last executing test programs: 2.259695881s ago: executing program 1 (id=63): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) cpuset_getaffinity(0x3, 0x3, 0x0, 0x8, &(0x7f0000000040)) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x4, {0x6, 0x4, 0x3, 0x1c, 0xa, 0x67, 0x800, 0x6, 0x14, 0x9, @empty, @multicast1, {[@generic={0x88, 0x2}]}}, "e095c496"}}}}}) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) kqueue() aio_error(&(0x7f0000000880)={r0, 0x9, &(0x7f00000002c0)="e760e92f7061c6475bea2ac3c793327e42aee189a63ad97d1e55df6ccacd1c1bac82f5d8d1d16a15e9104689b3999e6153518d92850f297d9e88f0ff7a87c66292229738614134bdea27abb2c61943a2d4d7264fade3b134e51237a9564bf5c218041e1825d865b05fc7042b35c782d4626c", 0x72, [0x24000, 0x7], 0x3, 0x4, 0xfffffff9, {0x6, 0x100000000, &(0x7f0000000380)="e880ea439ca143cca054c6be5dbd53d65d4d7151f037659844ed2ca10adedb8494375dd374aa2d72fd97498ae097b685db70ea8a3a6d67bf824184e32e712dd8c7a0bf1aa2f195e9c69706f1b296d266af9992815135a1f40de5b50ae95232801d4e5dfab3d915cca8b386ed445f0c0c98623580f90412b3b7c5b8b04b9b27df99c6336751bdd21bc7dbb7e75040099d53eb06abbe9d4760265f0bd89d74585eedad520a62a288bdabbac2c4b1718fe69a9a38"}, {0x3, 0xe, @sival_int=0x100}}) r2 = open(0x0, 0x0, 0xe) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="4b80000000000000"], 0x8) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) chdir(0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0x0, r3) sendto$inet(r1, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) readlinkat(r2, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)=""/82, 0x52) 2.251534834s ago: executing program 2 (id=64): r0 = socket(0x17, 0x2, 0xfa) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000500)=0xc0a, 0x4) r1 = fork() r2 = open(&(0x7f00000002c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x89, 0x0) setuid(0xffffffffffffffff) r4 = getegid() setresgid(0x0, r4, r4) setgid(r4) setregid(0xffffffffffffffff, 0x0) r5 = getuid() setreuid(r5, r5) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r5, r6) r7 = getgid() setregid(0x0, r7) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') fstat(r8, &(0x7f0000000400)) freebsd11_fstatat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x6000) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) undelete(&(0x7f0000000000)='./file0\x00') sigqueue(r1, 0x11, @sival_ptr) r9 = fork() wait4(r9, &(0x7f0000001940), 0x1, &(0x7f0000001980)) sigqueue(r1, 0x13, @sival_int=0x1ff) wait4(r1, 0x0, 0x4, &(0x7f0000000100)) ktimer_delete(0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7004f5b3750786dd60d9002000383a003bcc694212fae9849cd9404e6d2ee900fe8000000000000000000000000000aa02009078000038006006c33e00002c000000000001000000000000000000000100000000000000000000ffff7f0000012c0000000000000057775e13a5ecdb5b19773897c5a1eda43947e6e02e5398d305b14e8db3df1baf02323fad79d6a9f7c795bba54381d7b3b53d987eb821e2607d01b4d1316f8d163cdbe557"]) 1.931093911s ago: executing program 1 (id=65): procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) rfork(0x10) fork() openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x4}, 0x10) open(0x0, 0x80000000000206, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24) socket$inet6_sctp(0x1c, 0x5, 0x84) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = kqueue() syz_emit_ethernet(0x9e, &(0x7f0000000200)={@broadcast, @random="c6f12a47a865", [], {@ipv4={0x800, {{0xa, 0x4, 0x1, 0x13, 0x90, 0x67, 0x2, 0x1, 0x67, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2, {[@ra={0x94, 0x6, 0x100}, @timestamp={0x44, 0xc, 0x8, 0x2, 0x8, [{}, {[], 0x1}]}]}}, @udp={{0x1, 0x3, 0x8}, {"082ecebd8cad0d45717defa95e7ee87b60a7b40ccacd6b2b19b3bdaf38aa364a4cfce669dd7aa21b79fbedcd721f238d3ba767e41fdf3eab24f30685a0ae2f897bbc5ea8bcea364b787c48b41bc8421596d8c839c8f4ab23575f005a4818a2b1"}}}}}}) kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xa1) r2 = fork() sigqueue(r2, 0x11, @sival_ptr) sigqueue(r2, 0x13, @sigval_ptr) wait4(0x0, 0x0, 0x7, 0x0) r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0x40000400000002c6, 0x0) fcntl$lock(r3, 0x16, 0x0) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) sync() 1.356808883s ago: executing program 1 (id=67): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) lpathconf(&(0x7f00000000c0)='./file0\x00', 0x6) r0 = open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x8000, 0x158) pathconf(&(0x7f00000001c0)='./file0\x00', 0x35) rfork(0x85000) openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) execve(0x0, &(0x7f0000000380)=[&(0x7f00000005c0)='.(\x00'], 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffff9c) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) flock(r1, 0x0) sysarch$AMD64_CLEAR_PKRU(0x86, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x2}) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, [], {@arp={0x806, @generic={0x1, 0x8822, 0x6, 0xc, 0x3, @broadcast, "2e0f7c24631917349a483e38", @remote, "422205be2134904ca0f2b1d1caa92141"}}}}) posix_fadvise(r3, 0x4, 0x8, 0x4) 1.355922862s ago: executing program 0 (id=68): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0xfffffff4], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sival_ptr=0x6, @ke_flags=0xc088}}) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0xf, &(0x7f0000000040)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @broadcast}, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) procctl$PROC_STACKGAP_CTL(0x0, 0x0, 0x11, &(0x7f0000000580)=0x6) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) (async, rerun: 64) posix_fallocate(r2, 0x5, 0x6) (async, rerun: 64) preadv(r1, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 1.354852559s ago: executing program 1 (id=69): mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) socket$inet6_udplite(0x1c, 0x2, 0x88) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r1, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x80, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0xe5b65c82281e0e9d) unlink(&(0x7f0000000040)='./file0\x00') r2 = socket(0x1b, 0x3, 0x0) sendmsg$unix(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0xcd7be0e9fad108b0) fcntl$dupfd(r2, 0x11, 0xffffffffffffffff) socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="19fdb123c091ae3db1f1c5f51d8be800"}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x21596174, @empty, 0xfffffffc}}, {{0x1c, 0x1c, 0x2, 0x6, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x108) rfork(0x3060) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) ioctl$MDIOCDETACH(r4, 0xc1c06d01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x8, 0x10000, 0xe12, 0x5, 0x0, 0x1, 0x0, 0x1146, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xdf8, 0xaca, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x840000, 0x4, 0x0, 0x80040000, 0x9, 0x4008, 0x0, 0x1000, 0x0, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0xffffffd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x3, 0x10001]}) setgroups(0x0, 0x0) aio_mlock(&(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, [], 0x2, 0x18, 0x0, {0x40000000000000, 0xfffffffffffffffe, 0x0}, {0x1, 0x0, @sigval_int=0xdc, @spare=[0x80, 0xf, 0x4, 0x8, 0x8000, 0xffff, 0xa46, 0x2]}}) seteuid(0x0) aio_waitcomplete(0x0, 0x0) listen(r2, 0x1) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) setreuid(0xee00, 0x0) msgget(0x3, 0x420) 1.349953461s ago: executing program 2 (id=70): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) cpuset_setaffinity(0x3, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={[0x2]}) (async) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet6_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x6e5d}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, 0x0, &(0x7f0000000380)) (async) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') setreuid(0x0, 0xee01) (async) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async) r2 = kqueue() close(r2) (async) r3 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x65, 0x0, 0x0) (async) socketpair(0x11, 0x3, 0x2, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d86699a, [0x0, 0x0, 0x40000002, 0x8]}) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f00000001c0)=0xa, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd60c3200000282b00feffffff000000000000000000000002ff0200000000000000000000000000012b"]) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x80082) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) aio_writev(&(0x7f00000015c0)={r5, 0x0, &(0x7f0000000000)="f26d9f", 0x3, [0x0, 0xfffffffe], 0x7fffffff, 0x8, 0x0, {0x0, 0xffff, 0x0}, {0x0, 0x2, @sival_int, @tid=0xffffffffffffffff}}) 1.151329841s ago: executing program 0 (id=71): open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x4}, {r0, 0x204a}], 0x2, 0x0, 0x0, 0x0) 1.087921207s ago: executing program 2 (id=72): r0 = kqueue() r1 = fcntl$dupfd(r0, 0x11, r0) mkdirat(r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x8, &(0x7f0000000180)={0x8}, 0x4) r2 = kqueue() kevent(r2, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, [0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x7ffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={@in6={{0x1c, 0x1c, 0x0, 0x2, @rand_addr="9c0438c5066efdbb23d45b50947b1009", 0x3ff}}, 0x0, 0xfffffff9, 0x0, 0x112, 0x8, 0x10}, 0x98) socket$inet6_sctp(0x1c, 0x5, 0x84) open$dir(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1b, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) clock_gettime(0xf, &(0x7f0000000140)) r6 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) freebsd11_fstatfs(r6, &(0x7f0000000580)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) lchown(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f00000013c0)={0x3, 0x3, @sigval_int, @thr={0x0, 0x0}}) setsockopt$inet6_udplite(0xffffffffffffff9c, 0x88, 0x6, &(0x7f0000000000)=0xff, 0x4) 1.021081416s ago: executing program 1 (id=73): setresuid(0x0, 0x0, 0xee00) getresuid(0x0, 0x0, 0x0) aio_suspend(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x80000000}) kqueue() (async) r0 = kqueue() fork() openat$crypto(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x1c, 0x1, 0x0) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_buf(r1, 0x29, 0x19, &(0x7f00000009c0)="72957bd04e63f72906e848c2a61e47df6e2d0ba7003b8fcd5f627f429b46120c1b01ef5b6932e3942f9fa88962f7b14104f8903fd752c2ae83d047cf686b680860e0032b82742b96d6c77095249923f116df954125d524709741b57deea97efa2252f9a1b8cf884414f345c2b033c4eb7c73bed49289d187e67e1d76ab397e6a1f13e4bc35edf8094750060395d35b7714738f9a6df423461434806518901e23368c2926526702b5bf0c638dbd45389b42fa966f54817326c872c0742ad13e7ff48d12a201e7362be9ffb5e08b958e7fd2e77630794846514271353f27f17a37117f9e21b26d2d2bf3be0a03e88032f1af03535c1fc75bae17f6b2b3500d1851f8645871af996c441142f8d37a99dce81d4c7744999612559bd91c133df57d2042db3d53f28c0491bbfda62b77b77fff1f944ff54e271a2616ea8c023f6c515e182eb24acb5a3c4569f962dfb47ac33f2e8dbad4be15715f4c751d026b91bba662e368ced6a71987a2613efbbb1214146b464deef403e6b28d4245c328ef416f1be87e5e64ff18915b10a4cc35e40fe71685cb2435bac895960dd08076c3d909bf6b485e9ae9293bf5b7cdac7035ba69a68c6eebb49c0218929ec41407d2d82077d870569938ad0ab79d746bb1a5f4d4da14bbcbf2687059314831b3485bf4485af6482fa96c1c7dc294822d6e3a245bf6b893d7354f8a04b370577884952518ec724b86a7e202b4152a73ce4dc24b2a0b4c76eaf8f66648e78f47a059281c5aa87906ee74e1b8392f3d7d6415e7b2e016c61f530dcf57d72597c156148400f7258c690b8d9111c8583353b817ab8523fc21c41a5e676926cd2887aff2cb8936d4aa5e0937b53e77479538c321b2702ad46d366f0a667479ea22a4da42cd1e2f165ba2b720d798155235cba7bbda304668ac2756b026ad9c62a2df0d389ded70c81ab14d9861519f5d07a3f41a99b4efe954ac6e34bf5ac17caa34bb56ef2fddbb9f2d27ba3ce1160cd7607547cbbe559336ac02e06bc09389d5131fa4301013e7bed0f0b9ea71b8aa374cc687a4d209bbea91b524cdb231b243fa9bbe8c5e5be71fdee53e3805491116fd15bdbc31671383e19f071a09ca26d59e9ea08b413fb81eee78d22e224f489d6fd236e8a7ee411fa98036ba32fbab647ca5558f1fc460b5e8d1c03afa4b96309aa9d74775b0fa78e989d3e84029bf0be6a4c630fc7d88559374b4caab7b68c5fb0149cfb4a7824ceff79f4a0bda5163a975b99ed3b30511c129fb0ef83076904d1b91c1cd3dc46550f0de3afdaf00de380b140d3849741af7f3b0ed6c1696c4829388fbdd1cfd82ee70630ac09e157a0a0f85d64016d2512283154d46fc23bba6f0ce6b049b23088d222aa1ef6f59519b8964893bd93d12941002f8fd1ba42ea24803b4172699b3e306ab828008c57ab8c28a60ad917404492b9f4e08a8e880f06bd178f504e7560b9382405097e8d52b04e796dca84083da7bd8b425c0689a40504394601b5374e9e0e0428853987a50b82d2b3102e58a4f53ec5337f4902e92eae079eb157cf38c1d214a3faebbeda81e3ffc5f622245fe906bd59d555333d93466115a08c9ff408b6b1a13920aaf66552a66295c20893a63d857833a18cfc8be5d6b7fea792564cef853e61ec737e7629f92b8f2ca2d71dd82f00356e254974fb69930356b3935555a1a13393e1d74745f1232b1c65b8b2525a28208334d3e2cc1f600158309c12dea8ac6301fc796e8bdec9b1af6c5bfaefac3b641a524f9576394cfa38665694537af945fbd833bdae6f125df404a007c67fd21dd10696ed25c3e4f96e521727deaf90f85531d3c465a0055b0a4157dc5cf63575c6f494a73d0a5ec70deed86bae69948ae967cbae58053a747da2464a2cb52fa328be440d75cff34eded764073209f84ea378aca50773ed4d2355bd9ca56269450c5b80366db706472e504e505aa75a0c42af2d179c0a7511326b77712b98d695b2f7a829d3ed2546b7cca0a710f0b532f9f95741d4e7d2fdf9f62f62508f39e7d4e62e1bea91443b36ab3b744c6c219c261c9f85d80b317b88bfeade91f06967bfe3a1fbe4413b9b5feb5532b6f317cd46bdcc2f7cb95aa06264432bc3be2bb3cc16ce227a98a2a5f8047b69ee8f872b620dd300e649cde44bd7d581a32a3c62b243f17c4d6c30d23622ebb6387279b36571b78f4a99d5522e808a588ca31f63340f90d0ab25f9b79b93237a866bfd3b0ae0ad2aefc0c7f2a8373fe88b3e3b4ecdc38c4bd99977a40fabd2a10244b5bc0ac43a6ca380991a9f136a2dfc229bbda6a28f69bc96c42bc2940ee5b0ba6be7d25f0bdeafdb819a4f5c07fbebad036095f6b42150d20c3a5871098585442e101d58032b0c86fd539f6cb1df6c45500e35d317f54973992abd22b80187047a1596af78120ba087666f96943231a63176df53bfd5f6fdbbce0b7cb8919033398a12b659049246e70da3e39182c82f36c95a3349b20624a7f242b8b132a1022018374a9ce81ba627df58df125388eeb4e540bb72de7a894d2497df3d2b33445dc054899b477d60875d47eee54e106092fcf8495473aeba9b2d92ca9358f12916115fbd6e1cbf74d7a923f79e0326b1d0178d5a8613643ccaf058fecb83537484372701813abafbf77bb8bfb39910d46286b2a1b15030988a076cb64b38cd8d2ae9b8aa76f519b1e1de6d1a706bdbf63032dc66f638e90e929f8917b7b6657037ecc851950c269b5689dc9ecb264aa4f746ce616578fb0fd5dc2b0363f3d96483f386e2782f7926b0cc807abf6d63e059766126e5d5d911e7b5c6ade6fee98bb28425fc6b4be07c0eee3982fdd43a66c8ec81bad02ce1c79daeda449aa3537d6220b2a1851ea9d92291f8608f99c00c8a1dad9267576f105682f3b2240def9e72af60c8dac391b792ed4164fde683677916bfc79a74903be1cfd311ed5c68ecb", 0xff88) fcntl$dupfd(r0, 0x0, r0) (async) r2 = fcntl$dupfd(r0, 0x0, r0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x1ab) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x1ab) renameat(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r4, 0x0, 0x3, &(0x7f0000000100)="08dcdd96", 0x4) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f00000000c0)={0x16, 0x23, 0x20, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755aedaacdd4743c7eaa2c7300d05fe86026", 0x0, 0x0, 0x0, 0x7d86e99a, [0x0, 0x0, 0x1, 0xfffffffd]}) (async) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f00000000c0)={0x16, 0x23, 0x20, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755aedaacdd4743c7eaa2c7300d05fe86026", 0x0, 0x0, 0x0, 0x7d86e99a, [0x0, 0x0, 0x1, 0xfffffffd]}) ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000400)}) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/93, 0x7}, 0x40) freebsd10_pipe(&(0x7f0000000040)) (async) freebsd10_pipe(&(0x7f0000000040)) socket(0x1c, 0x1, 0x0) (async) socket(0x1c, 0x1, 0x0) r6 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r6, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r6, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x825, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x825, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20}, 0x1c) sendmsg$inet6_sctp(r6, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x64}}, 0x1c, 0x0}, 0x81) (async) sendmsg$inet6_sctp(r6, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x64}}, 0x1c, 0x0}, 0x81) setresuid(0x0, 0xee01, 0x0) (async) setresuid(0x0, 0xee01, 0x0) r7 = socket(0x1c, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) socket(0x1c, 0x1, 0x0) (async) r8 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r8, 0xffff, 0x10000, &(0x7f0000000080)=0x800b, 0x4) bind$inet6(r8, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) 890.360246ms ago: executing program 2 (id=74): rfork(0x1000) socket$inet6_sctp(0x1c, 0x1, 0x84) rfork(0x4020) freebsd10_pipe(0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) freebsd11_mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x100000, 0x31) chroot(&(0x7f0000000140)='./file0/file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0xffff, 0x1003, &(0x7f0000000180)=0x18000003, 0x6) kmq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) sysarch$I386_SET_LDT(0x1, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) rfork(0x3060) 811.07633ms ago: executing program 2 (id=75): r0 = socket(0x1c, 0x1, 0x0) cpuset_setaffinity(0x1, 0x3, 0x0, 0x8, &(0x7f00000000c0)={[0x6]}) setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00', 0x3d6}, 0x24) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x6000, 0x1) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = kqueue() syz_emit_ethernet(0xe6, &(0x7f0000000400)={@random="27485b5567b8", @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x3, 0x3e, 0xd8, 0x64, 0x8000, 0x2, 0x88, 0x0, @empty, @broadcast, {[@ra={0x94, 0x6, 0x9}]}}, @generic="6e65b8fcba827d07f122852aa1a63c499fb71b5bf1771c2220530330924529eb131cfdb272ad38cdef9b9f85c3f4b82c8ba8d743d32495ff9e485e848686f72a72bcc2c7489b6e8d9d7cbf9e57a61bb8ad1cf95fe846e30358355dad3412eb556a5fa1620f17d63b38abfa1c1d242f7592777385353ffbdde28a10695360b9f4078e8b7ee663bb2e25898cccea74ec0105b12157d727ff531115ef2fe9c6fc3f77a2986eed5992c12cf2bae40bbdf17d4b13900ed47c9fb9299e2568"}}}}) kevent(r1, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)) socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x16, &(0x7f0000000080)={0x570}) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd6083000000280000feffffff000000000000000000000002ff02000000e500000000000000000001000100000000000005020000c204000000000000000000008600907800"/94]) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x48, 0x52, 0xff, @rand_addr="0000000000000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, r3, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xefd1}, @mss={0x2, 0x4, 0x3}, @mss={0x2, 0x4, 0x1}, @mss={0x2, 0x4, 0x8}, @sack={0x5, 0x2}, @mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x11, "a05646940fb9d38ac868ab1e288926"}, @sack={0x5, 0x2}]}}}}}}}}) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000840)="fa", 0x1}], 0x1}, 0x20180) setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f00000000c0)={r0, 0x4, {0x1ff, 0x80}}, 0x20) 751.165269ms ago: executing program 3 (id=76): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x5}, 0x1c) ksem_init(&(0x7f0000000080), 0xc) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400004000011830a, 0x0) r2 = dup(r1) write(r1, &(0x7f0000000780)="089267d3ff4f0b8796", 0x9) preadv(r2, &(0x7f0000000240), 0x100000000000030f, 0x0) (async) preadv(r2, &(0x7f0000000240), 0x100000000000030f, 0x0) freebsd11_stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) (async) freebsd11_stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) extattr_delete_file(0x0, 