last executing test programs: 39.412732112s ago: executing program 1 (id=223): r0 = socket(0x1c, 0x2, 0x0) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x20000}, 0x10d) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000680)=[&(0x7f0000000580)='rack\x00', &(0x7f00000005c0)='rack\x00', &(0x7f0000000600)='#$\x00']) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000440)={0x0, 0x7}, &(0x7f0000000480)=0x8) 39.373341806s ago: executing program 1 (id=224): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0x101}, 0x10) r1 = dup2(r0, r0) ppoll(&(0x7f00000002c0)=[{r1, 0x2006}], 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x200}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000080)={@in6={{0x1c, 0x1c, 0x1, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, 0x60b}}, 0x0, 0x5, 0x2, 0x3, 0x7, 0x1fc}, &(0x7f0000000000)=0x98) 39.282624159s ago: executing program 1 (id=230): kqueue() r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000340)={0x8088, 0xa, 0x0, 0x1000}, 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10202, 0x0) fcntl$setstatus(r1, 0x4, 0x7f2c0ca836789ed9) writev(r1, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="c7658daea6fc000000000000080600010800060400"]) 39.133316247s ago: executing program 1 (id=231): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2, 0x3}, 0x10) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000340)=0x101, 0x4) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002c00)="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", 0x682}], 0x1}, 0x0) read(r0, &(0x7f0000000b80)=""/4096, 0x1000) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000002c0)="59d8ff8d4dfe33fefaedfcfa385ff31beb26ddeaead32b9ef3d2011da75325a26ca8c52966eb1726d4b27ca9e02713493da225c789e35898412a4cef85bd70b8c28eaa2be14d844b2a50459df8a5ebdf6a5a35ab9e0aa87d3389e6b58c896c1537d56a97920e1089", 0x68}, {0x0}], 0x3, 0x0, 0x8c, 0x20000}, 0x20001) rfork(0x95020) 39.13291051s ago: executing program 1 (id=232): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='./file1\x00', 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') lchflags(&(0x7f0000000040)='./file0\x00', 0x4) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) renameat(r1, &(0x7f0000000200)='./file1\x00', r1, &(0x7f0000000140)='./file0/file0\x00') 39.132642745s ago: executing program 1 (id=233): getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x23, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000000)=0x400, 0x4) setrlimit(0x2, &(0x7f0000000080)={0xfffffffc, 0x1000000000000}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0), 0x8) accept4$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, 0x0, 0x18000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, 0x0, 0x0) 39.132483803s ago: executing program 32 (id=233): getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x23, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000000)=0x400, 0x4) setrlimit(0x2, &(0x7f0000000080)={0xfffffffc, 0x1000000000000}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0), 0x8) accept4$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, 0x0, 0x18000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, 0x0, 0x0) 3.483313377s ago: executing program 0 (id=811): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) connect$inet(r1, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0xff}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20104, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) rfork(0x3060) 3.153315721s ago: executing program 0 (id=816): syz_emit_ethernet(0x66, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0x1c, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) mkdir(0x0, 0x1bf) extattr_set_file(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0) extattr_set_file(&(0x7f0000000000)='./file0\x00', 0x1, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000000500)=0x1c) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000040)={@in6={{0x1c, 0x1c, 0x1, 0xb, @loopback, 0x1ff}}, 0x0, 0x8f, 0x9, 0x4}, 0x90) 2.298452506s ago: executing program 0 (id=823): openat$filemon(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) freebsd10_pipe(0x0) open(0x0, 0x0, 0x0) setsockopt$inet6_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x9) r0 = socket(0x2, 0x1, 0x0) fdatasync(0xffffffffffffffff) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00'}, 0x24) bind$inet(r0, &(0x7f0000000180)={0x10, 0x2, 0x0, @rand_addr}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x27, 0x2, 0x0, @loopback}, 0x10) vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0x9, @sival_int, @thr={0x0, 0x0}}) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000140)={'bbr\x00'}, 0x24) 1.546609462s ago: executing program 0 (id=836): socket$inet_sctp(0x2, 0x5, 0x84) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096, 0x1000) open$dir(&(0x7f0000001040)='./file0\x00', 0x200, 0x4) ksem_init(&(0x7f0000000000)=0x0, 0x1) ksem_trywait(r0) 1.478909828s ago: executing program 0 (id=831): ksem_init(&(0x7f0000000180)=0x0, 0x0) ksem_wait(r0) ksem_trywait(r0) socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x80, &(0x7f0000000140)=0x20001005, 0x4) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000040)='y', 0x1) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3000) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000100)={'rack\x00', 0x1000}, 0x24) setsockopt$inet_tcp_int(r2, 0x6, 0x426, 0x0, 0x0) 1.322388738s ago: executing program 2 (id=834): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file2\x00') mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000140)='./file2\x00', r2, &(0x7f00000000c0)='./file2/file0\x00', 0x0) readlinkat(r1, &(0x7f0000000100)='./file2/file0\x00', 0x0, 0x0) 1.244654112s ago: executing program 4 (id=839): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0x184) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) renameat(r1, &(0x7f00000025c0)='./file0\x00', r1, &(0x7f0000002600)='./file1\x00') renameat(r1, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000200)='./file1\x00') 1.244397202s ago: executing program 2 (id=840): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="dd8c0ceee1520c34a17f44d7bf708ab4c867", 0x12}], 0x1) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) 1.171145406s ago: executing program 4 (id=841): setuid(0xee01) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr}}, 0x1c) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr}}, 0x1c) 1.153895462s ago: executing program 4 (id=842): openat$crypto(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) thr_suspend(&(0x7f00000000c0)={0x0, 0x80000001}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000100)={'bbr\x00'}, 0x32) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff, 0xfffffff8, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000200)={0x1c, 0x1c, 0x2, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, 0x401}, 0x1c) 610.567426ms ago: executing program 2 (id=852): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffff9c, &(0x7f0000002c00), 0x0, 0x0) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x60, 0xffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @cred={0x60, 0xffff, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]}, @rights={0x14, 0xffff, 0x1, [r2, r4]}], 0xd4}, 0x0) dup2(r3, r2) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/211, 0xd3}, 0x0) 609.966048ms ago: executing program 0 (id=845): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = socket(0x18, 0x1, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = kqueue() kevent(r1, &(0x7f00000001c0)=[{0x0, 0xfffffffffffffffb, 0x5, 0xf0000000, 0x2ef7, 0x6}], 0x1005, 0x0, 0x8, 0x0) acct(&(0x7f0000000000)='./file0\x00') kevent(r1, 0x0, 0x0, &(0x7f0000000200), 0x2, 0x0) 493.064658ms ago: executing program 2 (id=847): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) setresuid(0xee01, 0x0, 0x0) r1 = getuid() setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) 478.669074ms ago: executing program 2 (id=848): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 404.627913ms ago: executing program 3 (id=849): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) rmdir(&(0x7f0000000040)='./control\x00') socket(0x11, 0x3, 0x0) 383.628346ms ago: executing program 3 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0x184) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) renameat(r1, &(0x7f00000025c0)='./file0\x00', r1, &(0x7f0000002600)='./file1\x00') renameat(r1, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000200)='./file1\x00') 302.238562ms ago: executing program 4 (id=851): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="dd8c0ceee1520c34a17f44d7bf708ab4c867", 0x12}], 0x1) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) 301.979168ms ago: executing program 3 (id=853): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @broadcast, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @remote, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000400)={@multicast1, @rand_addr, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x49, &(0x7f00000000c0)={@multicast1, @multicast2, @multicast2}, 0xc) 281.08754ms ago: executing program 3 (id=854): open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = kqueue() kevent(r2, &(0x7f0000000100)=[{0x3, 0xfffffffffffffffe, 0x8067}], 0x1, 0x0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00') renameat(r1, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file0\x00') 280.140352ms ago: executing program 2 (id=855): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x12, r2, 0x0) 67.685324ms ago: executing program 4 (id=856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x8}, &(0x7f0000000340)={0x9}, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000340)={@in6={{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x6fa, 0x314}, 0x98) 67.342888ms ago: executing program 3 (id=857): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffff9c, &(0x7f0000002c00), 0x0, 0x0) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x60, 0xffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @cred={0x60, 0xffff, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]}, @rights={0x14, 0xffff, 0x1, [r2, r4]}], 0xd4}, 0x0) dup2(r3, r2) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/211, 0xd3}, 0x0) 31.073146ms ago: executing program 3 (id=858): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) setresuid(0xee01, 0x0, 0x0) r1 = getuid() setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket(0x1c, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 4 (id=859): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file2\x00') mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000140)='./file2\x00', r2, &(0x7f00000000c0)='./file2/file0\x00', 0x0) readlinkat(r1, &(0x7f0000000100)='./file2/file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0058790800 Nov 13 13:19:51 ci-freebsd-i386-3 dhclient[816]: send_packet: No buffer space available if_delmulti_locked: detaching ifnet instance 0xfffffe005878f000 Expensive callout(9) function: 0xffffffff8426f3b0(0xfffffe006e79b048) 0.002395231 s if_delmulti_locked: detaching ifnet instance 0xfffffe00079e1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058790800 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0075172528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff835002c0 usecount 5, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005fcd5738 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe005fcf9000 (pid 1081, syz-executor, tid 100455) nlink=1, effnlink=1, size=1048576, extsize 0 generation=233532fe, uid=0, gid=0, flags=0x50000 ino 78, on dev gpt/rootfs Nov 13 13:19:59 ci-freebsd-i386-3 syslogd: last message repeated 1 times Nov 13 13:19:59 ci-freebsd-i386-3 kernel: pid 1171 (syz-executor), jid 0, uid 0, was killed: exceeded maximum CPU limit vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0075172dc0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff835002c0 usecount 5, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005fd1c420 ref 1 pages 264 cleanbuf 12 dirtybuf 21 lock type ufs: EXCL by thread 0xfffffe005fd03740 (pid 1202, syz-executor, tid 100605) nlink=1, effnlink=1, size=1048576, extsize 0 generation=66af7c10, uid=0, gid=0, flags=0x40008 ino 85, on dev gpt/rootfs Out of ktrace request objects. Nov 13 13:20:19 ci-freebsd-i386-3 dhclient[816]: send_packet: No buffer space available if_delmulti_locked: detaching ifnet instance 0xfffffe00079e0000 Nov 13 13:20:44 ci-freebsd-i386-3 syslogd: last message repeated 2 times Nov 13 13:20:46 ci-freebsd-i386-3 dhclient[1814]: send_packet: No buffer space available Nov 13 13:21:21 ci-freebsd-i386-3 syslogd: last message repeated 3 times Nov 13 13:21:35 ci-freebsd-i386-3 syslogd: last message repeated 2 times Nov 13 13:21:47 ci-freebsd-i386-3 dhclient[1840]: send_packet: No buffer space available Nov 13 13:22:24 ci-freebsd-i386-3 syslogd: last message repeated 4 times Nov 13 13:22:43 ci-freebsd-i386-3 syslogd: last message repeated 1 times Nov 13 13:22:49 ci-freebsd-i386-3 dhclient[1870]: send_packet: No buffer space available Nov 13 13:23:33 ci-freebsd-i386-3 syslogd: last message repeated 5 times Stopping cron. Waiting for PIDS: 686. Stopping sshd. Waiting for PIDS: 682. Stopping devd. Waiting for PIDS: 424. Writing entropy file:. Writing early boot entropy file:. Terminated . Connection to 10.128.0.192 closed by remote host. if_delmulti_locked: detaching ifnet instance 0xfffffe00079df800 if_delmulti_locked: detaching ifnet instance 0xfffffe005878e800 Nov 13 13:24:52 ci-freebsd-i386-3 syslogd: exiting on signal 15 if_delmulti_locked: detaching ifnet instance 0xfffffe005878f000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df800 pid 1586 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last. if_delmulti_locked: detaching ifnet instance 0xfffffe00079df800 ifaddr cache = 0xfffffe00587c2600 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe005878e800 if_delmulti_locked: detaching ifnet instance 0xfffffe005878e800 if_delmulti_locked: detaching ifnet instance 0xfffffe005878f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005878f000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079e0000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079e0000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079e0000 tap2: link state changed to DOWN Waiting (max 60 seconds) for system process `vnlru' to stop... done Waiting (max 60 seconds) for system process `syncer' to stop... if_delmulti_locked: detaching ifnet instance 0xfffffe00079df800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df800 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079df000 Syncing disks, vnodes remaining... 2 0 if_delmulti_locked: detaching ifnet instance 0xfffffe005878f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005878f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005878f000 if_delmulti_locked: detaching ifnet instance 0xfffffe005878e800 if_delmulti_locked: detaching ifnet instance 0xfffffe005878e800 if_delmulti_locked: detaching ifnet instance 0xfffffe005878e800 done All buffers synced. ktrace write failed, errno 5, tracing stopped for pid 15 lock order reversal: 1st 0xfffffe0058661070 ufs (ufs, lockmgr) @ /syzkaller/managers/i386/kernel/sys/kern/vfs_mount.c:2260 2nd 0xfffffe0059894908 devfs (devfs, lockmgr) @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:3383 lock order ufs -> devfs attempted at: #0 0xffffffff8160fda2 at witness_checkorder+0x1652 #1 0xffffffff8147e545 at lockmgr_xlock+0xa5 #2 0xffffffff82274ccb at VOP_LOCK1_APV+0x6b #3 0xffffffff81769e3e at _vn_lock+0x14e #4 0xffffffff817303ca at vget_finish+0xfa #5 0xffffffff81181603 at devfs_allocv+0x183 #6 0xffffffff811806d7 at devfs_root+0xb7 #7 0xffffffff8173b4ce at vfs_cache_root_fallback+0x20e #8 0xffffffff81732902 at vflush+0x1c2 #9 0xffffffff81180519 at devfs_unmount+0x69 #10 0xffffffff8171aad0 at dounmount+0x10d0 #11 0xffffffff81735bf7 at vfs_unmountall+0x187 #12 0xffffffff816ce853 at bufshutdown+0x583 #13 0xffffffff814e7f3e at kern_reboot+0x6be #14 0xffffffff814e77df at sys_reboot+0x82f #15 0xffffffff820b7d3b at amd64_syscall+0x49b #16 0xffffffff8205dfeb at fast_syscall_common+0xf8 Uptime: 5m47s if_delmulti_locked: detaching ifnet instance 0xfffffe00079e0000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079e0000 if_delmulti_locked: detaching ifnet instance 0xfffffe00079e0000 Accounting disabled acpi0: Powering system off serialport: VM disconnected.