last executing test programs:

45.0984147s ago: executing program 2 (id=1997):
r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000600)='./file0\x00', 0x200, 0x0)
socket(0x1c, 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SMB_WRITEB(r3, 0xc0086924, &(0x7f0000000180)={0x0, 0x7f, 0x0, @byte, @byte=0x40, 0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x5e, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x10210, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', 0x80000049, &(0x7f0000000080))

40.511137333s ago: executing program 2 (id=2003):
openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x200, 0x0)
socket(0x1c, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SMB_WRITEB(r2, 0xc0086924, &(0x7f0000000180)={0x0, 0x7f, 0x0, @byte, @byte=0x40, 0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x5e, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x10210, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', 0x80000049, &(0x7f0000000080))

39.66303124s ago: executing program 2 (id=2006):
open$dir(&(0x7f0000000100)='./file0\x00', 0x90200, 0x195)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
extattr_delete_link(&(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c') (fail_nth: 1)

39.533965423s ago: executing program 2 (id=2008):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0)
r2 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r2, 0x0)
open$dir(0x0, 0x40000400000002c2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0)
mkdir(0x0, 0x0)
mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140))

38.368096696s ago: executing program 0 (id=2009):
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
socket$inet_sctp(0x2, 0x5, 0x84)
setreuid(0xee00, 0x0)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00'}, 0x24)
bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x1, 0xf379, @loopback, 0x401}, 0x1c)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x401, &(0x7f0000000000)={0x6, "5769ff0f000000000000d0e800"}, 0x9f)
connect$inet6(r0, &(0x7f0000000300)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet_tcp_int(r0, 0x6, 0x48, &(0x7f0000000000), 0x4)

38.367596155s ago: executing program 0 (id=2010):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0)
r2 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140))

38.173890067s ago: executing program 3 (id=2011):
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x54, &(0x7f0000000440)="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"/264, 0x108)
setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
setitimer(0x2, 0x0, 0x0)
unlink(&(0x7f00000001c0)='./file0\x00')
r1 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1015, &(0x7f0000000180)=0x5, 0x4)
setresuid(0xffffffffffffffff, 0xee01, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x30, 0x0, 0x0)
setitimer(0x2, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
cpuset_setaffinity(0x3, 0x6, 0x2, 0x8, &(0x7f0000000080)={[0x8]})
r3 = open(&(0x7f0000000040)='./file1\x00', 0x80000000000206, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000100)="08725faf773271e4c944a8bf7313f76f1f865996f8bb31297c1decfc88955037707e3fd9d1ae399d1b434a3541377852f5eb0883406ad15f3df09d8e719b4b1e4acf22d5d942fcea1ebba1cfeab855ff3a798dde1f6dabd564619eaa"}], 0x4)

37.058842928s ago: executing program 3 (id=2013):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0)
r1 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140))

34.972079575s ago: executing program 0 (id=2014):
freebsd11_fhstatfs(&(0x7f0000000100)={{[0x5c8951ac, 0x3bea9983]}, {0x1, 0x40fe, "0400"}}, 0x0)

34.968021922s ago: executing program 2 (id=2015):
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
freebsd11_getdents(r1, &(0x7f00000012c0)=""/4096, 0x20)
mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000005c0)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00')
unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00')
rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
cpuset_setdomain(0x3, 0x3, 0x3, 0x20, &(0x7f0000000040)={[0x1]}, 0x3)
vfork()
ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f0000000440)={0x19, 0x0, 0x10, &(0x7f0000000180)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x0, 0x0, 0x7]})
r6 = fcntl$dupfd(r5, 0x11, r4)
ioctl$CIOCCRYPT(r6, 0xc0306367, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x81ed, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000340)})
symlinkat(&(0x7f0000000700)='./file0\x00', r3, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

34.211371267s ago: executing program 3 (id=2016):
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
poll(&(0x7f0000000600)=[{r0, 0x68eb5a13814a4a3a}], 0x1, 0x0)
freebsd11_getdents(r0, &(0x7f0000000080)=""/171, 0xab)
kqueue()
r1 = semget$private(0x0, 0x1, 0x55f)
__semctl$GETNCNT(r1, 0x0, 0x3)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f5769e67f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x2, 0x1, 0x0)
bind(r2, &(0x7f0000000000), 0x10)
setreuid(0xee00, 0x0)
r3 = fork()
setresuid(0x0, 0x0, 0x0)
sigqueue(r3, 0x16, @sival_int=0x3)
r4 = dup(r2)
listen(r4, 0x0)
r5 = socket(0x2, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000000), 0x10)
r6 = accept$unix(r2, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000000040)=""/74, 0x4a, 0x3, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r7, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r7, 0x6, 0x41e, &(0x7f0000000100), 0x4)
freebsd10_pipe(&(0x7f0000000480)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
cap_rights_limit(r8, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001])

34.195943083s ago: executing program 0 (id=2018):
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
socket$inet_sctp(0x2, 0x5, 0x84)
setreuid(0xee00, 0x0)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00'}, 0x24)
bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x1, 0xf379, @loopback, 0x401}, 0x1c)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x401, &(0x7f0000000000)={0x6, "5769ff0f000000000000d0e800"}, 0x9f)
setsockopt$inet_tcp_int(r0, 0x6, 0x48, &(0x7f0000000000), 0x4)

34.162052708s ago: executing program 0 (id=2019):
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
cpuset_setaffinity(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$inet6_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ksem_init(&(0x7f0000000040), 0x0)
r2 = socket(0x1c, 0x3, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x1010)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x8e99}, 0x8)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r3, 0x0, 0x33, 0x0, 0x0)
sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f00000001c0)={'bbr\x00', 0x80000}, 0x24)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @rand_addr="f17727ac0e96f6b048a51751c16aa78d", 0x43}, 0x1c)
sendto(r1, &(0x7f0000000e40)="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", 0x1da, 0x100, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x3, 0x5bf, @rand_addr='|\x00\x00\x00\x00\x00\x00\t\x00', 0x4}, 0x1c)
socket$inet6_sctp(0x1c, 0x0, 0x84)
profil(0x0, 0x0, 0x0, 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
chroot(0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000580)=ANY=[])
setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0xa, &(0x7f0000000380)={@in={{0x10, 0x2, 0x0}}, 0x0, 0x54, 0x5, 0x306, 0x82, 0x0, 0xfa}, 0x98)
cpuset_getaffinity(0x3, 0x6, 0x6, 0x8, &(0x7f0000000100))
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x3, &(0x7f0000000340)={0x8003}, 0x8)
r6 = geteuid()
setreuid(0xffffffffffffffff, r6)

34.141852756s ago: executing program 3 (id=2021):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2, 0x80, @loopback={0xfeffffffffffffff}, 0x2f}, 0x1c)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x14)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000001c0), 0x4)
socket$inet6_sctp(0x1c, 0x0, 0x84)
socket(0x2, 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x1e, &(0x7f0000000000)={0x0, 0x8, 0xfe}, &(0x7f0000000040)=0x8)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="cd", 0x1, 0x2002800c, &(0x7f0000000140)={0x10, 0x4e20}, 0x10)
dup(r1)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f)
kmq_unlink(0x0)
openat(0xffffffffffffffff, 0x0, 0x8, 0x20)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x1}, 0xb)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0x1c, 0x0, 0x84)
r5 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r5, &(0x7f0000000680)=@in6={0x1c, 0x1c, 0x3, 0x8b3, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c)
connect$inet6(r5, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2, 0x0, @loopback}, 0x1c)
sendmsg$inet6_sctp(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000007c0)="d9f2a0c55690d847400e9dc363a6aa18113e97853a23743029719be92d0757b2e39ed907e8983b5d40d7c236e4058f4365f78eb365afb57b1efe7cbae07f39459b5c2d0ba75d876e5c8047424c4a96b5dd596f576df4fd2697ebe02c53b63ada7a1a31ec1c599b5ebc3ef30a4a999feb7ba3457d0d76c0d50b7d6a740b732a5d5c83ca53aaa6f73d5d5da9495df967b5972ea56ba5708ba1df09c6c48016ee70e29c4cf28f12f419f1252ba70660dbd91dbbdf4d90c129bc1a5b759da92f70d39bd35fc927", 0xc5}, {&(0x7f0000000300)="3634fb0c67dc3430f85536d1b958467de732e3d6779a8f56730a319e83cf5a37810dfe3727bc6fec311275a86ba13dbb0cc600628e5d2cc51d3084194c11b76aa054059fb977c24ff336f5332b4c7cf50288c8b77bfcbb3b10adba45189c27844797c73a4a0b015f41479f305dbeb8cd8b2d66c15b17c16da5e60c5c52448d491be46f1a7f7998b1e7ca703ef4adf44859c3344a7ebb7d0ece986878d487e43e5cb9a7a5fb122f02869ceeac81df03a7a22b0c124d593abe37b7497c1d6dcf2d5cc484976d677f8fd83e90a3d7435789c536bbc4b77086c338dc", 0xda}], 0x2, 0x0, 0x0, 0x18c}, 0x185)
r6 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r6, 0x6, 0x27, &(0x7f00000004c0)={&(0x7f0000000040)="ef", 0x0, &(0x7f00000006c0)="3eff54ba7e30fc20d311a8f1c25f1936a15ff71979edc37141484f8af97348328bedbc2ad0ccb45e7970d3ff26db9402763aa1c2b4339680aa775da35eef9077f4ab71143873c337a4d35da8d450c6446379", 0x19, 0x1, 0x0, 0x1c, 0x52, 0x0, 0x3, 0x2, "57c20c5309d9a863"}, 0x40)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0), 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0)

34.043868596s ago: executing program 0 (id=2023):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
semget$private(0x0, 0x2, 0x232)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async, rerun: 64)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) (rerun: 64)
aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}})
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x2) (async)
mmap(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x3, 0x21013, r2, 0x0) (async, rerun: 64)
rfork(0x96014) (rerun: 64)
bind$bt_rfcomm(r0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000ffff0000", @ANYRES32=r4], 0x10}, 0x0) (async)
socket$inet6_sctp(0x1c, 0x5, 0x84)
msgget$private(0x0, 0xfffffffffffffffd) (async, rerun: 64)
r5 = socket$inet6_udp(0x1c, 0x2, 0x0) (rerun: 64)
r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff)
execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) (async, rerun: 32)
writev(r6, &(0x7f0000000280), 0x26) (rerun: 32)
write(r6, &(0x7f00000004c0)="9665a44f", 0x2000)
r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0)
ioctl$MDIOCDETACH(r7, 0xc1c06d01, &(0x7f0000000740)={0xf3b4, 0xab65, 0x4, &(0x7f00000006c0)='./file0\x00', 0x7fffffffffffffff, 0x5, 0x6, 0x101, 0x8, 0x4, 0x0, [0x8001, 0x3ff, 0x9, 0x57, 0x7, 0x7, 0x2, 0x10001, 0x0, 0x8, 0x5, 0x10001, 0xa, 0x6, 0x8, 0x0, 0xfffffc00, 0xb, 0xffff, 0x9, 0x36f, 0x9, 0x72fa4142, 0x3a38, 0x7, 0x750, 0x5, 0x5, 0xe, 0x8000, 0x1, 0x1, 0x8, 0x101, 0x0, 0x1, 0x4, 0x9, 0x2, 0xb9, 0x800, 0x55f, 0x2, 0x3, 0x5, 0x7, 0x58b9, 0xfffffffc, 0x1000, 0x7, 0x40, 0x4, 0x1, 0x9, 0xcc, 0x6, 0x2, 0x7ff, 0xa, 0xb1, 0x94e6, 0x6d, 0xfffffff9, 0xfffffff7, 0xa3, 0xe000000, 0x7, 0x10000, 0x5, 0x9, 0x8, 0x4, 0x9, 0x9, 0x1b20, 0x1, 0xff99, 0x7, 0x8, 0x5, 0x8, 0x0, 0x0, 0x101, 0xfffffff8, 0x7ff, 0xfffffff6, 0x5, 0xfd, 0x6, 0x2, 0x5, 0xf7, 0x0, 0x408, 0x6]}) (async)
fcntl$setown(r7, 0x6, 0x0) (async)
procctl$PROC_REAP_STATUS(0x2, 0x0, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, <r8=>0x0})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x1, 0x8, 0x2, 0x6, 0x6, 0x4, 0x0, r8}) (async, rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64)
kqueue()
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
getfhat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0)

33.794072987s ago: executing program 3 (id=2025):
syz_emit_ethernet(0x5e, &(0x7f0000000680)={@random="73b9ccc3feff", @random="00f7000400", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast1}}}}}})

33.663996139s ago: executing program 2 (id=2026):
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg$inet6_sctp(r0, &(0x7f0000001a80)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, 0xc}, 0x1c, 0x0, 0x0, 0x0, 0x4c, 0x185}, 0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0x101, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$CIOCGSESSION2(r1, 0xc040636a, 0x0)
aio_read(0x0)
r2 = socket(0x0, 0x4, 0x0)
socket(0x2, 0x0, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
pwritev(r3, &(0x7f0000000080), 0x0, 0x1080000000000000)
open$dir(0x0, 0x40000400000002c2, 0x0)
getsockopt$inet6_sctp_SCTP_REUSE_PORT(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000180)=0x4)
freebsd11_stat(0x0, &(0x7f0000000440))
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000340), 0x8)
aio_read(&(0x7f0000000380)={r4, 0x3, 0x0, 0x0, [], 0x7, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, @sival_ptr, @ke_flags}})
r5 = openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f0000001440)={0x19, 0x0, 0x10, &(0x7f0000000240)="0291bd7095092836e654c17b639c79fc", 0x0, 0x0, 0x0, 0xffffffff, [0x7, 0x0, 0x0, 0xfd]})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
r7 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
aio_write(&(0x7f0000000240)={r6, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x18, 0x0, {0xfffffffffffffffc, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc]}})
r8 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r8, 0x0)
r9 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
pwritev(r9, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)

32.90793798s ago: executing program 1 (id=2027):
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
socket$inet_sctp(0x2, 0x5, 0x84)
setreuid(0xee00, 0x0)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00'}, 0x24)
bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x1, 0xf379, @loopback, 0x401}, 0x1c)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x48, &(0x7f0000000000), 0x4)

32.727117181s ago: executing program 1 (id=2028):
vfork()
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x400101, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="4160d8db057f6fdf", 0x8}], 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$lock(r1, 0xd, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2000100000006})
sendto$unix(r0, &(0x7f00000003c0)="3884bafed0fac8e8dd131d7f1633e60795db358c2cb7b9b22e2c4dd89eea3e338e", 0x21, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000002580)={0x0, 0x400}, 0x8)
connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)
thr_suspend(&(0x7f0000000040)={0x60000, 0xd7})
ksem_wait(0x0)
ksem_wait(0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000000)={0x10, 0x0, 0x1, &(0x7f0000000100)='\v', 0x0, 0x0, 0x0, 0x7d866999})
ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x10000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)})
r4 = socket(0x1, 0x2, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f00000000c0)={'rack\x00'}, 0x24)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa1b9809fbc7e4dd7b0800019078ac1400bbe000000008040000004e00"/41])
r5 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, &(0x7f0000000980)={'rack\x00'}, 0x24)
bind(r5, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10)
sendto(r5, 0x0, 0x0, 0x4, &(0x7f0000001280)=@in={0x10, 0x2, 0x3}, 0x10)
syz_extract_tcp_res(0x0, 0x0, 0x6)
socket(0x1, 0x20000000, 0x7)

30.454070221s ago: executing program 1 (id=2029):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240)={0xd9, 0x2, 0x630, 0x80000001, 0x3, 0x5, 0x0, 0x4}, 0x0)
getsockopt$inet6_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x901, &(0x7f00000004c0), &(0x7f0000000300)=0x18)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0)
r3 = socket(0x1c, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
open(&(0x7f00000000c0)='./file0\x00', 0x8000000000020e, 0x0)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
r5 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
fcntl$lock(r5, 0x8, &(0x7f0000000140)={0x1, 0x0, 0x2000000000000, 0x269000000, 0xffffffffffffffff})
r6 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
fcntl$lock(r6, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x2000000000000, 0x269000000, 0xffffffffffffffff})
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00'}, 0x24)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$DIOCGETRULESET(r7, 0xc444443b, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
sendmsg$unix(r3, 0x0, 0x20180)
freebsd11_lstat(0x0, &(0x7f0000000400))
getsockopt$sock_int(r3, 0xffff, 0x1018, &(0x7f0000000080), &(0x7f0000000100)=0x4)
sendmsg$inet6_sctp(r6, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x4, @mcast2, 0x400}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)="ec46c62bc844b68b0d86ea1f7698bf199e52af116637e193597df192ed1c5c7a22f840956f20466752910990bad3ea1745ee00c22f63de3e0dda784753574f30994d948a951f798e72600a2b36f6aefe3fb37257232794f66c461b8a7e2da0cfe2ea1819ab3893379842598c8839dfb6ccd581b2f9572adbddcbe1e0f7bff1a1d6f7c9f2cc1ad9061cbd5a12e8d0c7f169a88f", 0x93}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x10, 0x84, 0x9, @broadcast}, @init={0x14, 0x84, 0x1, {0x5, 0xa831, 0x9, 0xb}}], 0x24, 0x104}, 0x20000)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)

29.643645157s ago: executing program 1 (id=2030):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4)

26.726102755s ago: executing program 1 (id=2031):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4)
bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="c61800b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0xff}}}}})

25.583917298s ago: executing program 3 (id=2032):
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
posix_fadvise(r0, 0x0, 0x1, 0x1)
dup2(r0, r0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f00000001c0)={<r2=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet6_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x7, r2}, &(0x7f00000002c0)=0xc)
r3 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f0000000300)={0x19, 0x0, 0x20, &(0x7f0000000380)="b7accb060000bbe41b803184b7e2a15eaae8d2e64700000000000000000000c5", 0x0, 0x0, 0x0, 0x8d800000, [0x0, 0x4]})
connect$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x2, @loopback}, 0x1c)
sendmsg$inet6_sctp(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="3634fb0c67dc3430f85536d1b958467de732e3d6779a8f56730a319e83cf5a37810dfe3727bc6fec311275a86ba13dbb0cc600628e5d2cc51d3084194c11b76aa054059fb977c24ff336f5332b4c7cf50288c8b77bfcbb3b10adba45189c27844797c73a4a0b015f", 0x68}], 0x2, 0x0, 0x0, 0x18c}, 0xd)
getpid()
ksem_trywait(0x0)
setreuid(0xee00, 0x0)
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x1e, 0x1})
setitimer(0x2, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0)
r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x5)
openat(r5, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
syz_emit_ethernet(0x11f, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd605af6a400000000e1403605dd3b845a85a7a49610787775ff0200000000000000000000000000010000c204"])
cpuset_getid(0x1, 0x3, 0x2, 0x0)

25.404014429s ago: executing program 1 (id=2033):
r0 = socket(0x26, 0x2, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x200000}, 0x1c)
r3 = dup2(r2, r1)
r4 = socket$inet6_sctp(0x1c, 0x1, 0x84)
listen(r4, 0x0)
freebsd10_pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
accept4(r4, 0x0, 0x0, 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
ioctl$SMB_BREAD(r3, 0xc030690b, &(0x7f0000000580)={0x4, 0x7, 0x7, @byte=0x8, @byte=0x1, 0x5, 0x0, 0x0, 0x0})
getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, 0x0, &(0x7f00000001c0))
setsockopt$inet6_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x3}, 0x10)
connect$inet(r3, &(0x7f0000000880)={0x10, 0x2, 0x0, @rand_addr=0x4}, 0x10)
setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000000)=0x1, 0x4)

0s ago: executing program 32 (id=2023):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
semget$private(0x0, 0x2, 0x232)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async, rerun: 64)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) (rerun: 64)
aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}})
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x2) (async)
mmap(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x3, 0x21013, r2, 0x0) (async, rerun: 64)
rfork(0x96014) (rerun: 64)
bind$bt_rfcomm(r0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000ffff0000", @ANYRES32=r4], 0x10}, 0x0) (async)
socket$inet6_sctp(0x1c, 0x5, 0x84)
msgget$private(0x0, 0xfffffffffffffffd) (async, rerun: 64)
r5 = socket$inet6_udp(0x1c, 0x2, 0x0) (rerun: 64)
r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff)
execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) (async, rerun: 32)
writev(r6, &(0x7f0000000280), 0x26) (rerun: 32)
write(r6, &(0x7f00000004c0)="9665a44f", 0x2000)
r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0)
ioctl$MDIOCDETACH(r7, 0xc1c06d01, &(0x7f0000000740)={0xf3b4, 0xab65, 0x4, &(0x7f00000006c0)='./file0\x00', 0x7fffffffffffffff, 0x5, 0x6, 0x101, 0x8, 0x4, 0x0, [0x8001, 0x3ff, 0x9, 0x57, 0x7, 0x7, 0x2, 0x10001, 0x0, 0x8, 0x5, 0x10001, 0xa, 0x6, 0x8, 0x0, 0xfffffc00, 0xb, 0xffff, 0x9, 0x36f, 0x9, 0x72fa4142, 0x3a38, 0x7, 0x750, 0x5, 0x5, 0xe, 0x8000, 0x1, 0x1, 0x8, 0x101, 0x0, 0x1, 0x4, 0x9, 0x2, 0xb9, 0x800, 0x55f, 0x2, 0x3, 0x5, 0x7, 0x58b9, 0xfffffffc, 0x1000, 0x7, 0x40, 0x4, 0x1, 0x9, 0xcc, 0x6, 0x2, 0x7ff, 0xa, 0xb1, 0x94e6, 0x6d, 0xfffffff9, 0xfffffff7, 0xa3, 0xe000000, 0x7, 0x10000, 0x5, 0x9, 0x8, 0x4, 0x9, 0x9, 0x1b20, 0x1, 0xff99, 0x7, 0x8, 0x5, 0x8, 0x0, 0x0, 0x101, 0xfffffff8, 0x7ff, 0xfffffff6, 0x5, 0xfd, 0x6, 0x2, 0x5, 0xf7, 0x0, 0x408, 0x6]}) (async)
fcntl$setown(r7, 0x6, 0x0) (async)
procctl$PROC_REAP_STATUS(0x2, 0x0, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, <r8=>0x0})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x1, 0x8, 0x2, 0x6, 0x6, 0x4, 0x0, r8}) (async, rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64)
kqueue()
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
getfhat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts.

FreeBSD/amd64 (ci-freebsd-main-6.us-central1-b.c.syzkaller.internal) (ttyu0)

login: 
FreeBSD/amd64 (ci-freebsd-main-6.us-central1-b.c.syzkaller.internal) (ttyu0)

login: ktrace write failed, errno 27, tracing stopped for pid 765
ktrace write failed, errno 27, tracing stopped for pid 682
Out of ktrace request objects.
ktrace write failed, errno 27, tracing stopped for pid 763
ktrace write failed, errno 27, tracing stopped for pid 764
ktrace write failed, errno 27, tracing stopped for pid 767
ktrace write failed, errno 27, tracing stopped for pid 766
ktrace write failed, errno 27, tracing stopped for pid 765
pid 1409 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - too large)
pid 1821 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - too large)

FreeBSD/amd64 (ci-freebsd-main-6.us-central1-b.c.syzkaller.internal) (ttyu0)

login: ktrace write failed, errno 27, tracing stopped for pid 767
ktrace write failed, errno 27, tracing stopped for pid 766
ktrace write failed, errno 27, tracing stopped for pid 765
ktrace write failed, errno 27, tracing stopped for pid 1824
ktrace write failed, errno 27, tracing stopped for pid 764
ktrace write failed, errno 27, tracing stopped for pid 763
ktrace write failed, errno 27, tracing stopped for pid 1
ktrace write failed, errno 27, tracing stopped for pid 810
Expensive callout(9) function: 0xffffffff8191bf10(0) 0.002131415 s
if_delmulti_locked: detaching ifnet instance 0xfffffe00547e3000
arp: packet with unknown hardware format 0x779 received on tap3
pid 2327 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - too large)
attempted source route from 10.128.1.53 to 227.207.176.0
if_delmulti_locked: detaching ifnet instance 0xfffffe00547e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe00547e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe00547e3000
ktrace write failed, errno 27, tracing stopped for pid 763
ktrace write failed, errno 27, tracing stopped for pid 765
ktrace write failed, errno 27, tracing stopped for pid 764
ktrace write failed, errno 27, tracing stopped for pid 767
ktrace write failed, errno 27, tracing stopped for pid 766
ktrace write failed, errno 27, tracing stopped for pid 810
if_delmulti_locked: detaching ifnet instance 0xfffffe00547e3000
arp: packet with invalid ethernet address length 0 received on tap2
if_delmulti_locked: detaching ifnet instance 0xfffffe00547e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d3c000
Unable to start accounting thread
pid 2960 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore
witness_lock_list_get: witness exhausted
maxproc limit exceeded by uid 0 (pid 5634); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 7668); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 7322); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 7310); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 6143); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 6087); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9682); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 766); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9867); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9867); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 10169); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 10169); see tuning(7) and login.conf(5)
Expensive callout(9) function: 0xffffffff842523a0(0xfffffe0077f73e38) 0.004896324 s
maxproc limit exceeded by uid 0 (pid 9848); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9848); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9848); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 10167); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 10167); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 10167); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9619); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9872); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 9848); see tuning(7) and login.conf(5)
SYZFAIL: posix_spawnp failed
 (errno 35: Resource temporarily unavailable)


FreeBSD/amd64 (ci-freebsd-main-6.us-central1-b.c.syzkaller.internal) (ttyu0)

login: maxproc limit exceeded by uid 0 (pid 10117); see tuning(7) and login.conf(5)
set $lines = 0
maxproc limit exceeded by uid 0 (pid 10719); see tuning(7) and login.conf(5)
Password:
Login incorrect
login: maxproc limit exceeded by uid 0 (pid 10681); see tuning(7) and login.conf(5)
show registers
Password:maxproc limit exceeded by uid 0 (pid 10680); see tuning(7) and login.conf(5)

ktrace write failed, errno 27, tracing stopped for pid 1834
Login incorrectktrace write failed, errno 27, tracing stopped for pid 1

login: maxproc limit exceeded by uid 0 (pid 9859); see tuning(7) and login.conf(5)
ps
Password:maxproc limit exceeded by uid 0 (pid 13953); see tuning(7) and login.conf(5)

Login incorrect
login: maxproc limit exceeded by uid 0 (pid 14910); see tuning(7) and login.conf(5)
show malloc
Password:maxproc limit exceeded by uid 0 (pid 9895); see tuning(7) and login.conf(5)

Login incorrect
maxproc limit exceeded by uid 0 (pid 14543); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 14543); see tuning(7) and login.conf(5)