last executing test programs: 42.078115809s ago: executing program 3 (id=350): r0 = semget(0x2, 0x4, 0x0) __semctl$GETNCNT(r0, 0x0, 0x3) 41.797886346s ago: executing program 3 (id=352): r0 = socket(0x1c, 0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000380)=0xfffffff9, 0x4) r1 = kqueue() kevent(r1, &(0x7f00000002c0)=[{0x0, 0xfffffffffffffff9, 0x89, 0x8, 0x8, 0x7, [0x0, 0x0, 0x0, 0x4]}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x11c, &(0x7f0000000680)=ANY=[@ANYRESOCT=r2]) r3 = socket(0x1c, 0x1, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)="0216010002000000000000008fc30d4e", 0x10, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x33, &(0x7f0000000280)=ANY=[@ANYRES32=r5], 0x58) setsockopt$inet6_buf(r3, 0x29, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = freebsd12_shm_open(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x20) lseek(r6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x31) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r8, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) accept$unix(r5, &(0x7f0000000300)=@abs={0x8}, &(0x7f0000000340)=0x8) open$dir(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r7, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) rename(&(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 38.099261101s ago: executing program 0 (id=360): rfork(0x91000) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff}) close(r0) open(&(0x7f0000000380)='./file1\x00', 0x205, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000240)={'rack\x00'}, 0x24) setsockopt$inet_tcp_int(r1, 0x6, 0x41f, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x469, &(0x7f00000000c0)={0x1, "f44a17b29d3b2d4600000500"}, 0x14) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1000300010005}) rfork(0x10) rfork(0x3060) 38.01794528s ago: executing program 1 (id=361): openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) socket(0x1c, 0x20000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0xe3a7fac7410a0881}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x205, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000001c0)="1c83", 0x2, [], 0x1, 0x20, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x1f, @sival_int=0xe, @spare=[0x6d8a0, 0x0, 0x30c745c3, 0x6, 0x7, 0x8, 0x7, 0x81]}}) mlockall(0x2) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x60000000) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) ioctl$BIOCSETZBUF(r1, 0x80184281, &(0x7f0000000100)={&(0x7f00000000c0), &(0x7f0000000300)="666cbe23c417aa9236e9e584d02bd3617b30ef202fdc927081d783dc65fc0ee9e298b4e3ec6ee3b7d1f68f5a4caf9f154e160879fa4ae6e38d45059d4c2a29bb0ee67dec709233d47a668426a7562b0a1883cd77a1d7f541249eb42ad3d52c6fc19eff44ed5b2c9cc98809d6b362c119ebb891320673c836900be9f49636566a66b035c5ab917739307f3b7bcc5dac0ff0b54bdc96300f1d022987b106f47bf0ea9d9afe2a75d2be714b4f04aea539185fc9afb357514b64e23b71d611209d5907f90abaea"}) sync() 36.627913573s ago: executing program 0 (id=362): r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) semget(0x0, 0x1, 0x281) openat$smbus(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chroot(0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="6f95ffffffffff810040000800450f002800039078ffffffff7f0000014e224e230dde670ad63d7db23b0b085fcea3225a7b00e0ffff275e200c269b337e23402f56e2cadf42bd4898e59d3b817f26842ce86bdad107edfad533da4f1befca675f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001100090780003"]) writev(r2, &(0x7f0000000280), 0x26) writev(r2, 0x0, 0x0) __semctl$SEM_STAT(0x0, 0x2, 0xa, &(0x7f0000000380)=0x0) cpuset_setaffinity(0x1, 0x1, 0x4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x1c, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) openat$evdev(0xffffffffffffff9c, 0x0, 0x100, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') __specialfd$inotify(0x2, 0x0, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) r3 = socket(0x1c, 0x2, 0x4) sendmsg$inet6_sctp(r3, 0x0, 0x2000c) pwritev(r1, 0x0, 0x0, 0x40003c) aio_write(&(0x7f0000000100)={0xffffffffffffffff, 0x80001001, &(0x7f00000000c0), 0x0, [], 0xfffffffffffffffb, 0x1, 0x5, {0x0, 0x4, 0x0}, {0x0, 0xffffffff, @sigval_ptr=0x5c5, @spare=[0x9, 0x1, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x1]}}) mkdir(0x0, 0x40) open$dir(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x0, @rand_addr=0x9}, 0x1) fork() pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x4000}], 0x1) 36.62531799s ago: executing program 1 (id=363): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) fork() ktimer_create(0x4, 0x0, &(0x7f0000000400)) r1 = fork() wait4(r1, 0x0, 0x4, 0x0) aio_mlock(&(0x7f0000002700)={0xffffffffffffffff, 0x4, 0x0, 0x0, [0x2, 0x180], 0x2, 0x6, 0x2, {0x100000001, 0x2, 0x0}, {0x2, 0x1015, @sigval_int=0x1, @ke_flags=0x10}}) setitimer(0x0, &(0x7f0000001600)={{0x1, 0x5}, {0x0, 0xffff}}, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags}) 36.557924677s ago: executing program 3 (id=364): setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x51, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0xe4]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x200000, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f00000004c0), 0x100000, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000000)={0xb, 0x18, 0x10, &(0x7f0000000940)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d86699a, [0x2, 0x5, 0xa8, 0xe7fb]}) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x10000, &(0x7f0000000380), 0x0, 0x0, 0x0}) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x1000) r3 = shmget$private(0x0, 0x3000, 0xd8, &(0x7f0000ffc000/0x3000)=nil) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x7000) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0) pwritev(r1, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x4, 0x0, 0x0) r5 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) bind$inet(r5, &(0x7f00000002c0)={0x10, 0x2, 0x2}, 0x80) listen(0xffffffffffffffff, 0x14040000) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f0000000080)={0x10, 0x1e, 0x47, &(0x7f0000000300)="055dfaf1e41a81a58268f5485b0d1d064b423797a396cd98a6490d119c829eca02d2b5ed060c1b63ab50c565aa8d7459be99f40411821e1b743c05b3b9f061bc582c62df25d838", 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x7d86619b, [0x0, 0x9, 0xc, 0x10]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x81, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r5, 0x84, 0x24, &(0x7f0000000380)={r6, @in6={{0x1c, 0x1c, 0x2, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}}}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socket$inet6_udp(0x1c, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r7 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', &(0x7f0000000140), 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) 35.567860299s ago: executing program 1 (id=367): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000004c0)="4509ee", 0x3, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) r1 = socket(0x1, 0x2, 0x2) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000080)=0x6, 0x4) r2 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xd2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x8d800000, [0x0, 0x0, 0x0, 0xd]}) cpuset_setaffinity(0x1, 0x4, 0x6, 0x55, &(0x7f0000000040)) bindat$unix(r0, r3, &(0x7f0000000400)=@abs={0x8, 0x0, 0x0, 0x3}, 0x8) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) preadv(r4, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x4a) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) 34.837899001s ago: executing program 3 (id=368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x1010, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(r0, 0x20004b3d) clock_gettime(0x26e2f1f1c1d1a6b8, 0x0) semget$private(0x0, 0x0, 0x9) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="df", 0x1, [0x3, 0xfffffffd], 0x3, 0x0, 0x0, {0x6, 0x84, 0x0}, {0x0, 0x4, @sival_int=0x8, @spare=[0x2cb270ba, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x209) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x9}) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r1, 0x0) r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) select(0x190, 0x0, &(0x7f00000002c0), &(0x7f0000000080), &(0x7f00000000c0)) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) munmap(&(0x7f00007da000/0x2000)=nil, 0x2000) socket(0x1b, 0x3, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ae0226", 0xd0, 0x3a, 0xff, @rand_addr="7803ffee000000000023000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr="763fb9cc800b8f3006c2eea4e368506e", [{0x2, 0x17, "93d996b5c97254c2c6456f4519126d842303f3a2bf6a9cd79f96437f6ee9be5c8ecb3c9dc54cf003cd4de98f20a4da81f3de698b8572c77969d3fe4c7935502dc76d54651dcffdbf2c64d0002fefa5c082966ed92e940cd05de3b36960d66d87e619e7485ebf74cb5602bd4cc0ea183c7f1918a519ab98cd6b55f77145a96fd4bbf86081d1db413d9ddec17facda8c577cb92406816c0a4662f763b760fea02d93b087344fc1f031bc4aafb95f3f4d16839cdc70cc91"}]}}}}}}) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000001940)=@file={0x100b, 0x0, ""/4105}, &(0x7f0000002980)=0x100b, 0x10000000) kqueue() 34.157956422s ago: executing program 0 (id=370): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8a, 0x0) symlink(0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000000a40)=0x1c) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000a80)=0x88, 0x4) r1 = open(0x0, 0x0, 0x7e) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x10, 0xfffffffffffffff9, 0x400d, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x71) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000001c0)=0xc) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) r4 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x400, 0x0, 0x0) rename(&(0x7f0000000980)='./file\x00', 0x0) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) rfork(0x10) fhstatfs(&(0x7f00000000c0)={{[0x1, 0xe]}, {0x8, 0x2, "43976e3c8e2d55daca4a356146c5f7cf"}}, &(0x7f0000000100)) r6 = socket(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x3}, 0x24) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000040), 0x4) sendto(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) setsockopt$inet6_group_source_req(r5, 0x29, 0x53, &(0x7f0000002f00)={0x5, {{0x1c, 0x1c, 0x2, 0x10000, @ipv4, 0x7}}, {{0x1c, 0x1c, 0x3, 0x4, @loopback, 0x210001}}}, 0x108) 34.108036698s ago: executing program 2 (id=371): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendto(r0, &(0x7f0000000080)="eb5f648c50b06e6973688a5e560af4cabb56776fdc3e9425923ef8121aa813995485756b45d9bb02068cac1cb10df7c8575acc67a96f8699961fbdec4b9edc5fc1bd922c5e938109b1b583ac57abd5788a02183e91f3efb338bf210353745ce2910a96efc23f9d6278e3ab13da4fb7ecd474323901f3603482ca94ea9045bc3de001c87be39575f1c4392c2074ca871f0e46b8743f42c6ce2e7cd23be966c112c67a65c3ad", 0xa5, 0x80, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2, 0xfffffff8, @rand_addr="d1fc3aaf1c0d8929234ca22a4241a4f2", 0x9}, 0x1c) r2 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r2, r1, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1000420) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x48) 33.167883074s ago: executing program 1 (id=372): pipe2(0x0, 0xd505eb4556f41fdb) aio_waitcomplete(0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000380)=ANY=[@ANYRESOCT]) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) freebsd11_kevent(0xffffffffffffffff, &(0x7f0000000240)=[{0x6, 0xfffffffffffffff5, 0x8, 0xffffff, 0xd, 0x5}, {0x7fffffff, 0xfffffffffffffffa, 0x8000, 0x8, 0x9, 0x7}], 0x2, 0x0, 0x0, 0x0) r0 = kqueue() openat$kbd(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) kevent(r0, &(0x7f0000000000)=[{0x3, 0xfffffffffffffff5, 0x1800a, 0x40000000, 0x6, 0xfffffffffffffffe, [0x7, 0x2, 0x8, 0x5]}], 0x1, 0x0, 0x0, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffe0, 0x400000000000001]) cap_rights_limit(r1, &(0x7f0000000580)=[0x20000207fffffdc, 0x400000000000005]) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r4 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r5 = __specialfd$inotify(0x2, &(0x7f0000000100)={0x100004}, 0x4) inotify_add_watch_at(r5, r4, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) r6 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40, 0x0) copy_file_range(r6, 0x0, r3, &(0x7f0000000080)=0x2ffff, 0xf2, 0x0) getpgrp(0xffffffffffffffff) writev(r6, 0x0, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1016, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 32.937838973s ago: executing program 2 (id=373): openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000006, &(0x7f0000000040)="e2", 0x1, [0xfffffffd], 0x1, 0x8, 0xfffffffc, {0x800000000, 0x7, 0x0}, {0x0, 0x1a, @sigval_ptr=0x81, @spare=[0x6, 0x7, 0x2, 0xa, 0x0, 0x363, 0x6, 0x2]}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x60000000) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}, 0x20104) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) procctl$PROC_REAP_KILL(0x0, 0xffffffffffffffff, 0x6, 0x0) aio_write(&(0x7f0000000340)={0xffffffffffffffff, 0x80000001, &(0x7f0000000300)="e2", 0x1, [0x9, 0x2], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x4}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) ioctl$DIOCADDADDR(0xffffffffffffffff, 0xc4704434, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) socket(0x10, 0x10000000, 0x4) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0)}], 0x1, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) r2 = kqueue() ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x8d800000, [0x0, 0x2, 0x0, 0x5]}) cpuset_setaffinity(0x3, 0x0, 0x0, 0x6c, &(0x7f0000000040)) kevent(r2, &(0x7f0000000100)=[{0x0, 0xfffffffffffffff9, 0xb, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2, 0x0}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000840000000a000000ff0100000000000000000000000000011c0000008400001b344fff276b02c7000a000000000000000000000000000000000000000155c5eb18"], 0xe4, 0x140}, 0x18c) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 32.368049494s ago: executing program 0 (id=374): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x4, 0x0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0xc4) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0xac) chdir(&(0x7f0000000040)='./file0\x00') renameat(r1, &(0x7f0000000200)='./file1\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = kqueue() kevent(r2, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x6]}, {0x5, 0xfffffffffffffff9, 0x8002, 0x200, 0x6, 0x4, [0xe6, 0x6, 0xf, 0x9]}, {0x2, 0xfffffffffffffff9, 0x0, 0x80, 0x4, 0x3, [0xb13b, 0xe4, 0x8, 0x1]}], 0x3, 0x0, 0x0, 0x0) kevent(r2, &(0x7f0000000080)=[{0x4, 0xfffffffffffffff5, 0x8080, 0x10, 0x10001, 0xffffffff80000000, [0x7, 0x9, 0xffffffffffffffff, 0x80]}], 0x0, 0x0, 0x0, 0x0) kqueue() mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) ioctl$BIOCGETZMAX(r3, 0x4008427f, 0x0) kqueue() madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) fork() openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f000059c000/0x2000)=nil, 0x2000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r6 = getpid() fcntl$lock(r5, 0xe, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffff, 0x100000006, r6}) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000300010005}) r7 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x20) flock(r7, 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 31.742402322s ago: executing program 2 (id=375): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0xd, &(0x7f0000000080)={0x54007ff, {{0x1c, 0x1c, 0x2, 0x80, @ipv4={'\x00', '\xff\xff', @loopback}}}, {{0x1c, 0x1c, 0x3, 0x10002, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0x108) r1 = openat$kbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$KBADDKBD(r1, 0x80244b44, &(0x7f0000000200)={0x10000, "39430590d1ab8d9e7a53a10198a6ccd1", 0x0, 0x0, 0x8000, 0x1000}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r2, 0x0, 0x9, &(0x7f00000000c0)={@local={0xac, 0x14, 0x0}, @loopback}, 0xc) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0xb14, 0x4}, {0x6, 0xfffffffffffffffa}}, 0x200) getsockopt$inet_mreqn(r2, 0x0, 0x9, 0x0, &(0x7f0000000080)) 31.741925842s ago: executing program 1 (id=376): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) lpathconf(&(0x7f0000000000)='./file0\x00', 0x6) r0 = socket$inet(0x2, 0x2, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chflags(&(0x7f0000000080)='./file0\x00', 0x4) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000), 0x10) r2 = dup(r1) listen(r2, 0x0) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) setsockopt$inet_int(r1, 0x0, 0x4, &(0x7f0000000100)=0x8, 0x4) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40004800, 0xffffffffffffffff) getpriority(0x0, 0xa04) sendto$inet(r0, 0x0, 0x0, 0x20004, &(0x7f0000000380)={0x10, 0x2, 0x2, @multicast2}, 0x10) bind(r0, &(0x7f00000000c0)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa) 31.741399877s ago: executing program 0 (id=377): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) recvfrom(r2, &(0x7f0000000480)=""/229, 0xe5, 0x0, &(0x7f0000000580)=@un=@file={0x10, 0x1, './file0/file0\x00'}, 0x10) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x80000001, r3, 0x0, 0x100000, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) aio_write(&(0x7f0000000140)={r4, 0x800, 0x0, 0x0, [0x40], 0x2, 0x0, 0x1, {0xd3, 0x0, 0x0}, {0x0, 0xfffffffe, @sigval_ptr=0xa1cf, @thr={0x0, 0x0}}}) aio_suspend(&(0x7f0000000280)=[{0xffffffffffffffff, 0x9fe8, &(0x7f0000000140), 0x0, [0x24, 0x7], 0x5, 0x5, 0x48754158, {0x4, 0x3, 0x0}, {0x4, 0xd, @sival_int=0x100, @spare=[0xfffffffffffffff7, 0x5a, 0x2, 0x1, 0x3c4b, 0xbc0, 0x8, 0x3]}}, {0xffffffffffffffff, 0x200, 0x0, 0x0, [0x3, 0x3], 0x3ff, 0x4, 0x98c3, {0x2, 0xf, 0x0}, {0x3, 0x1e, @sigval_int=0x8000, @spare=[0x4, 0x10000, 0x2, 0x1, 0x5, 0xd3, 0x201, 0xffff]}}, {0xffffffffffffffff, 0x6, 0x0, 0x0, [0xeae, 0x5], 0x10001, 0x2, 0x5, {0x40, 0xffb5, 0x0}, {0x0, 0x1b, @sigval_ptr=0x5, @ke_flags=0x8000}}], 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) aio_write(&(0x7f0000000240)={r5, 0x80001001, 0x0, 0x0, [0x80], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_ptr=0x9, @spare=[0x0, 0x1]}}) getsockopt$inet6_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x102, &(0x7f0000000200)={0x0, 0xa7, "c7a77e311e20014d1a51d8c843509f66ef8abf86c646dbcdea0d3bc45bb14dacc5d5b91b49ac20f1b70a04b02d528f8103122e271daa16a6d0fe41bd878ba8e6a493b93370e9cd40d5364a58453f0800795dfe20545c6d4e89478fbfa973ca4ef8ce40a41c7c9b48d3830d4b545c1486baede89870dc36156706e6daa6c334aae0a73ef29ff817c90d5295714e4b5c6437f7331e20d68fe081dc4314d17194aab1f33ccce4cb70"}, &(0x7f0000000100)=0xaf) r7 = open(&(0x7f0000000340)='./file0\x00', 0x4, 0x110) flock(r7, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xf5fbbcdef939e6ea, 0x740) r8 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r8, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) setsockopt$inet6_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x903, &(0x7f0000000140)={r6, 0x400, 0x8}, 0x8) access(&(0x7f0000000680)='./file0\x00', 0x0) kqueue() procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x1, 0xffffffffffffffff, 0x40}) open$dir(0x0, 0x0, 0x0) r9 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) open$dir(&(0x7f00000002c0)='./file0\x00', 0x40000400000002c2, 0x0) read(r9, &(0x7f00000000c0)=""/5, 0x10c) 31.437960175s ago: executing program 2 (id=378): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x107d2) r1 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f00000001c0)=0xa, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800419c004c0068000701529078ffffffffac1400bb891701e0000001ac1400bbe00000000008e0000001e000000200000003ac1400bb000012001aca127185fcda622f3e8e535585f6907800008007"]) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)='w', 0x1}], 0x1, 0x0) r3 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) select(0x40, &(0x7f0000000f80)={0x0, 0x2, 0x0, 0x200, 0x20000f1}, 0x0, &(0x7f0000001000)={0x8000000002, 0x80, 0x0, 0x10}, 0x0) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) fork() procctl$PROC_REAP_GETPIDS(0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, '\x00', 0x0}) setsockopt$inet6_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x1, 0x8000, 0x7ff, 0x8}, 0x8) r4 = kqueue() setsockopt$inet6_udplite(r0, 0x88, 0x2, &(0x7f0000000100)=0xf, 0x4) kevent(r4, &(0x7f0000000000)=[{0x4, 0xfffffffffffffff3, 0x80a5, 0x0, 0x0, 0x3, [0x6]}], 0x1, &(0x7f00000000c0)=[{}], 0x1, 0x0) 30.987873206s ago: executing program 3 (id=379): shm_open2(&(0x7f0000000000)='./file0\x00', 0x400, 0x4, 0x6, 0x0) cpuset_getaffinity(0x1, 0x2, 0x0, 0xfed1, &(0x7f0000000040)) openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) procctl$PROC_SPROTECT(0x2, 0x0, 0x1, &(0x7f0000000000)=0x1) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r1 = socket(0x1c, 0x1, 0x0) extattr_list_fd(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) r2 = socket$inet6(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x825, @loopback, 0x20}, 0x1c) sendmsg$inet6_sctp(r2, &(0x7f00000000c0)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x64}}, 0x1c, 0x0}, 0x81) r3 = vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x49, 0x1c, 0x0, 0x1, @loopback, 0x800}, 0x1c) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x10, 0x2, 0x0, @rand_addr=0x7fffffff}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)}, {&(0x7f0000019640)="1e81b63eec2966024fc54a32d49f3e74105eaeb31f76", 0x16}], 0x2, 0x0, 0x0, 0x149}, 0x0) writev(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x26, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000000)=0x101, 0x4) 30.547924048s ago: executing program 2 (id=380): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3, 0x10000000], 0x200000000000000, 0x20, 0x0, {0x4, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562ef}}) syz_emit_ethernet(0x2a, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x47, 0x0, 0x0) extattr_list_file(0x0, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x46, 0x0, 0x0) pipe2(0x0, 0xd505eb4556f41fdb) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) r2 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r2, &(0x7f0000000a00)="b10005019000e80303481bc75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x20080, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}}}}}) recvfrom$inet(r1, 0x0, 0x25, 0x81, 0x0, 0x0) ktimer_create(0x0, 0x0, 0x0) aio_waitcomplete(0x0, &(0x7f0000000200)={0x80000000}) cpuset_setid(0x2, 0x0, 0x0) socket(0x1c, 0x1, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r3, 0x29, 0x40, 0x0, 0x0) sendmsg$inet6_sctp(r3, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2, 0x98, @empty, 0x3ff}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x0) r4 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x6, @loopback}, 0x1c, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x149}, 0x0) writev(r4, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000100)={@local, @broadcast, [], {@arp={0x806, @generic={0x6, 0x1234, 0x6, 0x2, 0x1, @random="a99807689605", "c1cf", @empty, "96159537f7c2a06a47ac2a664592d002"}}}}) pipe2(0x0, 0x0) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f0000000040)={0x15, 0x1d, 0xb, &(0x7f00000003c0)="00fb8f855923280a7bac51", 0x1, &(0x7f00000000c0)='\"', 0x8, 0x7d86619b, [0x0, 0x9, 0x800000c]}) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) 30.537494726s ago: executing program 1 (id=381): profil(0x0, 0x0, 0x0, 0x1) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) open$dir(0x0, 0x40000400000002c2, 0x0) (async, rerun: 32) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000180)="e2b7", 0x2, [], 0x4, 0x8, 0x0, {0x0, 0xfffffffffffffff8, 0x0}, {0x3, 0x0, @sival_int=0xfffffff8, @spare=[0x0, 0xfffffffffffffffe, 0x0, 0x200000000000, 0x0, 0x5]}}) (async, rerun: 32) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) (async) kqueue() (async) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r0, 0x10000000000) fork() (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, &(0x7f00000001c0)) r3 = dup(0xffffffffffffffff) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) (async) connect$unix(r4, &(0x7f0000000140)=@abs={0x8, 0x1, 0x0, 0x2}, 0x8) getpeername$unix(r4, 0x0, &(0x7f0000000580)) (async) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) posix_fadvise(0xffffffffffffffff, 0x9, 0x7, 0x4) (async) r5 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_sctp_SCTP_RTOINFO(r5, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x16fb745f}, &(0x7f0000000100)=0x10) (async) rfork(0x2050) (async, rerun: 32) __realpathat(r3, &(0x7f0000000200)='.\x00', &(0x7f0000000300)=""/8, 0x8, 0x0) (rerun: 32) r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r6, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) (async) rfork(0x1000) 29.947982186s ago: executing program 3 (id=382): r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x9e) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0x1c, 0x1c, 0x1, 0x20000, @empty, 0x5}, 0x1c) sendmsg$inet6_sctp(r1, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x1, 0x1, @loopback}, 0x1c, 0x0}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r2, 0xffff, 0x1018, &(0x7f0000000040)=0x1, 0x4) msync(&(0x7f0000904000/0x4000)=nil, 0x4000, 0x0) unmount(&(0x7f0000000040)='./file1/file0\x00', 0x400000) chdir(&(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x9e) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) socket$inet6(0x1c, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000300)={0x1c, 0x1c, 0x1, 0x20000, @empty, 0x5}, 0x1c) (async) sendmsg$inet6_sctp(r1, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x1, 0x1, @loopback}, 0x1c, 0x0}, 0x0) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$sock_int(r2, 0xffff, 0x1018, &(0x7f0000000040)=0x1, 0x4) (async) msync(&(0x7f0000904000/0x4000)=nil, 0x4000, 0x0) (async) unmount(&(0x7f0000000040)='./file1/file0\x00', 0x400000) (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) 29.946169778s ago: executing program 0 (id=383): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20411, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20100, &(0x7f0000000000)={0x10, 0x2, 0x2, @rand_addr=0x7ffffffe}, 0x10) recvfrom$inet(r0, &(0x7f0000000280)=""/41, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x40000, {0x0, 0x6}}, 0x20) r1 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f0000000080), 0x4) r2 = kqueue() r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x800000000000000]}, {0x7, 0xfffffffffffffff9, 0xc0b1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9]}, {0x7, 0xfffffffffffffff5, 0xc0a9, 0x64000000}], 0x3, &(0x7f00000002c0)=[{}], 0x1, 0x0) rfork(0x85000) dup2(r2, r0) execve(0x0, 0x0, 0x0) 29.329513245s ago: executing program 2 (id=384): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = dup(0xffffffffffffff9c) ioctl$MDIOCDETACH(r0, 0xc1c06d01, &(0x7f00000002c0)={0x10, 0x5, 0x4, &(0x7f0000000080)='./file0\x00', 0x100000001, 0x8, 0x4, 0xca0, 0x0, 0xc286, &(0x7f00000000c0)='msdosfs\x00', [0x3, 0x7, 0x4, 0xffffff6b, 0x1, 0x80000000, 0x400, 0x2, 0x7, 0x5, 0x33, 0x9ff, 0xffffffff, 0x2, 0xea21, 0xb, 0x2, 0x8, 0x1ff, 0x3, 0x27a, 0x5, 0x9, 0x200, 0x6, 0x1ff, 0x4, 0x7, 0xffff8001, 0x3, 0x9, 0x4, 0x7fffffff, 0xff19, 0xffffffff, 0x5, 0xffff, 0x101, 0x2, 0xd77d, 0x6, 0x1, 0x2, 0x10000, 0xa000000, 0x9, 0x8, 0x2, 0x7, 0x1, 0x5, 0x3, 0x90, 0x3ff, 0xffffff57, 0x1, 0x80, 0x8, 0x100, 0x5, 0xbc4d, 0x2, 0x8, 0x1ff, 0x5, 0x10, 0x4, 0x80000001, 0x400, 0x80000000, 0x8, 0x1, 0x1ff, 0x9, 0x5, 0x2, 0x4, 0x6, 0x7, 0x7fff, 0x9, 0x8, 0x9, 0x9, 0x0, 0x2b, 0x9bde, 0x0, 0x48, 0x8000, 0x4, 0xf, 0x3, 0x81, 0x9, 0x7fff]}) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0xd0480035, &(0x7f00000001c0)) 0s ago: executing program 32 (id=383): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20411, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20100, &(0x7f0000000000)={0x10, 0x2, 0x2, @rand_addr=0x7ffffffe}, 0x10) recvfrom$inet(r0, &(0x7f0000000280)=""/41, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x40000, {0x0, 0x6}}, 0x20) r1 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f0000000080), 0x4) r2 = kqueue() r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x800000000000000]}, {0x7, 0xfffffffffffffff9, 0xc0b1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9]}, {0x7, 0xfffffffffffffff5, 0xc0a9, 0x64000000}], 0x3, &(0x7f00000002c0)=[{}], 0x1, 0x0) rfork(0x85000) dup2(r2, r0) execve(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts. Sep 18 04:31:50 ci-freebsd-main-2 kernel: arp: from 00:00:00:00:00:00: addr len: new 0, i/f 6 (ignored) if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 Warning! syz-executor[966] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. Expensive callout(9) function: 0xffffffff81a5cc10(0xfffffe0077a91a80) 0.002256261 s Out of ktrace request objects. lock order reversal: (sleepable after non-sleepable) 1st 0xfffffe0058125388 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1688 2nd 0xffffffff83cccac0 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1387 lock order tun_ioctl -> tun_mtx established at: #0 0xffffffff81681891 at witness_checkorder+0x781 #1 0xffffffff81506877 at __mtx_lock_flags+0x187 #2 0xffffffff8186b5cc at tunifioctl+0x15c #3 0xffffffff818467fe at ifhwioctl+0xefe #4 0xffffffff8184a9f2 at ifioctl+0xde2 #5 0xffffffff8169063a at kern_ioctl+0x4ca #6 0xffffffff8169007e at sys_ioctl+0x36e #7 0xffffffff82165702 at amd64_syscall+0x4e2 #8 0xffffffff82109d4b at fast_syscall_common+0xf8 lock order tun_mtx -> tun_ioctl attempted at: #0 0xffffffff81682762 at witness_checkorder+0x1652 #1 0xffffffff81570509 at _sx_xlock+0x139 #2 0xffffffff8186b4fa at tunifioctl+0x8a #3 0xffffffff818476ab at ifhwioctl+0x1dab #4 0xffffffff81868f62 at tunioctl+0xd92 #5 0xffffffff811dd876 at devfs_ioctl+0x266 #6 0xffffffff82327ce7 at VOP_IOCTL_APV+0x87 #7 0xffffffff817edec7 at vn_ioctl+0x3c7 #8 0xffffffff811de739 at devfs_ioctl_f+0x69 #9 0xffffffff8169063a at kern_ioctl+0x4ca #10 0xffffffff8169007e at sys_ioctl+0x36e #11 0xffffffff82165702 at amd64_syscall+0x4e2 #12 0xffffffff82109d4b at fast_syscall_common+0xf8 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 lock order reversal: 1st 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/kern_ktrace.c:1151 2nd 0xfffffe0077be9070 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:581 lock order ufs -> proctree established at: #0 0xffffffff81681891 at witness_checkorder+0x781 #1 0xffffffff81572ddf at _sx_slock_int+0x13f #2 0xffffffff8163f08d at uprintf+0x14d #3 0xffffffff81def5df at ufs_rmdir+0xdf #4 0xffffffff8232928d at VOP_RMDIR_APV+0xcd #5 0xffffffff817e789a at kern_frmdirat+0x87a #6 0xffffffff82165702 at amd64_syscall+0x4e2 #7 0xffffffff82109d4b at fast_syscall_common+0xf8 lock order proctree -> ufs attempted at: #0 0xffffffff81682762 at witness_checkorder+0x1652 #1 0xffffffff814e8946 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81dc327b at ffs_lock+0x18b #3 0xffffffff8232a5e7 at VOP_LOCK1_APV+0x57 #4 0xffffffff817f2d9e at _vn_lock+0x14e #5 0xffffffff817f3648 at vn_close1+0x1e8 #6 0xffffffff814da23a at ktrops+0x41a #7 0xffffffff814d99ad at sys_ktrace+0xaed #8 0xffffffff82165702 at amd64_syscall+0x4e2 #9 0xffffffff82109d4b at fast_syscall_common+0xf8 vnode_pager_putpages: zero-length write at 0 resid 12288 0xfffffe0077688898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371b820 usecount 6, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0054191e88 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe005417d780 (pid 1124, syz-executor, tid 100610) nlink=1, effnlink=1, size=1048576, extsize 0 generation=a89aaa05, uid=0, gid=0, flags=0x60091 ino 111, on dev gpt/rootfs FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0) login: Expensive callout(9) function: 0xffffffff81494ae0(0xfffffe006ddd71e0) 0.013312966 s md0: truncating fractional last sector by 1 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45000 ip6_pcbopts: all specified options are cleared. ZFS filesystem version: 5 ZFS storage pool version: features support (5000) if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45800 Jan 1 01:58:00 ci-freebsd-main-2 kernel: pid 1423 (syz-executor), jid 0, uid 0, was killed: exceeded maximum CPU limit witness_lock_list_get: witness exhausted maxproc limit exceeded by uid 0 (pid 5678); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 6075); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 6519); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 6519); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 4130); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 4471); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 1769); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 6644); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 6828); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 6789); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 6613); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 8401); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 3758); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 5110); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 1735); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 1735); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 2682); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 3906); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 3906); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 5447); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 5476); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 8458); see tuning(7) and login.conf(5) maxproc limit exceeded by uid 0 (pid 2236); see tuning(7) and login.conf(5)