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c') r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x10000, 0x5a) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40, 0x180) sendto$inet6(r0, &(0x7f00000001c0)="3692", 0x2, 0x20001, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="3692", 0x2, 0x20001, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r3, r0, 0x0, 0x0, 0x0, 0x0, 0x0) 556.344736ms ago: executing program 3 (id=77): r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = getpid() openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f00000f0000/0x2000)=nil, 0x2000, 0x3, 0x1010, r0, 0x0) ioctl$SMB_PCALL(0xffffffffffffffff, 0x8004667e, &(0x7f0000002400)={0x0, 0x0, 0x0, @word, @byte=0x4, 0x0, 0x0, 0x0, 0x0}) minherit(&(0x7f000003f000/0x4000)=nil, 0x4000, 0x3) fork() fcntl$lock(r0, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8100040000004e, r1}) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) __semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x0) freebsd11_lstat(0x0, &(0x7f0000000380)) r2 = vfork() vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0xf}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r2}) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x8) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) freebsd11_mknodat(r3, &(0x7f0000000380)='./file0\x00', 0x2000, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) access(0x0, 0x0) __realpathat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/102400, 0x19000, 0x0) 553.161285ms ago: executing program 3 (id=78): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) kqueue() bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, &(0x7f0000001700)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}, 0x1c, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)=""/245, 0xf5}], 0x2, &(0x7f0000000440)=""/122, 0x7a}, 0x43) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x901, &(0x7f0000000300)={0x0, 0x8, 0x9, [0x0, 0xfffe, 0x3ca, 0x5, 0x1, 0x5, 0x4, 0xb, 0x5]}, &(0x7f0000000340)=0x1a) getsockopt$inet6_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x108, &(0x7f0000000380)={r2, 0x2b, 0x2, 0xe, 0x3}, &(0x7f00000003c0)=0x18) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000040)={'bbr\x00'}, 0x24) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000100)=0x101, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8) mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0) munlockall() setsockopt$inet6_group_source_req(r4, 0x29, 0x52, &(0x7f00000000c0)={0xfffffff8, {{0x1c, 0x1c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast1}}, {{0x1c, 0x1c, 0x1, 0x0, @rand_addr="17ede1a8ced2eb21e474edd450e62340"}}}, 0x108) vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0x4, @sival_ptr, @spare}) rfork(0x3040) 447.073427ms ago: executing program 3 (id=79): sigtimedwait(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt(r1, 0x0, 0x0, 0x0, 0x0) profil(&(0x7f0000000880)="3526a6a18dd13790fe4af62c835f415b82e59007c40ce2fe6bc4ce210e7864009001fbaa0c950783674f89a9f2b44b4ea7bb1b7ac91a6bfc4655e4795bb1efadcd14ad7a3d3a344cf4e6c8fc60b886153a887ec0e896488a9135945567657ac1d2f67d65d17f133639d7d585f15f89518b2f459648ce91", 0x77, 0x0, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r3 = open(0x0, 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0/..\x00', 0x85) open(&(0x7f0000000200)='./file0/file0/..\x00', 0x78e, 0x8) open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) open(&(0x7f0000000080)='./file2\x00', 0x40000, 0x104) execve(&(0x7f0000001840)='./file2\x00', 0xfffffffffffffffe, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast1}}, {{0x1c, 0x1c, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_group_source_req(r0, 0x29, 0x53, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x33, &(0x7f0000000240)={0x13, 0x8, 0x0, 0x3, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback]}, 0x48) 307.252778ms ago: executing program 3 (id=80): r0 = socket$inet_sctp(0x2, 0x1, 0x84) lchflags(&(0x7f0000000200)='./file1/file0\x00', 0x21810) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000440)={0x19, 0x0, 0x10, &(0x7f0000000200)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x0, 0x0, 0x80000001]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0\x00') setreuid(0x0, 0xee01) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0/fi\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x10c7, 0x7, 0x410, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) mincore(&(0x7f0000003000/0x1000)=nil, 0x1000, &(0x7f0000001140)=""/160) r1 = fcntl$dupfd(0xffffffffffffffff, 0x11, r0) ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000300)={0x0, 0x2, 0x100, 0x81ff, &(0x7f0000000000), 0x0, &(0x7f0000000280)}) 306.042552ms ago: executing program 3 (id=81): socket$inet6_sctp(0x1c, 0x1, 0x84) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = fork() connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) r2 = socket(0x26, 0x2, 0x0) r3 = dup2(r2, 0xffffffffffffffff) readv(r2, &(0x7f0000001680)=[{&(0x7f0000002780)=""/4104, 0x1008}], 0x1) procctl$PROC_REAP_KILL(0x0, r1, 0x6, &(0x7f0000000200)={0xa, 0x0, r1, 0x0, r1}) recvmsg(r3, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) procctl$PROC_TRACE_CTL(0x2, r4, 0x7, &(0x7f0000000140)=0x35) ksem_wait(0x0) ksem_wait(0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x9) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1003, &(0x7f0000000180)=0x18000003, 0x4) fork() recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x802) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24) socket$inet6_sctp(0x1c, 0x5, 0x84) r7 = kqueue() kevent(r7, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080048f10028006500fff53f9078ac1400bbe0000001440c0711e000000200008000577d4e2100089078"]) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x10) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) 305.436049ms ago: executing program 0 (id=82): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x0, @empty, 0x2}, 0x1c) syz_emit_ethernet(0xfef2, &(0x7f0000000000)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local={0xac, 0x14, 0x0}, @empty, @multicast2}}}}) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0xffff, 0x200, &(0x7f0000000040)=0x28, 0x4) bind$inet6(r1, &(0x7f0000001140)={0x1c, 0x1c, 0x3, 0x0, @mcast2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x8}, 0x1c) rfork(0x85000) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x1, 0x0, @empty}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={@in6={{0x1c, 0x1c, 0x1, 0x2, @loopback, 0x3}}, 0x0, 0x4, 0x0, 0x315}, 0x98) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede6557f00ffffffff86dd6000004000483a003bcc3f0600000058132fa13a8be186e3fe8000000000000000000000000000aa02009078000000006006c33e00002b00fe8000000000000000000000000000aa000000000000002bfffffffffffffffe640200730000000001000000000000000000000000000001"]) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x300) socketpair(0x10, 0x4, 0x2c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_sctp_SCTP_INITMSG(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r4 = fcntl$dupfd(r0, 0x11, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(0xffffffffffffff9c, r5, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) connect$unix(r5, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) writev(r5, 0x0, 0x0) setregid(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(r4, &(0x7f0000000300)="75b03b2d57", 0x5, 0x0, 0x0, 0x0) 189.801198ms ago: executing program 0 (id=83): lio_listio(0x1, &(0x7f0000001a40)=[{0xffffffffffffffff, 0xfffffffffffffff9, &(0x7f0000000280), 0x0, [0x7, 0x1ff], 0xfffffffffffffff7, 0x18, 0x3914, {0xfffffffffffffffb, 0x7, 0x0}, {0x2, 0x1f, @sival_int=0x434, @spare=[0xffffffffffff7188, 0x5, 0x80000000000000, 0x9, 0x10000, 0xfffffffffffffff9, 0x7]}}, {0xffffffffffffffff, 0x9, 0x0, 0x0, [0x57ba5e0e, 0x2d], 0x1d, 0xf, 0x4, {0x4, 0x800, 0x0}, {0x0, 0x13, @sival_int=0xa6bf6203, @spare=[0x3, 0x0, 0x2, 0xbb8, 0x7ff, 0x0, 0x8d, 0x3]}}, {0xffffffffffffffff, 0x3, 0x0, 0x0, [0x288], 0x1ff, 0x5, 0x0, {0xb66, 0xc, 0x0}, {0x1, 0x17, @sival_ptr=0x9, @thr={0x0, 0x0}}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x4, {0x0, 0xffff, 0x0}, {0x0, 0xc, @sigval_ptr, @thr={0x0, 0x0}}}], 0x4, 0x0) (async) r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x10100, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x20000000, @local={0xfe, 0x80, '\x00', 0x0}, 0x1002}, 0x1c) (async) getuid() (async) r1 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendfile(r1, 0xffffffffffffffff, 0x2, 0x7, 0x0, &(0x7f00000005c0), 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) 181.089129ms ago: executing program 0 (id=84): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x2e, &(0x7f0000000080)={@remote={0xfe, 0x80, '\x00', 0x0}}, 0x14) r2 = msgget(0x3, 0x6d2) msgsnd(r2, &(0x7f0000000000), 0x8, 0x800) getsockopt$inet6_buf(r1, 0x29, 0x2e, 0x0, &(0x7f0000001980)) sendmsg(r0, &(0x7f0000000200)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x0, 0x80000000, @loopback, 0xff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000340)="88cd1dc3b7049d7e57", 0x9}], 0x1, 0x0}, 0x20001) 179.252614ms ago: executing program 0 (id=85): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x1a) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x1100300010005}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x8e33cb7e2cd20cc8, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r4 = socket(0x1c, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0x62, 0x1c, 0x3, 0xfffffffb, @loopback}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000001880)=ANY=[@ANYBLOB="cdbf0e000084aaaaaaaaaabb86dd6000000000100000000000000000000000000000000003e8ff02000000000000f3ffffff00000001860090"]) connect$inet6(r4, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x126) open$dir(0x0, 0x202, 0x0) sendfile(r5, r4, 0x0, 0x0, 0x0, 0x0, 0x5) execve(0x0, &(0x7f0000000480), 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x2000}], 0x1000000000000013) kevent(r2, &(0x7f0000000380)=[{0x7f, 0xfffffffffffffffc, 0x2, 0x200, 0xa0f5, 0x2b, [0x2, 0x7, 0x4, 0x4]}, {0x1, 0xfffffffffffffffc, 0x4081, 0x1, 0xc7, 0x10001, [0xffffffff, 0x10, 0xda1, 0x4]}, {0x8, 0xffffffffffffffff, 0xd8, 0x1000000, 0xb283, 0x1, [0xa, 0x5, 0x1, 0x43e]}, {0x21f, 0xfffffffffffffffb, 0x6c, 0xc0000000, 0x8, 0x4, [0x8, 0x6, 0x100000001, 0x3]}, {0x5000000000000, 0xfffffffffffffffb, 0x8014, 0x1, 0x91, 0x8af, [0x4, 0x7, 0x8, 0x81]}, {0x3, 0xfffffffffffffffc, 0x8000, 0x0, 0x72c, 0x8001, [0x8, 0x7, 0x5, 0x7]}, {0x2dd, 0x0, 0x4041, 0xc1000011, 0x3, 0x1, [0x1, 0x5, 0x23c]}, {0x6ec, 0xfffffffffffffffd, 0x40, 0x1, 0x80000000, 0xfffffffffffffc01, [0x2b287593, 0x8, 0x8, 0x2]}, {0x47c, 0xffffffffffffffff, 0xa2, 0x80, 0x2, 0x3, [0x4ebc, 0x1ff, 0x8, 0xc]}, {0x2, 0xfffffffffffffff5, 0x48, 0x100, 0x8000000000000001, 0x3, [0x1, 0xbf, 0x2]}], 0xa, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000100)={0xa, 0x4}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x1, @loopback}, 0x10) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x1a) (async) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x1100300010005}) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x8e33cb7e2cd20cc8, 0x0) (async) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) (async) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) socket(0x1c, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f00000000c0)={0x62, 0x1c, 0x3, 0xfffffffb, @loopback}, 0x1c) (async) syz_emit_ethernet(0x46, &(0x7f0000001880)=ANY=[@ANYBLOB="cdbf0e000084aaaaaaaaaabb86dd6000000000100000000000000000000000000000000003e8ff02000000000000f3ffffff00000001860090"]) (async) connect$inet6(r4, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x126) (async) open$dir(0x0, 0x202, 0x0) (async) sendfile(r5, r4, 0x0, 0x0, 0x0, 0x0, 0x5) (async) execve(0x0, &(0x7f0000000480), 0x0) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x2000}], 0x1000000000000013) (async) kevent(r2, &(0x7f0000000380)=[{0x7f, 0xfffffffffffffffc, 0x2, 0x200, 0xa0f5, 0x2b, [0x2, 0x7, 0x4, 0x4]}, {0x1, 0xfffffffffffffffc, 0x4081, 0x1, 0xc7, 0x10001, [0xffffffff, 0x10, 0xda1, 0x4]}, {0x8, 0xffffffffffffffff, 0xd8, 0x1000000, 0xb283, 0x1, [0xa, 0x5, 0x1, 0x43e]}, {0x21f, 0xfffffffffffffffb, 0x6c, 0xc0000000, 0x8, 0x4, [0x8, 0x6, 0x100000001, 0x3]}, {0x5000000000000, 0xfffffffffffffffb, 0x8014, 0x1, 0x91, 0x8af, [0x4, 0x7, 0x8, 0x81]}, {0x3, 0xfffffffffffffffc, 0x8000, 0x0, 0x72c, 0x8001, [0x8, 0x7, 0x5, 0x7]}, {0x2dd, 0x0, 0x4041, 0xc1000011, 0x3, 0x1, [0x1, 0x5, 0x23c]}, {0x6ec, 0xfffffffffffffffd, 0x40, 0x1, 0x80000000, 0xfffffffffffffc01, [0x2b287593, 0x8, 0x8, 0x2]}, {0x47c, 0xffffffffffffffff, 0xa2, 0x80, 0x2, 0x3, [0x4ebc, 0x1ff, 0x8, 0xc]}, {0x2, 0xfffffffffffffff5, 0x48, 0x100, 0x8000000000000001, 0x3, [0x1, 0xbf, 0x2]}], 0xa, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000100)={0xa, 0x4}) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x1, @loopback}, 0x10) (async) 177.81473ms ago: executing program 1 (id=86): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @local, [{[], {0x8100, 0x4, 0x0, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8, 0x0, 0x1, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0xdd}}}}}) (async) symlink(0x0, 0x0) truncate(0x0, 0xfffffffffffffff8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) r1 = kqueue() kevent(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffffff9, 0xb, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0x10, 0x10000000, 0x4) (async) chdir(0x0) (async) getpriority(0x2, 0x0) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./file1\x00', 0x0) (async) chflags(&(0x7f0000000000)='./file1\x00', 0x140110) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0)) (async) renameat(r3, &(0x7f0000000200)='./file1\x00', r3, &(0x7f0000000140)='./file0/file0\x00') (async) syz_emit_ethernet(0x5e, &(0x7f0000000380)={@random="73b9ccc300", @random="00f7000400", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @rand_addr="00f0372e0865911feb7ee80000008000", @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @loopback}}}}}}) (async) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x47, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, 0x0, 0x1c}, 0x0) 141.424911ms ago: executing program 2 (id=87): socket(0x1c, 0x1, 0x0) (async) open$dir(&(0x7f0000000100)='./file1\x00', 0x40000400000002c2, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, [0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) (async) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) (async) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) (async) open$dir(&(0x7f0000000080)='.\x00', 0x4, 0x0) (async) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = kqueue() kevent(r2, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffb, 0x45, 0x1, 0x2ef5, 0x6}], 0x1005, 0x0, 0x37, 0x0) (async) r3 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x1b, &(0x7f0000000000), 0x4) connect$inet6(r3, &(0x7f0000000580)={0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}, 0x1c) getpeername$inet6(r3, 0x0, &(0x7f0000000080)) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x7) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r4 = kqueue() freebsd11_fstatat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r4, 0xffffffffffffffff, r5) setresgid(0xee00, 0xee01, r5) (async) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000008060001080004040003fff0ffffffffe0000002ffffffffffffffffffffedc494738b8123356aea7e5752dab21ce1c720b252b72f29f350874d"]) r6 = kqueue() clock_settime(0x4, &(0x7f0000000280)={0xca9a3c, 0xd}) (async) kevent(r6, &(0x7f0000000040)=[{0x100000000, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1, [0xff, 0x0, 0x1000, 0x9]}], 0x1, 0x0, 0x0, 0x0) (async) lio_listio(0x300, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) 0s ago: executing program 32 (id=81): socket$inet6_sctp(0x1c, 0x1, 0x84) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = fork() connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) r2 = socket(0x26, 0x2, 0x0) r3 = dup2(r2, 0xffffffffffffffff) readv(r2, &(0x7f0000001680)=[{&(0x7f0000002780)=""/4104, 0x1008}], 0x1) procctl$PROC_REAP_KILL(0x0, r1, 0x6, &(0x7f0000000200)={0xa, 0x0, r1, 0x0, r1}) recvmsg(r3, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) procctl$PROC_TRACE_CTL(0x2, r4, 0x7, &(0x7f0000000140)=0x35) ksem_wait(0x0) ksem_wait(0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x9) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1003, &(0x7f0000000180)=0x18000003, 0x4) fork() recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x802) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24) socket$inet6_sctp(0x1c, 0x5, 0x84) r7 = kqueue() kevent(r7, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080048f10028006500fff53f9078ac1400bbe0000001440c0711e000000200008000577d4e2100089078"]) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x10) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 WARNING pid 846 (syz-executor): ioctl sign-extension ioctl 16042c4c9 vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe0077d9c1b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837157c0 usecount 0, writecount 0, refcount 2 seqc users 0 hold count flags () flags (VIRF_PGREAD|VI_DOINGINACT|VMP_LAZYLIST) v_object 0xfffffe00549254d8 ref 0 pages 1 cleanbuf 0 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0054921740 (pid 851, syz-executor, tid 100164) nlink=1, effnlink=1, size=1048576, extsize 0 generation=a8d2d0b8, uid=0, gid=0, flags=0x106 ino 75, on dev gpt/rootfs May 19 10:05:53 ci-freebsd-main-9 kernel: arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.0.170 on tap0! SYZFAIL: SIGBUS Connection to 10.128.10.18 closed by remote host. Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800 FreeBSD/amd64 (ci-freebsd-main-9.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 ktrace write failed, errno 27, tracing stopped for pid 495 pid 746 (getty), jid 0, uid 0: exited on signal 10 (core dumped) ktrace write failed, errno 27, tracing stopped for pid 746 pid 338 (dhclient), jid 0, uid 0: exited on signal 10 (core dumped) pid 736 (sh), jid 0, uid 0: exited on signal 10 (core dumped) ktrace write failed, errno 27, tracing stopped for pid 736 pid 744 (getty), jid 0, uid 0: exited on signal 10 (core dumped) pid 335 (dhclient), jid 0, uid 0: exited on signal 10 (core dumped) pid 740 (getty), jid 0, uid 0: exited on signal 10 (core dumped) pid 818 (dhclient), jid 0, uid 0: exited on signal 10 (core dumped) ktrace write failed, errno 27, tracing stopped for pid 818 pid 741 (getty), jid 0, uid 0: exited on signal 10 (core dumped) pid 742 (getty), jid 0, uid 0: exited on signal 10 (core dumped) pid 747 (getty), jid 0, uid 0: exited on signal 10 (core dumped) pid 743 (getty), jid 0, uid 0: exited on signal 10 (core dumped) pid 745 (getty), jid 0, uid 0: exited on signal 10 (core dumped) pid 934 (getty), jid 0, uid 0: exited on signal 10 (core dumped) FreeBSD/amd64 (ci-freebsd-main-9.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800 show registers Password:if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect login: