, 0x9fc, 0xffff, 0x4, 0x5, 0x8]}, {0xfffffffa, [0x1ff, 0x8, 0x9, 0x1, 0x7, 0x3, 0x1, 0x2, 0x80, 0x10000, 0x8, 0xae, 0x7, 0xffffffff, 0x2, 0x6, 0x2, 0x42, 0xec7, 0x0, 0x3, 0x1, 0x9, 0x8, 0x7, 0xffffffff, 0x3, 0x8d4, 0x7ca, 0x5, 0x283, 0xd3b2, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x7ff, 0x200, 0x54, 0x1, 0x4, 0x40, 0x9, 0x40, 0x9, 0xc, 0x3, 0x1, 0x6, 0x10000, 0x6, 0x2, 0x7fffffff, 0xfffffff1, 0x0, 0xffff9594, 0x6, 0x2, 0x6ef, 0x1, 0x3, 0x0, 0x40, 0xfffffffe, 0x1, 0x3, 0xb28a, 0x1, 0x80000001, 0x800, 0x30e, 0x2, 0x2, 0x5, 0x9, 0x7ff, 0x5, 0x7, 0x1, 0x9, 0x8, 0x6, 0x1, 0x272, 0xc, 0x0, 0x2, 0x4, 0x400, 0x5, 0xfffffffc, 0xffffffff, 0xcd9f, 0x19d, 0x5, 0xf0, 0x6, 0x4, 0x9, 0x4, 0xe6dc, 0x8, 0x1ff0]}, {0x0, [0x9, 0x5, 0x314, 0x1, 0x7, 0x7f, 0x9, 0x4, 0x79, 0x0, 0x7ff, 0xe, 0xffff, 0x0, 0x80000000, 0x7, 0x1000, 0x3ff, 0x3, 0xf7, 0x0, 0x0, 0x40000000, 0x5, 0xfffffff7, 0xfffffffe, 0x1ff, 0x2, 0x3, 0x1, 0x2, 0x1, 0x4, 0x81, 0x8, 0x2, 0x4, 0x6, 0x1, 0x6, 0xffff, 0x1, 0xf, 0x3, 0x2, 0x6, 0x7, 0xa, 0x1ff, 0x7ff, 0xa, 0x0, 0x8, 0x7, 0xc0, 0xf58f, 0x1000, 0x0, 0x3, 0x7ff, 0xfe0, 0x3, 0x400007, 0x8, 0x9, 0x3, 0x1, 0x1, 0x5, 0x3, 0x100, 0xfffffff7, 0x1ff, 0xffffffff, 0x4, 0x8001, 0x1, 0x8, 0x0, 0x6, 0x8, 0x1, 0x100, 0x8, 0x0, 0xd7fb, 0xa, 0x0, 0x5, 0x4, 0x1a0, 0x2, 0x5, 0x0, 0x6, 0x1ff, 0x40, 0x5, 0x4, 0xbc, 0x8, 0x5, 0x7, 0xfffffffb]}, {0x6, [0x10, 0x40, 0x1, 0x253, 0x8, 0x8, 0x8, 0x1, 0x7, 0x8, 0x3, 0x60, 0x7ff00000, 0x80, 0x8, 0x2, 0x2, 0x6, 0x80, 0x800, 0x1, 0x0, 0x529b, 0x3, 0x0, 0x5, 0x0, 0xfffffffa, 0xfff, 0xa, 0xc, 0xf, 0x7, 0x7, 0x5, 0x0, 0x2, 0x2, 0x5, 0x9, 0x9, 0x4, 0x7, 0xb, 0x101, 0x8, 0x4, 0xfb8c, 0xf3b, 0x4, 0x7, 0x8, 0x8, 0x7, 0x5, 0x4, 0x4, 0x5, 0xfffffff9, 0x2, 0x8, 0x3, 0x2, 0x400, 0x6, 0x7, 0x9bc7, 0x80000000, 0x8, 0xc7, 0x200, 0x4, 0xc, 0x6, 0xc2c4, 0x5, 0x5, 0x7, 0x6, 0xf, 0x80, 0x3, 0xfffffffd, 0x20000000, 0x21, 0x2, 0x1, 0x3, 0x80, 0x1, 0x4, 0x7d7, 0x9, 0x4, 0x7f, 0x0, 0x7ff, 0x7fff, 0x1, 0x8a6, 0xfffffff9, 0x1, 0x6, 0x4]}, {0xc0, [0x3f04, 0xf, 0xfffffff7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x9, 0x6, 0x7fffffff, 0x0, 0xfffffffe, 0x7fff, 0x0, 0x0, 0x400000, 0x2, 0xe, 0x401, 0x8, 0x7fe, 0x7, 0x9, 0x40, 0xfffffffe, 0x5144b3ea, 0x694, 0x4, 0x7fe, 0x99, 0x81, 0x5, 0x4, 0x3, 0x0, 0x3ff, 0x1000, 0x9, 0x6, 0x40, 0x8, 0x1, 0xf, 0x1, 0x8, 0x5627aa48, 0x5, 0x4455, 0xfffffffd, 0x1000, 0x7, 0x3, 0x8, 0x0, 0x3, 0x7, 0xffff0000, 0x7, 0x7, 0x7fff, 0x1, 0x3, 0x2, 0x9, 0xe, 0x3, 0x7, 0x0, 0xa, 0x3, 0x54d, 0x100, 0x8, 0x3ff, 0x8, 0xfffffffd, 0xffffe64b, 0x10000, 0x9, 0x200, 0x3, 0x7, 0x412, 0x40, 0x8, 0x9, 0x2, 0xb0000000, 0xb, 0xb, 0x400000, 0x99, 0xeae, 0xe4, 0xfffffc00, 0xd8b5, 0x8, 0x9, 0xf, 0x2ab, 0x5, 0x8000]}, {0x0, [0x4, 0x44f, 0x4, 0x9, 0x4, 0xffffffff, 0x6, 0xffffffef, 0x7f, 0x7, 0x3, 0x4, 0x80000001, 0x1, 0xdf96, 0x10000, 0x2, 0xc1e, 0x1000, 0x9, 0x2, 0x9b6, 0x404000, 0x1, 0x5, 0x7e, 0x0, 0x2, 0x0, 0x80, 0x8f7, 0x6, 0x2, 0x7f, 0xf7b2, 0x4, 0x0, 0xfffffff7, 0x6, 0x8, 0x1, 0x4, 0xfffff800, 0x8, 0x3, 0x7, 0x14, 0x10, 0x9, 0x7, 0x80, 0xefffffff, 0x11, 0x800, 0x3, 0x3fe, 0xb7, 0x5, 0x4, 0x4, 0x0, 0x8, 0x8001, 0x1, 0x4, 0x2e0, 0x10000, 0x40008, 0x3, 0x800, 0x1, 0x7f, 0x9, 0x7, 0x10001, 0x8, 0x92, 0x40a54e46, 0x1, 0x7, 0x1ff, 0x1, 0x4, 0x7fff, 0x0, 0xf16, 0x800, 0x1, 0x0, 0x6, 0x1, 0x3a2, 0xf769, 0x80000001, 0x6, 0xc0000, 0x8, 0xfffffff2, 0x7fffffff, 0x400, 0xb, 0x9, 0xffffffff, 0xffff]}, {0x5, [0x10000, 0x5, 0x25a, 0x1, 0x6, 0x2, 0x8, 0xfffffffd, 0x6, 0x3, 0x5, 0x100, 0x1, 0x5, 0x27c, 0x10000, 0x0, 0xfffffff3, 0x1, 0x7, 0xfffffff7, 0xfd4, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0xf, 0x6, 0x0, 0x100, 0x0, 0xe296, 0x0, 0x8000, 0xffffa59e, 0x7, 0x1, 0x4, 0x4, 0x100, 0x8, 0x1ca, 0x2, 0x5, 0x8, 0xfffffff9, 0x5, 0x52b, 0xe, 0x4, 0xfffffff9, 0x5f, 0x5, 0x8, 0xfffffff7, 0x2, 0x4, 0x6, 0x0, 0x5, 0x3, 0x7, 0xff, 0x10a, 0x7, 0x6, 0x1ff, 0x1, 0x4, 0x0, 0x7, 0x6, 0x401, 0x4a1, 0x5, 0x8001, 0x7, 0x6f, 0xc1f6, 0x2, 0x6, 0x1, 0x7, 0xff, 0x5, 0x43d, 0x2, 0xffff, 0x1, 0x7, 0x9a, 0x7ff, 0xb9, 0x800, 0x3, 0xa, 0xffffffff, 0x5, 0x7, 0x9, 0x7ff, 0x32, 0x7]}, {0x6, [0x1, 0x5, 0xcd4, 0xb0, 0x1000, 0x8, 0xfff, 0x8, 0x101, 0xc, 0x4a, 0x9, 0x74, 0x6, 0xa, 0x75e7, 0x4, 0x0, 0x8, 0x3, 0x4, 0x7, 0x7e, 0x80, 0x7, 0x7, 0x8, 0xaa9, 0x0, 0x7, 0xd46, 0x7, 0x5, 0x80000000, 0x9, 0x4f9b3d50, 0x800, 0x3, 0x8, 0x8, 0xdd62, 0x25ae, 0x0, 0x7, 0xfffffff9, 0x450, 0x2, 0x5, 0x2271, 0x1, 0x2, 0x1, 0x8, 0x7fffffff, 0x0, 0x3, 0xc, 0x86, 0x0, 0xb959, 0x9, 0x8, 0x5, 0x2, 0x92ad, 0x1, 0x2, 0x391, 0x803, 0x10, 0x7f, 0x8, 0x5, 0x7, 0xf, 0x86, 0x2, 0x5, 0x8001, 0x0, 0x3, 0x78aa0000, 0x0, 0x0, 0x8, 0x84e1, 0xd934, 0xe000, 0x8, 0xb5d, 0x9, 0x7ff, 0x4, 0x0, 0x4, 0xfffffff8, 0x1, 0x13, 0xecb, 0x1000, 0x10, 0x0, 0x80000001, 0x3]}, {0x3, [0x1, 0x8, 0x3, 0xc, 0x0, 0xf91, 0x4, 0x7, 0x4, 0x6, 0xfff, 0x6, 0xfffffffa, 0xa000, 0xfffffff9, 0x80, 0x2, 0x1, 0xff, 0x3, 0xf, 0x3, 0x70f, 0x6, 0x2, 0x2, 0xe3, 0x1, 0x7, 0x7fffffff, 0x1, 0x9, 0x5, 0x7, 0x9, 0xa, 0xf4, 0x1, 0x2, 0x1, 0x80000000, 0x4, 0xffffffff, 0x1, 0x2, 0x401, 0x8, 0x8, 0x1, 0x7, 0xf2, 0x8, 0x7fffffff, 0x10001, 0x8, 0x4, 0x9, 0x5, 0x13f7, 0x779, 0x9, 0xffffffff, 0x0, 0x8, 0xeb7, 0x7, 0x9, 0x10000, 0x9, 0x4, 0x7fffffff, 0x6, 0x8, 0x7, 0x6cec, 0x10001, 0x3, 0x7, 0xb2, 0x1, 0x1, 0x5, 0x9, 0x3, 0x2, 0x5508c39c, 0x7, 0x5b3, 0x1, 0x400, 0x7, 0x1, 0x4, 0x2, 0x3, 0xe, 0x4, 0x2, 0xf, 0xffffffff, 0x50, 0x9, 0x0, 0x3]}]}) kevent(r0, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0) 587.674283ms ago: executing program 3 (id=94): r0 = kqueue() sysarch$AMD64_SET_GSBASE(0x83, 0x0) kevent(r0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffff2, 0xf97f87aa77659da5, 0x1, 0xffffffffffff0058, 0x4, [0x0, 0x10, 0x0, 0x1]}], 0x1, 0x0, 0x0, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x20000000) sendto$inet(r1, &(0x7f0000000140)="7c45ba88db8ea4f2465fd9c6ac7d95d00b67c62a20507325813e131fa7033f3d04898f9271f2df538f1d677f9c815915215e32f117b11d30b57c368b7ac8f9b1f0db92c37c95ce78474215f7893cc88344f12587148d69f45febaeeabf118bbc8ec5fb2de5897c914807b6aaad74b4dcc58b22aa2373b21c6d74e0f577872bf517d6cbce5eb1fd19d3d4572f5279ab364a50ee2dbee004bd18a5137ec17da27a13e2df2bed10fa0387c01a5dcbeedf80", 0xb0, 0x8, &(0x7f0000000200)={0x10, 0x2, 0x0}, 0x10) rfork(0x14044) kevent(r0, &(0x7f0000000000)=[{0x0, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) sysarch$AMD64_SET_GSBASE(0x83, &(0x7f0000000040)) 587.458604ms ago: executing program 1 (id=95): r0 = semget$private(0x0, 0x4, 0x408) __semctl$GETPID(r0, 0x1, 0x4) r1 = semget$private(0x0, 0x4000000009, 0x12) __semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)) __semctl$IPC_RMID(r1, 0x0, 0x0) __semctl$SEM_STAT(r1, 0x4, 0xa, &(0x7f0000000080)=&(0x7f0000000040)) r2 = semget$private(0x0, 0x3, 0x6d0) __semctl$SETVAL(r2, 0x739d9e06d9d048ce, 0x8, &(0x7f00000003c0)=0x0) __semctl$GETPID(r2, 0x1, 0x4) 517.688574ms ago: executing program 3 (id=96): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) select(0xff01, &(0x7f0000000580)={0x9, 0xfff, 0x6, 0x9, 0xfffffffffffffffb, 0x1, 0xff, 0x5}, &(0x7f00000005c0)={0xc, 0x93, 0x200000000000000, 0xffffffff, 0x4a3fe2a7, 0x46, 0x0, 0x7}, &(0x7f0000000600)={0x7, 0x5, 0x0, 0xdf2f, 0xab62, 0x3, 0x8, 0x2}, &(0x7f0000000640)={0x6, 0x4}) ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc0306367, 0x0) 427.620122ms ago: executing program 0 (id=98): r0 = socket(0x2, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x7, 0x1000301011005}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x3, 0x0, 0xffffffffffffffff, 0x1000300018005, 0xffffffffffffffff}) rfork(0x3060) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) 426.875965ms ago: executing program 0 (id=99): r0 = socket(0x1b, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="0207000302000320000001008f24cec3", 0x10, 0x188, 0x0, 0x0) 426.791093ms ago: executing program 0 (id=100): mlockall(0x2) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) 399.172478ms ago: executing program 1 (id=101): r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x1, 0x1, @loopback, 0x7fffffff}, {0x1c, 0x1c, 0x0, 0x400000, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x0, [0x8800, 0xfffffffd, 0x0, 0x6, 0x1, 0x0, 0x0, 0x5e]}, 0x5c) sendto$inet6(r0, &(0x7f00000002c0)="73093807736aea4e27974a537a008bc2b1c5e254eeca3f8dced16c42df868bc8b9d07dd6114e4bd0931f275a7db0f02d3bc92fc72467d10621a7a7a76868d3db496e78dc0e83e8ce8fae0efa2f23975763479be4f45e85364135cf266f9ea9cd349c64548e8acda448a0b7786c2c1e21d5dedc30af642f82a8358607d582591126134b594f232c3f7d3ed6c575054f34ba969a67f05e", 0x96, 0x4, &(0x7f00000003c0)={0x1c, 0x1c, 0x1, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, 0xffffffff}, 0x1c) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x19, 0x0, 0x20, &(0x7f0000000240)="0b6fac4103e7a00d4689e808d0d4755aedaacdd4743c7eaa2c7300d05fe86026", 0x0, 0x0, 0x2, 0x7d86699b, [0x0, 0x0, 0x687a]}) ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000400)}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x6f2, @rand_addr="fee3a38e5cac1c51deba3c6b07a430a0", 0x8}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x103) posix_fadvise(r3, 0x3, 0x5, 0x2) posix_fadvise(r3, 0x8, 0x1c, 0x2) mknodat(0xffffffffffffffff, 0x0, 0x40, 0x2) futimesat(0xffffffffffffff9c, 0x0, 0x0) fhopen(&(0x7f0000000000)={{[0x5c8951ac, 0x3bea9983]}, {0x0, 0x1, "0a0000009a165d590600"}}, 0x40000) execve(&(0x7f0000000040)='.\x00', &(0x7f0000000180)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00'], &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)=':)\x00', &(0x7f0000000240)='\x00']) aio_suspend(0x0, 0xfd93, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r4, &(0x7f0000000240)={0xfd14, 0x1c, 0x2, 0x80000001, @mcast2}, 0x1c) connect(r4, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x81}, 0x1c) ppoll(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) 398.954008ms ago: executing program 0 (id=102): freebsd11_kevent(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x3, 0x1000000, 0x6}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) rfork(0x1000) 398.416305ms ago: executing program 0 (id=103): r0 = open(&(0x7f00000002c0)='.\x00', 0x400000, 0x0) (async) r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r1, r0, &(0x7f0000000280)='.\x00', 0x21000630) lchflags(&(0x7f0000000000)='./file0\x00', 0x10) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) 347.70041ms ago: executing program 3 (id=104): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0xa2) copy_file_range(r1, 0x0, r0, 0x0, 0x1000000000009, 0x4e) 342.467398ms ago: executing program 0 (id=105): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x2) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) shm_open2(0x0, 0x207cfb1ab09b2e42, 0x102, 0x1, 0x0) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$sock_linger(r2, 0xffff, 0x80, 0x0, &(0x7f00000004c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = kqueue() r4 = kqueue() kevent(r4, &(0x7f0000000380)=[{0x4, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, [0x0, 0x1]}, {0x4, 0xffffffffffffffff, 0xc700, 0x0, 0x6, 0x0, [0x0, 0x0, 0x7fff]}], 0x2, &(0x7f00000002c0)=[{}], 0x1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x6, 0x0}) ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0x40, r5) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') freebsd11_fstat(r3, &(0x7f0000000600)) r6 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0xa2) copy_file_range(r6, 0x0, r1, 0x0, 0x1000000000009, 0x0) cpuset_getdomain(0x2, 0x7, 0x6a4, 0x20, &(0x7f0000003bc0), 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000500)=""/169, 0xa9) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x200201, 0x22) lgetfh(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fhstatfs(&(0x7f0000000140)={{[0xf3b, 0x64e]}, {0x800, 0x7ff, "7074e543b05616ea507c640200"}}, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x94, 0x91, 0xff, 0x47}, {0x2, 0xef, 0x2, 0x9}, {0x6, 0x7c, 0x8, 0xfbfff7fe}]}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x6, 0x6, "00ed00", 0x14, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, {[], @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) r8 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/23, 0x17}], 0x3, 0x6) 287.641395ms ago: executing program 3 (id=106): r0 = msgget$private(0x0, 0x33a) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) r1 = semget$private(0x0, 0x4, 0x28c) mkdir(&(0x7f0000001040)='./file0\x00', 0x1) mkdir(&(0x7f0000000540)='./file0/file0\x00', 0x20) eaccess(&(0x7f0000000000)='./file0/file0\x00', 0x1) mount(&(0x7f0000000080)='ufs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x400404, &(0x7f0000000140)) semop(r1, &(0x7f0000000000)=[{0x3, 0x4d, 0x800}], 0x1) semop(r1, &(0x7f0000000000)=[{0x2, 0x401, 0x1000}, {0x3, 0xfff1, 0x1000}, {0x1, 0xb7f, 0x1800}, {0x3}, {0x0, 0x70, 0x1000}, {0x2, 0x8c9b, 0x1000}], 0x6) syz_emit_ethernet(0xe6, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX, @ANYRES16=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0]) 287.345093ms ago: executing program 1 (id=107): r0 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x20005, @loopback, 0x4}, 0x1c) r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) r2 = dup(r1) ioctl$EFIIOC_SET_TIME(r2, 0x80104503, &(0x7f0000000180)={0xfff4, 0x4, 0x1f, 0xb, 0x1c, 0xf, 0x5, 0x7, 0x7, 0x9, 0x30}) getsockopt$inet6_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000000)={0x0, 0x67, "607e5960f2f7bb1a059d33737b28b5d3d1545969c23f827a7a914ac668f4ecce4271106ee16877ca5e61229aa2a0a2d98e230a58a61969855c0f4b0caead7a09a4fe129beb051b61f2e35d891b5c3bb756608ebc91520fc95ae3a76bc2e9eebb1fb4e0637df862"}, &(0x7f00000000c0)=0x6f) setsockopt$inet6_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000100)={r3, 0x6}, 0x8) 237.631169ms ago: executing program 2 (id=108): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) freebsd11_kevent(r0, &(0x7f0000000280)=[{0x6, 0xfffffffffffffff5, 0xc008, 0x10, 0x4, 0xfff}, {0x7, 0xfffffffffffffffc, 0x20, 0x8, 0x0, 0x3}, {0x7, 0xfffffffffffffff5, 0x2, 0x40000000, 0x0, 0x5}], 0x3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) getgid() r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r3, 0x0, 0x3a, 0x0, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="1bb2c06df480cfe1390da47a80235414", 0x0, &(0x7f0000000200)="fdb06c00689dd072364e5534a374224bc17d429beb222a75f84467d0bf1d7836a05aafc9290729586633b21e9b93b02c95120d7169ddc17d1b4983deae8e1b1e363416e0ee05499ac699da6c3f882624c6815b963cf30aa8518a4200f3eb3dd78269f6c4120a5cdffdd8cd3701a9f4b6131139c34a0e47202618b73c4d4951", 0xb, 0x10, 0x0, 0x7, 0x7f, 0x0, 0x3, 0x3, "4cf4091400"}, 0x38) r4 = socket$inet6(0x1c, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0xc, @loopback, 0x8}, 0x1c) connect$inet(r4, &(0x7f0000000180)={0x10, 0x2, 0x2, @multicast1}, 0x10) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4}, 0x1c) getsockname(r5, 0x0, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="00006f1214000000000000000000ed00", 0x3}, 0xe) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r6 = socket(0x1b, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000180)="02e01be5010000008f003915fae39385", 0x10, 0x10d, 0x0, 0x0) rfork(0x1000) 237.44832ms ago: executing program 1 (id=109): setreuid(0xee00, 0xffffffffffffffff) r0 = fork() mkdir(&(0x7f0000000040)='./file0\x00', 0x38) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) ppoll(&(0x7f0000000540)=[{r1, 0x40}], 0x1, 0x0, &(0x7f00000005c0)={[0x7, 0xd73, 0x101, 0x7f]}, 0x10) rfork(0x85000) setresuid(0x0, 0x0, 0x0) sigqueue(r0, 0x71, @sigval_int=0x8) 117.597808ms ago: executing program 32 (id=106): r0 = msgget$private(0x0, 0x33a) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) r1 = semget$private(0x0, 0x4, 0x28c) mkdir(&(0x7f0000001040)='./file0\x00', 0x1) mkdir(&(0x7f0000000540)='./file0/file0\x00', 0x20) eaccess(&(0x7f0000000000)='./file0/file0\x00', 0x1) mount(&(0x7f0000000080)='ufs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x400404, &(0x7f0000000140)) semop(r1, &(0x7f0000000000)=[{0x3, 0x4d, 0x800}], 0x1) semop(r1, &(0x7f0000000000)=[{0x2, 0x401, 0x1000}, {0x3, 0xfff1, 0x1000}, {0x1, 0xb7f, 0x1800}, {0x3}, {0x0, 0x70, 0x1000}, {0x2, 0x8c9b, 0x1000}], 0x6) syz_emit_ethernet(0xe6, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX, @ANYRES16=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0]) 7.320337ms ago: executing program 1 (id=111): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x4, 0x0) setrlimit(0x2, &(0x7f0000000300)={0x6, 0x1000000000000000}) rfork(0x1000) fchdir(r0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x46, &(0x7f0000000080)={@multicast2, @multicast1, @local={0xac, 0x14, 0x0}}, 0xc) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast2}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x7e, {0x14, 0x4, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x88, 0x0, @loopback, @local={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x1b, 0x0, [@remote={0xac, 0x14, 0x0}, @empty, @local={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0x13, 0x0, [@remote={0xac, 0x14, 0x0}, @rand_addr=0x40000, @remote={0xac, 0x14, 0x0}, @multicast2]}, @lsrr={0x83, 0xb, 0x9, [@rand_addr=0x2fdf45e8, @rand_addr=0x4]}]}}}}}}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fork() extattr_get_file(0x0, 0x0, &(0x7f0000000100)='*(([\'\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 33 (id=108): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) freebsd11_kevent(r0, &(0x7f0000000280)=[{0x6, 0xfffffffffffffff5, 0xc008, 0x10, 0x4, 0xfff}, {0x7, 0xfffffffffffffffc, 0x20, 0x8, 0x0, 0x3}, {0x7, 0xfffffffffffffff5, 0x2, 0x40000000, 0x0, 0x5}], 0x3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) getgid() r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r3, 0x0, 0x3a, 0x0, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="1bb2c06df480cfe1390da47a80235414", 0x0, &(0x7f0000000200)="fdb06c00689dd072364e5534a374224bc17d429beb222a75f84467d0bf1d7836a05aafc9290729586633b21e9b93b02c95120d7169ddc17d1b4983deae8e1b1e363416e0ee05499ac699da6c3f882624c6815b963cf30aa8518a4200f3eb3dd78269f6c4120a5cdffdd8cd3701a9f4b6131139c34a0e47202618b73c4d4951", 0xb, 0x10, 0x0, 0x7, 0x7f, 0x0, 0x3, 0x3, "4cf4091400"}, 0x38) r4 = socket$inet6(0x1c, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0xc, @loopback, 0x8}, 0x1c) connect$inet(r4, &(0x7f0000000180)={0x10, 0x2, 0x2, @multicast1}, 0x10) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4}, 0x1c) getsockname(r5, 0x0, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="00006f1214000000000000000000ed00", 0x3}, 0xe) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r6 = socket(0x1b, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000180)="02e01be5010000008f003915fae39385", 0x10, 0x10d, 0x0, 0x0) rfork(0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741c00 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741000 SYZFAIL: SIGFPE if_delmulti_locked: detaching ifnet instance 0xfffffe0058741400 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741400 pc-offset:0xffffffff217d4ef1 pc:0xdeadbeef addr:0x0 code=65537Connection to 10.128.1.134 closed by remote host. if_delmulti_locked: detaching ifnet instance 0xfffffe0058741 400 FreeBSD/amd64 (ci-freebsd-main-0.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 Expensive callout(9) function: 0xffffffff81afc400(0) 0.011514815 s FreeBSD/amd64 (ci-freebsd-main-0.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058741000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741000 tap0: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0058741800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741800 pid 986 (syz-executor), tap3: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0058088180 is deleted tap3: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 pid 337 (dhclient), jid 0, uid 0: exited on signal 8 (core dumped) pid 744 (getty), jid 0, uid 0: exited on signal 8 (core dumped) pid 871 (rtsol), jid 0, uid 0: exited on signal 8 (core dumped) set $lines = 0 Password:pid 334 (dhclient), jid 0, uid 0: exited on signal 8 (core dumped) pid 745 (getty), jid 0, uid 0: exited on signal 8 (core dumped) pid 780 (sh), jid 0, uid 0: exited on signal 8 (core dumped) pid 743 (getty), jid 0, uid 0: exited on signal 8 (core dumped) pid 735 (sh), jid 0, uid 0: exited on signal 8 (core dumped) pid 741 (getty), jid 0, uid 0: exited on signal 8 (core dumped) pid 739 (getty), jid 0, uid 0: exited on signal 8 (core dumped) pid 770 (sh), jid 0, uid 0: exited on signal 8 (core dumped) pid 742 (getty), jid 0, uid 0: exited on signal 8 (core dumped) pid 740 (getty), jid 0, uid 0: exited on signal 8 (core dumped) Login incorrect login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058741400 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741400 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741400 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058741800 show registers Password:if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl