last executing test programs: 13.776303484s ago: executing program 1 (id=36): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x142, &(0x7f0000000f80)={@broadcast, @broadcast, [{[], {0x8100, 0x2, 0x0, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x108, 0x3a, 0x0, @rand_addr="3bcc3f0600000058ff2ea13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffa, {0x0, 0x6, '\x00', 0xffff, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, [@hopopts={0x45, 0x16, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xa, 0x98, "0f4c55169585735aa24b0934215357157036b2f9e68d974b379bff5447d6a5faacd6dc9ba9ca4e88359404d0232b8b938b8cc9f86dbf7995ef8c363cc51d7dda5be05ce282c647e4934773efcdb784158b9c44a6ae0e6084506998616e36ca78a297d1ca7a4786b88fc2fac128a81eca0e53d973242b57de90fd668347ef3df6e65e26b1f26025d92902b4bcd604cb69bea64f527394c89f"}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x21, 0x1, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @ra]}]}}}}}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}, 0x0) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_emit_ethernet(0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) socket(0x1c, 0x2, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000080)={0x28, 0x0, 0x20, &(0x7f0000000300)="ec7b00000900ff2425c109a58b519798d25cd0a9cfbc8c96469dc0119723f87f", 0x0, 0x0, 0x0, 0xfdffff85, [0x0, 0x4, 0x9, 0xfff]}) ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x3fb, &(0x7f0000000800), 0x0, 0x0, 0x0}) r1 = socket$inet6(0x1c, 0x2, 0x0) sendmsg$inet6_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000290000"], 0x14}, 0x20105) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xb95, &(0x7f00000003c0)={@local, @random="75f43672decc", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0xb87, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1, {[@rr={0x7, 0x3, 0xad}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0x7, 0xb, "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"}}}}}) r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r3 = fcntl$dupfd(r2, 0x11, r2) sigaction(0x71, &(0x7f0000000140)={&(0x7f0000000100)="c4c2ddb66ded660f38289000000000420f493e0f2aac7f00000100c4e2f9abe5f30f1ee8c4e28d8c64e3000f0fcfbfc464d4", 0x4579aace5d4d62c3, {[0x8000005, 0x2, 0x0, 0x27fff]}}, 0x0) ioctl$KDGKBTYPE(r3, 0x40044b40, 0x9) ioctl$SMB_READB(r2, 0xc020697a, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @buf="de32", 0x0, 0x0, 0x0, 0x0}) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) kqueue() mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) sigaction(0x1, &(0x7f0000000200)={&(0x7f0000000180)="65adc4e1b75861eb2e660f6e0ef087a600100000660f3832a50a000000f2f2dd8cc4667e5bc0c4c17e166b4c6426660f38018900000011c4e182c2dbfed9f5", 0x23, {[0x52, 0x3, 0x0, 0x400]}}, &(0x7f0000000280)={&(0x7f0000000240)="2ef70a948d0000660f3a41f900c4c249987300c4c15dddfcc4e17576dfc4e37d198f0326593fa2c4e1a1f5a553000000c00b00660f635300866bda"}) 13.775793635s ago: executing program 2 (id=37): socket$inet_udp(0x2, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000180)=0xffffffff, 0x2b) sendto$inet(r1, 0x0, 0x0, 0x20101, &(0x7f0000000000)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) shutdown(r1, 0x1) r2 = fcntl$dupfd(r0, 0x11, r0) ioctl$SMB_READB(r0, 0xc020697a, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f0000000240)={@empty}, 0x14) setsockopt$inet6_buf(r3, 0x29, 0x19, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) r4 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x10, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0) setuid(0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x12, &(0x7f0000000080)={0x2}, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x3, &(0x7f0000000040)={0xb, 0x5000, 0x100, 0x3}, 0x8) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) dup(0xffffffffffffffff) ioctl$CRIOGET(0xffffffffffffffff, 0xc0046364, &(0x7f00000001c0)=0x456) socket(0x17, 0x4, 0x8) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) r5 = socket(0x1c, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) 13.757942473s ago: executing program 3 (id=39): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 11.309518889s ago: executing program 1 (id=40): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 11.30889678s ago: executing program 2 (id=41): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(0x0, 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 11.308225385s ago: executing program 3 (id=42): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) ppoll(0x0, 0xffffffffffffff13, 0x0, 0x0, 0xffffffffffffff6c) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f000018b000/0x2000)=nil, 0x2000) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) fcntl$lock(0xffffffffffffffff, 0xb, 0x0) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000001940)=""/4096, 0x1000, 0x83, &(0x7f0000002940)=@file={0x10, 0x1, './file0/file0\x00'}, 0x10) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x8000002c, 0x0) fork() open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x4, 0x8, 0x0, 0x4}, {0x7, 0x0, 0x3, 0x20000004}, {0xfffe, 0x9, 0xa, 0x20003}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) madvise(&(0x7f0000d0d000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x1, 0x0) fcntl$lock(r1, 0xc, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xfffff05a}) fcntl$lock(r2, 0xc, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x100}) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xffffffffffffff6f) r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffb, 0x45, 0x1, 0x2ef5, 0x6}], 0x1005, 0x0, 0x37, 0x0) 8.569511306s ago: executing program 1 (id=43): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 8.569074043s ago: executing program 2 (id=44): socket$inet6_sctp(0x1c, 0x1, 0x84) openat$crypto(0xffffffffffffff9c, &(0x7f0000000180), 0x4, 0x0) extattr_set_link(&(0x7f0000000080)='./file0/file0\x00', 0x1, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x143140, 0x4) mount(&(0x7f0000000600)='exfat\x00', 0x0, 0x0, 0x0) aio_waitcomplete(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x28, 0x3010b}, 0x9) connectat$unix(0xffffffffffffffff, r4, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) r5 = socket(0x1c, 0x1, 0x0) r6 = socket(0x1, 0x5, 0xfc) bind$inet6(r6, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x5}, 0x1c) r7 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1b, &(0x7f00000001c0)=0x5, 0x4) ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000) mkdir(&(0x7f0000001040)='./file0\x00', 0x1) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f00000002c0)='./file0/file1\x00') syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa"]) r8 = kqueue() kevent(r0, &(0x7f0000000000)=[{0x1, 0xfffffffffffffff9, 0x8005, 0x1, 0xe3f, 0x0, [0x8, 0x8, 0x0, 0xc0000000]}], 0x1, 0x0, 0x0, 0x0) kevent(r8, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) cpuset(&(0x7f0000000000)) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) 8.568570121s ago: executing program 3 (id=45): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) ppoll(0x0, 0xffffffffffffff13, 0x0, 0x0, 0xffffffffffffff6c) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f000018b000/0x2000)=nil, 0x2000) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) fcntl$lock(0xffffffffffffffff, 0xb, 0x0) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000001940)=""/4096, 0x1000, 0x83, &(0x7f0000002940)=@file={0x10, 0x1, './file0/file0\x00'}, 0x10) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x8000002c, 0x0) fork() open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x4, 0x8, 0x0, 0x4}, {0x7, 0x0, 0x3, 0x20000004}, {0xfffe, 0x9, 0xa, 0x20003}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) madvise(&(0x7f0000d0d000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x1, 0x0) fcntl$lock(r1, 0xc, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xfffff05a}) fcntl$lock(r2, 0xc, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x100}) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xffffffffffffff6f) r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffb, 0x45, 0x1, 0x2ef5, 0x6}], 0x1005, 0x0, 0x37, 0x0) 5.951451594s ago: executing program 1 (id=46): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(0x0, &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 5.95071146s ago: executing program 2 (id=47): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 5.950336523s ago: executing program 3 (id=48): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 3.146678432s ago: executing program 1 (id=49): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(0x0, &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 3.146081927s ago: executing program 2 (id=50): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(0x0, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 3.145697701s ago: executing program 3 (id=51): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) ppoll(0x0, 0xffffffffffffff13, 0x0, 0x0, 0xffffffffffffff6c) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f000018b000/0x2000)=nil, 0x2000) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) fcntl$lock(0xffffffffffffffff, 0xb, 0x0) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000001940)=""/4096, 0x1000, 0x83, &(0x7f0000002940)=@file={0x10, 0x1, './file0/file0\x00'}, 0x10) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x8000002c, 0x0) fork() open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x4, 0x8, 0x0, 0x4}, {0x7, 0x0, 0x3, 0x20000004}, {0xfffe, 0x9, 0xa, 0x20003}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) madvise(&(0x7f0000d0d000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x1, 0x0) fcntl$lock(r1, 0xc, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xfffff05a}) fcntl$lock(r2, 0xc, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x100}) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xffffffffffffff6f) r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffb, 0x45, 0x1, 0x2ef5, 0x6}], 0x1005, 0x0, 0x37, 0x0) 2.145711ms ago: executing program 1 (id=52): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(0x0, 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x107d2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f00000000c0)=0x5, 0x4) setresuid(0x0, 0xee00, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f00000006c0)={0x8000, 0x3, 0xfffffffc}) bind$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) getsockname$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000001940)=0x1c) 1.188717ms ago: executing program 2 (id=53): socket$inet_udp(0x2, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000180)=0xffffffff, 0x2b) sendto$inet(r1, 0x0, 0x0, 0x20101, &(0x7f0000000000)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) shutdown(r1, 0x1) r2 = fcntl$dupfd(r0, 0x11, r0) ioctl$SMB_READB(r0, 0xc020697a, 0x0) r3 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x2e, &(0x7f0000000240)={@empty}, 0x14) setsockopt$inet6_buf(r3, 0x29, 0x19, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) r4 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x10, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0) setuid(0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x12, &(0x7f0000000080)={0x2}, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x3, &(0x7f0000000040)={0xb, 0x5000, 0x100, 0x3}, 0x8) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) dup(0xffffffffffffffff) ioctl$CRIOGET(0xffffffffffffffff, 0xc0046364, &(0x7f00000001c0)=0x456) socket(0x17, 0x4, 0x8) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) 0s ago: executing program 3 (id=54): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) ppoll(0x0, 0xffffffffffffff13, 0x0, 0x0, 0xffffffffffffff6c) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f000018b000/0x2000)=nil, 0x2000) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) fcntl$lock(0xffffffffffffffff, 0xb, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000001940)=""/4096, 0x1000, 0x83, &(0x7f0000002940)=@file={0x10, 0x1, './file0/file0\x00'}, 0x10) r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x8000002c, 0x0) fork() open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x4, 0x8, 0x0, 0x4}, {0x7, 0x0, 0x3, 0x20000004}, {0xfffe, 0x9, 0xa, 0x20003}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) madvise(&(0x7f0000d0d000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r3 = open(&(0x7f0000000400)='./file0\x00', 0x1, 0x0) fcntl$lock(r2, 0xc, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xfffff05a}) fcntl$lock(r3, 0xc, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x100}) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xffffffffffffff6f) r4 = kqueue() kevent(r4, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffb, 0x45, 0x1, 0x2ef5, 0x6}], 0x1005, 0x0, 0x37, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0054216000 Dec 1 05:46:57 ci-freebsd-i386-3 dhclient[936]: Interface tap0 is down, dhclient exiting Dec 1 05:46:57 ci-freebsd-i386-3 dhclient[936]: connection closed Dec 1 05:46:57 ci-freebsd-i386-3 dhclient[936]: exiting. ip6_pcbopts: all specified options are cleared. ip6_pcbopts: all specified options are cleared. ip6_pcbopts: all specified options are cleared. ip6_pcbopts: all specified options are cleared. ifconfig: interface tap0 does not exist ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) ifconfig: ioctl (SIOCAIFADDR): File exists SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap0 inet 172.20.0.170 netmask 255.255.255.0: 256 (errno 1: Operation not permitted) SYZFAIL: repeatedly failed to execute the program proc=0 req=1 state=1 status=67 (errno 9: Bad file descriptor) FreeBSD/amd64 (ci-freebsd-i386-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: set $lines = 0 Password: Login incorrect login: show registers Password: Login incorrect login: ps Dec 1 05:47:29 ci-freebsd-i386-3 login[747]: 2 LOGIN FAILURES ON ttyu0 Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl