last executing test programs: 29.785255208s ago: executing program 1 (id=1390): syz_emit_ethernet(0x2a, &(0x7f00000023c0)=ANY=[@ANYBLOB="57001000000065000001029078ac1400aae00000011202907ce0174001"]) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r1, &(0x7f0000000340)=""/234, 0xea) writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xeeb}], 0x1) pipe2(&(0x7f0000000080), 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x200000000000032f, &(0x7f0000000040)=[{}]}) r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r2, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r2, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) shmat(0xffffffffffffffff, &(0x7f0000fee000/0x12000)=nil, 0x3000) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001aaaaaaaaaabb01"]) r3 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00', 0x6}, 0x24) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000380)={'freebsd\x00', 0x5}, 0x24) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x3) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x1c, 0x1c, 0x0, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x8}, &(0x7f0000000340)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) nanosleep(0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x15, 0x23, 0x6c, &(0x7f00000001c0)="af019aca383d9a8d5096d74cf14de4a1ca3f83746d1072aaedd9ce2092a0ee4ba4a7e89566ea97e5d26f0e004bcba826e85cb8a28c77affe11015b2307682f22f26a933df5edcf705f67d4a9831001ede399f4b67dc3861640d7bad2658698928653be46921bca8c9aed0146", 0x0, 0x0, 0x0, 0x7d86699a}) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x10000, &(0x7f0000000100), 0x0, 0x0, 0x0}) 29.595563131s ago: executing program 1 (id=1391): truncate(0x0, 0xaa480) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000380)='.\x00', 0x20880, 0x158) fchown(r1, 0xee00, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(0xffffffffffffff9c, r2, &(0x7f0000000240)=@file={0x3e, 0x1, './file0\x00'}, 0xa) 29.588330478s ago: executing program 1 (id=1392): truncate(0x0, 0xaa480) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000380)='.\x00', 0x20880, 0x158) fchown(r1, 0xee00, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(0xffffffffffffff9c, r2, &(0x7f0000000240)=@file={0x3e, 0x1, './file0\x00'}, 0xa) 29.564776842s ago: executing program 1 (id=1393): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) write(r0, &(0x7f0000000080)="ba", 0x100000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a3cdba", 0x38, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x1, 0x6, "6bb851", 0xffff, 0x2c, 0xff, @ipv4, @empty, [], "e49189298059121a"}}}}}}}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19", 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 29.40611069s ago: executing program 1 (id=1396): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000856000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{0x12, 0xfffffffffffffff7, 0x4067, 0x4, 0x1, 0x7fd, [0x200000000, 0xfffffffffffffffc, 0x3]}], 0x1, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0) r2 = socket(0x1c, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f00000001c0)=0x8000005, 0x4) bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @loopback, 0x3ff}, 0x1c) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f00000001c0)=0x8000005, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$SMB_SENDB(r4, 0x80306903, &(0x7f0000000100)={0x8, 0x5, 0x8000, @word=0xdb6, @byte=0x8, 0x8, &(0x7f0000000040)=0x10, 0x1, &(0x7f00000000c0)=0x1, 0x1}) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @loopback, 0x3ff}, 0x1c) rfork(0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r6 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x0) flock(r6, 0x3) flock(r7, 0x2) r8 = open(&(0x7f0000000380)='./file0\x00', 0x400, 0x1) close(r6) flock(r8, 0x3) open(&(0x7f00000001c0)='./file0\x00', 0x2f9, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x80}, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0xb6}, 0x20000) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x81, @loopback, 0x5}, 0x1c) rfork(0x3000) 28.886156909s ago: executing program 1 (id=1403): syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000977a87a386dd60"]) sysarch$I386_SET_FSBASE(0x8, 0x0) freebsd10_pipe(0x0) close(0xffffffffffffffff) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md(0xffffff9c, &(0x7f0000000040), 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r1, 0x80001001, &(0x7f0000000180)="e2", 0x1, [], 0x7, 0x8, 0x0, {0x0, 0xfffffffffffffff8, 0x0}, {0x0, 0x0, @sival_int=0xfffffff8, @spare=[0x20004000000, 0x1, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x7]}}) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x24) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80400000000206, 0x0) acct(&(0x7f0000000080)='./file0\x00') mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) r4 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x6548ef4ced78e318) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, 0x0, 0x0) copy_file_range(r4, 0x0, r3, &(0x7f0000000100)=0x2ffff, 0xd, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="19fdb123c091ae3db1f1c5f51d8be800"}}}, 0x108) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) readv(r2, &(0x7f00000000c0)=[{0x0}], 0x1) pread(r3, 0x0, 0x0, 0x4) freebsd11_fstatfs(r0, &(0x7f00000002c0)) open$dir(&(0x7f0000000000)='.\x00', 0x20000, 0x8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r5, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x8000, {0x1, 0x7, 0x0}, {0x0, 0x0, @sival_ptr=0x3ef7}}) profil(&(0x7f00000004c0)="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", 0x123, 0x4, 0x5) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r6, 0x0) 4.111263052s ago: executing program 2 (id=1701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = kqueue() kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) rfork(0x85000) 4.101626727s ago: executing program 2 (id=1702): socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) sendto(r1, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) dup2(r0, r1) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000340)=0xff, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x4) setpriority(0x1, 0x1, 0x860f418) mkdir(&(0x7f0000000000)='./file0\x00', 0x98) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x4) clock_getres(0x2, &(0x7f0000000300)) lseek(r2, 0xfffffffffffffffe, 0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) thr_suspend(0x0) r3 = socket(0x1, 0x5, 0x4) getsockopt$inet_mreqn(r3, 0x0, 0xd, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sigtimedwait(&(0x7f0000000280)={[0xfff, 0x80000000, 0x3, 0x1]}, 0x0, &(0x7f0000000340)={0x80000001, 0x8}) 2.844716933s ago: executing program 2 (id=1711): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) freebsd10_pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r1, 0xffff, 0x1009, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x104}, 0x0) write(r2, &(0x7f00000001c0)="e7", 0x1) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) msgget(0x1, 0x240) socket$inet(0x2, 0x2, 0xfd) setresgid(0xee00, 0x0, 0x0) setrlimit(0x8, 0x0) kqueue() rfork(0x3060) setregid(0x0, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) socket(0x11, 0x3, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) socket(0x1c, 0x2, 0x3) aio_mlock(0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x81) 2.775217422s ago: executing program 2 (id=1714): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x46, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x46, 0x0, 0x0) vfork() r0 = fork() wait4(r0, 0x0, 0x4, 0x0) ktimer_create(0x0, 0x0, &(0x7f0000000400)) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x6}) 1.565236131s ago: executing program 0 (id=1731): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) poll(0x0, 0x0, 0xffffffff) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000000c0)='E', 0x1, [0x7], 0x200000000000000, 0x8, 0x4, {0x81, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x6, @spare=[0xb5, 0x0, 0x7, 0x9, 0x6, 0x2dc, 0xb66, 0x8]}}) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r2 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmdt(r2) open$dir(&(0x7f0000001240)='./file0\x00', 0x40000000ac5, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r4 = getpid() fcntl$lock(r3, 0xe, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffff, 0x100000006, r4}) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = getpid() fcntl$lock(r5, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100040000004e, r6}) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fc000000200000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) cap_rights_limit(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r7, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x2, 0xfffffffe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0xfffffffb, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x9]}) r8 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r8, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x10000) sync() r9 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r9, 0x0, r8, &(0x7f0000000080)=0x2ffff, 0xf2, 0x0) aio_fsync(0x1000000, &(0x7f00000004c0)={r0, 0xffffffffffffff7f, &(0x7f0000000340)="a470e4e8c6056ef8f517f67cfee34b23b35f982ac88a4ac17745e9f527f8d0db2919f246e2d245fb60afd35fac8f7ab8c4a20e5faee1929b081d4403fc32c4726388b10489827a67169fa61f0e57f1748103f43d575f23a59080507a68cf4cbe5ae346977e69c51b3de398699283cfc91fe7c3e3d75b30c16228f4ba87a4c7c73a16157d437f144435ea9d609b04da19e13639d2271906fe4b865a5527f2c92cf206e63536c9a93131e6e5219c140ae95ce9566424b498040435e4e6ed86f1227b9dbac074c7364f3e7b350d2c5aa7", 0xcf, [0xfffffc00, 0x3], 0x4, 0x2, 0x9, {0xffff, 0xff, &(0x7f0000000180)="e29a3eee8ec8a737182018965142d4f339d75907ebaed84a9b609c5e89489a"}, {0x3, 0x15, @sigval_int=0x3, @spare=[0x8f2, 0x3, 0xffffffff7fffffff, 0x0, 0x2, 0x35d, 0x7, 0x7fffffff]}}) 1.119989008s ago: executing program 3 (id=1734): r0 = socket$bt_l2cap(0x24, 0x5, 0x87) __semctl$SEM_STAT(0x0, 0x2, 0xa, 0x0) setsockopt$bt_l2cap(r0, 0x1609, 0x2, &(0x7f0000000000)=0x3, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r1 = socket(0x1c, 0x1, 0x0) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rmdir(&(0x7f0000000100)='./file0\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{0x12, 0xfffffffffffffff7, 0x4067, 0x4, 0x0, 0x7fd, [0x200000000, 0xfffffffffffffffc, 0x3]}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1b, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000440)="02051b0002000000ce4ca277fce00d8f", 0x10, 0x100, 0x0, 0xfffffffffffffef9) r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0) rfork(0x3000) 878.052436ms ago: executing program 3 (id=1735): r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, @loopback=0x7f000016}, 0x10) 874.686855ms ago: executing program 3 (id=1736): syz_emit_ethernet(0x24, &(0x7f0000000200)={@local, @random="c61800b0000e", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast2}, @udp={{0x0, 0x2, 0x8}}}}}}) 874.597535ms ago: executing program 3 (id=1737): procctl$PROC_REAP_GETPIDS(0x0, 0x0, 0x5, &(0x7f0000000180)={0x0, '\x00', &(0x7f0000000300)}) 874.466886ms ago: executing program 3 (id=1738): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = kqueue() kevent(r0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) rfork(0x85000) 862.446067ms ago: executing program 3 (id=1739): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x6) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000180)="e2b7", 0x2, [], 0x4, 0x8, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0xfffffff8, @spare=[0x0, 0x1, 0x0, 0x200000000000]}}) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) select(0x40, &(0x7f0000000000)={0x9, 0x4, 0x40000000000000, 0x6, 0x8, 0x87f, 0x10000000, 0x6}, 0x0, &(0x7f00000001c0)={0x7, 0x10000001, 0x80000000007, 0x10001, 0xb, 0x4, 0x10000000007d, 0x10001}, 0x0) freebsd10_pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(r3) openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) writev(r2, &(0x7f0000000280), 0x26) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0xe2ab, 0x2, &(0x7f0000000040)='./file0\x00', 0x7c, 0x8, 0x41, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b86, 0x8f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71e]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r4, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40, 0xc3) ktimer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x101}, {0x7, 0x20000002}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ktimer_settime(0x0, 0x1, &(0x7f0000000200)={{0x8, 0x1c}, {0x3, 0x4}}, &(0x7f0000000240)) preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 683.406783ms ago: executing program 0 (id=1740): fhopen(0x0, 0x40004) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) rfork(0x10) rfork(0x4) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r2, 0xb7c5) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffe5}) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r3, 0x40046677, 0x0) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) select(0x40, &(0x7f0000000000)={0x5, 0x2, 0x0, 0x10, 0x8, 0x87e, 0x1, 0x7fffffffffffffff}, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000280), 0x26) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_EXPLICIT_EOR(r4, 0x84, 0x1b, &(0x7f00000002c0)=0x2, 0x4) sysarch$I386_GET_FSBASE(0x7, &(0x7f0000000100)) r5 = getpid() rtprio(0x1, r5, &(0x7f0000000000)={0x4, 0x16}) bind$inet(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0xa7, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60004ce500713a00fe8000000000000000000000000000aaff0200000000000000000000000000014e214e20000890783c376cc4d26a48bdfc2937eef18a6e0a46ccf214d1f4941f66efc7ec4738ea83494abc966af89d0fbc808fbbe312e056626f0a778c66cc459d62b7e3ba5560dbfe6108b607647bf2c03599e7d36c4dba5ca79ca7d4a5b17c27c34c131c5582ff635cf770e30c45b5fdc46b84cc35443e52174dd68072e5b112550d78174de1a7dfe97d3281a68a368a7215bfa56ec349b4fd59a383136734000000"]) setsockopt$inet6_group_source_req(0xffffffffffffff9c, 0x29, 0x53, &(0x7f0000000140)={0x9, {{0x1c, 0x1c, 0x0, 0x4, @mcast2, 0x1000}}, {{0x1c, 0x1c, 0x3, 0x7, @mcast1, 0x1}}}, 0x108) 682.583115ms ago: executing program 2 (id=1741): fhopen(0x0, 0x40004) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) rfork(0x10) rfork(0x4) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r2, 0xb7c5) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffe5}) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r3, 0x40046677, 0x0) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) select(0x40, &(0x7f0000000000)={0x5, 0x2, 0x0, 0x10, 0x8, 0x87e, 0x1, 0x7fffffffffffffff}, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000280), 0x26) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_EXPLICIT_EOR(r4, 0x84, 0x1b, &(0x7f00000002c0)=0x2, 0x4) sysarch$I386_GET_FSBASE(0x7, &(0x7f0000000100)) r5 = getpid() rtprio(0x1, r5, &(0x7f0000000000)={0x4, 0x16}) bind$inet(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) cpuset_getid(0x3, 0x3, 0x100000000, &(0x7f0000000000)) 480.133461ms ago: executing program 0 (id=1742): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000380)="e2", 0x1, [], 0x4, 0x8, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0xfffffff8, @spare=[0x0, 0x1, 0x0, 0x200000000000, 0x0, 0x0, 0x2]}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open(&(0x7f0000000040)='./file0\x00', 0x600, 0x170) 219.9613ms ago: executing program 0 (id=1743): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f6b69e67f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = getpgid(0x0) procctl$PROC_TRACE_CTL(0x0, 0x0, 0x7, &(0x7f0000000000)=0x2) fcntl$setown(r0, 0x6, r3) accept$unix(r0, 0x0, 0x0) rfork(0x85000) r4 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) r5 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f00000000c0)='./file0\x00', 0x90, &(0x7f0000000140)) open$dir(&(0x7f0000000840)='./file0\x00', 0x40000400000002c2, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r6 = open$dir(&(0x7f0000000340)='./file0\x00', 0x2000000, 0x10) truncate(&(0x7f0000000100)='./file1\x00', 0x4) preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 105.955815ms ago: executing program 0 (id=1744): mlock(&(0x7f000014c000/0x4000)=nil, 0x4000) freebsd10_pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x106, 0x0) r3 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r3, 0x6) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r0, 0x6, 0x27, &(0x7f0000000300)={&(0x7f0000000040)="45b13f36de1abac935901874b3000000", &(0x7f0000000280)="b1924efc", 0x0, 0x19, 0x10, 0x4, 0x1a, 0x0, 0x0, 0x3, 0x3, "d5abffff1292ce4f"}, 0x40) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 105.05721ms ago: executing program 2 (id=1745): r0 = socket(0x2, 0x1, 0x0) r1 = __specialfd$eventfd(0x1, &(0x7f0000000000), 0x8) r2 = fcntl$getown(r1, 0x3) procctl$PROC_REAP_KILL(0x0, r2, 0x6, &(0x7f0000000040)={0x9, 0x1, 0x0, 0x24000}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=1746): r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000440)={0x10, 0x2, 0x1, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20005, &(0x7f0000000100)={0x10, 0x2, 0x2}, 0x10) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) aio_writev(&(0x7f00000001c0)={r2, 0x8000000800000000, 0x0, 0x0, [0xfffffffe], 0x0, 0x0, 0xc, {0x1, 0x0, 0x0}, {0x4, 0xfffffffe, @sival_int, @spare=[0x0, 0xfffe, 0x4, 0xa58, 0x0, 0x7ff, 0x0, 0xf91d]}}) recvfrom$inet(r1, &(0x7f0000000080)=""/24, 0x18, 0x400c2, &(0x7f0000000180)={0x10, 0x2, 0x1, @rand_addr=0x8}, 0x10) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x33) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="9f4c466ec957376764e2d822080048000069b16c890001029078ac1400bbe0eaff00440c80fc5c6fdbb4a4bc4a93692410a66ce9e27152fca3f34798be07837184a200000008000000081100907800606500000000000000091a7021d956efb3f78395850100000008c47274ddcb060e3e7c910f518cecfe51e53933d43bf3ea62aacfc7100a432c667b6d446fb9505bb5bd1f9628356db7b46e2b96d96c62e30c9f419f2ba207701c5b7d01d0974c93eb82f65ff3f4bcd9c0bdeded023d0a2294351928c93f38272faaa6d08711a4e7c1"]) open$dir(&(0x7f0000000300)='./file0\x00', 0x40000, 0x5) r3 = kqueue() kevent(r3, &(0x7f0000000500)=[{0x3, 0xfffffffffffffffe, 0x103, 0x0, 0x4, 0x0, [0x0, 0x10000000040, 0x2, 0xdff]}], 0x1, 0x0, 0x0, 0x0) r4 = kqueue() freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x7369a0733676b0) pipe2(&(0x7f0000000000), 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/46, 0x2e}], 0x1) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r5 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fsync(r5) close(r5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rfork(0x85000) socket$unix(0x1, 0x5, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) fchown(r4, 0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000100)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff814b1900(0xfffffe006e7cbd20) 0.003227969 s if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400 Expensive callout(9) function: 0xffffffff81a7dab0(0xfffffe007784fa80) 0.004061807 s if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3800 Dec 22 03:10:06 ci-freebsd-main-5 kernel: arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) Accounting enabled Accounting disabled Out of ktrace request objects. ktrace write failed, errno 27, tracing stopped for pid 2579 ktrace write failed, errno 27, tracing stopped for pid 2576 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 2569 pid 2582 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore ktrace write failed, errno 27, tracing stopped for pid 766 vnode_pager_putpages: zero-length write at 0 resid 8 0xfffffe006e7e2c08: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83720ca0 usecount 5, writecount 2, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005872dc98 ref 1 pages 1 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe00587d2000 (pid 2606, syz-executor, tid 103080) nlink=1, effnlink=1, size=8, extsize=0 generation=f33c7ea9, uid=0, gid=0, flags=0x40008 ino 149, on dev gpt/rootfs arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 pid 2615 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - process has trace disabled) ktrace write failed, errno 27, tracing stopped for pid 762 ZFS filesystem version: 5 ZFS storage pool version: features support (5000) arp: 172.20.3.187 moved from 58:de:74:18:e8:5b to aa:aa:aa:aa:aa:bb on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) md1: truncating fractional last sector by 5 bytes md2: truncating fractional last sector by 1 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 arp: packet with invalid infiniband address length 6 received on tap3 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c4c00 Accounting enabled if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400 ktrace write failed, errno 27, tracing stopped for pid 1 1970-01-01T00:00:25.462451+00:00 ci-freebsd-main-5.us-central1-b.c.syzkaller.internal init 1 - - fatal signal: Bus error if_delmulti_locked: detaching ifnet instance 0xfffffe0054244c00 ktrace write failed, errno 27, tracing stopped for pid 2451 pid 2440 (dhclient), jid 0, uid 65: exited on signal 6 (no core dump - sugid process denied by kern.sugid_coredump) ktrace write failed, errno 27, tracing stopped for pid 2427 ktrace write failed, errno 27, tracing stopped for pid 2440 pid 2416 (dhclient), jid 0, uid 65: exited on signal 6 (no core dump - sugid process denied by kern.sugid_coredump) pid 1855 (dhclient), jid 0, uid 65: exited on signal 6 (no core dump - sugid process denied by kern.sugid_coredump) ktrace write failed, errno 27, tracing stopped for pid 2416 ktrace write failed, errno 27, tracing stopped for pid 1855 Connection to 10.128.1.60 closed by remote host. pid 1433 (dhclient), jid 0, uid 65: exited on signal 6 (no core dump - sugid process denied by kern.sugid_coredump) ktrace write failed, errno 27, tracing stopped for pid 1433 ktrace write failed, errno 27, tracing stopped for pid 760 pid 758 (sshd), jid 0, uid 0: exited on signal 6 (no core dump - sugid process denied by kern.sugid_coredump) pid 422 (dhclient), jid 0, uid 65: exited on signal 6 (no core dump - sugid process denied by kern.sugid_coredump) ktrace write failed, errno 27, tracing stopped for pid 758 ktrace write failed, errno 27, tracing stopped for pid 422 pid 2427 (sh), jid 0, uid 0: exited on signal 6 (core dumped) pid 2451 (dhclient), jid 0, uid 0: exited on signal 6 (core dumped) pid 760 (csh), jid 0, uid 0: exited on signal 6 (core dumped) if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 md3: truncating fractional last sector by 8 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000 md4: truncating fractional last sector by 1 bytes md58027: truncating fractional last sector by 4 bytes Process (pid 1) got signal 9 init died (signal 0, exit 10) panic: Going nowhere without my init! cpuid = 0 time = 34 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c6e870 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c6e9d0 vpanic() at vpanic+0x257/frame 0xfffffe0056c6eb90 panic() at panic+0xb5/frame 0xfffffe0056c6ec50 exit1() at exit1+0xd5/frame 0xfffffe0056c6ecf0 sys__exit() at sys__exit+0x28/frame 0xfffffe0056c6ed10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056c6ef30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056c6ef30 --- syscall (1, FreeBSD ELF64, _exit), rip = 0x2b0dca, rsp = 0x8210b6108, rbp = 0x8210b6120 --- KDB: enter: panic [ thread pid 1 tid 100002 ] Stopped at kdb_enter+0x6e: movq $0,0x2589a07(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db>