last executing test programs: 4.335033105s ago: executing program 1 (id=15): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000140)="e047d6627cefe30108000074711ce4461d020000000001000069a3dba6f771d668fb0bfcfe337a83f39994f310103f66c10fe2ec0f1a02cd54ca4a3faf147b4ebf3cbb6e83d2c91a", 0x48) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) aio_write(&(0x7f0000000240)={r1, 0x80000001, &(0x7f0000000300)="e2", 0x1, [0x8000000], 0x4, 0x0, 0x0, {0x0, 0x40000, 0x0}, {0x0, 0x0, @sival_int, @thr={&(0x7f00000001c0)="c422e5060767662642df3cbb8fc97090e4660f3a20ea7266440f71d233d8fcc4836968d2c96566400f3a63d424f3440faede65450f38c9519f", &(0x7f0000000200)="2b2ac35dba2fcde22c"}}}) r2 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8) r3 = fcntl$getown(r2, 0x3) sigqueue(r3, 0xa, @sigval_int=0x6) sigqueue(r3, 0x15, @sival_ptr) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0x400cfe}}, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0) open$dir(&(0x7f0000000180)='./file1\x00', 0x20000, 0x10) r6 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) extattr_delete_fd(r5, 0x2, &(0x7f0000000140)='\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r6, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) fstatfs(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r7, &(0x7f00000000c0)={0x10, 0x2, 0xffffffffffffffff, @multicast1}, &(0x7f0000000100)=0x10) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) 3.572275977s ago: executing program 1 (id=20): r0 = kqueue() (async) r1 = kqueue() kevent(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffffff9, 0xb, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) (async) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2, 0x0}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYBLOB="1c000000840000000a000000ff0100000000000000000000000000011c0000008400001b344fff276b02c7000a000000000000000000000000000000000000000155c5eb181ed9790ad013a96667e06734cb3f4adb383571d33b560843d460c5ecd31d59bf70b74a0cba045f3e64e90e77871579d07d97e6511216dec0057d4b4edef60421663b2291af4e"], 0xe4, 0x140}, 0x18c) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) connect$inet6(r2, 0x0, 0x0) open(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='hd\x00', 0x3) (async) mount(&(0x7f0000000000), 0x0, 0xc4, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) extattr_get_file(0x0, 0x1, &(0x7f0000000280)='\x00', &(0x7f00000013c0)=""/4096, 0x1000) mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x30) (async) symlinkat(&(0x7f0000000700)='./file0\x00', r3, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') procctl$PROC_REAP_KILL(0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x100, 0x1, 0xffffffffffffffff, 0x7, 0x0}) fcntl$lock(r1, 0xb, &(0x7f00000001c0)={0x3, 0x2, 0x5, 0x4, r4}) (async) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x100) renameat(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000180)='./file1\x00') sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000e80)=ANY=[], 0x100, 0x20001}, 0x20180) (async) setresgid(0xee00, 0xee01, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) (async) cpuset_setaffinity(0x3, 0x4, 0x1e, 0x8, &(0x7f0000000380)={[0x2]}) (async) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) 3.374462213s ago: executing program 1 (id=26): r0 = open(0x0, 0x200, 0x140) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0xa67a18e0562101e1, 0xffffffffffffffff) freebsd11_getfsstat(&(0x7f00000007c0), 0x1d8, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "f1936a", 0x18, 0x7, 0x1, @loopback, @empty, {[@hopopts={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn, @generic={0x5}]}], @udp={{0x2, 0x1, 0x8}}}}}}}) syz_emit_ethernet(0x50, &(0x7f0000000300)={@local, @random="34ed432a7a6e", [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x1a, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}, [{0x4}]}}}}}}) setsockopt$inet6_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fhopen(&(0x7f0000000000)={{[0x2, 0x3]}, {0x1, 0x4, "76f5e157c092721f52e16be2fbf17bf7"}}, 0x20000) ppoll(&(0x7f0000000040)=[{r0, 0x2}, {r1, 0x4}, {r0, 0x4}, {r0, 0x40}, {r2}], 0x5, &(0x7f00000001c0)={0x5, 0x7}, &(0x7f0000000200)={[0x3, 0x0, 0xb6f4, 0x6]}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2f5105", 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@routing={0x6, 0x0, 0x0, 0x3}], @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}) cpuset_setaffinity(0x3, 0x4, 0x20, 0x8, &(0x7f0000000380)={[0x2]}) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x12, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1, {[@generic={0x89, 0x2}]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x13, 0xa65c, 0x64, 0x2804, 0x4, 0x13, 0x9, @multicast1, @local={0xac, 0x14, 0x0}}}}}}}) r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0) 2.629376628s ago: executing program 3 (id=38): mkdir(&(0x7f0000001040)='./file0\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000002, 0x0, 0x0, [0x0, 0x1], 0x1, 0x0, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe}}) aio_waitcomplete(&(0x7f00000003c0)=0x0, &(0x7f0000000440)={0x3, 0x6}) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x20000000, &(0x7f0000000140)) open$dir(0x0, 0x10000, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r1, &(0x7f0000000000)='./file1\x00', 0x104) 2.445277495s ago: executing program 1 (id=39): r0 = fork() sigqueue(r0, 0x12, @sival_ptr=0x26) (async) wait4(r0, 0x0, 0x2, 0x0) procctl$PROC_REAP_STATUS(0x0, r0, 0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) procctl$PROC_NO_NEW_PRIVS_CTL(0x0, r1, 0x13, &(0x7f0000000080)=0x7) (async) wait4(0x0, 0x0, 0x2, 0x0) 2.010162111s ago: executing program 3 (id=42): socket$inet6_udp(0x1c, 0x2, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) freebsd11_kevent(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x6}], 0x1, 0x0, 0xffffffffffffff90, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = kqueue() access(&(0x7f00000000c0)='./file0\x00', 0x4) kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x1, 0x7]}], 0x1, 0x0, 0x0, 0x0) procctl$PROC_SPROTECT(0x2, 0x0, 0x1, &(0x7f0000000000)=0x32) symlink(0x0, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r3 = semget$private(0x0, 0x7, 0x3c0) semop(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000200)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0xb, &(0x7f0000000140)={0x0, {{0x10, 0x2, 0x2, @rand_addr=0x9}}, {{0x10, 0x2, 0x1, @rand_addr}}}, 0x108) r6 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x60) cap_fcntls_limit(r6, 0x0) fcntl$getown(0xffffffffffffffff, 0x5) connect$inet(r4, &(0x7f0000000040)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) clock_settime(0x0, &(0x7f0000000540)={0x1, 0x9}) mprotect(&(0x7f0000192000/0x4000)=nil, 0x4000, 0x5) 1.460049424s ago: executing program 3 (id=43): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x48) (async) r1 = kqueue() (async) r2 = msgget$private(0x0, 0x0) getresgid(&(0x7f0000000000)=0x0, 0x0, 0x0) setregid(r3, r3) (async) procctl$PROC_REAP_STATUS(0x0, 0x0, 0x4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000740)={{0xffffffffffffffff, r3, 0x0, 0x0, 0x152, 0x46, 0x0, 0x5}, 0x8000000000000000, 0x4, 0x3, 0x8001, 0xa, 0x20b, r4}) fcntl$setown(r0, 0x6, r4) (async) setitimer(0x2, &(0x7f00000001c0)={{0x4, 0x2710}, {0x0, 0xea60}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r6, &(0x7f0000000180)="b1000501600000000000000007000000331c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af630037282121000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abf", 0x92, 0x406, 0x0, 0x0) (async) r7 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r7, 0x1) (async) open(0x0, 0x0, 0x0) (async) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r8, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x58, 0x1000301010005}) (async) r9 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x105) (async) r10 = getpgid(0x0) fcntl$lock(r9, 0xe, &(0x7f0000000100)={0x2, 0x3, 0x9, 0x100000001, r10}) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r11, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xd8, 0x1000301010005, r10}) (async) flock(r7, 0x8) (async) recvmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/139, 0x8b}, {&(0x7f0000000280)=""/161, 0xa1}], 0x2, 0x0}, 0x42) (async) kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x4000000000000009, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000080), 0x4, 0x4) (async) socket(0x2, 0x3, 0x0) (async) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) (async) aio_cancel(r1, &(0x7f00000005c0)={r0, 0x7, &(0x7f00000004c0)="52ed79a83d57039920febb6f71c6b521a38d9b4f7639bf784bd552797da9f716de118fe331caf56fa3dd36c506c2427b401ee43ea1457a5006376293bea437fe30f247a8b4853c9791db555657c73ff3626e85066fc1ac4daa1be56f76f9f2f09ff511ebc19b87f1fc07adac202f873ddffba55f4d6e01becdc3a5470d7a3d6e4d27061b5d0ca142865b352ab607713d89f2f9db3e94b00ea95fef97e386badc4d552fe02f92c920354ab82de69db6cd95a224b7641bad68fce3b8d617bb2e6533d5", 0xc2, [0xff, 0x5], 0x2, 0x1, 0x9, {0xf68, 0x1, &(0x7f0000000400)="a20c4787a41eb2edf3d5e1bf393f128d7489096003a6e8c03b67032b26c8e976cb391a08e476dff6ef84cb413ea71b4a85b977620c35027c06f96b391a0972645e4842fad59509c370929318af8ed0c9047853a42d47d2e77c1990eac127f0f17be52f63e836bcd8da31dc252776563a8fcd703f6f"}, {0x2, 0x0, @sival_ptr=0x9, @spare=[0x8, 0x9, 0xffffffffffffd546, 0x10001, 0x4, 0x9, 0x8, 0x72]}}) 1.459211915s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x200, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') accept(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x10, 0x2, 0xffffffffffffffff, @local}, &(0x7f0000000040)=0x10) socket$inet_udp(0x2, 0x2, 0x0) cpuset_getaffinity(0x1, 0x4, 0x568, 0x0, 0x0) r1 = openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x1, [0x1, 0x2, 0x800000000002]}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0xa) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0xb1) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x20000}], 0x10, 0x20000) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) ioctl$DIOCRADDADDRS(0xffffffffffffffff, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x14, 0x0, 0xfffffffffffffffd, 0x20000002, 0xb, 0x0, 0xfffffffffffffffe}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000380)=""/151, 0x97}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2, 0x78dabc0a) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) fhstat(&(0x7f0000000040)={{[0x5c8951ac, 0x3bea9983]}, {0x3, 0x0, "3d0000009b1557d80200"}}, 0x0) open(0x0, 0x10200, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x200004, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff00009c7ba88e00ff5afb32bd48813851ff4c0000000008004500001c00800000080190"]) 1.420112343s ago: executing program 1 (id=45): r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x7, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000880)='./file0\x00', 0x8, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x20860, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x4a, 0x0, 0x0) freebsd11_fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$bt_l2cap(0x24, 0x3, 0x87) chown(&(0x7f0000000100)='./file0\x00', r4, 0xffffffffffffffff) getresgid(&(0x7f0000000000), 0x0, 0x0) fstatat(r0, &(0x7f00000009c0)='./file0\x00', &(0x7f00000008c0), 0x0) procctl$PROC_REAP_STATUS(0x0, 0x0, 0x4, &(0x7f00000006c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x0, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) 1.210302861s ago: executing program 2 (id=48): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) setresgid(0xee00, 0xee01, 0x0) close(r0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000180)="24a586b0498b212e0960ac48ed0773615797a9ff85624f8390a28032950477fb7f71d63469c22c24733f93427e5d8245422756641d8acfc499cbb8cd7b4ec8562463e25f52b17ecc8b7f1081982c255f1778dc7910da7fbc59ad1792a47e0b4a181ffabdefdfb966daff17bba06abfcfaa895c1e27ced05768b230b92d23750e31e5ddc9fb99f6dddf0578fac66fe0c59a15317452b24d38675978941776acad041ac19ad21bb59d054d1f861f43f302", 0xb0) truncate(&(0x7f0000000040)='./file0\x00', 0x3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00'], 0x0) 1.209713329s ago: executing program 3 (id=49): setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x8) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) rfork(0x10) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) rfork(0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) rfork(0x1000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) setitimer(0x0, &(0x7f0000000280)={{}, {0x1}}, 0x0) 1.160264285s ago: executing program 2 (id=50): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) chmod(&(0x7f00000000c0)='./file0\x00', 0x3ea) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) (async, rerun: 64) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (rerun: 64) mkdirat(r0, &(0x7f0000000540)='./file0\x00', 0x184) renameat(r0, &(0x7f00000025c0)='./file0\x00', r0, &(0x7f0000002600)='./file1\x00') r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x47, &(0x7f0000000400)=0x7, 0x4) (async, rerun: 32) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x28, 0x2, 0x3, @rand_addr=0x10dfa767}, 0x10) (rerun: 32) sendto(r1, &(0x7f0000000800)="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", 0x585, 0x0, &(0x7f00000001c0)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) freebsd11_mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x50bfb05161e091c4, 0x20000) (async) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.120219678s ago: executing program 2 (id=51): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x30, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x9, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x0, @mcast2, 0x3}, 0x1c) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) (async, rerun: 64) r1 = socket$inet6(0x1c, 0x2, 0xff) (async, rerun: 32) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (rerun: 32) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) (async) ppoll(&(0x7f0000000040)=[{r0, 0x100}, {r0, 0x80}, {r0}, {0xffffffffffffffff, 0x111}, {r0, 0x4}, {r1, 0x8}, {r2, 0x100}, {r3, 0x40}], 0x8, &(0x7f0000000140)={0x1ff, 0x2}, &(0x7f0000000180)={[0x9, 0x6, 0x6, 0x3]}, 0x10) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) (async, rerun: 32) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (rerun: 32) mkdirat(r4, &(0x7f0000000540)='./file0\x00', 0x184) (async) renameat(r4, &(0x7f00000025c0)='./file0\x00', r4, &(0x7f0000002600)='./file1\x00') 1.119797334s ago: executing program 2 (id=52): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r0, 0x3) r1 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @random="c7a2e46f05fa", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1=0xac1401ff, @multicast1, {[@end]}}, @icmp=@echo}}}}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}) flock(r1, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000003c0)={'rack\x00'}, 0x24) setsockopt$inet_tcp_TCP_FASTOPEN(r2, 0x6, 0x469, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) extattr_set_file(&(0x7f00000001c0)='./file0\x00', 0x2, &(0x7f0000000200)='-\x00', 0x0, 0x0) extattr_set_file(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)='^\x00', 0x0, 0x0) extattr_get_link(&(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)='H\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x2f9, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000000240)={@local, @random="46b5ff563c9c", [], {@ipv4={0x800, {{0x1b, 0x4, 0x3, 0x1f, 0xa5, 0x64, 0x3ff, 0x40, 0x1f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x13, 0x6, [@multicast2, @local={0xac, 0x14, 0x0}, @loopback, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0x13, 0x2, [@loopback, @loopback, @rand_addr=0xaa6f, @loopback]}, @rr={0x7, 0xf, 0x1, [@rand_addr=0x9, @empty, @rand_addr=0x60]}, @rr={0x7, 0x1f, 0x2, [@local={0xac, 0x14, 0x0}, @loopback, @rand_addr=0x3ff, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @rand_addr=0x8, @empty]}, @generic={0x89, 0x4, '4k'}]}}, @udp={{0x2, 0x2, 0x8}, {"dc5409e72e9e7811e303f7a80843780f9604fb756178190630d977116d9f211273c7ad223bfc785e2b3dee2d652a6ebf82"}}}}}}) kqueue() rfork(0x85000) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaeaaaaaaaaa4fd7301a551c43543db6bc070800450000140000000000329058e0000002e0000001c3d8bd8f4eccfe0350784561b8f42ae85bf11eea746551eddaabad63a691fcde29dd4dd7c700ba19b74b556d9802397c2d0dfa6c4d264f375f73b2e7a0853c6f5f36b278c1e02f981667af114d57909f1b2baeffff503972c8f1d035b84d180a00c882f6365bb253aa799063ba1da9543d5f0c780d6bfaf2d1da70e5e842a25b5b67d62eaf293ee6bf6322148e213731f26659f8642927a3dce8775c9d895c86bd9f982ce032783599263f0e1cdd"]) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x20, 0x3a, 0x0, @mcast2, @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}, [{0x2, 0x1, "21094debf6f2"}]}}}}}}) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r3, &(0x7f0000002700)="6a3364f80c04449d07afb23ef30fa25a8bd0daafa9f5fb5b7880cb0eabd5", 0x1e, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x6}, 0x1c) 850.043965ms ago: executing program 3 (id=55): setuid(0xee01) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x8201, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x3000) open(&(0x7f0000000080)='./file0\x00', 0x200, 0xac) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r1, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f00000006c0)=',', 0xb, 0x10, 0x0, 0x13, 0x1, 0x0, 0x3, 0x3, "6a0802e40094ffff"}, 0x40) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r1, 0x6, 0x800000000000, 0x0, 0x0, 0x0) r3 = getegid() __semctl$SEM_STAT(0x0, 0x3, 0xa, &(0x7f00000000c0)=&(0x7f0000000040)={{0x0, 0x0, 0x0}}) r5 = getegid() chown(&(0x7f0000000200)='./file0\x00', 0x0, r5) r6 = vfork() ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0xc99, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x100, 0x0, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5bee, 0x0, 0x100000, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x100000, 0x5, 0x7, 0x5, 0xe9c6, 0x0, 0x0, 0x200, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x8, 0x3, 0x3, 0x0, 0x6a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x401, 0x0, 0x3]}) lio_listio(0x0, &(0x7f0000000580)=[{0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0, [0xffffffff], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_ptr, @ke_flags}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_ptr, @ke_flags}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0xb3, 0x0}, {0x0, 0xa, @sigval_ptr=0x81}}], 0x3, 0x0) r7 = vfork() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, r3, r4, r5, 0x4, 0xbed4, 0x0, 0xd7}, 0x1a3d, 0x101, 0x0, 0x9, r6, r7, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000100), 0x0, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) aio_read(&(0x7f00000001c0)={r8, 0x4000000000000000, 0x0, 0x0, [0xfffffffe, 0x8], 0x800, 0x8, 0x0, {0x8000000006, 0x3, 0x0}, {0x0, 0xfffffffd, @sigval_int, @ke_flags}}) aio_cancel(r8, 0x0) listen(r8, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket(0x26, 0x2, 0x0) setsockopt$sock_int(r9, 0xffff, 0x1002, &(0x7f0000000000)=0x101, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 580.104006ms ago: executing program 0 (id=61): kqueue() (async) kqueue() syz_emit_ethernet(0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x80, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280)="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", 0xfd, 0x20081, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x53, @local={0xfe, 0x80, '\x00', 0x0}, 0x9}, 0x1c) freebsd11_fstatat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380), 0x4000) (async) freebsd11_fstatat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setregid(0x0, r1) posix_fadvise(0xffffffffffffffff, 0x4, 0xb70, 0x1) (async) posix_fadvise(0xffffffffffffffff, 0x4, 0xb70, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) (async) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) (async) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) close(r4) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rfork(0x96014) write(r3, &(0x7f0000000080)="ba", 0x100000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ppoll(0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x3, &(0x7f0000000340)={0x8003}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) fork() connect$inet(r5, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20104, 0x0, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x20104, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x5410, 0xffffffffffffffff, 0x0) 530.114131ms ago: executing program 1 (id=62): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000880)="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") setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) setsockopt$inet6_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xd, &(0x7f0000000380)=0xb0, 0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0) r4 = msgget$private(0x0, 0x400) msgrcv(r4, &(0x7f0000000200)={0x0, ""/164}, 0xac, 0x1, 0x1000) r5 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r5, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) cpuset_setdomain(0x2, 0x6, 0xfffffffffffffffc, 0x79, &(0x7f0000000300)={[0x1]}, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0x40, &(0x7f00000000c0)='cubic\x00', 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r6, 0x0, &(0x7f0000001940)) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0xb) r7 = setsid() procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x12, 0x1, r7, 0x9}) clock_gettime(0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) fchmod(r0, 0x0) 529.681757ms ago: executing program 0 (id=63): r0 = socket(0x1c, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r2 = kqueue() kevent(r2, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x8000000000000001, 0x3]}, {0x64, 0xfffffffffffffffa, 0x4a, 0x80000000, 0x35, 0x6, [0xc35b, 0x4, 0x9, 0x3ff]}, {0x141, 0xfffffffffffffff5, 0x9, 0x0, 0xfffffffffffff92d, 0x1, [0x7, 0x101, 0x100000000, 0x1000]}], 0x3, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x8843, 0x26}, {0x0, 0x400cfe}}, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="f7621aeda3ed1588ac4c1771b470c7a6cad93112e03af2556801b1f966089bef5a7c4265834fc5e83689e4ec67396a06676170f7e5d09eccc9dcab1a8bce89b1e7b9b48301f7fab5f3537d853913cc9014d41d554d748ae8e7fa973fc49ece2fea3e40b8933db0a5eb21848a910f41c20845201da10ed17b985a472e11e171ceaae93b49946924470ece6f44fb722f27d8c0a3f71770c7cf53baaaa1448fca84dea205e3b4e3aef6338b5a33f3e1ffddb97d000000", 0xb5}], 0x1, 0x0) r3 = open(&(0x7f0000000480)='./file1\x00', 0x8004, 0x10a) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x2a, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff}) ioctl$CIOCCRYPT(0xffffffffffffff9c, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x2, 0xc, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4", 0x3}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100), 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0x20000) setsockopt$inet6_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f0000000080)=0xe, 0x4) mprotect(&(0x7f000055a000/0x4000)=nil, 0x4000, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) 278.929921ms ago: executing program 0 (id=64): r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0x2000a) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="1fc276b4332fc7e6aa2943e57ea9eb0bf89aed6f096bf4780d3c59326dd68aba907218a53f9f6d1997e3cb994c02f984ea6ec571b171b9be0ace6059b85741a85ce37908fe31282cc91d2d09b8493736a310c2c86f3118323784321ba19ff9c19623eca27db5bb738e1387a40c11334d6cbb40b1f322ec868dacb4f3d560861277ab9b88eb14b96f8375296d62beace5da98bc9c", 0x94}], 0x46, 0x8) 200.290095ms ago: executing program 2 (id=65): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(0xffffffffffffff9c, r1, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) getpeername(r1, 0x0, &(0x7f0000000080)) open$dir(&(0x7f0000000000)='./file0\x00', 0x10210, 0x0) getsockopt$inet6_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r3, 0x0) accept(r0, 0x0, 0x0) dup2(r2, r3) rfork(0x85000) 196.236395ms ago: executing program 0 (id=66): munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300), 0x8000, 0x0) lseek(r0, 0x9, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x2, &(0x7f0000000040)={@loopback}, 0xc) r2 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x26, &(0x7f00000001c0)=0xa, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd60c3200000282b00feffffff000000000000000000000002ff02000000000000000000000000000123"]) setreuid(0xee00, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x12, 0x1, 0xffffffffffffffff, 0xfffffffc}) mkdir(&(0x7f0000001040)='./file0\x00', 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x10000, 0x42) open$dir(&(0x7f0000000080)='.\x00', 0x1, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x1c4) ftruncate(r3, 0x3862) socket$inet6(0x1c, 0x2, 0x0) r4 = getpid() procctl$PROC_ASLR_CTL(0x2, r4, 0xd, &(0x7f0000000100)=0xfffffff7) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r4) bind$unix(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r6, 0xffff, 0x1015, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_sctp_SCTP_EXPLICIT_EOR(r7, 0x84, 0x1b, &(0x7f0000000000)=0x80000001, 0x4) setsockopt$inet6_sctp_SCTP_RTOINFO(r7, 0x84, 0x1, 0x0, 0x0) 170.296473ms ago: executing program 0 (id=67): mkdir(&(0x7f0000001040)='./file0\x00', 0x1) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x20000000, &(0x7f0000000140)) kqueue() rfork(0x96014) r0 = kqueue() kevent(r0, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, [0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f00000013c0)={0x3, 0x3, @sigval_int, @thr={0x0, 0x0}}) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x24, &(0x7f0000000500)="869dd2f35d15", 0x6) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) open(&(0x7f00000011c0)='./file0\x00', 0x100, 0xa2) setsockopt$inet6_tcp_buf(r1, 0x6, 0x24, 0x0, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000340)="33b702cc6f7e33dad39006299921e197e14a662845d112df6d29a2200482490b6581adec8f30be4a0d4ab641150224607587b5057588c2a710003975e145804e6654b234de079b21", 0x48}], 0x3) clock_nanosleep(0xe, 0x1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) bind$inet6(r3, 0x0, 0x0) getppid() ioctl$CIOCGSESSION2(r2, 0xc040636a, 0x0) ioctl$CIOCCRYPT(r2, 0xc0306367, 0x0) open$dir(0x0, 0x10000, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r5, 0x7, &(0x7f0000000300)='dr', 0x2, [0x0, 0xfffffffd], 0x200000000000000, 0x2, 0x0, {0x1, 0xb, 0x0}, {0x0, 0x20000005}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0) mkdirat(r4, &(0x7f0000000000)='./file1\x00', 0x104) 169.185723ms ago: executing program 2 (id=68): aio_waitcomplete(&(0x7f0000000240)=0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r3 = fork() sigqueue(r3, 0xf, @sival_int=0x8000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) freebsd11_lstat(&(0x7f0000000340)='./file0\x00', 0x0) rfork(0x96014) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) preadv(r1, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) socket(0x2, 0x1, 0x0) symlink(0x0, 0x0) open$dir(0x0, 0x0, 0x0) truncate(0x0, 0xfffffffffffffff8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f00000002c0)='./file0/file0\x00', 0x8d) r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCSETIFFLAG(r6, 0xc0284459, &(0x7f0000000140)={0x10, 0x0, 0x88, 0xfffffffc, 0x9}) rfork(0x0) ioctl$DIOCCLRIFFLAG(r6, 0xc028445a, &(0x7f00000036c0)={0x10, 0x0, 0x0, 0x6, 0xed2}) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0)) renameat(r5, &(0x7f0000000200)='./file1\x00', r5, &(0x7f0000000140)='./file0/file0\x00') ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x3000000, 0x3, 0x0, 0x10000, 0x7, 0x3d, 0x0, 0x2, 0x0, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 0s ago: executing program 0 (id=69): ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x2, @rand_addr=0x5}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) r2 = vfork() r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1000301810005}) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1000300010005, r2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000000000)={0x6, {{0x60, 0x2, 0x3, @remote={0xac, 0x14, 0x0}}}}, 0x88) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) sigaction(0x6, &(0x7f0000000200)={&(0x7f0000000180)="e4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfffffffe]}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x1, 0x6, @sival_ptr}) r4 = fork() wait4(r4, 0x0, 0x4, 0x0) sigqueue(r4, 0x63, @sigval_ptr=0x4) shmctl$IPC_SET(r0, 0x1, &(0x7f0000001340)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x8, 0x0, 0x6}, 0xa, 0x7, 0xd5c1, 0x0, r4, 0x0, 0x4}) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x103) utimensat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={{0xc2, 0xd6}, {0x80000000, 0x4}}, 0x2000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0008242000 Connection to 10.128.0.152 closed by remote host. FreeBSD/amd64 (ci-freebsd-main-1.us-central1-b.c.syzkaller.internal) (ttyu0) login: FreeBSD/amd64 (ci-freebsd-main-1.us-central1-b.c.syzkaller.internal) (ttyu0) login: panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:678 cpuid = 1 time = 4 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00575f28d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00575f2a30 vpanic() at vpanic+0x257/frame 0xfffffe00575f2bf0 panic() at panic+0xb5/frame 0xfffffe00575f2cb0 soaio_process_sb() at soaio_process_sb+0x123d/frame 0xfffffe00575f2ea0 soaio_kproc_loop() at soaio_kproc_loop+0x17b/frame 0xfffffe00575f2ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe00575f2f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00575f2f30 --- trap 0xc, rip = 0x32f68c, rsp = 0x826717ee8, rbp = 0x826717f10 --- KDB: enter: panic [ thread pid 845 tid 100176 ] Stopped at kdb_enter+0x6e: movq $0,0x25bd807(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0 rbx 0xffffffff827a8840 .str.27 rsp 0xfffffe00575f2a10 rbp 0xfffffe00575f2a30 rsi 0 rdi 0xffffffff816133a9 printf+0x149 r8 0 r9 0xffffffff r10 0x1 r11 0x1f r12 0xfffffe00548f7000 r13 0xfffffffffffffffd r14 0xffffffff827a8840 .str.27 r15 0 rip 0xffffffff815fd98e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25bd807(%rip) db> show proc Process 845 (soaiod3) at 0xfffffe0054954ac0: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b458e0 ABI: null flag: 0x10000204 flag2: 0 reaper: 0xffffffff83b458e0 reapsubtree: 845 sigparent: 20 vmspace: 0xfffffe0054960490 (map 0xfffffe0054960490) (map.pmap 0xfffffe0054960530) (pmap 0xfffffe00549605a0) threads: 1 100176 Run CPU 1 [soaiod3] db> ps pid ppid pgrp uid state wmesg wchan cmd 949 767 767 0 R (threaded) syz-executor 100087 S nanslp 0xffffffff83b9c500 syz-executor 100292 S uwait 0xfffffe006f37b680 syz-executor 100293 Run CPU 0 syz-executor 100294 S uwait 0xfffffe006f37bd80 syz-executor 948 946 764 0 SV lockf 0xfffffe0071ade400 syz-executor 947 943 766 0 S uwait 0xfffffe0058cf8b80 syz-executor 946 764 764 0 R (threaded) syz-executor 100133 RunQ syz-executor 100288 S lockf 0xfffffe0058da0480 syz-executor 100290 D ppwait 0xfffffe0054802fc0 syz-executor 100291 S lockf 0xfffffe0058da0780 syz-executor 943 766 766 0 S (threaded) syz-executor 100101 S nanslp 0xffffffff83b9c500 syz-executor 100285 S aiowc 0xfffffe00548e8388 syz-executor 100287 S uwait 0xfffffe006f37b480 syz-executor 100289 S uwait 0xfffffe006f37c000 syz-executor 937 765 937 0 Ss (threaded) syz-executor 100165 S nanslp 0xffffffff83b9c500 syz-executor 100275 S msgrcv 0xfffffe0058d4b078 syz-executor 100277 S uwait 0xfffffe005860f880 syz-executor 100283 S uwait 0xfffffe006f37b880 syz-executor 936 1 764 0 S uwait 0xfffffe006f37e380 syz-executor 929 928 767 60929 SV uwait 0xfffffe0054607c00 syz-executor 928 1 767 60929 DV ppwait 0xfffffe00548e9fe0 syz-executor 927 0 0 0 DL (threaded) [KTLS] 100093 D - 0xfffffe0007f5fe00 [thr_0] 100261 D - 0xfffffe0007f5fe80 [thr_1] 100262 D - 0xffffffff83cadc28 [reclaim_0] 921 1 767 0 S uwait 0xfffffe0054607f00 syz-executor 915 1 764 0 S uwait 0xfffffe005860c600 syz-executor 913 1 913 0 Ts+ ttyin 0xfffffe0058e344b0 getty 912 1 912 0 Ts+ ttyin 0xfffffe0058e348b0 getty 911 1 911 0 Ts+ ttyin 0xfffffe0058e360b0 getty 910 1 910 0 Ts+ ttyin 0xfffffe0058e34cb0 getty 906 1 906 0 Ts+ ttyin 0xfffffe0058e354b0 getty 905 1 905 0 Ts+ ttyin 0xfffffe0058e35cb0 getty 902 1 902 0 Ts+ ttyin 0xfffffe00082690b0 getty 897 1 897 0 Ts+ ttyin 0xfffffe0058e358b0 getty 894 1 894 0 Ts+ ttyin 0xfffffe0058e350b0 getty 879 0 0 0 DL - 0xffffffff83b46d40 [accounting] 875 1 765 0 S uwait 0xfffffe006f37c300 syz-executor 870 1 767 0 S uwait 0xfffffe007b022480 syz-executor 866 1 767 0 S uwait 0xfffffe006f37c700 syz-executor 861 1 764 0 S uwait 0xfffffe007b022380 syz-executor 860 1 764 0 S uwait 0xfffffe007b022280 syz-executor 858 1 857 0 S uwait 0xfffffe0058cf8d80 syz-executor 846 0 0 0 DL - 0xffffffff83cac400 [soaiod4] 845 0 0 0 RL CPU 1 [soaiod3] 844 0 0 0 DL - 0xffffffff83cac400 [soaiod2] 843 0 0 0 DL - 0xffffffff83cac400 [soaiod1] 840 1 766 0 S uwait 0xfffffe0058cf9000 syz-executor 836 1 764 0 S uwait 0xfffffe0058cf9700 syz-executor 829 1 766 60928 S uwait 0xfffffe0054607580 syz-executor 822 1 766 0 S uwait 0xfffffe0054607480 syz-executor 819 0 0 0 DL aiordy 0xfffffe0054941ae0 [aiod4] 818 0 0 0 DL aiordy 0xfffffe0054915580 [aiod3] 817 0 0 0 DL aiordy 0xfffffe0054915ae0 [aiod2] 816 0 0 0 DL aiordy 0xfffffe00548055c0 [aiod1] 812 1 765 0 S uwait 0xfffffe0058cf8c80 syz-executor 809 0 0 0 DL (threaded) [so_splice] 100125 D - 0xfffffe005860fe00 [thr_0] 100126 D - 0xfffffe005860fe40 [thr_1] 767 763 767 0 S nanslp 0xffffffff83b9c500 syz-executor 766 763 766 0 S nanslp 0xffffffff83b9c500 syz-executor 765 763 765 0 S nanslp 0xffffffff83b9c500 syz-executor 764 763 764 0 S nanslp 0xffffffff83b9c500 syz-executor 763 1 761 0 S select 0xfffffe0059bebac0 syz-executor 738 1 18 0 S+ piperd 0xfffffe006f031140 logger 737 736 18 0 S+ nanslp 0xffffffff83b9c500 sleep 736 1 18 0 S+ wait 0xfffffe0054915020 sh 686 1 686 0 Ss nanslp 0xffffffff83b9c500 cron 682 1 682 0 Ss select 0xfffffe0059bebcc0 sshd 495 1 495 0 Ss select 0xfffffe0059beb840 syslogd 17 0 0 0 DL syncer 0xffffffff83cb9da0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cb8360 [bufdaemon] 100083 D - 0xffffffff83002140 [bufspacedaemon-0] 100095 D sdflush 0xfffffe0059dce8e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d03380 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83ce92f8 [dom0] 100084 D launds 0xffffffff83ce9304 [laundry: dom0] 100085 D umarcl 0xffffffff81dc7950 [uma] 7 0 0 0 DL - 0xffffffff83919cd0 [rand_harvestq] 6 0 0 0 TL pftm 0xffffffff84488850 [pf purge] 5 0 0 0 DL waiting 0xffffffff8473c6c0 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e4340 [doneq0] 100047 D - 0xffffffff838e42c0 [async] 100076 D - 0xffffffff838e4140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce4b00 [crypto] 100044 D crypto_ 0xfffffe00546add30 [crypto returns 0] 100045 D crypto_ 0xfffffe00546add80 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0008bfa488 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b44f00 [g_event] 100038 D - 0xffffffff83b44f20 [g_up] 100039 D - 0xffffffff83b44f40 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 CanRun [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce55a0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c2aff0 [swapper] 100005 D - 0xfffffe00546bd100 [softirq_0] 100006 D - 0xfffffe00546bd000 [softirq_1] 100007 D - 0xfffffe00546bce00 [if_io_tqg_0] 100008 D - 0xfffffe00546bcd00 [if_io_tqg_1] 100009 D - 0xfffffe00546bcc00 [if_config_tqg_0] 100010 D - 0xfffffe0008be3c00 [kqueue_ctx taskq] 100011 D - 0xfffffe0008be3a00 [jail_remove taskq] 100012 D - 0xfffffe0008be3800 [bus taskq] 100015 D - 0xfffffe0008be3200 [thread taskq] 100017 D - 0xfffffe0008be2d00 [aiod_kick taskq] 100018 D - 0xfffffe0008be2b00 [deferred_unmount ta] 100019 D - 0xfffffe0008be2900 [inm_free taskq] 100020 D - 0xfffffe0008be2700 [in6m_free taskq] 100021 D - 0xfffffe0008be2500 [linuxkpi_irq_wq] 100022 D - 0xfffffe0008be2300 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0008be2300 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0008be2300 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0008be2300 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0008be1200 [firmware taskq] 100041 D - 0xfffffe005476d000 [crypto_0] 100042 D - 0xfffffe005476d000 [crypto_1] 100057 D - 0xfffffe005476c300 [vtnet0 rxq 0] 100058 D - 0xfffffe005476c200 [vtnet0 txq 0] 100059 D - 0xfffffe005476c100 [vtnet0 rxq 1] 100060 D - 0xfffffe005476c000 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0007f83400 [virtio_balloon] 100066 D - 0xffffffff827adb81 [deadlkres] 100070 D - 0xfffffe0058cfdd00 [acpi_task_0] 100071 D - 0xfffffe0058cfdd00 [acpi_task_1] 100072 D - 0xfffffe0058cfdd00 [acpi_task_2] 100074 D - 0xfffffe0008be4a00 [mca taskq] 100075 D - 0xfffffe005476ca00 [CAM taskq] 100077 D - 0xfffffe005476ab00 [ipsec_offload] 100264 D - 0xfffffe007b074a00 [netlink_socket (PID] 945 943 766 0 Z syz-executor db> show all locks db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5063K 657 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4213 sysctloid 35184 2073K 35259 vtbuf 24 1968K 46 kobj 331 1324K 501 newblk 492 1147K 1068 vfscache 3 1025K 3 pcb 38 685K 172 inodedep 91 546K 230 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 filedesc 54 425K 245 subproc 160 318K 1037 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 102 201K 8953 acpica 1674 184K 54444 vmem 5 144K 7 tidhash 3 141K 3 pagedep 36 137K 120 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 109 109K 126 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1006 82K 5090 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 527 ddb_capture 1 64K 1 kdtrace 231 45K 1245 umtx 336 42K 336 temp 36 38K 2013 shm 2 34K 2 hostcache 1 32K 1 DEVFS3 128 32K 138 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 LRO 18 19K 18 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 130 16K 410 ithread 90 15K 90 bus-sc 34 15K 1656 eventhandler 163 14K 163 lltable 43 14K 43 ifnet 7 13K 7 ether_multi 152 13K 165 kenv 95 12K 95 shmfd 7 11K 8 GEOM 61 11K 477 CAM queue 5 11K 1528 rman 82 10K 467 rpc 8 9K 8 bmsafemap 4 9K 202 in6_multi 65 9K 65 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 3 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 72 8K 75 plimit 19 8K 810 cred 25 7K 244 kqueue 78 7K 1050 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 dirrem 21 6K 162 ufs_dirhash 24 5K 24 pwddesc 71 5K 954 UMA 269 5K 269 pf_ifnet 10 5K 20 diradd 34 5K 180 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 acpisem 28 4K 28 newdirblk 26 4K 97 lockf 34 4K 393 indirdep 12 3K 108 terminal 11 3K 11 DEVFSP 44 3K 70 sctp_atcl 7 3K 54 acpidev 20 3K 20 crypto 8 3K 13 uidinfo 4 3K 9 hhook 8 3K 10 mkdir 18 3K 194 clone 9 3K 9 kcovinfo 36 3K 36 proc-args 80 3K 2053 session 17 3K 62 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K 13 Unitno 30 2K 758 sctp_ifa 13 2K 14 selfd 26 2K 9572 CAM XPT 22 2K 543 in_multi 6 2K 9 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 freefrag 10 2K 64 BPF 7 2K 30 msi 9 2K 9 netlink 2 2K 73 freework 5 2K 199 softdep 1 1K 1 freeblks 4 1K 122 sahead 1 1K 1 secasvar 1 1K 1 CC Mem 8 1K 41 nhops 6 1K 8 vnodemarker 2 1K 8 NFSD session 1 1K 1 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 12 mount 16 1K 440 pci_link 10 1K 10 osd 13 1K 56 encap_export_host 12 1K 12 inpcbpolicy 18 1K 241 cdev 2 1K 2 lkpikmalloc 8 1K 9 freefile 3 1K 108 chacha20random 1 1K 1 biobuf 1 1K 1 select 3 1K 34 ktls 3 1K 8 sctp_timw 1 1K 1 vnodes 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 sctp_atky 7 1K 55