last executing test programs: 1.034072148s ago: executing program 0 (id=1): symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0xee00) chmod(&(0x7f0000000280)='./file0\x00', 0x2768c724b44f58aa) aio_waitcomplete(0x0, &(0x7f00000005c0)={0x0, 0xfffffffffffffff7}) ioctl$DIOCBEGINADDRS(r0, 0xc4704433, &(0x7f00000000c0)="2f408103ccee7825d70a9c5842eea6e2dc8d8f8c88065fad10018a3b60aa2293d50deb30a7155aae3fa871ff724219a56df5b6f65b450d09df78e26bf32a5ae49d36dfc5503989708a2e75bc1c548c8af58c0607871c6bfc8bacb569dbe89c1e1053d211429b724a") sigaction(0x14, &(0x7f0000000000)={0x0, 0x0, {[0x0, 0x1, 0x800, 0x1]}}, &(0x7f00000001c0)={0x0}) lgetfh(&(0x7f0000002080)='./file0\x00', &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fhopen(&(0x7f0000000140)={{[0x33d, 0x3]}, {0xf, 0x3, "29e90e1d412aa09995799ce85401001e"}}, 0x2000000) 928.419033ms ago: executing program 0 (id=5): open$dir(0x0, 0x0, 0x0) kqueue() r0 = open(0x0, 0x400, 0x10) r1 = openat(0xffffffffffffffff, 0x0, 0x200201, 0xa1) aio_write(0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="d726dd259dc9ffffffffffff86dd60000000003c00fffe8000000000000000000000006440aaff0200000000000000000000000000013a04010700000000ff0100000000009ddd8982281bd8b101ff0196862c940000000000000000000187"]) setreuid(0xee00, 0x0) r2 = fork() setuid(0x0) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x200000, 0x180) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) renameat(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f00000001c0)='./file0/file0\x00') sigqueue(r2, 0x1, @sival_ptr=0xfffffffffffffff8) ioctl$KDGETMODE(r0, 0x40044b09, 0xd) r4 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) sync() setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, 0x0, 0x0) r5 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x8, 0x0, 0x0, 0x0}, 0x8) r6 = kqueue() fchmod(r6, 0x1) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') aio_write(&(0x7f00000002c0)={r5, 0x800, &(0x7f0000000040)="81f6365ffd1af58191bc8d120efb9f2a", 0x10, [0x80, 0x6], 0xdf6, 0x6, 0x0, {0xa44, 0xc0, &(0x7f00000001c0)="ff21329503d559cb8ce09de5e13ccdf65825bc7be80c9af6f88d65fb0b7fd4e0b52fabf502bc6c197afaed51fe91ee6c6f2e59722d1d64b256fc270cb02dba1dbce5919527a8cadcbb8f76d9ae12aad86049d05f53a95b8d148c62dad8fe281d2c4209af08ef3f8e01b5a20f9cc4029fb81a3ac04e8bb4b0abeee2cb434d7cdabb34080661cab09e3568879b8527c17b560eb6b6abf4184c8e7df84320c7a83fc3ec2eba292e6c57395c31d1f46f8d888b758bb7d39851a573ba67b3eea96d674923512b25c6a57e4e25b68790f5b90c6c920c543e4bc04ad874aee1"}, {0x3, 0x3, @sigval_int=0x8, @ke_flags=0xc089}}) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) fcntl$setown(r7, 0x6, 0x0) 876.000319ms ago: executing program 1 (id=2): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) bind$inet6(0xffffffffffffff9c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x24, 0x0, &(0x7f0000000000)) vfork() open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) extattr_get_file(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000140)='\x7f\x00o\xe0r', 0x0, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) rfork(0x85000) r1 = socket(0x2, 0x3, 0x0) getsockopt$sock_int(r1, 0xffff, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x10) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) cpuset_setaffinity(0x3, 0x8, 0x5, 0x0, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r4, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x2000000, 0x740) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x0, 0x4, 0x58, 0x1000301010005}) r7 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r8 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0xffffffffffffffff, 0x0) 741.363357ms ago: executing program 3 (id=4): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) (async, rerun: 64) ftruncate(r0, 0x2008000008) (async, rerun: 64) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) (async) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) (async) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r2, 0x6, 0x29, &(0x7f0000000400)={&(0x7f0000000000)="9d4bb23cb3ddc650cbd6161a398a5b1106e783e2cc59", &(0x7f0000000300), &(0x7f0000000500)="0096d8d84c1e188133cba083408fed9635498258c17a37872e90c20dc9d4910ddab503cccf9a726f75b76bed437eeaee688073e9f37db2d22e94b67976280d4b899b43604c1fddce84a2c0e81f2f4134ad274061fbe625fd6cbad9f16d7717e2beebdd10d4353251898e749addcf37a7b6fa5aceccb10f2ceafc54f47cbcf5e92a7e1ed8684add390676d0b20334e1f8239b585a36eb49a7fbd0f40474887cfaed917e5bcf780e5233cc70e7cbeae3d6d63686", 0xb, 0x16, 0x0, 0x0, 0xb3, 0x0, 0x3, 0x2, "08f73a051425f94f"}, 0x40) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x900, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0x8) (rerun: 64) getsockopt$inet6_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xb, &(0x7f0000000880)={0x10, 0x7fff, 0x2000, 0x2, 0x9, 0x7ffd, 0x32f, 0x5, r3}, &(0x7f00000008c0)=0x20) (async) aio_error(&(0x7f0000000440)={r0, 0x3ff, &(0x7f0000000340)="85459704950212c688348d0e9ac5a0674809c3d0b58df7fa07a2545428897492360f88f405faae9e2c6427de24ca7214639f08e38de491e63af9bf3d91e752c57fc144a3bd78d3445f915ee49935c4256c21f151ee8584a64084274a5ce260a09a8edf7b212c17553764fd1b3c8003cda87b65182fda5667bb4f0fec76c2666933b0b99db7d6f2fefe2a4e2d2cca413f9ed62ce96a8b99f885d76f37f8c8cec5c1a65db4c037", 0xa6, [0x2, 0xffffa063], 0x5, 0x8, 0x10, {0x2, 0x1, &(0x7f0000000180)="da3e2ac2926825d0d43d2c2735807bc21cc03dcbc7f1f18048f32a3b6e7a5f413f74f4bbf3b63b359bf9e3efcc0d7b755afa64244b615ded0b8afcd136f42e28fa4bac05b939bbd8fe89e89c8d17572fba92c101a5c7acc3a5f06949e9"}, {0x0, 0xa, @sigval_ptr=0x8000000000000000, @ke_flags=0x2}}) (async) sendmsg$inet6_sctp(r2, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x149}], 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x103) posix_fadvise(r4, 0x0, 0x6, 0x5) posix_fadvise(r4, 0x8, 0x1c, 0x2) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24) (async) sync() (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) (async, rerun: 32) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r5, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaa90aaaaaaaaaaaaaafb08004548001c0000000000019078ac1400aae000000111009078000000050d86521c9ea0326d1b19cb34d96c8376b994ae37873a8f2938ffeece1711744289f398bec352408006672b7efce930c3788595bc4359b495d1f86e9c20c4983921152f1074f41147e325a305"]) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$inet6_sctp(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x185}, 0x9) ktimer_create(0x0, &(0x7f0000000740)={0x3, 0x4, @sigval_ptr=0x9, @spare=[0x8c, 0x10, 0x0, 0xc7, 0x6, 0xfffffffffffff372, 0xffffffffffffffff, 0x4]}, &(0x7f00000007c0)) (async) rfork(0x85000) (async, rerun: 32) getsockopt$inet6_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x900, &(0x7f0000000900)={r3, 0x81}, &(0x7f0000000940)=0x8) (rerun: 32) 737.318341ms ago: executing program 2 (id=3): open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) chflags(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) (async) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100000, 0x20) (async) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in={0x10, 0x2, 0x0, @rand_addr=0xfffffff8}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000080)="b273c9d95d2917c0d3170f1bf28efced575c40ed34b5e364869bca41813af844e86d630fbb5d77f5cb031dea6c7ab39c8156d549f1928bbb1f0bc6eabf9a5ddc2bf72509308b48a80dc02f5c89bc12850e4baf2a119dc3fa8131e4867649cde8eea7e99312e139eb7bfe04ee2bb53ef19f", 0x71}, {&(0x7f0000000480)="fd7326ba7b96597b9591c3fedcc37c831f828fe5e9519e86ba9ceb337ac91fbf8904a6999b87cb564dd7533d5fdcb588f88994696d856096bcfea83e24675177058194b8f0e3abecbb85aa0d2b44f6362446aa11636c717e29811cc342eb1cb14103677a6b7499375b1e8fa2e45e3642bef1de33823df6adef2dcbad936f0f3b97954b64261bd1a71d23ab928f879f5784e25be92f731161c9493060d8d34404ca5d7ade996455aba852cf4ed8d5db4b8dbff5e23a2bab6179798943b470516af8aa2637cebca37c6aa80395ec17cb489a86d66943874e700b668e21f51941b0d91fa648b6c43baff0064eaa1324156b8521b81db5da182c2888", 0xfa}], 0x2, &(0x7f0000000e40)=[{0x90, 0x11, 0x1000, "1c2aed92a8fd97fd208ca48f4994dca1c8b4d798ab7b8affaaa7325f77afc128fc306fc9ce22045a669de274b1023868f04d3b8a81dd901995bc81229203c05c938cc3d7c13d1d651a7cd3f95c0a58c3395da3f7fb60dc12a498532e8d3f2036b421314481bfcc8ccd1e73859f4f7930311b69149fbe7fef1cb42a31b4bf"}, {0x78, 0x29, 0x0, "75fea623c83d342c4c231ba273a9139496872a08a789cb2ca7bd887fa03b93c309179d7b2168e5c4a360e87ec26bf48fba82c1c8eb4e17512060350df82d5943e1db27901cf55cc91578723295669f038aa13c2476d5869d94aed74094bef39eda"}, {0x108, 0x6, 0x0, "a60754124a2168863eb97f1c9a6620cd6cc32191429a952b08feb6ad44f9cfc76fe87e46898fac48c39b0f7f9c3c2691038fd084bb8bf250401fa60b4ae50fb57e147e4c15f82a9763a69689afb1be362a316b70a2fbcfa8fc2196f2eb12d27d6343df381ad840374f8fb586ed55fc5b7fbb77e4fc94347d3c7f2cc5dad29f55ac0da07e569173b70f0d6ba6c6088458c8f055467778b01d98b61555d3d7fe17e6dc8b4835e209b79606742af0b1f63047e769e038da41988d751908f4adc480cb6bbcecd5c7719208f0bb9f41e33203ccddf8aeb38199b54405e1fc067eeb0dc97c0769f1d92d404dabed9d79ecc00b02b935"}, {0x60, 0x11, 0x0, "e7c50eaf13d9c3befc55d079dfb57188800e3bcb7be39f9f09164bc16a64e19513ef6481dd158c8aecc0cdfac5a23218edfd65b386b4c7e00f66158b4ae9808a02ca47861cd1815eda323a06055b56fc"}], 0x270}, 0x20005) 628.443055ms ago: executing program 2 (id=6): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20104, 0x0, 0x0) freebsd11_fstatfs(0xffffffffffffffff, &(0x7f0000000dc0)) getgroups(0x0, 0x0) setregid(0x0, 0x0) r1 = fork() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x9, 0x0, 0xaec}, 0x1, 0x7, 0x5, 0x3, r1, 0xffffffffffffffff, 0x1}) syz_emit_ethernet(0x56c, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x536, 0x3a, 0x3eda8841f6300bf7, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7, "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"}}}}}}) write(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = kqueue() r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$inet(r3, &(0x7f0000000080)={0x10, 0x2, 0xffffffffffffffff, @loopback}, &(0x7f00000000c0)=0x10) freebsd11_kevent(r2, &(0x7f0000000000)=[{}], 0x6a81, 0x0, 0x50, 0x0) 388.548895ms ago: executing program 2 (id=7): sysarch$I386_CLEAR_PKRU(0xd, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r1 = fork() procctl$PROC_WXMAP_STATUS(0x0, r1, 0x16, &(0x7f00000000c0)) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x3, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xa9}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chflags(&(0x7f0000000080)='./file0\x00', 0x4) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x1010) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r2, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) procctl$PROC_REAP_STATUS(0x2, 0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fork() sigqueue(r5, 0x9, @sigval_ptr=0x4) r6 = getppid() procctl$PROC_TRACE_CTL(0x2, r6, 0x7, &(0x7f0000000040)=0x1) procctl$PROC_REAP_KILL(0x0, r4, 0x6, &(0x7f00000001c0)={0x7f, 0x0, r5, 0xe, r6}) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 431.817µs ago: executing program 3 (id=8): procctl$PROC_ASLR_CTL(0x0, 0x0, 0xd, &(0x7f0000000ac0)=0x2) (async) procctl$PROC_ASLR_CTL(0x0, 0x0, 0xd, &(0x7f0000000ac0)=0x2) socket(0x1c, 0x1, 0x0) ktimer_create(0x4, 0x0, 0x0) kqueue() (async) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) (async) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x2c, 0x0, @loopback={0xfe}, @loopback={0xfe}, [@dstopts={0x54}]}}}}}}}) openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x120080, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x120080, 0x0) ioctl$DIOCGETADDR(r3, 0xc4704436, &(0x7f0000000340)="90b82b1c7a6898ef7e4a25b859422973472727d8b4737a3152d971e6d20262acd5f521444b18d283fc8571989c1a3dba262d4f9e4c6d53eb938f9db69295cdf8eb667e689a4461") (async) ioctl$DIOCGETADDR(r3, 0xc4704436, &(0x7f0000000340)="90b82b1c7a6898ef7e4a25b859422973472727d8b4737a3152d971e6d20262acd5f521444b18d283fc8571989c1a3dba262d4f9e4c6d53eb938f9db69295cdf8eb667e689a4461") ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000040)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x8d800000, [0x0, 0x2, 0x0, 0x5]}) (async) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000040)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x8d800000, [0x0, 0x2, 0x0, 0x5]}) cpuset_setaffinity(0x3, 0x2, 0xa32, 0x8, &(0x7f0000000200)={[0x3e]}) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) (async) bind$inet(r1, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) connect$inet(r1, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r1, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) (async) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r5 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r6 = socket(0x1c, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r6, 0x6, 0x2000, &(0x7f0000000100)={'bbr\x00', 0x200009}, 0x24) sendfile(r4, r6, 0x89b9, 0x0, 0x0, 0x0, 0x11) (async) sendfile(r4, r6, 0x89b9, 0x0, 0x0, 0x0, 0x11) getpid() (async) getpid() r7 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="fefcb1235ed191d855d55a61f51d8fea"}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 0s ago: executing program 0 (id=9): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x40, 0x0) pwritev(r1, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket(0x1c, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f0000000080)=0xb6, 0x4) connect$inet(r4, &(0x7f0000000500)={0x10, 0x2, 0x3, @loopback}, 0x10) bind$inet6(r3, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x13e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) symlinkat(&(0x7f00000005c0)='\x00', r5, &(0x7f0000000bc0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000340)='./file0\x00', r5, &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') bindat(r1, r0, &(0x7f0000000040)=@un=@abs={0x8, 0x0, 0x0, 0x1}, 0x8) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @local, 0x1}, 0x1c) extattr_set_fd(r2, 0x0, &(0x7f0000000140)='\x00', &(0x7f00000001c0)="318cf7621faac604dd2d0dc4b8607acbec1636fa47adbe31d7f142cbbbdf52eaa6ce44c10943a844ccaf9af92b73567e3c717c30bff5513fb637caad4cc0c03672547c6de5d53f063c42d422e72b611ddbc52d4a247143af9524b7ceae61b1255d21e951a5d8a6f96d1daeb4df23daea69f7844755666d6d4aedf587", 0x7c) setsockopt$inet6_int(r6, 0x29, 0x2a, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) __realpathat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) extattr_list_link(&(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x3174e8000000000f, 0x6}) kevent(0xffffffffffffffff, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r7, 0x8008745b, &(0x7f00000003c0)="28a7c7f98123061e161b6b12c23cc0a40148f8e05690192e34341bddc9ba95d2b36fe4cec62aeac2ecb2b57b78") fork() kqueue() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. SYZFAIL: child stopped Connection to 10.128.1.246 closed by remote host. FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.inif_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 ternal) (ttyu0)if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: FreeBSD/amd64 (ci-freebsd-maipid 863 (syz-executor), tap3: tun/tap protocol violation, non-controlling process closed last. n-3.us-central1-ifaddr cache = 0xfffffe006b6eb300 is deleted b.c.syzkaller.inif_delmulti_locked: detaching ifnet instance 0xfffffe0058574000 ternal) (ttyu0)if_delmulti_locked: detaching ifnet instance 0xfffffe0058574000 login: tap3: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0058574000 pid 865 (syz-executor), tap0: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0007a84000 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 tap0: link state changed to DOWN FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: 2025-09-25T15:16:38.416611+00:00 ci-freebsd-main-3.us-central1-b.c.syzkaller.internal init 901 - - getty repeating too quickly on port /dev/ttyv5, sleeping 30 secs 2025-09-25T15:16:38.419432+00:00 ci-freebsd-main-3.us-central1-b.c.syzkaller.internal init 902 - - getty repeating too quickly on port /dev/ttyv2, sleeping 30 secs 2025-09-25T15:16:38.438080+00:00 ci-freebsd-mainpid 828 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last. -3.us-central1-bifaddr cache = 0xfffffe006b6eb480 is deleted .c.syzkaller.inttap2: link state changed to DOWN ernal init 906 -if_delmulti_locked: detaching ifnet instance 0xfffffe0058573800 - getty repeatiif_delmulti_locked: detaching ifnet instance 0xfffffe0058573800 ng too quickly oif_delmulti_locked: detaching ifnet instance 0xfffffe0058573800 n port /dev/ttyv6, sleeping 30 secs 2025-09-25T15:16:38.448912+00:00 ci-freebsd-main-3.us-central1-b.c.syzkaller.internal init 909 - - getty repeating too quickly on port /dev/ttyv1, sleeping 30 secs 2025-09-25T15:16:38.446241+00:00 ci-freebsd-main-3.us-central1-b.c.syzkaller.internal init 907 - - getty repeating too quickly on port /dev/ttyv4, sleeping 30 secs 2025-09-25T15:16:38.453414+00:00 ci-freebsd-main-3.us-central1-b.c.syzkaller.internal init 908 - - getty repeating too quickly on port /dev/ttyv7, sleeping 30 secs 2025-09-25T15:16:38.457874+00:00 ci-freebsd-main-3.us-central1-b.c.syzkaller.internal init 910 - - getty repeating too quickly on port /dev/ttyv0, sleeping 30 secs FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: set $lines = 0 Password:if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058574000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058574000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058574000 Login incorrect login: show registers Password:if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058573800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058573800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058573800 Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl