last executing test programs: 34.291613405s ago: executing program 2 (id=125): ktimer_create(0x0, 0x0, &(0x7f0000000100)=0x0) ktimer_settime(r0, 0x0, &(0x7f0000000140)={{0x9, 0x1}}, &(0x7f00000005c0)) (async) ktimer_create(0x4, &(0x7f0000000000)={0x3, 0x4, @sival_ptr=0x8001, @spare=[0x7, 0x63c, 0x8, 0xc10, 0xe, 0x0, 0x3, 0xb608]}, &(0x7f0000000080)) 34.14136642s ago: executing program 2 (id=126): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) syz_emit_ethernet(0x11a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ef258162e50cffffffffffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB]) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) ioctl$SMB_OLD_TRANS(r3, 0xc01c690c, &(0x7f0000000140)={0x6c, 0x6f, 0x30, @word, @buf="e2f7", 0x0, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x2) r6 = kqueue() kevent(r6, &(0x7f0000000380)=[{0x4, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x3]}], 0x1, 0x0, 0x20, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1001, 0x0, 0x0) ioctl$DIOCGETRULES(r4, 0xcbe04406, &(0x7f00000000c0)="40ccd65890e32c0b2b5ac2f750511b3f968c75dc58b33ae1ab4d65cbe35941c3c892b3ea3b3130966d352ce260670c503d7e116174409cb87733d5e1e631f07ab371f0aaaa10b3f381a6a7f042e8dc5006b641b4c34f602e808c4bf30853af3b") __semctl$SETVAL(0x0, 0x3, 0x8, &(0x7f00000001c0)=0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x395e9c817565919e, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @loopback, 0x800}, 0x1c) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) clock_gettime(0xa, &(0x7f00000002c0)) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) ftruncate(r0, 0x107d2) shm_rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x3) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x116) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x10000, 0x10}, {0x7f, 0x2}}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1, 0x0) 32.483320926s ago: executing program 2 (id=131): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, 0x0, 0x8, 0x0) (async) r1 = openat$filemon(0xffffffffffffff9c, 0x0, 0x8, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SMB_OLD_TRANS(r2, 0xc01c690c, &(0x7f0000000140)={0x6c, 0xe, 0x30, @buf='h!', @buf="cce7", 0xffffffff, 0x0, 0x0, 0x0}) (async) ioctl$SMB_OLD_TRANS(r2, 0xc01c690c, &(0x7f0000000140)={0x6c, 0xe, 0x30, @buf='h!', @buf="cce7", 0xffffffff, 0x0, 0x0, 0x0}) socket(0x2, 0x1, 0x0) symlink(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$SMB_READB(r3, 0x80246989, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @byte=0x4, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SMB_READB(r3, 0x80246989, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @byte=0x4, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@random="8f6f77cda643", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x34, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffc, {0x0, 0x6, "06c33e", 0xffff, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [], "3cdaf29e"}}}}}}}) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_int(r4, 0x29, 0x3f, &(0x7f0000000680)=0xffffffff, 0x4) r5 = socket(0x1c, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) setsockopt$sock_splice(r5, 0xffff, 0x1023, &(0x7f0000000080)={r5, 0xc332, {0x6, 0x8}}, 0x20) (async) setsockopt$sock_splice(r5, 0xffff, 0x1023, &(0x7f0000000080)={r5, 0xc332, {0x6, 0x8}}, 0x20) aio_read(&(0x7f0000001c40)={r5, 0x7fffffff, 0x0, 0x0, [0x8, 0xfffffffa], 0x1, 0x2, 0x9, {0x7, 0x7fff, 0x0}, {0x4, 0xe, @sival_int=0x7, @ke_flags=0x8a}}) chdir(0x0) select(0x40, &(0x7f0000000080)={0x9, 0x10001, 0x400, 0x0, 0x5, 0x5, 0x0, 0x8}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000540)=[{0xc8, 0xfffffffffffffffe, 0x4007, 0x0, 0x1, 0x0, [0x3, 0x7fffffffffffffff]}], 0x1, 0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') (async) chdir(&(0x7f00000000c0)='./file1\x00') connect$inet6(r2, &(0x7f00000001c0)={0x1c, 0x1c, 0x1, 0x1, @empty, 0xfffffd80}, 0x1c) truncate(0x0, 0xfffffffffffffff8) (async) truncate(0x0, 0xfffffffffffffff8) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) (async) r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(0xffffffffffffffff, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cfe19f", 0x0, &(0x7f0000000040)='O', 0xb, 0x9, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "4cf4091400"}, 0x40) (async) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(0xffffffffffffffff, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cfe19f", 0x0, &(0x7f0000000040)='O', 0xb, 0x9, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "4cf4091400"}, 0x40) setsockopt$inet_tcp_TCP_TXTLS_MODE(0xffffffffffffffff, 0x6, 0x28, 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./file1\x00', 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0)) 31.333536383s ago: executing program 2 (id=139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async) open$dir(0x0, 0x40000400000002c2, 0x0) (async) profil(&(0x7f0000000300)="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", 0x123, 0x4, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r1, 0x80000001, &(0x7f0000000040)="99", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) (async) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000180)="e2b7", 0x2, [], 0x4, 0x8, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0xfffffff8, @spare=[0x0, 0x1, 0x0, 0x200000000000]}}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) (async) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x52, &(0x7f0000002f00)={0x5, {{0x1c, 0x1c, 0x2, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}}, {{0x1c, 0x1c, 0x3, 0x9, @rand_addr="55308af90759e53b2d911f6be2462594", 0x210002}}}, 0x108) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r4, 0x0) (async) kqueue() r6 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) r7 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r7, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x369000000, 0xffffffffffffffff}) (async) getsockopt$inet6_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x901, &(0x7f0000000100)={0x0, 0xa2bb, 0x6, [0x10, 0x4, 0xfffe, 0x1, 0x26, 0x1f7]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_EVENT(r7, 0x84, 0x1e, &(0x7f00000001c0)={r8, 0xc, 0x10}, &(0x7f0000000200)=0x8) (async) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCDETACH(r9, 0xc1c06d01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, [0x0, 0x2, 0x0, 0x2, 0x0, 0x80000, 0x3, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x20000, 0xdc87, 0x5fb56b05, 0x8, 0x81, 0x80000001, 0x0, 0x0, 0x81, 0x0, 0x9b8, 0x0, 0x1b8, 0x4, 0x20000000, 0x9, 0x0, 0x10, 0xfffffffc, 0x6, 0x1000d826, 0xfffffffc, 0x0, 0x0, 0x1000, 0x6, 0x401, 0x0, 0x3, 0x0, 0x400000, 0x5, 0x1004, 0x3, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x3ff, 0x0, 0x6, 0x10000, 0x0, 0xfffefffd, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x0, 0x0, 0xfffffffa, 0x4000000, 0x0, 0x0, 0x4000000, 0x1000, 0x0, 0x0, 0x0, 0x20000000]}) (async) r10 = semget$private(0x0, 0x3, 0xa) __semctl$SETVAL(r10, 0x0, 0x8, &(0x7f0000000040)=0x0) (async) fork() (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 31.061439743s ago: executing program 2 (id=140): mkdir(&(0x7f0000000000)='./file0\x00', 0x8) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) r0 = socket(0x1c, 0x20000000, 0x0) listen(r0, 0x0) setgroups(0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) lchflags(&(0x7f0000000240)='./file2\x00', 0xa) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) lchmod(&(0x7f0000000040)='./file0\x00', 0x19e98548cfb12f68) shutdown(r0, 0x0) socket(0x11, 0x10000000000003, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) thr_suspend(0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) accept(r0, 0x0, 0x0) getfh(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000200)) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000080)=0x6, 0x4) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') 30.091221638s ago: executing program 2 (id=146): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setuid(0xffffffffffffffff) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$CRIOGET(r0, 0xc0046364, &(0x7f00000001c0)=0x456) cpuset_setdomain(0x1, 0x3, 0x0, 0x20, &(0x7f0000000000)={[0x1]}, 0x3) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x10, 0xfffffffffffffff9, 0x8009, 0xa0000009, 0xe8c8, 0x8000000000000003, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x2, 0x0, @loopback}, {0x1c, 0x1c, 0x0, 0x0, @rand_addr="f57799109f9cc24cb1b9a9bab803227d", 0xfffffffe}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffe, @rand_addr="000000000000000000006000000200", 0x100}, 0x1c) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="235414", 0x0, &(0x7f00000006c0)=',', 0xb, 0x3, 0x0, 0x13, 0x1, 0x0, 0x3, 0x3, "6a0812e40094ffff"}, 0x40) procctl$PROC_STACKGAP_CTL(0x0, 0x0, 0x11, &(0x7f0000000100)=0x44) r4 = fork() sigqueue(r4, 0xf, @sigval_ptr=0x2) wait4(r4, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_tcp_TCP_TXTLS_MODE(r2, 0x6, 0x28, 0x0, &(0x7f0000000140)) setitimer(0x2, &(0x7f0000003380)={{0x0, 0x65a6}, {0x400, 0x1}}, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) extattr_delete_file(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)='@$.\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x101, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x0, @mcast2}, 0x1c) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, 0x10) cpuset_setaffinity(0x3, 0x2, 0x0, 0x6c, &(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0xfffffffffffffe19) socket$inet(0x2, 0x2, 0x0) 30.032602551s ago: executing program 32 (id=146): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setuid(0xffffffffffffffff) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$CRIOGET(r0, 0xc0046364, &(0x7f00000001c0)=0x456) cpuset_setdomain(0x1, 0x3, 0x0, 0x20, &(0x7f0000000000)={[0x1]}, 0x3) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x10, 0xfffffffffffffff9, 0x8009, 0xa0000009, 0xe8c8, 0x8000000000000003, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x2, 0x0, @loopback}, {0x1c, 0x1c, 0x0, 0x0, @rand_addr="f57799109f9cc24cb1b9a9bab803227d", 0xfffffffe}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffe, @rand_addr="000000000000000000006000000200", 0x100}, 0x1c) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="235414", 0x0, &(0x7f00000006c0)=',', 0xb, 0x3, 0x0, 0x13, 0x1, 0x0, 0x3, 0x3, "6a0812e40094ffff"}, 0x40) procctl$PROC_STACKGAP_CTL(0x0, 0x0, 0x11, &(0x7f0000000100)=0x44) r4 = fork() sigqueue(r4, 0xf, @sigval_ptr=0x2) wait4(r4, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_tcp_TCP_TXTLS_MODE(r2, 0x6, 0x28, 0x0, &(0x7f0000000140)) setitimer(0x2, &(0x7f0000003380)={{0x0, 0x65a6}, {0x400, 0x1}}, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) extattr_delete_file(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)='@$.\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x101, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x0, @mcast2}, 0x1c) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, 0x10) cpuset_setaffinity(0x3, 0x2, 0x0, 0x6c, &(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0xfffffffffffffe19) socket$inet(0x2, 0x2, 0x0) 9.281445235s ago: executing program 0 (id=207): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0x0, 0x0, [0x0, 0x0, 0x40, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) access(0x0, 0x0) r1 = kqueue() procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x12, 0x1, 0xffffffffffffffff, 0xfffffffc, 0x0}) sysarch$I386_CLEAR_PKRU(0xd, &(0x7f00000002c0)={0x240c, 0x690d, 0x7fffffff}) r3 = shmget$private(0x0, 0x3000, 0xd8, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000f40)=""/218) r4 = socket$bt_rfcomm(0x24, 0x1, 0x88) recvmsg(r4, &(0x7f0000000440)={&(0x7f0000000200)=@in={0x10, 0x2, 0xffffffffffffffff, @rand_addr}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)=""/246, 0xf6}], 0x1, &(0x7f00000004c0)=""/171, 0xab}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(0x0) close(r1) setsid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$DIOCGETSTATES(r5, 0xc0104419, &(0x7f00000003c0)) ioctl$FILEMON_SET_PID(0xffffffffffffffff, 0xc0045302, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) procctl$PROC_ASLR_STATUS(0x0, r2, 0xe, &(0x7f00000000c0)) socket$inet(0x2, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x11, 0x10000000000003, 0x0) 8.891464684s ago: executing program 0 (id=210): r0 = kqueue() kmq_notify(0xffffffffffffff9c, &(0x7f0000000100)={0x1, 0xc, @sival_ptr=0xfffffffffffffffb, @spare=[0x5, 0x1, 0x5, 0x5, 0x1ff, 0x10, 0x7, 0x4]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x3, 0x3) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f0000001340)={0x0, 0x0, 0x7fff}) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000100)="49fa57c77f", 0x5) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) kevent(r0, &(0x7f0000000040)=[{0x8, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) open$dir(0x0, 0x80, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) freebsd11_fstatat(0xffffffffffffffff, 0x0, 0x0, 0x4000) setregid(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1fc], 0x0, 0x0, 0x0, {0xe, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xfffffffd, @ke_flags=0x9fc040a3bd859cca}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) write(r3, &(0x7f0000000080)="ba", 0x100000) 7.121907514s ago: executing program 0 (id=212): open$dir(0x0, 0x200, 0x0) open$dir(0x0, 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0xa) (async) truncate(&(0x7f0000000040)='./file0\x00', 0xa) getpeername(0xffffffffffffffff, 0x0, 0xfffffffffffffffe) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31) (async) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) munlock(&(0x7f0000002000/0x1000)=nil, 0xffffffffdfffdfff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x46, &(0x7f0000000100)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0xd, &(0x7f0000000040)={@remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0xc) (async) setsockopt$inet_mreqn(r1, 0x0, 0xd, &(0x7f0000000040)={@remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0xc) extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\x04\xaeQ\x02j\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1*\x1a\xb9g\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)=',,\x00', 0x0, 0x0) (async) extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)=',,\x00', 0x0, 0x0) extattr_list_link(0x0, 0x1, &(0x7f00000002c0)=""/81, 0x51) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) shm_unlink(&(0x7f00000000c0)='./file0\x00') lchmod(&(0x7f0000000240)='./file0\x00', 0x62) (async) lchmod(&(0x7f0000000240)='./file0\x00', 0x62) execve(0x0, &(0x7f0000000340)=[&(0x7f00000002c0)='\x00'], 0x0) 7.11666856s ago: executing program 3 (id=214): open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000400)) (async) ioctl$BIOCSETF(r0, 0x80104267, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="fffdffffffffaaaaaaaaaaaa08004500001c0004ffff00009078ac1400aaf50000010800907800070006"]) (async) r1 = kqueue() kevent(r1, &(0x7f0000000440)=[{0x5, 0xfffffffffffffff5, 0x1, 0x20000000, 0x6, 0x81, [0xd3b, 0x9, 0xbf, 0x3]}, {0x7fd, 0xfffffffffffffff5, 0x3, 0x40000000, 0xdd5, 0x100000001, [0x9, 0x8, 0x80000000, 0x6]}, {0x2, 0xfffffffffffffffa, 0x61, 0x8, 0x80000000, 0x73, [0xeee0, 0x5, 0x3, 0x6]}], 0x3, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) (async) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x5) (async) r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) fork() (async) setsockopt$inet6_int(r2, 0x29, 0x26, &(0x7f0000000000)=0x200, 0x4) (async) preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1, 0xfffffffffffffffe) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB]) (async) fork() (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) r5 = openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) shmget(0x2, 0x2000, 0x610, &(0x7f000007f000/0x2000)=nil) (async) aio_write(&(0x7f0000000240)={r5, 0x80000001, &(0x7f0000000300)="36672d375e6e76441f8b5a45", 0xc, [0x3, 0xfffffbff], 0x200000000000002, 0x1, 0x0, {0x1, 0x7, 0x0}, {0x3, 0x11, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) (async) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) (async) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0xe801, 0x0) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x8) (async) statfs(&(0x7f0000000040)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100000, 0x1) 5.03767013s ago: executing program 0 (id=216): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, &(0x7f0000000240)={0x1, {{0x1c, 0x1c, 0x3, 0x0, @mcast1}}}, 0x88) kqueue() kqueue() fork() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x44, &(0x7f0000001600)=0xa5, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x10, 0x2, 0x1, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x10, 0x2, 0x1, @loopback}, 0x10) recvfrom$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast2}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x7e, {0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x17, 0x0, [@remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0xf, 0x0, [@remote={0xac, 0x14, 0x0}, @rand_addr, @local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0x3}]}}}}}}}) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, &(0x7f0000000200)) r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000040)="fc2e2cb0b66a61934f49e331b2", 0xd}, {&(0x7f0000000280)="c6d2ad0d70c599037e863dae71bb99457a1bb935c59a3cf371aa3bea741241703da6c3a7c351ccc8f324e8223124b05df4e63d06be62716d24ca1ef5da15448a5c6a7418", 0x44}], 0x2, 0x0, 0x0, 0x104}, 0x0) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004600)=""/4103, 0x1007}], 0x1, 0x0}, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0) r6 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r6, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) 5.037395769s ago: executing program 1 (id=217): r0 = openat$md(0xffffff9c, &(0x7f0000000040), 0x4, 0x0) freebsd11_fstatfs(r0, &(0x7f00000002c0)) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x1d8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ae0226", 0xd0, 0x3a, 0xff, @rand_addr="7803ffee000000000023000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr="763fb9cc800b8f3006c2eea4e368506e", [{0x2, 0x17, "93d996b5c97254c2c6456f4519126d842303f3a2bf6a9cd79f96437f6ee9be5c8ecb3c9dc54cf003cd4de98f20a4da81f3de698b8572c77969d3fe4c7935502dc76d54651dcffdbf2c64d0002fefa5c082966ed92e940cd05de3b36960d66d87e619e7485ebf74cb5602bd4cc0ea183c7f1918a519ab98cd6b55f77145a96fd4bbf86081d1db413d9ddec17facda8c577cb92406816c0a4662f763b760fea02d93b087344fc1f031bc4aafb95f3f4d16839cdc70cc91"}]}}}}}}) 5.036681252s ago: executing program 3 (id=218): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCLOCK(r0, 0x2000427a) (async) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f00000006c0)) (async) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff}) (async) r3 = socket$inet6_udplite(0x1c, 0x2, 0x88) bind$inet6(r3, &(0x7f0000001140)={0x1c, 0x1c, 0x0, 0x9, @mcast2}, 0x1c) (async, rerun: 32) r4 = socket(0x2, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r4, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_FASTOPEN(r4, 0x6, 0x401, 0x0, 0x0) (async, rerun: 64) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) aio_write(&(0x7f0000000240)={r5, 0x80000001, 0x0, 0x0, [0x0, 0x101ff], 0x0, 0x0, 0xfffffbff, {0x3, 0x7, 0x0}, {0x0, 0x6, @sival_ptr=0x5, @ke_flags=0x9fc040a3bd859cca}}) aio_waitcomplete(&(0x7f0000000440)=0x0, &(0x7f0000000580)={0x0, 0x2}) (async) listen(r4, 0xb) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000001940)="b307721817346f19d7c5b10b31621ddddcc69d043cb3c50bf97d8d3e9ba3aced2354fb13907f1d1d5af9ff37a83749547cd3fb407ced9191", 0x38, 0x2008c, 0x0, 0x0) (async) close(r2) (async) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) (async) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x3, 0x2, 0x2000000000000200, 0x400000000000002}) (async) kqueue() (async) fork() setrlimit(0x8, &(0x7f0000000040)={0x8, 0x75}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0x80) 4.891351413s ago: executing program 1 (id=219): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) setresgid(0xee00, 0xee01, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) lchmod(&(0x7f0000000240)='./file0\x00', 0x62) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_MODE(r1, 0x6, 0x28, &(0x7f0000000140)=0x1, 0x4) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='{-,\x00'], 0x0) r2 = fcntl$getown(r0, 0x5) wait4(r2, &(0x7f0000000100), 0x10, 0x0) 2.865366837s ago: executing program 0 (id=220): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0xa, 0x1, './file0\x00'}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r1, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f0000000100)="78aff7916dc0", 0xb, 0x10, 0x0, 0x13, 0x6, 0x0, 0x3, 0x3, "6a0802e40094ffff"}, 0x40) listen(r1, 0xd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r2, 0x8004667d, &(0x7f0000000740)) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r3, 0x3862) r4 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x2000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r4, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup2(r5, r3) r7 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x126) sendfile(r7, r6, 0x1f00, 0x0, 0x0, 0x0, 0x0) rfork(0x83000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r8 = socket$inet6_udp(0x1c, 0x2, 0x0) aio_writev(&(0x7f0000000180)={r8, 0x80000000, &(0x7f0000000280)="d48598022b690b23d93e785446b8e404a0b5a1a8a107a86fe593f7eba0a173772be919dd3279b3261c1ee3f4644d6fe9810dcefebd62377c8dfcea4d6068f76b19bf1599e4bf3d176912b0361cfb243390fb70150ccb3de55cf2649be94b0251ab01f6449c6aceb19a55ddb99e7d261b7f33efaa3219b668f42538cb64dfa6d282cfd475cd5c87d92c38d2b5b3f1be481df8309b0a5138ad7655f010483be80215fe8e4f11e514407e154aa8c2c74202ca9eaab75c57c0f2e0e5dbd8c969e5d782e305bc72c0cb81e5f8babd130fd0354828600ad2", 0xd5, [0x95, 0x2], 0x7fffffffffffffff, 0x0, 0x7fffffff, {0x657d, 0x0, &(0x7f0000000040)}, {0x4, 0x11, @sigval_ptr=0x7ff, @spare=[0x4, 0xfff, 0x5, 0x14b3199, 0x5, 0x9, 0x100000000, 0x1]}}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$bpf(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) fpathconf(r9, 0x44) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) freebsd12_shm_open(&(0x7f0000000040)='./file0\x00', 0x602, 0x92) 2.864353127s ago: executing program 1 (id=221): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, 0x0, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = kqueue() freebsd11_kevent(r1, &(0x7f0000000000)=[{}], 0x6a81, 0x0, 0x0, 0x0) kqueue() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f0000000140)={0x800, 0xb7b, 0x2, &(0x7f00000000c0)='./file0\x00', 0x1e3, 0x8, 0x0, 0xe58321e, 0xf085, 0x7, &(0x7f0000000100)='\x00', [0x6, 0x7, 0x2, 0xc, 0xe8b0, 0x7, 0xbd, 0x9, 0xfffffff7, 0x3, 0xf, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8001, 0x3, 0x7, 0x1, 0xffff, 0x8001, 0xf67, 0xff, 0xfffffffa, 0x800, 0x545, 0x8, 0x5, 0x4, 0x80000001, 0xad, 0x80, 0x8, 0x0, 0x10001, 0x2, 0x9, 0x8, 0x50, 0x2, 0x6, 0x3, 0x8, 0x8, 0x3ff, 0x0, 0x5, 0x8, 0x0, 0x48, 0x4, 0x4, 0x173, 0x6, 0x7, 0x8000, 0x54, 0x345b, 0x1, 0x6, 0x0, 0x6, 0x5, 0x0, 0x0, 0x4, 0x3, 0x0, 0x1ff, 0x7, 0x400, 0x1, 0x6, 0x7, 0x4, 0x8, 0x0, 0x90, 0x6, 0x68, 0xd5f, 0x6, 0x5, 0xb083, 0x10001, 0x8238, 0x40, 0x1, 0x3, 0x4, 0x39, 0x6, 0x21, 0x6, 0x4e]}) r4 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @local, 0x1}, 0x1c) sigqueue(0x0, 0xf, @sival_int=0x8000) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SMB_WRITEB(r6, 0xc0086924, &(0x7f0000000040)={0x2, 0x0, 0x0, @buf, @word=0x2, 0x0, 0x0, 0x0, 0x0}) setpgid(0x0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x47, 0x0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x49, 0x0, 0x0) 2.864049551s ago: executing program 3 (id=222): aio_write(0x0) syz_emit_ethernet(0xfef2, &(0x7f0000000000)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local={0xac, 0x14, 0x0}, @empty, @multicast2}}}}) aio_suspend(0x0, 0x0, &(0x7f0000000c00)={0x0, 0xe011}) mkdir(0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x2) symlinkat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) access(0x0, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0) extattr_delete_link(&(0x7f0000000580)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00\x02=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\x95\xe8X\xb6\x17\x99\xa6\xe4\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\x9c\x14\xecRRn\ab\xe2\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6\xcf\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\x1eq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4') unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fdatasync(r1) rename(&(0x7f0000000500)='./file1\x00', &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f0000000200)='./file/file0\x00', 0x4, 0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) r3 = open$dir(&(0x7f0000000840)='./file0\x00', 0x40000400000002c2, 0x5a) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) bindat$unix(r3, r2, &(0x7f0000000040)=@abs={0x8, 0x1, 0x0, 0x1}, 0x8) 2.57143246s ago: executing program 1 (id=223): kqueue() r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x50, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x246, @ipv4, 0x2}}}, 0x108) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x51, &(0x7f0000000240)={0x1, {{0x1c, 0x1c, 0x3, 0x0, @mcast1}}}, 0x88) kqueue() r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) fork() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) r4 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0) r5 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r5, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_gettime(0x2, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 507.124606ms ago: executing program 0 (id=224): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) msgget$private(0x0, 0xfffffffffffffffd) (async) msgget$private(0x0, 0xfffffffffffffffd) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) (async) shutdown(r0, 0x2) getsockopt$inet6_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x104, 0x0, 0x0) (async) getsockopt$inet6_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x104, 0x0, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) (async) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) writev(r2, &(0x7f0000000280), 0x26) write(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r4, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f0000000100)="78aff7916dc00ceed5c51541e59785218b17a42d3c5674a06964a2838903360796ce9b493723661215eded625ad4c6edc18afce02411", 0xb, 0x10, 0x0, 0x13, 0x36, 0x0, 0x3, 0x3, "6a0802e40094ffff"}, 0x40) setsockopt$inet_mreqsrc(r3, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x48, 0x0, 0x0) socket(0x26, 0x2, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa00060001080006040001aaaaaaaaaabbac1400bbffffffffffffac1400aa"]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa00060001080006040001aaaaaaaaaabbac1400bbffffffffffffac1400aa"]) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000180)={@multicast1, @rand_addr=0x4, @loopback}, 0xc) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000180)={@multicast1, @rand_addr=0x4, @loopback}, 0xc) freebsd10_pipe(&(0x7f0000001a40)) (async) freebsd10_pipe(&(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r6, &(0x7f0000000140)=[0x8, 0x3fffffffffffffd]) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3) getpid() (async) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x41f, &(0x7f0000000100)=0x1, 0x4) socket(0x1c, 0x1, 0x0) (async) socket(0x1c, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r8, r9) getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) 498.630002ms ago: executing program 1 (id=225): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EXPLICIT_EOR(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4640c7190213272a48701fe558c3aec359d5c9ce67f6453118a671000080e0c44ebc0f008476828ee2c16be868ba787ced0d999f926f54ab63ee1e", 0x3b}], 0x1000025b, 0x0, 0x0, 0x188}, 0x20104) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000580)=[0x20000207fffffdc, 0x400000000000005]) sigaction(0x6, &(0x7f0000000200)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfffffffe]}}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x100000, 0x81) r2 = socket(0x11, 0x10000000000003, 0x0) setsockopt$sock_int(r2, 0xffff, 0x8000, 0x0, 0x0) getsockopt$inet_udplite(r2, 0x88, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendto$unix(r2, &(0x7f0000000140)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0x101, &(0x7f0000000380)={@in={{0x10, 0x2, 0x0, @multicast2}}, r4, 0x1, 0x4819f9df, 0x1000000, 0x8368, 0x7fffffff}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)={0x5, 0x110, 0x896, 0x7, r4}, &(0x7f0000000040)=0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x1, 0x6, @sival_ptr, @thr={0x0, 0x0}}) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) semget(0x1, 0x2, 0x683) socket$inet6_sctp(0x1c, 0x1, 0x84) ktrace(0x0, 0xb4b4bc386c036afd, 0x30a, 0x0) r5 = socket(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0xc, &(0x7f0000000000)="8a0c68f34c6fdb302a28bcd39e6ba8c384d7b24b9ee250f6d07845119dedb7476574c286906a0b81e3e7f4d29594100aa34416170149887184d9752ecac941d7a6f21228d5c50f7d1252ab0712b3cda9ea7d5c79261bc2799cd461ed39e4fd", 0x5f) connect$inet(r5, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) listen(r5, 0x6ce) 495.597202ms ago: executing program 3 (id=226): kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x6) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0) (async) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) (async) rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2, 0xf}) (async) writev(r1, &(0x7f0000000280), 0x26) writev(r1, 0x0, 0x0) (async) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000380), 0x100000, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000300)={0x28, 0x0, 0x10, &(0x7f00000000c0)="3cbe89526b172db07f82ee18e15b0073", 0x0, 0x0, 0x0, 0xfdffffff, [0x10004, 0x2e, 0xb6a, 0x20000c]}) (async) rename(0x0, 0x0) sync() (async) sync() (async) select(0x40, &(0x7f00000000c0)={0x7, 0xf, 0x4800000, 0x3, 0x3, 0x5, 0x3, 0x396e}, &(0x7f0000000140)={0x6, 0xa87, 0x7, 0x7, 0x3, 0x4, 0x3, 0x3}, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) mkdir(0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x128) open$dir(&(0x7f0000000080)='.\x00', 0x10000, 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x2, @rand_addr=0x5}, 0x10) (async) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffe5}) (async) extattr_list_link(0x0, 0x2, 0x0, 0x0) (async) statfs(&(0x7f0000000140)='./file0\x00', 0x0) (async) r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pread(r3, 0x0, 0x0, 0x3) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$DIOCSETLIMIT(0xffffffffffffffff, 0xc0084428, &(0x7f0000000040)={0x0, 0x8}) getresgid(0x0, &(0x7f0000001ec0), 0x0) openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) 321.445835ms ago: executing program 1 (id=227): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) close(r0) writev(r1, 0x0, 0x0) 161.53363ms ago: executing program 3 (id=228): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "388e44", 0x8, 0x84, 0x0, @rand_addr="fc000000200000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) (async) __semctl$GETZCNT(0x0, 0x3, 0x7) 0s ago: executing program 3 (id=229): r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f00000001c0)=0xa, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee00, 0xee01, 0xffffffffffffffff) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x1ff, @loopback, 0x5}, 0x1c) r2 = socket(0x1c, 0x1, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x2) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x12e55550, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x40}, 0x1c) syz_emit_ethernet(0x13e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd6000000001082b00feffffff000000000000000000000002ff02000000000000000000000000000170"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe006df4c000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83716b20 usecount 36, writecount 36, refcount 6 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00540e98b8 ref 1 pages 32 cleanbuf 1 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe00540a0000 (pid 805, syz-executor, tid 100124) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=2e987a18, uid=0, gid=0, flags=0x4 ino 73, on dev gpt/rootfs vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe006df4c000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83716b20 usecount 0, writecount 0, refcount 6 seqc users 0 hold count flags () flags (VIRF_PGREAD|VI_DOINGINACT|VMP_LAZYLIST) Expensive callout(9) function: 0xffffffff81a3fea0(0xfffffe006df26a80) 0.004336980 s v_object 0xfffffe00540e98b8 ref 0 pages 40 cleanbuf 1 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe0054109780 (pid 805, syz-executor, tid 100119) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=2e987a18, uid=0, gid=0, flags=0x4 ino 73, on dev gpt/rootfs WARNING pid 842 (syz-executor): ioctl sign-extension ioctl 2000004218456b md0: truncating fractional last sector by 8 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe00077e7800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058572800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058572800 UDP6: M_MCAST is set in a unicast packet. Warning! syz-executor[1094] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 ip6_pcbopts: all specified options are cleared. Out of ktrace request objects. md1: truncating fractional last sector by 1 bytes lock order reversal: 1st 0xfffffe006dfa5750 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3380 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:185 lock order proctree -> ufs established at: #0 0xffffffff81664981 at witness_checkorder+0x781 #1 0xffffffff814cc276 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81da46bb at ffs_lock+0x18b #3 0xffffffff8230a487 at VOP_LOCK1_APV+0x57 #4 0xffffffff817d5b3e at _vn_lock+0x14e #5 0xffffffff817d63e8 at vn_close1+0x1e8 #6 0xffffffff814bdb6a at ktrops+0x41a #7 0xffffffff814bd2dd at sys_ktrace+0xaed #8 0xffffffff82145702 at amd64_syscall+0x4e2 #9 0xffffffff820ea3eb at fast_syscall_common+0xf8 lock order ufs -> proctree attempted at: #0 0xffffffff81665852 at witness_checkorder+0x1652 #1 0xffffffff8155661f at _sx_slock_int+0x13f #2 0xffffffff8162217d at uprintf+0x14d #3 0xffffffff81dd0a1f at ufs_rmdir+0xdf #4 0xffffffff8230912d at VOP_RMDIR_APV+0xcd #5 0xffffffff817ca63a at kern_frmdirat+0x87a #6 0xffffffff82145702 at amd64_syscall+0x4e2 #7 0xffffffff820ea3eb at fast_syscall_common+0xf8 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006b4846e0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83716b20 usecount 9, writecount 8, refcount 25 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005418f2e8 ref 1 pages 184 cleanbuf 22 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005414f000 (pid 1201, syz-executor, tid 100614) nlink=1, effnlink=1, size=697472, extsize 0 generation=908b2302, uid=0, gid=0, flags=0x40008 ino 153, on dev gpt/rootfs pid 1297 (syz-executor), jid 0, uid 0: exited on signal 6 (no core dump - coredumpsize limit is 0) tap4: Ethernet address: 58:9c:fc:10:d3:96 tap4: Ethernet address: 58:9c:fc:10:d3:96 tap4: Ethernet address: 58:9c:fc:10:d3:96 if_delmulti_locked: detaching ifnet instance 0xfffffe00077e9000 tap4: Ethernet address: 58:9c:fc:10:d3:96 tap4: Ethernet address: 58:9c:fc:10:d3:96 arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.3.170 on tap3! tap4: Ethernet address: 58:9c:fc:10:d3:96 ifconfig: interface tap4 does not exist kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) kldload: can't load if_tap: module already loaded or in kernel SYZFAIL: tun: can't open device device=/dev/tap4 (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=4 req=147 state=1 status=67 (errno 35: Resource temporarily unavailable)