# https://syzkaller.appspot.com/bug?id=ae28a692910f2e066889b98c890adc67d88a4fda # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":4,"slowdown":1,"sandbox":"none","sandbox_arg":0,"close_fds":false,"tmpdir":true,"segv":true} r0 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x7fffffff, 0x5}, 0x8) setsockopt$inet6_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000040)={0x0, 0xd4}, 0x8) getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}) (async) freebsd11_stat(&(0x7f0000000b40)='./file1\x00', 0x0) r2 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, r2, 0xffffffffffffffff, 0x1, 0x101}, 0x80, 0x0, 0x8000, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000000)={'rack\x00', 0x5}, 0x24) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x449, 0x0, &(0x7f0000001040)) (async, rerun: 64) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000001240)={'bbr\x00'}, 0x24) (async, rerun: 32) connect$inet(r3, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x8f1a}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x8, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x20100, &(0x7f0000000980)=@in6={0x1c, 0x1c, 0x1, 0x0, @mcast2}, 0x1c) (async) shutdown(r3, 0x1) (async) r4 = fcntl$getown(r3, 0x5) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd12af517962eb456, 0x6, 0x0, 0x53}, 0x8, 0x4, 0x6, 0x80, r4, 0xffffffffffffffff, 0x5}) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_EVENT(r5, 0x84, 0x1e, &(0x7f00000000c0)={r6, 0xa}, &(0x7f0000000100)=0x8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x4, 0x3f, 0x0, 0x3}, 0xfffffff8, 0x0, 0x6, 0x1, r7, 0xffffffffffffffff, 0x6}) (async) freebsd11_fstat(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r9 = fork() (rerun: 32) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x0, 0x0, r2, r8, 0x20, 0x6, 0x0, 0x800}, 0x1, 0x3ff, 0xf96, 0x5d1, r9, 0xffffffffffffffff, 0x5}) (async) open(0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_sctp_SCTP_RTOINFO(r10, 0x84, 0x1, 0x0, &(0x7f0000001c00)) getsockopt$inet6_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0xc) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20108, &(0x7f0000001780)={0x1c, 0x1c, 0x0, 0x1, @mcast2, 0xbd4}, 0x1c) open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x100)