last executing test programs: 1m43.875322599s ago: executing program 0 (id=145): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) aio_write(&(0x7f0000000340)={0xffffffffffffffff, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0) rfork(0x96014) sync() socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ktimer_gettime(0x0, 0x0) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x1c}, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="fb000000000000000000000086dd60826e03000e000000000100000000000e14fc11133f6400fe8000000000"]) chroot(0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) 1m43.637641084s ago: executing program 0 (id=146): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r0 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r1 = accept$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r1, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 1m42.785753554s ago: executing program 0 (id=150): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) socket$inet(0x2, 0x1, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r2 = accept$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r2, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 1m41.89855842s ago: executing program 0 (id=155): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) kqueue() freebsd10_pipe(0x0) r0 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() accept$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 1m40.912393054s ago: executing program 0 (id=159): freebsd11_mknod(&(0x7f0000000280)='./file0\x00', 0x672cda28f543e327, 0x3) lchown(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r0, 0x0) cap_rights_limit(r0, &(0x7f0000000580)=[0x20000207fffffdc, 0x400000000000005]) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kqueue() kevent(0xffffffffffffffff, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x100, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) getsockopt$inet6_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0xf, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r2, 0x8004745b, &(0x7f0000000080)) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) lio_listio(0x1, &(0x7f0000000080)=[{0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0, [0x100, 0x7], 0x5, 0x26, 0x9, {0x4000000000000004, 0xffff, 0x0}, {0x3, 0x15, @sival_ptr=0x1, @spare=[0xffffffff, 0x8, 0x8, 0x100, 0x8, 0x3, 0x1000, 0x8]}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [0x2, 0x10000], 0x9, 0x8, 0xb, {0x7, 0x1000000b, 0x0}, {0x1, 0xfffffffe, @sival_int=0x3, @thr={0x0, 0x0}}}, {0xffffffffffffffff, 0x4, 0x0, 0x0, [0x7, 0x40], 0x6, 0x5, 0x110, {0x7f, 0x9, 0x0}, {0x3, 0x10, @sival_int, @ke_flags=0x40a6}}], 0x3, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x54, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x21596174, @loopback, 0xfffffffc}}, {{0x1c, 0x1c, 0x3, 0x2, @local={0xfe, 0x80, '\x00', 0x0}, 0x68}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x53, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x2, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}}}, 0x108) open$dir(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1b) 1m40.608102357s ago: executing program 0 (id=162): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r2 = accept$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r2, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 1m40.566402487s ago: executing program 32 (id=162): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r2 = accept$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r2, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 5.689601893s ago: executing program 3 (id=645): setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x51, &(0x7f0000000240)={0x1, {{0x1c, 0x1c, 0x3, 0x0, @mcast1}}}, 0x88) kqueue() kqueue() mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) fork() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast2}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x7e, {0xa, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @remote={0xac, 0x14, 0x0}, {[@lsrr={0x83, 0x13, 0x0, [@remote={0xac, 0x14, 0x0}, @rand_addr, @local={0xac, 0x14, 0x0}, @multicast2]}]}}}}}}}) getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0) r2 = socket$inet(0x2, 0x20000000, 0x8) getsockopt$inet_mreq(r2, 0x0, 0xd, &(0x7f0000000380)={@local, @loopback}, &(0x7f00000003c0)=0x8) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0) r3 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f0000000080)={0x10, 0x1d, 0x1, &(0x7f0000000740)='\x00', 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x7d86619b, [0x0, 0x9, 0xc]}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100)) open$dir(0x0, 0x40000400000002c2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 4.169127334s ago: executing program 3 (id=652): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x60, 0x0) syz_emit_ethernet(0x11e, &(0x7f00000001c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000023b90780006418be4171739917c58e244038e9f67e762df616dda83e57778e106ac2e723df807c2cd59707637925481c17ccc93e2aaac721515481ffb077e6eedf12e57a3ac4e2d9df24be04a5f6e8a4b32fb48c5edac24dff592d5f953dcbc6162b93b00513fb0435b016169348814685f25d59818e4aef3c51cffbcbfd53c8445c831ee9f0c6a9cc96b61ae3820c5d95224a77a961839cf6949d7cc1eaf1751059600429183fa4cccca2d20630f9e290d83adf3301f60386f9ae8645a20900e207cd5eca87e5d80a889da5ac06c743b6fbdccba1fa048124b29ed744cfc52654cddbbb86e"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) semget$private(0x0, 0x154, 0x260) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r4 = socket(0x1c, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file2\x00', r5, &(0x7f0000000100)='./file1\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(0x0, 0x0) rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @random="7bd88fa2834c", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7}}}}}}) 3.860623607s ago: executing program 3 (id=657): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) setregid(0x0, 0x0) mount(&(0x7f0000000000)='hammer2\x00', 0x0, 0x40000002, &(0x7f0000000240)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) thr_self(&(0x7f0000000040)=0x0) sigtimedwait(&(0x7f0000000540)={[0x1ff, 0x8, 0x4, 0xa2]}, 0x0, 0x0) thr_set_name(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00', 0x80}, 0x24) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r2, 0x0, 0x20104) r3 = kqueue() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(r3, &(0x7f0000000000), 0x100f2, 0x0, 0xfc, 0x0) aio_suspend(0x0, 0x0, &(0x7f0000000e40)={0x0, 0xa99c}) 3.619242193s ago: executing program 4 (id=659): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x60, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) semget$private(0x0, 0x154, 0x260) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r4 = socket(0x1c, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file2\x00', r5, &(0x7f0000000100)='./file1\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(0x0, 0x0) rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @random="7bd88fa2834c", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7}}}}}}) 3.343661094s ago: executing program 4 (id=661): open(&(0x7f0000000b40)='./file0\x00', 0x7843d88b80d1cecd, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connectat$unix(0xffffffffffffffff, r0, &(0x7f0000000380)=@file={0xa, 0x0, './file0\x00'}, 0xa) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0) freebsd10_pipe(0x0) cap_rights_limit(0xffffffffffffffff, 0x0) rfork(0x82010) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x30) posix_fadvise(0xffffffffffffffff, 0x0, 0x1, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket(0x2, 0x1, 0x0) fstatat(r1, &(0x7f0000000280)='./file0/file0/file0/file0\x00', 0x0, 0x8000) ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x400, 0x4, 0x0, 0x800000008, 0x4, 0x0, 0x8001, 0x20, 0xa7, 0x0, [0x18, 0x6, 0x0, 0x3, 0x4, 0x4, 0x91e, 0xf, 0x3, 0x7, 0x8, 0x7, 0x4ed, 0x7, 0x8000001, 0xfffffff3, 0x9, 0xfeff3382, 0x8000007, 0x2, 0x401, 0x9, 0xcde, 0x100, 0xfffffff8, 0x7, 0x6, 0x0, 0x7, 0x5ba, 0x0, 0xffbffffa, 0x9, 0x9e9e, 0x3d5532c0, 0x8, 0xfffeffff, 0x8000, 0x2, 0x1, 0xfff, 0x80, 0x0, 0x7, 0x0, 0x3, 0x800006, 0x80000003, 0xac5e, 0x2, 0xfffffff3, 0x6ddbd7a4, 0x4, 0x300, 0xae, 0x8, 0x2000086, 0x54, 0x20, 0x3, 0x8001, 0x9, 0x7a, 0x8, 0x8, 0xa, 0x10001, 0xfffffff5, 0x1000, 0x80, 0x9, 0x7, 0x20006, 0x0, 0x2, 0x9, 0x388d, 0x0, 0x3, 0xfffffffc, 0x3, 0x44000000, 0x80000001, 0xffffffff, 0x5, 0xcd, 0x7, 0xc, 0x1, 0xff, 0x4000002, 0xe6, 0x7fffffff, 0x5, 0xc0b0, 0x81]}) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(0xffffffffffffffff, 0x6, 0x29, 0x0, 0x0) freebsd10_pipe(0x0) close(0xffffffffffffffff) r4 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000200)=0x3, 0x4) bind$inet6(r4, &(0x7f0000000180)={0x1c, 0x1c, 0x2, 0x6, @empty, 0x2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr="00000000080001000000001b00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}) ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, 0x0) lchmod(&(0x7f0000000080)='./file0/file0\x00', 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240), 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[]) 3.343432067s ago: executing program 1 (id=662): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) setregid(0x0, 0x0) mount(&(0x7f0000000000)='hammer2\x00', 0x0, 0x40000002, &(0x7f0000000240)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) thr_self(&(0x7f0000000040)=0x0) sigtimedwait(&(0x7f0000000540)={[0x1ff, 0x8, 0x4, 0xa2]}, 0x0, 0x0) thr_set_name(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00', 0x80}, 0x24) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r2, 0x0, 0x20104) r3 = kqueue() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(r3, &(0x7f0000000000), 0x100f2, 0x0, 0xfc, 0x0) aio_suspend(0x0, 0x0, &(0x7f0000000e40)={0x0, 0xa99c}) 2.927597338s ago: executing program 4 (id=663): openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x8, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x100, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) freebsd11_getdents(r1, &(0x7f0000000180)=""/53, 0x20) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) kmq_notify(0xffffffffffffffff, 0x0) r3 = kqueue() freebsd11_kevent(r3, &(0x7f0000001a40), 0x0, &(0x7f0000001ac0)=[{}], 0x1, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r4, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) sendfile(r8, r5, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x7) setgroups(0x2, &(0x7f0000000f80)=[0x0, 0x0]) bind$inet6(0xffffffffffffff9c, &(0x7f0000000280)={0x1c, 0x1c, 0x2, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(0x0, 0x100000) ioctl$MDIOCATTACH(r9, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x3, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x2, 0xfffffffe, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x7, 0xf22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x9]}) 2.816505536s ago: executing program 3 (id=664): setsockopt$sock_accept_filter(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f00000004c0)={'accf_http\x00', "695a66dbf9e41ee4876215000000000000b4dd5f89ad9bb80af3e9bc9f9c1c662ad1e40451dd1825279d2b9b2be4ac611a10559b7f7a9370ccc7625598b28656d17e8a4d2e009265502e7bf6add133b2adefbcce193e83c1c8debb44b20307c6bb7d2215a4d4607111d3354d83b709000000000000e2c5ec699cbbdd34927c23bc3aba3cb7f63dff7d710ab7255a6de308f6712b5dfaa7425c47199f682fa7f5166885fecd817827d800d1324b33ba3523fa445c5d18f21b32802058b9c65b1159afce77b46b6ade31cc2777c752eeeda0b75b6fe7792ded724a43a247b0e7d1e80300b4f000"}, 0x100) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x7) socket$inet6_udplite(0x1c, 0x2, 0x88) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x11, 0x10000000000003, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_emit_ethernet(0x7e, 0x0) setsockopt$sock_int(r2, 0xffff, 0x40, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000140)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c70c932fedd0fa62d416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a300a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x4, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0) syz_extract_tcp_res(0x0, 0x6, 0xc) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) read(r0, &(0x7f0000000080)=""/34, 0x22) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) thr_suspend(&(0x7f0000000200)={0x100000001, 0x7ff}) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) getsockopt$sock_timeval(r1, 0xffff, 0x1005, 0x0, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mkdir(0x0, 0xe5b65c82281e0e9d) unlink(&(0x7f0000000040)='./file0\x00') socket(0x1b, 0x3, 0x0) 2.63903932s ago: executing program 2 (id=665): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x60, 0x0) syz_emit_ethernet(0x11e, &(0x7f00000001c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000023b90780006418be4171739917c58e244038e9f67e762df616dda83e57778e106ac2e723df807c2cd59707637925481c17ccc93e2aaac721515481ffb077e6eedf12e57a3ac4e2d9df24be04a5f6e8a4b32fb48c5edac24dff592d5f953dcbc6162b93b00513fb0435b016169348814685f25d59818e4aef3c51cffbcbfd53c8445c831ee9f0c6a9cc96b61ae3820c5d95224a77a961839cf6949d7cc1eaf1751059600429183fa4cccca2d20630f9e290d83adf3301f60386f9ae8645a20900e207cd5eca87e5d80a889da5ac06c743b6fbdccba1fa048124b29ed744cfc52654cddbbb86e"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) semget$private(0x0, 0x154, 0x260) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r4 = socket(0x1c, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file2\x00', r5, &(0x7f0000000100)='./file1\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(0x0, 0x0) rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @random="7bd88fa2834c", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7}}}}}}) 2.433497071s ago: executing program 1 (id=666): r0 = openat$bpf(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BIOCLOCK(r0, 0x2000427a) ioctl$BIOCSETZBUF(r0, 0x800c4281, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r1 = kqueue() r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000440)={0x28, 0x0, 0x18, &(0x7f00000000c0)="3c9e89526b1700b07f82ee18e15b4e73e47f022de5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x0, 0x0, 0xc]}) r4 = fcntl$dupfd(r3, 0x11, r2) ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000300)={0x0, 0x2, 0x40, 0x8203, &(0x7f0000000000), 0x0, &(0x7f0000000040)}) kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=0x6, 0x4) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) ioctl$MDIOCATTACH(r6, 0xc1c06d00, &(0x7f00000007c0)={0x0, 0x7, 0x1, 0x0, 0x5, 0x2, 0xfffffffc, 0x5, 0x3dc, 0x401, &(0x7f0000000780)='/dev/input/eventN\x00', [0x81, 0x8e, 0x5, 0xf79, 0x7ff, 0x4, 0x2, 0x6c, 0x181, 0x757, 0x3d4a, 0x4, 0x4, 0x6, 0x9, 0x8187, 0x6, 0x7, 0x0, 0x7f, 0x3ff, 0x4, 0xebf1, 0x5, 0x2, 0x2, 0x1, 0x1, 0x9, 0x10000, 0x10be, 0x7, 0x0, 0x5, 0xfffffffe, 0x8, 0x8, 0x51, 0x6, 0x7f, 0x0, 0x7, 0xa04, 0x5, 0x4, 0x1, 0x8, 0x1, 0x2, 0x3, 0xfffffff0, 0x2, 0x1000, 0x1, 0xc, 0x7f, 0x8, 0x7, 0x81, 0x8, 0x5, 0x5687, 0x9, 0x4, 0x3, 0xfffffff8, 0x8, 0x10001, 0x1, 0x200, 0x5, 0x1, 0x80000001, 0x6, 0x9, 0x2, 0x2, 0x5, 0x81, 0x2, 0x2b7, 0x1, 0x8, 0x5, 0x2e94, 0xdb, 0x0, 0x38b378fa, 0xb, 0xfff, 0x0, 0x7fff, 0x2, 0x2, 0x0, 0x9]}) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f00000000c0)='./file2\x00', 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_get_link(0x0, 0x1, &(0x7f00000006c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"^Z\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f{\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7*/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c\xebSj\xfa\x96X\x8d\x00\xde', 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) 2.289582359s ago: executing program 2 (id=667): extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000040)='%[\x00', 0x0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000100)={@multicast1, @rand_addr=0x8, @rand_addr=0x2}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr, @multicast1}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000400)={@multicast1, @rand_addr=0x9}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000080)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x48, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0xd, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast2}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x7e, {0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x13, 0x0, [@remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @rand_addr, @multicast2]}]}}}}}}}) poll(&(0x7f0000000240)=[{r2, 0x2000}, {r1, 0x10}], 0x2, 0xfffffffc) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getgid() ioctl$EVIOCGABS(0xffffffffffffffff, 0x2000004218456b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DIOCSETIFFLAG(r3, 0xc0284459, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}) 1.926690945s ago: executing program 1 (id=668): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x60, 0x0) syz_emit_ethernet(0x11e, &(0x7f00000001c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000023b90780006418be4171739917c58e244038e9f67e762df616dda83e57778e106ac2e723df807c2cd59707637925481c17ccc93e2aaac721515481ffb077e6eedf12e57a3ac4e2d9df24be04a5f6e8a4b32fb48c5edac24dff592d5f953dcbc6162b93b00513fb0435b016169348814685f25d59818e4aef3c51cffbcbfd53c8445c831ee9f0c6a9cc96b61ae3820c5d95224a77a961839cf6949d7cc1eaf1751059600429183fa4cccca2d20630f9e290d83adf3301f60386f9ae8645a20900e207cd5eca87e5d80a889da5ac06c743b6fbdccba1fa048124b29ed744cfc52654cddbbb86e"]) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) semget$private(0x0, 0x154, 0x260) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file2\x00', r3, &(0x7f0000000100)='./file1\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(0x0, 0x0) rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @random="7bd88fa2834c", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7}}}}}}) 1.895831776s ago: executing program 2 (id=669): openat$filemon(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmdt(0x0) openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB='o'], 0x8) sendto$inet6(r1, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) kmq_notify(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) thr_new(0x0, 0x0) fork() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r2 = socket(0x26, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x101, &(0x7f0000000380)=0x1f, 0x4) freebsd11_fhstatfs(&(0x7f0000000100)={{[0x5c8951ac, 0x3bea9983]}, {0x1, 0xfe, "a90000004000000094d200004000"}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x2, 0x0, @rand_addr="65cb30df0200000000382100002f69f4"}}, {{0x1c, 0x1c, 0x1, 0x3, @mcast2}}}, 0xfc) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags}) 1.88124537s ago: executing program 4 (id=670): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x60, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) semget$private(0x0, 0x154, 0x260) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r4 = socket(0x1c, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file2\x00', r5, &(0x7f0000000100)='./file1\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(0x0, 0x0) rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @random="7bd88fa2834c", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7}}}}}}) 1.629290022s ago: executing program 1 (id=671): openat$md(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) r2 = kqueue() syz_emit_ethernet(0x2a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffc) kevent(r2, &(0x7f0000000380)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x6}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x3, &(0x7f0000000340)={0xffff, 0x3, 0x1, 0x3}, 0x8) connect$inet(r3, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20104, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x5410, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open$dir(0x0, 0x1, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_timeval(r5, 0xffff, 0x1005, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@noop, @rr={0x7, 0xf, 0x9, [@broadcast, @loopback, @multicast1]}]}}, @icmp=@timestamp_reply}}}}) sendto(r1, 0x0, 0x0, 0x100, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="c3b58b132350", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000100", 0x34, 0x3a, 0x0, @rand_addr="f6ec06afdf466c130afc590bdb9e4ff6", @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "8f79f7", 0x0, 0x6, 0x0, @mcast1, @rand_addr="dfa7f5ff3bcb22ddb457a19444d9d6f6", [], "d04015f6"}}}}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2) rfork(0x0) 1.628426439s ago: executing program 2 (id=672): r0 = kqueue() kevent(r0, &(0x7f0000000100)=[{0x0, 0xfffffffffffffff9, 0xb, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2, 0x0}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="14000000840000000700000003", @ANYBLOB="1c000000840000000a000000ff0100000000000000000000000000011c000000840000"], 0xe4, 0x140}, 0x18c) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000000c0)="b100050160000000a80000000700000012df8106cfa10500fef96ecfc73fd3357ae36caa0416fa4f376b36acf00b7804be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257169ed0d44a699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, 0x0, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) extattr_get_file(0x0, 0x1, &(0x7f0000000280)='\x00', &(0x7f00000013c0)=""/4096, 0x1000) mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000700)='./file0\x00', r3, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') procctl$PROC_REAP_KILL(0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x100, 0x1, 0xffffffffffffffff, 0x7, 0x0}) fcntl$lock(r0, 0xb, &(0x7f00000001c0)={0x3, 0x2, 0x5, 0x4, r4}) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x100) r6 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_int(r6, 0x0, 0xa, 0x0, 0x0) renameat(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000180)='./file1\x00') sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[], 0x100, 0x20001}, 0x20180) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) cpuset_setaffinity(0x3, 0x4, 0x1e, 0x8, &(0x7f0000000380)={[0x2]}) 1.627589161s ago: executing program 3 (id=673): syz_emit_ethernet(0x76, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x40, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}], "94ef0f13c9356461"}}}}}}}) r0 = kqueue() r1 = getpgid(0x0) aio_error(&(0x7f0000000800)={r0, 0x8, &(0x7f00000002c0), 0x0, [0xfffffffd, 0x8], 0x80, 0x5, 0x5, {0x9, 0x1, &(0x7f0000000740)="eefbef262a69138f0418f28f6a61b7ab4b81c330dcbda5a510f96f01ca251bf991dab2e3e4082c7859ef624e0743e586281e5069cd45a683f248d1189d345f8a3759d4e5890052f21af012a825610e19eac70a62d6e5566deff13054077104f3089c6e2ffae40560040eab476c3fd894bca4d67de6306468eda5a2ffb8a52725a0234037c58ed0e7f399f06f56fe65bb"}, {0x0, 0x11, @sigval_ptr=0xfffffffffffffffe, @tid=r1}}) kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9f4c4662c957", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x7, @multicast2}, @icmp=@generic={0x11, 0x8, 0x0, "e0000001"}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) ioctl$PIO_DEADKEYMAP(r2, 0x20006b09, &(0x7f0000000f00)={0xfd7, [{0x3, [0x8, 0x6, 0x7, 0x6, 0x1, 0x0, 0xffffffff, 0x5, 0x80, 0x8, 0x500, 0x8001, 0x2000, 0x80000000, 0x7, 0x0, 0x6, 0x7, 0x2, 0x8, 0xfff, 0x10001, 0x1000, 0x8, 0x4d97, 0xff, 0x101, 0x3, 0x6, 0x304, 0x6, 0x2, 0xfffffff9, 0x7, 0x7, 0xff, 0x10000, 0x2, 0x5, 0x2, 0x1, 0x3, 0x6f, 0x22df, 0x401, 0x7fffffff, 0xa7, 0xc, 0x6, 0x4, 0x9d49, 0xb, 0x8001, 0x6, 0x2, 0x1, 0x7f, 0x2, 0x6, 0x80000000, 0x2, 0x96fc, 0x200, 0x0, 0xfffffc00, 0x8, 0x0, 0x1e780, 0x50, 0x8001, 0x4, 0x9, 0x7, 0xffffffff, 0xfffeffff, 0xee, 0x0, 0x8, 0x7fff, 0x0, 0x2, 0x5b23, 0x4, 0xffffffff, 0x1, 0xf05, 0x9, 0xffffffff, 0x9, 0x80000001, 0x8, 0x9, 0x4, 0x7fffffff, 0x8000, 0x2, 0x8001, 0x8, 0x4, 0x3, 0x6, 0x80, 0xb3ab, 0x9]}, {0x4, [0x4, 0x3, 0x1, 0x3, 0x80000000, 0x4, 0x400, 0xeec, 0xf557, 0x8, 0x7fff, 0x8, 0x8, 0x401, 0xb, 0xa, 0xfad6, 0x8, 0x5, 0x6, 0x40, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0xc77e, 0x8, 0x81, 0xc9, 0xa4, 0xfffffff8, 0x2, 0x921, 0x7fffffff, 0x24, 0x2, 0x370c, 0xb00, 0x4, 0x52a, 0x8, 0x7, 0xff, 0x8, 0x4, 0x370a8713, 0x9, 0x6, 0x428, 0xfffffff8, 0x2, 0x7, 0x4, 0x0, 0x5, 0xffff, 0x81, 0x0, 0x8, 0x9, 0x0, 0x7, 0x3, 0x2, 0x2, 0xff, 0x1, 0x4, 0x3, 0x7, 0x2, 0x6, 0x3, 0xbb, 0xffff, 0x8, 0x4, 0x0, 0x9, 0x7, 0x703, 0x0, 0xfffffff9, 0x9, 0x6, 0x4, 0xb32, 0x4, 0x10, 0x9, 0x40, 0x3, 0x4, 0x91, 0x0, 0x0, 0x7fffffff, 0x8, 0x66f53e15, 0x1, 0x8000, 0x4]}, {0x1, [0x826, 0x1000, 0x9, 0xffff8001, 0x3, 0xffffff77, 0x6, 0x1, 0x7, 0xd, 0x9, 0x6621, 0x5, 0x1, 0x6, 0x0, 0x3, 0x44, 0x5, 0x7f, 0x2, 0x40, 0xe, 0x10001, 0x1, 0xfffffff7, 0x80, 0x6, 0x7, 0xe51, 0x1ff, 0x2, 0x2, 0xf8000000, 0x40, 0x0, 0x400, 0x10000, 0x7, 0x1, 0x8, 0xc03, 0x3, 0x2, 0x122, 0x7, 0xf, 0x7, 0x31c, 0xcbc0, 0x81, 0x0, 0xffffffff, 0xd08, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6d, 0xfb, 0x3b, 0x8, 0x8, 0x5834, 0x8, 0x7fff, 0x1, 0x4, 0x0, 0x5, 0x9, 0xaa, 0x0, 0xa, 0x4, 0x80000001, 0x0, 0x4, 0x7fff, 0x0, 0xdc5, 0x6, 0x4, 0x8, 0x8001, 0x4, 0x9, 0x9, 0x7f, 0x3, 0xd5ca, 0x7, 0x7fff, 0x1, 0x2, 0x80, 0x1d12, 0x3, 0x0, 0xfffffffc, 0xe358, 0x200, 0x5]}, {0x0, [0xfffffff6, 0xb729, 0xa, 0x9, 0x2, 0x5, 0x9, 0x6, 0x40, 0x3fc3, 0x0, 0x3a, 0x72, 0x7ff3, 0x7, 0x2, 0xdcb, 0x81, 0x1, 0x7fffffff, 0x282d, 0x1ff, 0x10000000, 0x89, 0xffff0000, 0x7fff, 0x10, 0x2, 0x2, 0x4, 0xffffffff, 0xde, 0x3ff, 0x0, 0x6cd9, 0x101, 0x7, 0x1000, 0x2, 0x7f, 0x400001, 0xe03, 0x7, 0x5, 0x3, 0x2, 0x1, 0x4, 0x1, 0x2, 0x7f, 0x8, 0xf, 0x9, 0x50, 0x5, 0x0, 0x0, 0x93, 0x1, 0x4, 0x2, 0x18, 0x7ff, 0xd, 0x4, 0x5, 0x7c8, 0x9, 0x9f, 0x7f2d, 0x8fa, 0x1, 0xfffffff9, 0x9a9d, 0x5, 0x6, 0x8, 0x2e, 0x6, 0x1, 0x7f, 0x8, 0x5, 0x0, 0x0, 0x2, 0x40, 0x9, 0x7, 0xd5e, 0x1, 0x1ff, 0x7, 0x3ff, 0x10c, 0x7fff, 0x2, 0x7, 0x7, 0x1, 0x6, 0x6, 0x38]}, {0x1ff, [0x2, 0x0, 0x2, 0x2, 0x3e, 0xe, 0x401, 0xb, 0x0, 0x31, 0xad6b, 0x0, 0x5, 0x1ff, 0x3b, 0x9, 0xd, 0x1, 0x574b, 0x9, 0x5, 0xfffffff7, 0x9, 0x3, 0x7, 0x6, 0xa41, 0x6, 0x7, 0x1, 0x3, 0xa, 0xfffffffb, 0x2, 0x5, 0xe0000000, 0x3, 0x80000000, 0x8001, 0xfffffff9, 0x3, 0x2, 0x553, 0x40, 0x6f4, 0x0, 0x6, 0xd, 0x7, 0x2, 0x2, 0x8, 0x100, 0xd, 0x7, 0xfffffff6, 0xc3, 0x6, 0x8, 0x9, 0x0, 0x2000, 0x3ae, 0x40000000, 0x4, 0xc08, 0x8, 0x1000, 0x9, 0x10001, 0x10001, 0x0, 0x3, 0x200, 0x5, 0x5, 0x8, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7186b6e1, 0x7, 0x4, 0x10, 0x8, 0x7, 0xffffffff, 0xffffffff, 0x85f5, 0x0, 0x1, 0x800, 0x5, 0x5, 0x5, 0x80000001, 0x5, 0x8000, 0x3, 0xffffffff, 0x8, 0x1ff]}, {0x7db, [0x5, 0x7, 0x7, 0x9, 0x2, 0x6, 0x80000000, 0xffffffff, 0x6, 0x4, 0x6, 0x67d7, 0x8, 0x10001, 0xfffffffa, 0x2, 0x4, 0x6, 0xfffffe01, 0x8, 0xffffff93, 0x3, 0xa37, 0x3ff, 0x8, 0x7c8, 0x5, 0x101, 0x8, 0x2, 0x1000, 0x0, 0x3ff, 0x1, 0x3, 0x6, 0x1f64d413, 0x5, 0x1, 0xfffffffc, 0xedf, 0x2, 0xc, 0x2, 0x8, 0x0, 0x7, 0x9, 0x149, 0x5, 0x2, 0x5, 0x7fff, 0x0, 0x70, 0x4, 0x2, 0x2, 0x5, 0xba38, 0x2, 0x7, 0x2, 0xfffffffa, 0x2, 0x2, 0x9, 0xdd, 0xff, 0x3, 0x401, 0x200, 0x0, 0x9ad, 0x6, 0x91dc, 0x7fffffff, 0x6, 0xf0ff, 0x4, 0x20007, 0xff8, 0x8001, 0x0, 0x10000, 0xe, 0x80, 0x1000, 0x622, 0x7fffffff, 0x2e, 0x4, 0x4, 0x2, 0x5, 0x0, 0xe, 0xffffffff, 0xfffffff7, 0x6, 0x7f, 0x20d4, 0x3, 0x401]}, {0xdb6d, [0x8, 0x1, 0xffff8001, 0x6, 0x9, 0x0, 0x2, 0x6, 0xfffffff2, 0x7f, 0x8, 0x8, 0x7, 0xfffff755, 0x6, 0x9, 0x4, 0x5, 0x50f, 0x100, 0x6, 0x5, 0x3, 0x9e3, 0x7, 0xfff, 0x4, 0x7, 0x9, 0x8, 0x2, 0x0, 0xb4d, 0x2, 0x200, 0x4, 0x5, 0x9, 0x7df, 0x2, 0x7ff, 0x7, 0x1196, 0x2, 0x1afa, 0x7, 0xf, 0x80000001, 0x8, 0x4, 0x3, 0x1, 0x5, 0x2, 0x4, 0x9, 0x462, 0xf1, 0xffffffca, 0xad58, 0x66d, 0x7, 0x1, 0x1e, 0x5, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfa, 0x701, 0x81, 0xea2, 0x3, 0x7ff, 0x8, 0xb11, 0x3, 0x1000, 0x2, 0x400, 0x1ff, 0x6, 0x101, 0x6, 0xfffffffe, 0x5, 0x1, 0x81, 0x5, 0x3ff, 0x8, 0x4, 0x4, 0x2, 0x4, 0xfffffff9, 0xf, 0x573, 0xb, 0x6, 0x5, 0x7]}, {0x0, [0x6, 0x55f, 0x7fff, 0xad3, 0x4, 0x0, 0x0, 0x6b, 0x9, 0x101, 0x8, 0x3ff, 0x5, 0x40, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x3, 0x81, 0xfffffffa, 0x9, 0x401, 0xda, 0x6, 0xfffffff7, 0x200, 0x2, 0xb, 0x1, 0x3, 0x2, 0xd7, 0x0, 0x805, 0xffffffff, 0x40, 0x1, 0xd, 0x8001, 0x0, 0xaca, 0x3, 0xff, 0x5c, 0x100, 0x10000, 0x1, 0xffffffff, 0xffff, 0x40, 0x0, 0x914, 0x8, 0x7, 0x8, 0x6, 0x5, 0xa0, 0x231, 0xffff, 0xf1a, 0x100, 0x6, 0x4, 0x7fffffff, 0xc, 0x9, 0x7fff, 0x101, 0x8000, 0x0, 0x8003, 0x4, 0x9, 0xffffffff, 0x4, 0x10000, 0x0, 0x4, 0x6, 0xe45, 0x1, 0xd, 0xd7, 0x8000, 0xfffffff7, 0x6, 0x5, 0x200, 0x4, 0x5, 0x7, 0x5, 0x81, 0x8, 0x0, 0x6, 0x4, 0x8, 0xb4f, 0x9]}, {0x3, [0xfffffff5, 0x4, 0x9, 0x401, 0xd97, 0x80000001, 0x0, 0x470, 0x1, 0x6, 0x2, 0x4, 0x2f6229ce, 0x2, 0xa, 0x8, 0x7f, 0x4, 0x34, 0x9, 0x0, 0x5e, 0x7fffffff, 0xd2df, 0x54, 0x8, 0x6, 0x7ff, 0x5, 0x3, 0x6, 0x0, 0xffffffff, 0xffffffff, 0x3, 0x80000000, 0x9, 0x2, 0x18, 0x8, 0xff, 0x5, 0x9, 0x4, 0xfdb, 0x0, 0x6, 0x0, 0x6, 0x8, 0x2, 0x400, 0x8, 0x0, 0x8, 0x1, 0x401, 0x2400, 0x1, 0x5, 0x7f, 0x7ff, 0x80, 0xed, 0x70c, 0x9, 0x4, 0xb8, 0x1d3, 0x7fff, 0x2, 0xd74b, 0x1000, 0x8000, 0xff, 0x6, 0x10, 0xfff, 0x9, 0x1fe0, 0x5, 0x0, 0xffffff80, 0x0, 0xfd9, 0x1000, 0x6, 0xcb4, 0x7b9, 0x6, 0x4, 0x9, 0x4, 0x8, 0xfffffff7, 0x80000000, 0x80000000, 0x7f, 0x800, 0x2, 0x1, 0x1, 0x6, 0x7]}, {0x1, [0x2, 0x6, 0x5, 0x3ff, 0x9, 0x9, 0xfffffff6, 0x3, 0xfffffffd, 0x10000, 0xfffffe01, 0xfffffff7, 0xfffffffc, 0x7fff, 0xffffffb9, 0x32c, 0x9, 0x1, 0x50dc, 0x6, 0x8, 0x8, 0x2e, 0x8a05, 0x7, 0x3, 0xb, 0x1, 0xffff3c32, 0x8001, 0x2, 0xc3e0, 0x2, 0x6e31, 0x3, 0x2, 0x4, 0x8, 0x4, 0xd6, 0xfffffff9, 0x9, 0x9fc, 0x6, 0x81, 0xffffffc0, 0xc2ee, 0x6cb, 0x3, 0x35, 0x68, 0x6, 0xe28a, 0x7, 0xff, 0x8, 0x8, 0x1, 0x9f, 0x6, 0x8, 0x2, 0x4, 0xa4, 0x8, 0x7fff, 0x1, 0xfffff001, 0x0, 0x9, 0xa, 0x274, 0x9, 0x5, 0x9a, 0x9c99, 0x40081, 0xc, 0x18, 0x7, 0x0, 0x8, 0x10, 0x7, 0x6, 0x8, 0xff, 0x6, 0x7, 0x4, 0x8, 0x2, 0xaa37, 0x8, 0x5, 0x8, 0x1f, 0x4, 0x2, 0x1, 0xd, 0x1, 0xb9, 0x4]}, {0x0, [0x0, 0x5, 0x1, 0xe, 0x8000, 0x3, 0xafc, 0x401, 0x6, 0x8, 0x0, 0x8fa, 0x7f, 0xfffffff6, 0x120000, 0xff, 0xb4, 0xc, 0x6, 0x7ff, 0x5, 0x100, 0x10001, 0x3, 0x9, 0x101, 0xffffffff, 0xc, 0x8001, 0xc, 0x800, 0xa227, 0x5, 0x3ff, 0x1, 0x4, 0x1, 0x8, 0x2277, 0x7, 0xe9, 0x3, 0x1, 0x0, 0x2000, 0x8, 0x6, 0x1, 0x3, 0x3, 0x8, 0x5, 0x400, 0xaec, 0xfffffff7, 0x8c86, 0x9, 0x0, 0x8, 0x8, 0xe, 0xa, 0x3, 0x3e, 0x10000, 0x1, 0x46, 0x1, 0x82, 0x5, 0x5, 0x7, 0x184, 0xc3f2, 0xfffffffb, 0x8, 0x3, 0x5, 0xfffffff8, 0x0, 0xa436, 0x81, 0x4, 0x6, 0x7, 0x0, 0x0, 0x3b9, 0xb81a, 0x7, 0x1, 0x3, 0xffffffff, 0x8, 0xe, 0xffffa46a, 0x7fff, 0x0, 0x2, 0x201, 0x4, 0x1, 0x436f95d4, 0x1]}, {0x5, [0x0, 0xffffffff, 0x0, 0x5, 0x7, 0x2, 0x2, 0x7ff, 0x438, 0x2, 0x83, 0x4, 0x8, 0x10001, 0x5e54, 0x4, 0xd, 0x8, 0x4b, 0x3, 0x9, 0x7000000, 0x3, 0x8, 0x1, 0x10001, 0xf39a, 0x17, 0x5, 0xd94f, 0x87a9f2b, 0x4, 0x8, 0x9, 0x6, 0x4, 0x7, 0x4, 0x2, 0x10000, 0x8, 0x4e2, 0x10, 0x0, 0xd, 0x9, 0x0, 0x1, 0x4, 0xda, 0x28, 0x10001, 0x29, 0xff, 0x7, 0x61a, 0x3, 0x20006, 0x5, 0x0, 0x3, 0x6, 0x7ff, 0x3b0, 0x8, 0x3, 0x2, 0x0, 0xc34c, 0xd, 0xe1, 0x5, 0x6, 0x6, 0x8001, 0x3, 0x4, 0x8, 0x69e, 0x4, 0xd, 0x0, 0x3, 0x2, 0x4, 0x0, 0x7fffffff, 0x5, 0x4, 0x5, 0x3, 0x5, 0x2, 0x88, 0x81, 0x6, 0x10001, 0x8, 0x7f, 0x200, 0x0, 0x3, 0x4, 0x8]}, {0x4000000, [0x80, 0x9, 0x0, 0x4, 0x2, 0x2, 0x6, 0x7, 0xff, 0x10001, 0x7, 0x2, 0x3, 0x3, 0x9eca, 0xc9, 0x9, 0xff, 0x7f, 0xfffffff8, 0xa250, 0x6, 0x92, 0xfffff989, 0x3, 0x5, 0x1, 0x4, 0x3, 0x94, 0x1, 0xfffffff9, 0x800, 0x9, 0x2, 0xf8, 0xcca, 0xffffff01, 0x5c, 0x2, 0x10, 0x4, 0xd, 0x15f5, 0x9, 0x7f, 0x5, 0xfffffffa, 0x2, 0xe0000000, 0x8001, 0x9, 0x1, 0x8, 0xc327, 0xfffffffe, 0xea, 0x9, 0x9, 0x8000, 0x2, 0x8000, 0x8, 0x3ff, 0x5, 0x4, 0x5, 0x81d2, 0x4, 0x6, 0x40, 0x9a, 0x5, 0x0, 0x7ff, 0x6, 0x1, 0x718f, 0x3, 0x6, 0x3, 0x4, 0x8, 0x8001, 0x200, 0x802e, 0x2, 0x5, 0x10000, 0x8, 0x101, 0x1, 0xd, 0x9, 0x0, 0x0, 0x7, 0x3, 0xf57a, 0x1ff, 0xff, 0x1, 0x12a, 0x9]}, {0x6, [0x5, 0xfffffc01, 0x6366, 0xf, 0x4, 0x432, 0x3, 0xba6c0000, 0x0, 0x7, 0x4c000000, 0x3, 0x0, 0x3ff, 0x2, 0x4, 0xcc39, 0x473, 0x3, 0x6, 0x3, 0xb, 0x6, 0x0, 0x7ff, 0x6d0, 0x187e9fac, 0x7, 0x18, 0x3, 0x1, 0x2, 0xfffffffb, 0x1, 0x6, 0x4, 0x5, 0x4, 0x8, 0x88, 0x0, 0x80000000, 0xb, 0x4, 0x9, 0x3ff, 0x7, 0xd8b, 0x502e, 0x7, 0x7, 0x4, 0x6, 0xffffffff, 0x8, 0x1, 0x1ff, 0x97f, 0x310, 0x3, 0xcc0, 0x5, 0x169a, 0x10000, 0x43ad4fa3, 0x2, 0x9, 0x6, 0x401, 0xf, 0xffffff7f, 0x4b8a, 0x8, 0x7, 0x8ca9, 0x3, 0x9, 0xd7, 0x374, 0x8, 0x5, 0x4, 0x3, 0x5, 0x7fff, 0x7, 0x800, 0x0, 0x4, 0x10001, 0x80000001, 0x7fff, 0x7, 0xc9, 0x800, 0x9, 0x80, 0x8, 0xd2, 0x2, 0x1, 0x0, 0x8330, 0x9]}, {0x200, [0x784e2393, 0x4, 0x6, 0x9, 0xedf, 0x1, 0x3, 0x101, 0x9, 0x0, 0x101, 0x10, 0xf, 0x1, 0xc5, 0xa588, 0x0, 0xe, 0x6, 0x2, 0x0, 0x8, 0xe, 0xa, 0x8, 0x2, 0x7e, 0x0, 0x6, 0x80000000, 0x77, 0x2, 0x1000, 0x199, 0x2, 0xbf63e0, 0x0, 0xc6, 0x0, 0x400, 0x2, 0x140, 0x5, 0x6, 0x0, 0x9, 0xc7, 0x3c, 0xffffffff, 0x0, 0x5, 0x0, 0x8, 0x3, 0x2, 0x3486238e, 0x0, 0x7, 0xffffffff, 0xd93, 0x6, 0x2, 0x8, 0xfb6, 0x7, 0x5, 0x2, 0x1, 0x1, 0x80000001, 0x9, 0xc, 0x3, 0x8, 0xd6b, 0x2b3a, 0x6, 0xb8, 0x0, 0x9, 0xc, 0x0, 0x7, 0x6, 0x69e1, 0x100, 0x4, 0xfe, 0x4800000, 0x612, 0xfffffff8, 0xbe1, 0xe, 0xffffff7f, 0x5a8, 0x8001, 0x4e8a095, 0x6, 0x9, 0xffffffff, 0x3, 0xbbe, 0x5, 0x50]}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) clock_getres(0xf, &(0x7f0000000ac0)) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000015", 0x70, 0x2c, 0xff, @rand_addr="e1aaa2241dc0fb000000000000000178", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6, {0x7, 0x6, "18deb3", 0x0, 0x71, 0x1, @loopback, @empty, [@routing={0x6, 0x0, 0x0, 0x4}, @hopopts={0x70, 0x0, '\x00', [@enc_lim]}, @routing={0x4b, 0x4, 0x0, 0x5, 0x0, [@loopback, @mcast1]}]}}}}}}}) ppoll(0x0, 0x0, 0x0, &(0x7f00000008c0)={[0x9, 0x5, 0xad26, 0x4]}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="d5", 0xfde7) openat$crypto(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) poll(0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f00000002c0)={0x3, 0x3}) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r4, 0x29, 0x44, 0x0, 0x0) posix_fallocate(r3, 0x0, 0x10007) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, &(0x7f0000000280)={'bbr\x00'}, 0x24) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) sendto(r5, &(0x7f0000000e40)="b9d5cf29033fda9f0d47f14a030000005e2f1027c01466b7a90116180f8365ae6047308780f3f80890af100e69002e57a9e620e17489f5763edb6df4781e510cbe9f1bb7f218f4c42a4ed5bc6103931b9ea542386dc931527f97c0", 0x5b, 0x100, &(0x7f0000000040)=@in={0x10, 0x2, 0x1, @multicast1}, 0x10) 1.626215829s ago: executing program 4 (id=674): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003480)=""/4093, 0xffd}], 0x1, 0x0}, 0x400c0) setregid(0x0, 0x0) mount(&(0x7f0000000000)='hammer2\x00', 0x0, 0x40000002, &(0x7f0000000240)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) thr_self(&(0x7f0000000040)=0x0) sigtimedwait(&(0x7f0000000540)={[0x1ff, 0x8, 0x4, 0xa2]}, 0x0, 0x0) thr_set_name(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00', 0x80}, 0x24) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r2, 0x0, 0x20104) r3 = kqueue() fork() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(r3, &(0x7f0000000000), 0x100f2, 0x0, 0xfc, 0x0) aio_suspend(0x0, 0x0, &(0x7f0000000e40)={0x0, 0xa99c}) 609.051489ms ago: executing program 2 (id=675): openat$filemon(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmdt(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB='o'], 0x8) sendto$inet6(r1, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) thr_new(0x0, 0x0) fork() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r2 = socket(0x26, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x101, &(0x7f0000000380)=0x1f, 0x4) freebsd11_fhstatfs(&(0x7f0000000100)={{[0x5c8951ac, 0x3bea9983]}, {0x1, 0xfe, "a90000004000000094d200004000"}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x2, 0x0, @rand_addr="65cb30df0200000000382100002f69f4"}}, {{0x1c, 0x1c, 0x1, 0x3, @mcast2}}}, 0xfc) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags}) 539.660242ms ago: executing program 3 (id=676): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r2 = accept$inet6(r1, 0x0, &(0x7f00000002c0)) fcntl$lock(r2, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 488.48444ms ago: executing program 4 (id=677): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) r1 = socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getppid() r2 = accept$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00000002c0)=0x1c) fcntl$lock(r2, 0x16, &(0x7f0000000080)={0x570, 0x0, 0x2, 0xfffffffffffffff9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) fhlink(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@random="ef258162e50c", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x2c, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x23b, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "000200", 0x3c, 0x6, 0x0, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x10, "a05646940fb9d38ac868ab1e2889"}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @broadcast, @local={0xac, 0x14, 0x0}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 408.922283ms ago: executing program 2 (id=678): openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x800a, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(0x0, 0x0, 0x5) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) kmq_timedsend(0xffffffffffffffff, &(0x7f0000000500)="35983c0ee5604e26db5604eda2f4e5ccbd1ccf90bfb579a1334aca98bd901edf681f9667cc154f6562e67385f704511924", 0x31, 0x9, &(0x7f0000000480)={0xca, 0x1581}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) freebsd11_fhstatfs(&(0x7f00000000c0)={{[0x7, 0x1f149f5f]}, {0x9, 0x100, "69e75a746cdece4d916efb8f54177bc4"}}, &(0x7f0000000540)) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0xd2) fchownat(r4, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') setsockopt$inet_mreqsrc(r2, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r5 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r5}) wait4(r5, 0x0, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x20088, 0x0, 0x0) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fhlinkat(&(0x7f0000000280)={{[0x2, 0x3]}, {0x5, 0x2, "b45300"}}, r6, 0x0) 310.455965ms ago: executing program 1 (id=679): openat$filemon(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmdt(0x0) openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB='o'], 0x8) sendto$inet6(r1, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) kmq_notify(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) thr_new(0x0, 0x0) fork() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r2 = socket(0x26, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x101, &(0x7f0000000380)=0x1f, 0x4) freebsd11_fhstatfs(&(0x7f0000000100)={{[0x5c8951ac, 0x3bea9983]}, {0x1, 0xfe, "a90000004000000094d200004000"}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x2, 0x0, @rand_addr="65cb30df0200000000382100002f69f4"}}, {{0x1c, 0x1c, 0x1, 0x3, @mcast2}}}, 0xfc) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags}) 0s ago: executing program 1 (id=680): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = openat$bpf(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BIOCLOCK(r1, 0x2000427a) ioctl$BIOCSETZBUF(r1, 0x800c4281, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000440)={0x28, 0x0, 0x18, &(0x7f00000000c0)="3c9e89526b1700b07f82ee18e15b4e73e47f022de5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x0, 0x0, 0xc]}) r4 = fcntl$dupfd(r3, 0x11, r2) ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000300)={0x0, 0x2, 0x40, 0x8203, &(0x7f0000000000), 0x0, &(0x7f0000000040)}) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0x6, 0x4) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) ioctl$MDIOCATTACH(r6, 0xc1c06d00, &(0x7f00000007c0)={0x0, 0x7, 0x1, 0x0, 0x5, 0x2, 0xfffffffc, 0x5, 0x3dc, 0x401, &(0x7f0000000780)='/dev/input/eventN\x00', [0x81, 0x8e, 0x5, 0xf79, 0x7ff, 0x4, 0x2, 0x6c, 0x181, 0x757, 0x3d4a, 0x4, 0x4, 0x6, 0x9, 0x8187, 0x6, 0x7, 0x0, 0x7f, 0x3ff, 0x4, 0xebf1, 0x5, 0x2, 0x2, 0x1, 0x1, 0x9, 0x10000, 0x10be, 0x7, 0x0, 0x5, 0xfffffffe, 0x8, 0x8, 0x51, 0x6, 0x7f, 0x0, 0x7, 0xa04, 0x5, 0x4, 0x1, 0x8, 0x1, 0x2, 0x3, 0xfffffff0, 0x2, 0x1000, 0x1, 0xc, 0x7f, 0x8, 0x7, 0x81, 0x8, 0x5, 0x5687, 0x9, 0x4, 0x3, 0xfffffff8, 0x8, 0x10001, 0x1, 0x200, 0x5, 0x1, 0x80000001, 0x6, 0x9, 0x2, 0x2, 0x5, 0x81, 0x2, 0x2b7, 0x1, 0x8, 0x5, 0x2e94, 0xdb, 0x0, 0x38b378fa, 0xb, 0xfff, 0x0, 0x7fff, 0x2, 0x2, 0x0, 0x9]}) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f00000000c0)='./file2\x00', 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_get_link(0x0, 0x1, &(0x7f00000006c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"^Z\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f{\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7*/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c\xebSj\xfa\x96X\x8d\x00\xde', 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff8451c450(0xfffffe0077ae1178) 0.012070694 s Out of ktrace request objects. Jul 29 10:18:36 ci-freebsd-main-3 kernel: arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.3.187 on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e5ab6e0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 5, writecount 3, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005414a3e0 ref 1 pages 264 cleanbuf 25 dirtybuf 8 lock type ufs: EXCL by thread 0xfffffe005411d000 (pid 1081, syz-executor, tid 100405) nlink=1, effnlink=1, size=1048576, extsize 0 generation=d3a51969, uid=0, gid=0, flags=0x40008 ino 89, on dev gpt/rootfs tap4: Ethernet address: 58:9c:fc:10:d3:96 tap4: link state changed to UP arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.3.187 on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 WARNING pid 1170 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 Warning! syz-executor[1200] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 vnode_pager_putpages: zero-length write at 0 resid 14434 0xfffffe006e5ab000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 7, writecount 4, refcount 2 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe0054149e88 ref 1 pages 4 cleanbuf 0 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0054117780 (pid 1206, syz-executor, tid 100586) nlink=1, effnlink=1, size=14434, extsize 0 generation=48c7ac94, uid=0, gid=0, flags=0x40008 ino 99, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 pid 1226 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - coredumpsize limit is 0) arp: 00:00:00:00:00:00 attempts to modify permanent entry for 172.20.3.187 on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579000 WARNING pid 1268 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 md2: truncating fractional last sector by 1 bytes lock order reversal: 1st 0xfffffe006e5abe30 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3384 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:185 lock order proctree -> ufs established at: #0 0xffffffff81653331 at witness_checkorder+0x781 #1 0xffffffff814bb286 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81d92e3b at ffs_lock+0x18b #3 0xffffffff822f83e7 at VOP_LOCK1_APV+0x57 #4 0xffffffff817c34be at _vn_lock+0x14e #5 0xffffffff817c3d68 at vn_close1+0x1e8 #6 0xffffffff814acb7a at ktrops+0x41a #7 0xffffffff814ac2ed at sys_ktrace+0xaed #8 0xffffffff82133662 at amd64_syscall+0x4e2 #9 0xffffffff820d86fb at fast_syscall_common+0xf8 lock order ufs -> proctree attempted at: #0 0xffffffff81654202 at witness_checkorder+0x1652 #1 0xffffffff81544fbf at _sx_slock_int+0x13f #2 0xffffffff81610b2d at uprintf+0x14d #3 0xffffffff81dbf0df at ufs_rmdir+0xdf #4 0xffffffff822f708d at VOP_RMDIR_APV+0xcd #5 0xffffffff817b80fa at kern_frmdirat+0x87a #6 0xffffffff82133662 at amd64_syscall+0x4e2 #7 0xffffffff820d86fb at fast_syscall_common+0xf8 vnode_pager_putpages: zero-length write at 0 resid 14434 0xfffffe007b926528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 7, writecount 4, refcount 2 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00541683e0 ref 1 pages 4 cleanbuf 0 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe005414e780 (pid 1379, syz-executor, tid 100859) nlink=1, effnlink=1, size=14434, extsize 0 generation=d04293ba, uid=0, gid=0, flags=0x40008 ino 132, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 Accounting enabled Accounting disabled if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe00778a9c08: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 8, writecount 6, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541568b8 ref 1 pages 544 cleanbuf 63 dirtybuf 5 lock type ufs: EXCL by thread 0xfffffe0054143000 (pid 1418, syz-executor, tid 100904) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=98a9c975, uid=0, gid=0, flags=0x40008 ino 149, on dev gpt/rootfs arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.3.187 on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e4c5c08: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 7, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00541799b0 ref 1 pages 264 cleanbuf 32 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005411c780 (pid 1471, syz-executor, tid 100984) nlink=1, effnlink=1, size=1048576, extsize 0 generation=4319ee36, uid=0, gid=0, flags=0x40008 ino 146, on dev gpt/rootfs arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.3.187 on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.1.170 on tap1! WARNING pid 1541 (syz-executor): ioctl sign-extension ioctl 2000004218456b vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e4c3370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 8, writecount 6, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005417cba0 ref 1 pages 544 cleanbuf 63 dirtybuf 5 lock type ufs: EXCL by thread 0xfffffe0054186000 (pid 1537, syz-executor, tid 101080) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=2be5e070, uid=0, gid=0, flags=0x40008 ino 165, on dev gpt/rootfs arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.2.187 on tap2 WARNING pid 1557 (syz-executor): ioctl sign-extension ioctl 2000004218456b lock order reversal: (sleepable after non-sleepable) 1st 0xfffffe00595c8c88 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1641 2nd 0xffffffff83cc3a40 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1340 lock order tun_ioctl -> tun_mtx established at: #0 0xffffffff81653331 at witness_checkorder+0x781 #1 0xffffffff814d9197 at __mtx_lock_flags+0x187 #2 0xffffffff8183ca0c at tunifioctl+0x15c #3 0xffffffff81817e8e at ifhwioctl+0xefe #4 0xffffffff8181c002 at ifioctl+0xde2 #5 0xffffffff816620da at kern_ioctl+0x4ca #6 0xffffffff81661b1e at sys_ioctl+0x36e #7 0xffffffff82133662 at amd64_syscall+0x4e2 #8 0xffffffff820d86fb at fast_syscall_common+0xf8 lock order tun_mtx -> tun_ioctl attempted at: #0 0xffffffff81654202 at witness_checkorder+0x1652 #1 0xffffffff815426e9 at _sx_xlock+0x139 #2 0xffffffff8183c93a at tunifioctl+0x8a #3 0xffffffff81818cfd at ifhwioctl+0x1d6d #4 0xffffffff8183a528 at tunioctl+0xd38 #5 0xffffffff811b7e56 at devfs_ioctl+0x266 #6 0xffffffff822f5ae7 at VOP_IOCTL_APV+0x87 #7 0xffffffff817be5e7 at vn_ioctl+0x3c7 #8 0xffffffff811b8d19 at devfs_ioctl_f+0x69 #9 0xffffffff816620da at kern_ioctl+0x4ca #10 0xffffffff81661b1e at sys_ioctl+0x36e #11 0xffffffff82133662 at amd64_syscall+0x4e2 #12 0xffffffff820d86fb at fast_syscall_common+0xf8 if_delmulti_locked: detaching ifnet instance 0xfffffe0058141800 md5: truncating fractional last sector by 1 bytes FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe007bb2f000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 7, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00541772e8 ref 1 pages 264 cleanbuf 32 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe00541b7780 (pid 1604, syz-executor, tid 101185) nlink=1, effnlink=1, size=1048576, extsize 0 generation=a295b209, uid=0, gid=0, flags=0x40008 ino 178, on dev gpt/rootfs md8: truncating fractional last sector by 1 bytes md58027: truncating fractional last sector by 4 bytes FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e5a1dc0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 6, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00540d88b8 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe0054188000 (pid 1629, syz-executor, tid 101208) nlink=1, effnlink=1, size=1048576, extsize 0 generation=e585723d, uid=0, gid=0, flags=0x40008 ino 192, on dev gpt/rootfs md10: truncating fractional last sector by 1 bytes WARNING pid 1675 (syz-executor): ioctl sign-extension ioctl 2000004218456b FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 14434 0xfffffe007b928000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 7, writecount 4, refcount 2 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe0007801aa8 ref 1 pages 4 cleanbuf 0 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe005419f000 (pid 1683, syz-executor, tid 101283) nlink=1, effnlink=1, size=14434, extsize 0 generation=fe40e355, uid=0, gid=0, flags=0x40008 ino 203, on dev gpt/rootfs WARNING pid 1694 (syz-executor): ioctl sign-extension ioctl 2000004218456b WARNING pid 1714 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe005857b800 if_delmulti_locked: detaching ifnet instance 0xfffffe0077b5a800 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006debe000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 8, writecount 6, refcount 69 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541c47c0 ref 1 pages 544 cleanbuf 64 dirtybuf 3 lock type ufs: EXCL by thread 0xfffffe00541b1780 (pid 1751, syz-executor, tid 101380) nlink=1, effnlink=1, size=2147483650, extsize 0 generation=d2b5b443, uid=0, gid=0, flags=0x40008 ino 222, on dev gpt/rootfs arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.2.187 on tap2 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 md12: truncating fractional last sector by 1 bytes FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe007bedaa50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837132c0 usecount 6, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541e43e0 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe00541d9000 (pid 1777, syz-executor, tid 101426) nlink=1, effnlink=1, size=1048576, extsize 0 generation=9816b912, uid=0, gid=0, flags=0x40008 ino 210, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 WARNING pid 1806 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 md13: truncating fractional last sector by 1 bytes md14: truncating fractional last sector by 8 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 WARNING pid 1858 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 WARNING pid 1872 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe0058579800 WARNING pid 1874 (syz-executor): ioctl sign-extension ioctl 2000004218456b WARNING pid 1891 (syz-executor): ioctl sign-extension ioctl 2000004218456b panic: handle_workitem_remove: bad file delta cpuid = 1 time = 4 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c59690 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c597f0 vpanic() at vpanic+0x257/frame 0xfffffe0056c599b0 panic() at panic+0xb5/frame 0xfffffe0056c59a70 handle_workitem_remove() at handle_workitem_remove+0xedf/frame 0xfffffe0056c59bb0 handle_workitem_remove() at handle_workitem_remove+0xc0f/frame 0xfffffe0056c59cf0 process_worklist_item() at process_worklist_item+0x525/frame 0xfffffe0056c59e40 softdep_process_worklist() at softdep_process_worklist+0xfd/frame 0xfffffe0056c59e90 softdep_flush() at softdep_flush+0x1a4/frame 0xfffffe0056c59ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c59f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c59f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 14 tid 100094 ] Stopped at kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827cb4c0 .str.27 rsp 0xfffffe0056c597d0 rbp 0xfffffe0056c597f0 rsi 0 rdi 0xffffffff81614a99 printf+0x149 r8 0 r9 0xffffffff r10 0x1000000001011 r11 0x9 r12 0xfffffe00540c6780 r13 0xfffffffffffffffd r14 0xffffffff827cb4c0 .str.27 r15 0 rip 0xffffffff815fe5ce kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> show proc Process 14 (bufdaemon) at 0xfffffe000780a5c0: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b4d060 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b4d060 reapsubtree: 14 sigparent: 20 vmspace: 0xffffffff83b4e040 (map 0xffffffff83b4e040) (map.pmap 0xffffffff83b4e0e0) (pmap 0xffffffff83b4e150) threads: 3 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100080 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 Run CPU 1 [/ worker] db> ps pid ppid pgrp uid state wmesg wchan cmd 1910 764 764 0 R (threaded) syz-executor 101527 RunQ syz-executor 101628 S uwait 0xfffffe0059a83280 syz-executor 1908 1 764 0 S uwait 0xfffffe00584ee500 syz-executor 1906 765 765 0 R (threaded) syz-executor 101551 RunQ syz-executor 101621 S connec 0xfffffe0059be68da syz-executor 101626 S uwait 0xfffffe00584ee400 syz-executor 1905 1 765 0 S uwait 0xfffffe007b957e00 syz-executor 1904 1137 1137 0 R (threaded) syz-executor 101511 RunQ syz-executor 101619 S select 0xfffffe006e5912c0 syz-executor 101625 S uwait 0xfffffe00584eed00 syz-executor 1903 766 766 0 R (threaded) syz-executor 101517 RunQ syz-executor 101618 S select 0xfffffe006e5915c0 syz-executor 101623 S uwait 0xfffffe0059a83780 syz-executor 1901 1 1137 0 S uwait 0xfffffe0059a85300 syz-executor 1896 1 765 0 S uwait 0xfffffe007b959b00 syz-executor 1884 1 764 0 S uwait 0xfffffe0059a83080 syz-executor 1880 1 766 0 S uwait 0xfffffe0059a83a80 syz-executor 1869 1 764 0 S uwait 0xfffffe007b957c00 syz-executor 1866 1 765 0 S uwait 0xfffffe0059a83c80 syz-executor 1863 1 766 0 S uwait 0xfffffe0058258600 syz-executor 1859 1 766 0 S uwait 0xfffffe0059a84400 syz-executor 1857 1 764 0 S uwait 0xfffffe0059a83480 syz-executor 1844 1 765 0 S uwait 0xfffffe0059a83580 syz-executor 1840 1 766 0 S uwait 0xfffffe007b958400 syz-executor 1839 1 1137 0 S uwait 0xfffffe0059a83b80 syz-executor 1829 0 0 0 DL mdwait 0xfffffe006dd96000 [md14] 1828 0 0 0 DL mdwait 0xfffffe007bbed000 [md13] 1824 1 765 0 S uwait 0xfffffe007b959a00 syz-executor 1812 1 765 0 S uwait 0xfffffe0059a83980 syz-executor 1804 1 765 0 S uwait 0xfffffe007b958800 syz-executor 1796 1 764 0 S uwait 0xfffffe007b959900 syz-executor 1791 1 1791 0 Ss+ ttyin 0xfffffe00585cd0b0 getty 1790 1 1790 0 Ss+ ttyin 0xfffffe00582904b0 getty 1789 1 1789 0 Ss+ ttyin 0xfffffe00585cc8b0 getty 1788 1 1788 0 Ss+ ttyin 0xfffffe00585cccb0 getty 1787 1 1787 0 Ss+ ttyin 0xfffffe005828dcb0 getty 1786 1 1786 0 Ss+ ttyin 0xfffffe00585cd8b0 getty 1785 1 1785 0 Ss+ ttyin 0xfffffe00585cd4b0 getty 1784 1 1784 0 Ss+ ttyin 0xfffffe00585ce0b0 getty 1783 1 1783 0 Ss+ ttyin 0xfffffe00585cdcb0 getty 1765 0 0 0 DL mdwait 0xfffffe007cc73000 [md12] 1763 1 1137 0 S uwait 0xfffffe007b957f00 syz-executor 1748 1 1746 0 S uwait 0xfffffe007b958700 syz-executor 1739 1 766 0 S uwait 0xfffffe007b958b00 syz-executor 1734 1 765 0 S uwait 0xfffffe007b958180 syz-executor 1729 1 765 0 S uwait 0xfffffe0059a84000 syz-executor 1727 1 766 0 S uwait 0xfffffe0059a85580 syz-executor 1726 1 764 0 S uwait 0xfffffe0059a85400 syz-executor 1723 1 764 0 S uwait 0xfffffe007b958d00 syz-executor 1721 1 1137 0 S uwait 0xfffffe0058258700 syz-executor 1716 1 765 0 SV uwait 0xfffffe0059a84500 syz-executor 1712 1 765 0 S uwait 0xfffffe007b958080 syz-executor 1708 1 764 0 S uwait 0xfffffe0058258c00 syz-executor 1704 1 766 0 S uwait 0xfffffe0053e0ec00 syz-executor 1687 1 1137 0 S uwait 0xfffffe0059a85200 syz-executor 1686 0 0 0 DL mdwait 0xfffffe007d4e7000 [md11] 1678 1 764 0 S uwait 0xfffffe0059a84600 syz-executor 1674 1 1137 0 S uwait 0xfffffe007b959800 syz-executor 1669 1 765 0 S uwait 0xfffffe0059a83e80 syz-executor 1668 1 1137 0 S uwait 0xfffffe0059a83d80 syz-executor 1662 1 764 0 S uwait 0xfffffe007b958f00 syz-executor 1658 1 765 0 S uwait 0xfffffe0059a85100 syz-executor 1656 0 0 0 DL mdwait 0xfffffe007cc72000 [md10] 1652 1 1137 0 S uwait 0xfffffe007b959500 syz-executor 1650 1 766 0 S uwait 0xfffffe0059a84900 syz-executor 1647 1 1137 0 S uwait 0xfffffe0059a84800 syz-executor 1627 1 1137 0 S uwait 0xfffffe007b958e00 syz-executor 1625 0 0 0 DL mdwait 0xfffffe0077b4d000 [md58027] 1624 0 0 0 DL mdwait 0xfffffe0077b74000 [md9] 1622 0 0 0 DL mdwait 0xfffffe0078b23000 [md8] 1605 0 0 0 DL mdwait 0xfffffe0077b4e000 [md7] 1602 1 1137 0 S uwait 0xfffffe0059a84b00 syz-executor 1601 1 764 0 S uwait 0xfffffe007b959c00 syz-executor 1594 0 0 0 DL mdwait 0xfffffe006dd97000 [md5] 1588 1 765 0 S uwait 0xfffffe007b959700 syz-executor 1585 1 1137 0 S uwait 0xfffffe007b959e00 syz-executor 1578 1 764 0 S uwait 0xfffffe007b959080 syz-executor 1573 1 766 0 S uwait 0xfffffe0053e0e500 syz-executor 1572 1 764 0 S uwait 0xfffffe00584eca80 syz-executor 1564 1 764 0 S uwait 0xfffffe0058257880 syz-executor 1561 1 765 0 S uwait 0xfffffe0059a85d00 syz-executor 1556 1 1137 0 S uwait 0xfffffe007b958c00 syz-executor 1555 1 765 0 S uwait 0xfffffe007b959600 syz-executor 1551 1 766 0 S uwait 0xfffffe0059a85000 syz-executor 1518 1 764 0 S uwait 0xfffffe0058258b00 syz-executor 1507 1 1137 0 S uwait 0xfffffe0058257c80 syz-executor 1505 1 765 0 S uwait 0xfffffe0058258400 syz-executor 1494 1 766 0 S uwait 0xfffffe0059a84c80 syz-executor 1491 1 1487 0 S uwait 0xfffffe0058257a80 syz-executor 1476 1 766 0 S uwait 0xfffffe0058257780 syz-executor 1473 0 0 0 DL mdwait 0xfffffe0078b24000 [md4] 1472 1 766 0 S uwait 0xfffffe0058258f00 syz-executor 1470 1 1137 0 S uwait 0xfffffe0053e0e900 syz-executor 1466 1 765 0 S uwait 0xfffffe007b95a080 syz-executor 1461 1 765 0 S uwait 0xfffffe0053e0ef00 syz-executor 1459 1 1454 0 S uwait 0xfffffe0053e0e700 syz-executor 1458 1 765 0 S uwait 0xfffffe005825ab00 syz-executor 1449 1 764 0 S uwait 0xfffffe007b95a180 syz-executor 1446 1 766 0 S uwait 0xfffffe0059a85c00 syz-executor 1441 1 1137 0 S uwait 0xfffffe007b959d00 syz-executor 1440 1 765 0 S uwait 0xfffffe0059a85900 syz-executor 1438 1 764 0 S uwait 0xfffffe0059a85480 syz-executor 1432 1 1137 0 S uwait 0xfffffe0053e0e300 syz-executor 1428 1 764 0 S uwait 0xfffffe0058259080 syz-executor 1422 1 765 0 S uwait 0xfffffe0058257580 syz-executor 1413 1 764 0 S uwait 0xfffffe00584ec780 syz-executor 1410 1 764 0 S uwait 0xfffffe0053e0e400 syz-executor 1405 1 764 0 S uwait 0xfffffe007b959f00 syz-executor 1404 1 766 0 S uwait 0xfffffe0058258900 syz-executor 1400 1 766 0 S uwait 0xfffffe007b95a380 syz-executor 1396 1 1137 0 S uwait 0xfffffe007b95a280 syz-executor 1393 1 765 0 S uwait 0xfffffe0053e0eb00 syz-executor 1381 0 0 0 DL mdwait 0xfffffe0059983000 [md3] 1380 1 1137 0 S uwait 0xfffffe0058257180 syz-executor 1372 1 1137 0 S uwait 0xfffffe0053e0e200 syz-executor 1366 1 764 0 S uwait 0xfffffe0053e0e100 syz-executor 1365 1 766 0 S uwait 0xfffffe0058257480 syz-executor 1361 1 766 0 S uwait 0xfffffe0053e0e600 syz-executor 1351 0 0 0 DL mdwait 0xfffffe0077b75000 [md2] 1345 1 765 0 S uwait 0xfffffe0053e0ea00 syz-executor 1337 1 1137 0 S uwait 0xfffffe0059a85b00 syz-executor 1332 1 765 0 S uwait 0xfffffe0058257d80 syz-executor 1328 1 766 0 S uwait 0xfffffe0058258100 syz-executor 1327 1 766 0 S uwait 0xfffffe0059a85e00 syz-executor 1316 1 766 0 S uwait 0xfffffe0058258800 syz-executor 1311 1 1137 0 S uwait 0xfffffe00584ec480 syz-executor 1309 1 766 0 S uwait 0xfffffe0053e0ee00 syz-executor 1305 1 1137 0 S uwait 0xfffffe0053e0ed00 syz-executor 1297 1 1137 0 S uwait 0xfffffe0058259180 syz-executor 1296 1 1137 0 S uwait 0xfffffe0058257080 syz-executor 1290 0 0 0 DL - 0xffffffff83cb3e00 [soaiod4] 1289 0 0 0 DL - 0xffffffff83cb3e00 [soaiod3] 1288 0 0 0 DL - 0xffffffff83cb3e00 [soaiod2] 1287 0 0 0 DL - 0xffffffff83cb3e00 [soaiod1] 1285 1 766 0 S uwait 0xfffffe0059a85a00 syz-executor 1277 1 764 0 S uwait 0xfffffe00584ebf00 syz-executor 1274 1 1137 0 S uwait 0xfffffe0058258200 syz-executor 1272 1 1137 0 S uwait 0xfffffe0059a86280 syz-executor 1265 1 766 0 S uwait 0xfffffe005825a800 syz-executor 1261 1 1137 0 S uwait 0xfffffe0058257380 syz-executor 1257 1 1137 0 S uwait 0xfffffe0058257280 syz-executor 1248 1 765 0 S uwait 0xfffffe0058258300 syz-executor 1244 1 766 0 S uwait 0xfffffe0058257b80 syz-executor 1240 1 765 0 S uwait 0xfffffe00584ed000 syz-executor 1239 1 764 0 S uwait 0xfffffe0058257980 syz-executor 1228 1 1137 0 S uwait 0xfffffe005825ae00 syz-executor 1221 1 764 0 S uwait 0xfffffe00584ebd00 syz-executor 1208 0 0 0 DL mdwait 0xfffffe0059984000 [md1] 1188 1 1137 0 S uwait 0xfffffe00584eb300 syz-executor 1159 1 764 0 S uwait 0xfffffe0059a86180 syz-executor 1154 1 766 0 S uwait 0xfffffe00584eb500 syz-executor 1137 762 1137 0 S nanslp 0xffffffff83ba3c40 syz-executor 1124 1 1122 0 S uwait 0xfffffe005825ac00 syz-executor 1106 1 763 0 S uwait 0xfffffe00584eba00 syz-executor 1072 1 1067 0 S uwait 0xfffffe0058257e80 syz-executor 1034 1 766 0 S umtxn 0xfffffe0058258500 syz-executor 1008 1 766 0 S uwait 0xfffffe00584ebe00 syz-executor 974 1 763 0 S uwait 0xfffffe0058259d00 syz-executor 917 1 766 0 S uwait 0xfffffe00584ec380 syz-executor 913 1 766 0 S uwait 0xfffffe0058259880 syz-executor 898 1 765 0 S uwait 0xfffffe00584ec680 syz-executor 887 1 766 0 S uwait 0xfffffe00584ece80 syz-executor 883 1 875 0 S uwait 0xfffffe0058258a00 syz-executor 880 1 763 0 S uwait 0xfffffe00584ec980 syz-executor 878 0 0 0 DL (threaded) [KTLS] 100138 D - 0xfffffe0053e1de00 [thr_0] 100166 D - 0xfffffe0053e1de80 [thr_1] 100167 D - 0xffffffff83cb5628 [reclaim_0] 849 0 0 0 DL mdwait 0xfffffe006dddf000 [md0] 841 0 0 0 DL (threaded) [so_splice] 100137 D - 0xfffffe0059a85600 [thr_0] 100145 D - 0xfffffe0059a85640 [thr_1] 836 0 0 0 DL mdwait 0xfffffe006ddde000 [md6] 825 1 766 0 S uwait 0xfffffe00584ec880 syz-executor 823 0 0 0 DL aiordy 0xfffffe005410e5a0 [aiod4] 822 0 0 0 DL aiordy 0xfffffe005410eb00 [aiod3] 821 0 0 0 DL aiordy 0xfffffe00540a8000 [aiod2] 820 0 0 0 DL aiordy 0xfffffe0054005060 [aiod1] 766 762 766 0 R syz-executor 765 762 765 0 R syz-executor 764 762 764 0 S nanslp 0xffffffff83ba3c40 syz-executor 762 760 760 0 S select 0xfffffe00593ecdc0 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00540ab110 csh 758 681 758 0 Ss select 0xfffffe0057d65840 sshd 681 1 681 0 Ss select 0xfffffe00593ec740 sshd 16 0 0 0 DL syncer 0xffffffff83cc1820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a060 [vnlru] 14 0 0 0 RL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100080 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 Run CPU 1 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0acc0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf0d88 [dom0] 100081 D launds 0xffffffff83cf0d94 [laundry: dom0] 100082 D umarcl 0xffffffff81de0e10 [uma] 7 0 0 0 DL - 0xffffffff8391c5d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff848579e0 [pf purge] 5 0 0 0 DL waiting 0xffffffff84557700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e6340 [doneq0] 100046 D - 0xffffffff838e62c0 [async] 100075 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cec640 [crypto] 100043 D crypto_ 0xfffffe0057d43030 [crypto returns 0] 100044 D crypto_ 0xfffffe0057d43080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b4c620 [g_event] 100038 D - 0xffffffff83b4c640 [g_up] 100039 D - 0xffffffff83b4c660 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 Run CPU 0 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ced0e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c3dff0 [swapper] 100005 D - 0xfffffe0007768d00 [softirq_0] 100006 D - 0xfffffe0007768b00 [softirq_1] 100007 D - 0xfffffe0007768900 [if_io_tqg_0] 100008 D - 0xfffffe0007768700 [if_io_tqg_1] 100009 D - 0xfffffe0007768500 [if_config_tqg_0] 100010 D - 0xfffffe00083db100 [kqueue_ctx taskq] 100011 D - 0xfffffe00083db000 [jail_remove taskq] 100012 D - 0xfffffe00083dae00 [bus taskq] 100015 D - 0xfffffe00083da900 [thread taskq] 100017 D - 0xfffffe00083da600 [aiod_kick taskq] 100018 D - 0xfffffe00083da500 [deferred_unmount ta] 100019 D - 0xfffffe00083da400 [inm_free taskq] 100020 D - 0xfffffe00083da300 [in6m_free taskq] 100021 D - 0xfffffe00083da200 [linuxkpi_irq_wq] 100022 D - 0xfffffe00083da100 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00083da100 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00083da100 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00083da100 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00083da000 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00083da000 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00083da000 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00083da000 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00083d9900 [firmware taskq] 100040 D - 0xfffffe0057d47300 [crypto_0] 100041 D - 0xfffffe0057d47300 [crypto_1] 100056 D - 0xfffffe00083dd200 [vtnet0 rxq 0] 100057 D - 0xfffffe0058145500 [vtnet0 txq 0] 100058 D - 0xfffffe0058145400 [vtnet0 rxq 1] 100059 D - 0xfffffe0058145300 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057d67400 [virtio_balloon] 100065 D - 0xffffffff827cfba1 [deadlkres] 100069 D - 0xfffffe0057d46e00 [acpi_task_0] 100070 D - 0xfffffe0057d46e00 [acpi_task_1] 100071 D - 0xfffffe0057d46e00 [acpi_task_2] 100073 D - 0xfffffe00083dca00 [mca taskq] 100074 D - 0xfffffe0057d46b00 [CAM taskq] 100076 D - 0xfffffe0057d47000 [ipsec_offload] db> show all locks Process 1910 (syz-executor) thread 0xfffffe00541f0780 (101527) shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe0054175738) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4998 Process 14 (bufdaemon) thread 0xfffffe00540c6780 (100094) exclusive rw SUrw (SUrw) r = 0 (0xfffffe005828d000) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_softdep.c:10022 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006e5b5908) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3384 db> show malloc Type InUse MemUse Requests sctp_stro 10 32273K 14 pf_hash 6 12804K 6 linker 400 5474K 1685 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4228 sysctloid 36040 2124K 36115 filedesc 259 2073K 1852 vtbuf 24 1968K 46 kobj 330 1320K 670 newblk 24 1030K 7069 vfscache 3 1025K 3 subproc 401 839K 2095 pcb 133 730K 687 inodedep 33 524K 2027 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 md_sectors 103 412K 103 vmem 5 276K 9 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 82180 acpica 1674 184K 54522 tidhash 3 141K 3 pagedep 23 134K 895 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 123 123K 142 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1032 84K 5194 kdtrace 459 80K 3543 mtx_pool 3 74K 3 umtx 576 72K 576 syncache 1 68K 1 NFSD srvcache 3 68K 3 md_disk 119 68K 145 module 522 66K 557 ddb_capture 1 64K 1 DEVFS3 142 36K 152 shm 2 34K 43 hostcache 1 32K 1 msg 4 30K 4 kbdmux 6 28K 6 temp 40 27K 2834 GEOM 129 27K 848 LRO 22 23K 22 ifaddr 76 21K 79 DEVFS_RULE 56 20K 56 routetbl 173 20K 517 lltable 59 19K 84 ufs_mount 4 17K 5 proc 3 17K 3 kqueue 218 17K 3673 devstat 8 17K 8 tty 16 16K 16 ether_multi 187 15K 335 ithread 90 15K 90 bus-sc 34 15K 1695 ifnet 8 15K 8 sctp_atcl 37 14K 207 eventhandler 163 14K 163 pwddesc 190 12K 1990 kenv 95 12K 95 shmfd 7 11K 23 ip6opt 78 11K 192 CAM queue 5 11K 1528 in6_multi 75 10K 96 rman 82 10K 597 rpc 8 9K 8 cred 35 9K 384 bmsafemap 2 9K 1636 plimit 22 9K 1219 ksem 2 9K 4 UART 12 9K 12 filemon 1 8K 27 pfs_vncache 1 8K 1 audit_evclass 240 8K 303 taskqueue 69 8K 225 CC Mem 53 7K 698 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 pf_ifnet 12 5K 33 ufs_dirhash 24 5K 54 UMA 276 5K 276 vt 11 5K 11 inpcbpolicy 129 5K 1400 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 DEVFSP 62 4K 246 proc-args 183 4K 3102 acpisem 28 4K 28 crypto 9 4K 176 kcovinfo 45 3K 45 dirrem 11 3K 1545 terminal 11 3K 11 acpidev 20 3K 20 BPF 10 3K 63 hhook 8 3K 10 newdirblk 18 3K 788 in_multi 9 3K 19 clone 9 3K 9 uidinfo 3 3K 53 ip6ndp 14 3K 16 lockf 18 3K 553 pf_rule 1 2K 1 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 sctp_ifa 15 2K 16 tun 5 2K 5 session 15 2K 101 sctp_atky 47 2K 225 freework 8 2K 2142 selfd 27 2K 263030 Unitno 28 2K 2938 CAM XPT 22 2K 543 toponodes 6 2K 6 mkdir 11 2K 1576 ipsecpolicy 2 2K 2 osd 58 2K 716 frag6 14 2K 52 freeblks 5 2K 960 nhops 6 2K 9 msi 9 2K 9 diradd 9 2K 1566 netlink 2 2K 213 sctp_timw 4 1K 4 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 vnodemarker 2 1K 174 NFSD session 1 1K 1 sctp_ifn 7 1K 16 mld 7 1K 7 igmp 7 1K 7 CAM periph 4 1K 271 ipsec 3 1K 3 pfil 6 1K 6 isadev 6 1K 38 mount 16 1K 1573 pci_link 10 1K 10 cryptodev 10 1K 371 encap_export_host 12 1K 12 select 5 1K 202 sctp_athm 37 1K 209 iov 9 1K 24523 sctp_stri 1 1K 4 freefile 4 1K 1240 ip_msource 8 1K 93 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 chacha20random 1 1K 1 biobuf 1 1K 1 ip6_moptions 11 1K 52 sctp_map 20 1K 28 vnodes 3 1K 11 ktls 3 1K 106 sctp_aadr 4 1K 4 inotify 1 1K 4 eventfd 2 1K 7 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 in_mfilter 4 1K 143 loginclass 3 1K 5 prison 6 1K 6 filedesc_to_leader 3 1K 11 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 ktls_ocf 1 1K 24 ip6_msource 2 1K 49 VN POLL 1 1K 10 aio 4 1K 17 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 fadvise 3 1K 9 sctp_vrf 1 1K 1 ip_moptions 1 1K 45 vnet 1 1K 1 pmc 1 1K 1 sigio 1 1K 7 entropy 2 1K 35 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 soname 1 1K 4052 p1003.1b 1 1K 1 ext2_mount 0 0K 0 ext2_node 0 0K 0 ext2_extents 0 0K 0 pf_table 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 tcp_pcm_rack 0 0K 4 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 8 mqdata 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 44 sctp_iter 0 0K 13 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 13 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 1 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 1028 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 93 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 548 allocindir 0 0K 0 indirdep 0 0K 810 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 in6_mfilter 0 0K 85 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 55 statfs 0 0K 246 namei_tracker 0 0K 12 export_host 0 0K 0 cl_savebuf 0 0K 324 lio 0 0K 68 acl 0 0K 0 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 12 ioctlops 0 0K 215 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 662 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 758 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 10 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 filecaps 0 0K 122 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 168 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 4 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 1227 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8331 1067 33730 0 254 38494208 0 tcp_log 416 7751 5209 140577 0 254 5391360 0 mbuf 256 13522 205 127013 0 254 3514112 0 malloc-16384 16384 130 1 924 0 1 2146304 0 malloc-4096 4096 520 2 2543 0 2 2138112 0 RADIX NODE 152 12329 328 72227 0 63 1923864 0 BUF TRIE 152 281 11523 5833 0 62 1794208 0 malloc-384 384 4122 48 4483 0 30 1601280 0 malloc-128 128 11855 142 14067 0 126 1535616 0 vmem btag 56 25911 48 25911 0 254 1453704 0 UMA Slabs 0 112 11502 12 11502 0 126 1289568 0 sctp_asoc 2256 10 500 14 0 254 1150560 0 malloc-64 64 561 16008 264646 0 254 1060416 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 FFS inode 1168 687 20 2066 0 8 825776 0 malloc-65536 65536 10 2 16 0 1 786432 0 sctp_ep 1152 26 485 191 0 254 588672 0 VM OBJECT 248 2288 80 26318 0 62 587264 0 256 Bucket 2048 250 22 2754 0 8 557056 0 THREAD 1860 268 20 1628 0 8 535680 0 md14 32768 16 0 16 0 1 524288 0 socket 1024 166 342 3303 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 178 0 0 2 467072 0 MAP ENTRY 96 4535 253 98355 0 126 459648 0 malloc-4096 4096 105 5 159 0 2 450560 0 malloc-65536 65536 4 2 137 0 1 393216 0 malloc-32768 32768 4 8 602 0 1 393216 0 sctp_raddr 736 10 507 14 0 254 380512 0 malloc-2048 2048 105 71 806 0 8 360448 0 VNODE 440 727 83 2109 0 30 356400 0 malloc-32768 32768 4 6 51 0 1 327680 0 malloc-64 64 4570 281 8217 0 254 310464 0 PROC 1376 189 20 1913 0 8 287584 0 malloc-16 16 14893 107 15176 0 254 240000 0 FPU_save_area 832 270 18 2815 0 16 239616 0 malloc-256 256 401 529 8928 0 62 238080 0 DEVCTL 1024 59 161 186 0 0 225280 0 filedesc0 1072 190 13 1990 0 8 217616 0 ertt_txseginfo 40 4 5147 47056 0 254 206040 0 malloc-65536 65536 0 3 85 0 1 196608 0 FFS2 dinode 256 687 63 2066 0 62 192000 0 UMA Zones 768 248 1 248 0 16 191232 0 malloc-32 32 5589 333 6137 0 254 189504 0 malloc-128 128 1262 133 26220 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 15 501 1575 0 254 165120 0 malloc-32768 32768 0 5 130 0 1 163840 0 malloc-1024 1024 141 19 950 0 16 163840 0 S VFS Cache 104 1040 364 2458 0 126 146016 0 malloc-4096 4096 26 8 192 0 2 139264 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-16384 16384 3 5 52 0 1 131072 0 mbuf_packet 256 233 275 2147 0 254 130048 0 malloc-8192 8192 8 7 60 0 1 122880 0 ksiginfo 112 182 862 1082 0 126 116928 0 malloc-384 384 242 28 272 0 30 103680 0 128 Bucket 1024 64 35 793 0 16 101376 0 malloc-128 128 523 252 4455 0 126 99200 0 malloc-128 128 599 176 1579 0 126 99200 0 malloc-256 256 323 52 5801 0 62 96000 0 VMSPACE 584 148 13 1837 0 16 94024 0 tcp_inpcb 1304 55 17 698 0 8 93888 0 UMA Kegs 384 234 9 234 0 30 93312 0 tcp_bbr_map 128 30 621 3676 0 126 83328 0 malloc-128 128 477 174 3816 0 126 83328 0 malloc-2048 2048 30 10 916 0 8 81920 0 64 Bucket 512 98 62 5691 0 30 81920 0 sctp_chunk 152 55 465 60 0 254 79040 0 malloc-8192 8192 5 4 258 0 1 73728 0 g_bio 408 0 180 23618 0 30 73440 0 malloc-64 64 837 234 4372 0 254 68544 0 md13 8 8192 192 8192 0 254 67072 0 md12 8 8192 192 8192 0 254 67072 0 md10 8 8192 192 8192 0 254 67072 0 md8 8 8192 192 8192 0 254 67072 0 md5 8 8192 192 8192 0 254 67072 0 md2 8 8192 192 8192 0 254 67072 0 DIRHASH 1024 34 30 54 0 16 65536 0 malloc-65536 65536 0 1 1 0 1 65536 0 malloc-16384 16384 3 1 193 0 1 65536 0 malloc-4096 4096 13 3 34 0 2 65536 0 malloc-2048 2048 14 18 136 0 8 65536 0 malloc-1024 1024 28 36 5989 0 16 65536 0 malloc-256 256 123 132 2034 0 62 65280 0 32 Bucket 256 87 168 712 0 62 65280 0 sctp_stream_msg_out 112 0 540 2 0 254 60480 0 malloc-8192 8192 7 0 7 0 1 57344 0 malloc-4096 4096 4 10 25 0 2 57344 0 ripcb 376 63 87 301 0 30 56400 0 malloc-128 128 160 243 1518 0 126 51584 0 TURNSTILE 136 289 89 289 0 62 51408 0 ttyoutq 256 72 123 1024 0 62 49920 0 malloc-256 256 0 195 1381 0 62 49920 0 malloc-256 256 57 138 3440 0 62 49920 0 NAMEI 1024 1 47 22541 0 16 49152 0 malloc-4096 4096 7 5 597 0 2 49152 0 pcpu-64 64 501 267 501 0 254 49152 0 pipe 736 25 41 537 0 16 48576 0 malloc-384 384 38 82 2033 0 30 46080 0 syncache 168 0 264 7 0 254 44352 0 Files 80 397 153 13985 0 126 44000 0 clpbuf 2624 0 16 450 0 4 41984 0 vnpbuf 2624 0 16 2 0 16 41984 0 malloc-4096 4096 6 4 686 0 2 40960 0 pcpu-8 8 4976 144 5598 0 254 40960 0 ttyinq 160 135 115 1920 0 62 40000 0 sctp_readq 152 0 260 1 0 254 39520 0 cpuset 200 44 148 1006 0 62 38400 0 da_ccb 544 0 70 6154 0 16 38080 0 udp_inpcb 408 13 77 379 0 30 36720 0 hostcache 64 4 563 4 0 254 36288 0 malloc-64 64 85 482 24428 0 254 36288 0 malloc-64 64 169 398 514 0 254 36288 0 malloc-64 64 17 550 30436 0 254 36288 0 malloc-64 64 3 564 4 0 254 36288 0 malloc-64 64 15 552 54 0 254 36288 0 16 Bucket 144 75 177 692 0 62 36288 0 malloc-128 128 81 198 1691 0 126 35712 0 malloc-128 128 2 277 29 0 126 35712 0 routing nhops 256 33 102 49 0 62 34560 0 malloc-384 384 52 38 57 0 30 34560 0 malloc-384 384 36 54 1345 0 30 34560 0 malloc-384 384 29 61 146 0 30 34560 0 malloc-256 256 19 116 113 0 62 34560 0 malloc-256 256 31 104 110 0 62 34560 0 malloc-256 256 51 84 740 0 62 34560 0 SLEEPQUEUE 88 289 95 289 0 126 33792 0 malloc-8192 8192 3 1 5 0 1 32768 0 malloc-8192 8192 1 3 56 0 1 32768 0 malloc-2048 2048 2 14 2 0 8 32768 0 malloc-2048 2048 4 12 108 0 8 32768 0 malloc-2048 2048 12 4 15 0 8 32768 0 malloc-2048 2048 5 11 199 0 8 32768 0 malloc-1024 1024 0 32 8 0 16 32768 0 malloc-1024 1024 11 21 45 0 16 32768 0 malloc-1024 1024 5 27 68 0 16 32768 0 malloc-1024 1024 9 23 35 0 16 32768 0 malloc-1024 1024 0 32 1250 0 16 32768 0 malloc-512 512 4 60 195 0 30 32768 0 malloc-512 512 2 62 57 0 30 32768 0 malloc-512 512 1 63 76 0 30 32768 0 malloc-512 512 3 61 179 0 30 32768 0 malloc-512 512 8 56 501 0 30 32768 0 malloc-512 512 11 53 74 0 30 32768 0 PWD 40 137 671 783 0 254 32320 0 tcp_bbr_pcb 896 10 26 53 0 16 32256 0 tcp_log_id_node 120 2 262 7 0 126 31680 0 PGRP 120 24 240 137 0 126 31680 0 L VFS Cache 320 0 96 84 0 30 30720 0 sctp_laddr 48 48 540 72 0 254 28224 0 rl_entry 48 25 563 41 0 254 28224 0 malloc-32 32 93 789 3249 0 254 28224 0 malloc-32 32 483 399 4364 0 254 28224 0 4 Bucket 48 8 580 36 0 254 28224 0 AIO 208 0 133 172 0 62 27664 0 udplite_inpcb 408 0 63 22 0 30 25704 0 malloc-8192 8192 1 2 7 0 1 24576 0 malloc-4096 4096 0 6 27 0 2 24576 0 tcp_log_id_bucket 176 1 137 6 0 62 24288 0 rtentry 168 36 108 49 0 62 24192 0 8 Bucket 80 58 242 773 0 126 24000 0 itimer 352 0 66 35 0 30 23232 0 splice 184 0 126 2 0 62 23184 0 malloc-384 384 23 37 25 0 30 23040 0 malloc-384 384 39 21 238 0 30 23040 0 domainset 40 2 565 1020 0 254 22680 0 Mountpoints 2816 2 6 10 0 4 22528 0 ertt 72 53 227 698 0 126 20160 0 malloc-32 32 46 584 623 0 254 20160 0 malloc-32 32 324 306 29565 0 254 20160 0 malloc-32 32 30 600 1137 0 254 20160 0 2 Bucket 32 87 543 873 0 254 20160 0 KNOTE 160 54 71 615 0 62 20000 0 tcp_rack_map 128 0 155 12 0 126 19840 0 cryptop 280 0 70 47 0 30 19600 0 AIOCB 552 0 35 208 0 16 19320 0 ktls_session 256 1 74 26 0 62 19200 0 AIOLIO 272 0 70 68 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-2048 2048 4 4 4 0 8 16384 0 malloc-512 512 2 30 2 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 0 288 2 0 254 16128 0 malloc-16 16 494 506 4221 0 254 16000 0 kenv 258 17 43 1070 0 30 15480 0 tcp_rack_pcb 1088 0 14 4 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 150 228 1677 0 254 12096 0 malloc-32 32 7 371 7 0 254 12096 0 vtnet_tx_hdr 24 0 501 14771 0 254 12024 0 malloc-16 16 149 601 3185 0 254 12000 0 malloc-16 16 24 726 829 0 254 12000 0 malloc-16 16 17 733 16639 0 254 12000 0 malloc-16 16 85 665 25713 0 254 12000 0 malloc-16 16 14 736 16 0 254 12000 0 malloc-16 16 130 620 616 0 254 12000 0 malloc-8192 8192 0 1 1 0 1 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 15 24 156 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-1024 1024 0 0 0 0 16 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl