last executing test programs:

3.533373357s ago: executing program 2 (id=763):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r0, 0x6, 0x478, &(0x7f0000000340)=0x6000000, 0x4)

3.373610757s ago: executing program 0 (id=764):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1018, &(0x7f0000000340), 0x4)
connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c)

3.370543272s ago: executing program 3 (id=765):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f00000000c0)={0x10}, 0x10)
getsockname$inet(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x10)

3.148443442s ago: executing program 3 (id=767):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x0, @rand_addr="00000000000000001bb400"}, 0x1c)
sigaltstack(&(0x7f0000c9f000/0x2000)=nil, 0x0)
madvise(&(0x7f0000c9b000/0x4000)=nil, 0x4000, 0x5)

3.145422179s ago: executing program 2 (id=768):
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup(r0)
setsockopt$inet6_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x28, &(0x7f0000000ac0), 0xc)

2.602790568s ago: executing program 0 (id=770):
r0 = socket$inet6(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000100)={@empty}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@mcast2}, 0x14)

2.599284389s ago: executing program 2 (id=771):
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7e000000ffff"], 0x9}, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)

2.584315128s ago: executing program 3 (id=772):
r0 = kqueue()
kevent(r0, 0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0)
lio_listio(0x0, 0x0, 0x0, &(0x7f00000013c0)={0x3, 0x3, @sigval_int, @thr={0x0, 0x0}})

2.213305111s ago: executing program 1 (id=773):
r0 = socket(0x1c, 0x1, 0x84)
sendmsg$inet6_sctp(r0, &(0x7f0000000340)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x0, 0x4, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000004c0)="c290333ad6bbb16e27e23c03cfb4cbcc3b3fea510b3b", 0x16}], 0x1, 0x0, 0x0, 0x8c}, 0x0)
shutdown(r0, 0x1)

2.206416799s ago: executing program 0 (id=774):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="01000000", 0x4)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="87780ab5", 0x4)

1.876369949s ago: executing program 2 (id=775):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1017, &(0x7f0000000000)=0x102, 0x4)

1.874154977s ago: executing program 3 (id=776):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000380)='./file1\x00', 0x2, 0x0)
fchmod(r0, 0x0)

1.732269981s ago: executing program 1 (id=777):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x2}, 0x8)

1.404299594s ago: executing program 1 (id=778):
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r1, r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x8002, &(0x7f0000000340)={@in6={{0x1c, 0x1c, 0x1, 0x0, @empty}}}, 0x98)

1.22185294s ago: executing program 0 (id=779):
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f0000000000)=0x3, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20185, &(0x7f00000003c0)={0x10, 0x2, 0x0, @loopback}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0xf01f02, 0x0, 0x0)

1.056592373s ago: executing program 3 (id=780):
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c)
setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f00000000c0)={0x0, 0x2}, 0x8)

1.000537283s ago: executing program 2 (id=781):
ioctl$DIOCRSETTFLAGS(0xffffffffffffffff, 0xc450444a, &(0x7f0000000880)={{"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", "1f18e986426bda6800a9148a11bcdb680fac724f8c99b0627a8b31152545e9d3", 0xe, 0x6}, 0x0, 0x3, 0x4, 0x7, 0x180000000000, 0x37, 0x1c, 0x3, 0x2})
setsockopt$inet6_sctp_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000140)=0x5, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DIOCCHANGERULE(r0, 0xcbe0441a, &(0x7f0000000140))

989.450706ms ago: executing program 1 (id=782):
setresgid(0xee01, 0x0, 0x0)
getresgid(&(0x7f0000000000)=<r0=>0x0, 0x0, 0x0)
setresgid(0x0, 0xee00, 0xee01)
setregid(r0, r0)

454.829612ms ago: executing program 1 (id=783):
open$dir(&(0x7f0000000080)='./file0\x00', 0x4e50, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x0)

451.466867ms ago: executing program 0 (id=784):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r1, 0x6, 0x27, &(0x7f0000000040)="7e7398a2c78f6c67b9eda1f945be3e22501b0d3897114fd6bbde77c666745562e69988370c4bc7d16b4d0a7f7d1fa5e6e8ae6a9a2dc25de9", 0x38)

384.165843ms ago: executing program 2 (id=785):
ktimer_create(0x0, 0x0, &(0x7f0000000180))
ktimer_create(0x0, 0x0, &(0x7f00000001c0))
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x0, 0xffffffffffffffff})

87.145627ms ago: executing program 1 (id=786):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="19fdb123c091ae3db1f1c5f51d8be800"}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x1, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x1, 0x0, @loopback}}}, 0x108)

60.834013ms ago: executing program 3 (id=787):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000180)=0x400f0, 0x4)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000380)={'rack\x00'}, 0x24)
sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c, 0x0}, 0x0)

0s ago: executing program 0 (id=788):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1010)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000680), 0x8)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.252' (ED25519) to the list of known hosts.
Sep 30 10:26:47 ci-freebsd-main-4 kernel: attempted source route from 255.255.255.255 to 172.20.0.170

FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0)

login: Sep 30 10:26:49 ci-freebsd-main-4 kernel: attempted source route from 172.20.1.170 to 224.0.0.1
Sep 30 10:26:49 ci-freebsd-main-4 kernel: arp: 70:a5:9c:12:92:5d attempts to modify permanent entry for 172.20.2.187 on tap2
Sep 30 10:26:50 ci-freebsd-main-4 kernel: nd6_na_input: duplicate IP6 address fe80:4::2aa
WARNING pid 1227 (syz-executor): ioctl sign-extension ioctl 1a000a69b
WARNING pid 1281 (syz-executor): ioctl sign-extension ioctl 440004532
WARNING pid 1358 (syz-executor): ioctl sign-extension ioctl d6c503392a1e7728

FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0)

login: ktrace write failed, errno 27, tracing stopped for pid 763
ktrace write failed, errno 27, tracing stopped for pid 766
ktrace write failed, errno 27, tracing stopped for pid 764
ktrace write failed, errno 27, tracing stopped for pid 767
ktrace write failed, errno 27, tracing stopped for pid 765
ktrace write failed, errno 27, tracing stopped for pid 949
pid 1670 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1669 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1647 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - bad address)
pid 1638 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1576 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - bad address)
pid 1556 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1554 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1526 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1508 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1433 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 949 (rtsol), jid 0, uid 0: exited on signal 4 (no core dump - other error)
pid 766 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 765 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 767 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
SYZFAIL: SIGILL
pid 764 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
ifaddr cache = 0xfffffe00540ae900 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000
tap0: link state changed to DOWN
Connection to 10.128.1.252 closed by remote host.
pid 759 (sshd), jid 0, uid 0: exited on signal 4 (no core dump - bad address)
pid 1673 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1673 (syz-executor), tap3: tun/tap protocol violation, non-controlling process closed last.
ifaddr cache = 0xfffffe0058840300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519000
tap3: link state changed to DOWN
pid 1672 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1671 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
pid 1672 (syz-executor), tap1: tun/tap protocol violation, non-controlling process closed last.
ifaddr cache = 0xfffffe00540ae480 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058729000
pid 1671 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last.
ifaddr cache = 0xfffffe00540aea80 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058729000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058729000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519800
tap2: link state changed to DOWN
pid 1378 (getty), jid 0, uid 0: exited on signal 4 (core dumped)

FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0)

login: pid 1377 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 781 (sh), jid 0, uid 0: exited on signal 4 (core dumped)
pid 1674 (syz-executor), jid 0, uid 0: exited on signal 4 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519000
pid 1376 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 761 (csh), jid 0, uid 0: exited on signal 4 (core dumped)
pid 1375 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 1374 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 1373 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
set $lines = 0
pid 1372 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
Password:pid 1371 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 1370 (getty), jid 0, uid 0: exited on signal 4 (core dumped)

Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058729000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058729000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058729000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e519800
show registers
Password:
Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect