last executing test programs:

5.762548578s ago: executing program 1 (id=50):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0x16, 0x1d, 0x1d, &(0x7f0000000940)="9bd50b6fac4103e7a00d4689e808d0d4755aedaacdd4743cd05fe86026", 0x0, 0x0, 0x0, 0x7da6699a, [0x5, 0x10001, 0x0, 0x6]})

5.761703949s ago: executing program 1 (id=51):
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
r1 = openat$smbus(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
aio_cancel(r0, &(0x7f0000000140)={r1, 0x6, &(0x7f0000000040)="e2966256980e0d78e1b89201bb7687aa4586323714e105501d91ad13b2a4651a8174ef145691acba7f4206de1d5e826382c28f3941c0246c4aff2fd495e91d3d351ccd02320ac61278825829d0b3943f695116bae555758f035ebf3feb6180e097288311dcd73740c86db0e2bc3cace686d7fed1a9a45e763180c7bae3b585ddb340b2f6756be8d5", 0x88, [0xa8c, 0x4], 0x0, 0x5, 0x5, {0x4, 0xd00, &(0x7f0000000100)}, {0x1, 0xd, @sival_int=0x8, @ke_flags=0x4040}})
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000200)=""/190, 0xbe, 0x40040, &(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8)
mount(&(0x7f0000000300)='zfs\x00', &(0x7f0000000340)='./file0\x00', 0x400000, &(0x7f0000000380)="d6b05ed17268dc075543c21edee6282add39cf0f78ae371384799c1f3ceb44c298d1280b5de4dc0b84b56b0c139af5ef42df3c452792a8601ed38fab48855a6d4ca6ee631fd2b2f1238ae71aa35a47a97fbb3e04bf91f6cbea4a35c7d8e62c65c7099582c0a235176914429b88988e1fc9b62be9aab89589282a2867236eedb343b7c09c98e13a77302f858cafdd9dbf177544a3d707a3412e9a88346544adb916abbdfad6d13f87ff12860d811758f698d9d03d69626d175bbbb5eb4ce468d5ef2d7afa1d6ef0f0cf9e266c1f33877783e336535bfb4e7e75d6a3")
r2 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000480), 0x2000000, 0x0)
r3 = fcntl$dupfd(r1, 0x11, r2)
ioctl$KDSKBSTATE(r3, 0x20044b14)
linkat(r3, &(0x7f00000004c0)='./file0\x00', r3, &(0x7f0000000500)='./file0\x00', 0x400)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x410, r1, 0x0)
rmdir(&(0x7f0000000580)='./file0\x00')
ioctl$DIOCGETALTQSV1(r3, 0xc130442f, &(0x7f00000005c0)="cb5253b2")
r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$CIOCFINDDEV(r5, 0xc024636c, &(0x7f0000000640)={0x6, "1d590a51f8474c7a9e9b4b567c8ee9acb177c9de8d10d316fe183e7ef8d0286c"})
getsockopt$inet6_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x108, &(0x7f0000000680)={<r6=>0x0, 0x99f, 0x2, 0x5, 0x1000}, &(0x7f00000006c0)=0x18)
getsockopt$inet6_sctp_SCTP_CONTEXT(r3, 0x84, 0x1a, &(0x7f0000000700)={r6, 0x2}, &(0x7f0000000740)=0x8)
unmount(&(0x7f0000000780)='./file0\x00', 0x2000000)
r7 = socket$inet6_sctp(0x1c, 0x1, 0x84)
cap_ioctls_get(r5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x4)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x50, &(0x7f0000000800)={0x0, {{0x1c, 0x1c, 0x2, 0x5, @local={0xfe, 0x80, '\x00', 0x0}, 0x7984}}}, 0x88)
getsockopt$inet6_buf(r3, 0x29, 0x50, &(0x7f00000008c0)=""/177, &(0x7f0000000980)=0xb1)
aio_writev(&(0x7f0000000b00)={r3, 0x8, &(0x7f00000009c0)="581c00130671bb17535ce9356d7e87ba54de114bafd6f042e13619a156211d2369140b3273a354470e9e4b24049b951fb3e2ea47afb0db9f82615081590f157291008a1730d7db2549f8e9949e52fe6cddb91aa7f7e046656836d453d02f09a85ff0727d2b8bedbcf1713570f1e98dc38704533d7513e4adb5afac0c684722db0d21947dc9a2fd4b096b82c02f2393c274a06b901e2fd1f09630e28279bd1bb15504f11771118041c27434736b2e6847efffb03868e8023ba818724185a64c5a1faeae3dc12e3cef7521ac22079c465b315d17b144d0f5ebdf1b236003d95546b89dd51f3f636809d1889d466b6dc53f98aaca119ea83b2ccfd905", 0xfb, [0xa6c, 0x1], 0x9, 0x20, 0xf91, {0x8, 0xfffffffffffffffa, &(0x7f0000000ac0)="1967d6eccb718bca233aa1cc1c18ea0213ef30719eb26760f2e47a102e6f9bb1b220d2dee247a4476cb9dbf8"}, {0x5, 0x6, @sigval_ptr=0x7}})
dup2(r5, r4)
r8 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
ioctl$EVIOCGPROP(r8, 0x40004509)
connect$inet6(r7, &(0x7f0000000c00)={0x1c, 0x1c, 0x0, 0x6, @empty, 0xd}, 0x1c)
aio_write(&(0x7f0000000ec0)={r5, 0x3, &(0x7f0000000c40)="ed9dc8e8db5ecfd3474b71836de740c0281d2eb17ee036c35c2f7b451013a7f3f896fc0878167b6b6685800338019b5db43dedb3a583984a2ccd3a18a6c1a8af453074977c24a9bccba1864a3956021ccffb533eb77264992d7dd3c12d94015b8e58a06f53463e269eea0c44691cb704dfeaeafbdae70ffcf9ddddf304243bead3a3ffa255f1a1b9dad54af418e37a25b28eaf612308c883841281fecedf87cc518317b4c7ace074ef33192bf40b35cefbb7a513638a33b4c25f7e47ed3db658afb9a0e5e7646c275e8ca7ab614ca4b94159661e4cb997022033112fe099e5a53b8c03", 0xe3, [0x6, 0x1], 0x1, 0x6, 0x5, {0x3, 0xffffffffffffffff, &(0x7f0000000d40)="dda25abd324d8d2abe6862a0601829b6a4cdcf05443835ff47f4eb93fe9d30135f3490e3d0c5769d211d343c70c239f9548181fe2b95a914c6aca206eed36dbfa33cb47bcca68a55cafbc59ac6b742f4d93e98de2f37cfef922956b25538e4567a608ad6dbb323201c4d43af985087dc5ec967ea48a58753a09b79cfb624bae0e6b903325cfcb73339bcc2100a120767ab277a3fff45420f33b08e44365137ea8ef3e1ce8f79d045eeabc42674753844e90c71c8c20bd01c7800bdfb800689423e86804ac27d2d1c05af6acfc085a56b56722e8f61ff58c4c44b4eb8a871cb04d1b4198ae69b433f9f7b4b97c50e6ae6db87eeac"}, {0x4, 0x2, @sigval_ptr, @thr={&(0x7f0000000e40)="0f01dd430f0d9822068f0026f3470f5dc6c462c198b900800000c4c240f512c4631d406600e3660f01889c36012a660f6c08f30f1efb65366764663666defb", &(0x7f0000000e80)="469559fff3d934cd70c9a8c0543bf82e0ca4d760637e032fff96155ef4e26c08417ea9838c54e346e086907c6636cd5e408a8fef5df28d0f4b623bfe"}}})
setsockopt$inet6_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000f80)={r6, 0x3, 0xf89c}, 0xc)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000fc0)=""/158)

1.65360355s ago: executing program 2 (id=97):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x3, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000340)={r1, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc)
setsockopt(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)='\t', 0x1)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
eaccess(&(0x7f0000000100)='./file0\x00', 0x4)

1.644021724s ago: executing program 2 (id=98):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000180)="e2", 0x1, [], 0x4, 0x0, 0xff, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1]}})
r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x20)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0)
posix_fadvise(r0, 0x4, 0x101, 0x1) (async)
posix_fadvise(r0, 0x4, 0x101, 0x1)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x100, 0x0)
mlock(&(0x7f0000106000/0x3000)=nil, 0x3000) (async)
mlock(&(0x7f0000106000/0x3000)=nil, 0x3000)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0)

1.446005347s ago: executing program 2 (id=104):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0)
open(0x0, 0x615, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408)
open(0x0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x50, &(0x7f0000000380)={0x7, {{0x1c, 0x1c, 0x1, 0x10001, @mcast1}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
getpeername(r2, 0xfffffffffffffffe, &(0x7f0000000000))
r3 = socket(0x1c, 0x1, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c, 0x0}, 0x0)
minherit(&(0x7f000091d000/0x2000)=nil, 0x2000, 0x2)
mprotect(&(0x7f0000d6e000/0x3000)=nil, 0x3000, 0x2)
mlock(&(0x7f0000b03000/0x3000)=nil, 0x3000)
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5)
sendmsg$unix(r3, &(0x7f0000001400)={&(0x7f00000002c0)=@file={0xa, 0x0, './file1\x00'}, 0xa, &(0x7f00000013c0)=[{&(0x7f0000000140)="0388", 0xfffffeb7}], 0x1, 0x0, 0x0, 0x20085}, 0x0)
rfork(0x1000)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_udp(0x1c, 0x2, 0x0)
ioctl$MDIOCATTACH(r4, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0xe2ab, 0x2, &(0x7f0000002080)='./file1\x00', 0x7c, 0x8, 0x41, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b86, 0x8f, 0x5]})

1.397696967s ago: executing program 2 (id=107):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x3, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc)
setsockopt(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)='\t', 0x1)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
eaccess(&(0x7f0000000100)='./file0\x00', 0x4)

1.377966084s ago: executing program 3 (id=108):
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000a00)="06805bf96096ee932073818eb07255ba3a034567b26a0f1024672ed005e4a68cdb9fe027442d90c267ae69fa9b23b9f15f83a94a3837cc", 0x37)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x18, &(0x7f0000000040)={@broadcast, @local={0xac, 0x14, 0x0}}, 0x8)
bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, @rand_addr=0x400}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x34, 0x101, 0x68, 0x3, 0x5, 0xa, 0xc39, @empty, @broadcast}}}}}})
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000002c0)=@abs={0x8, 0x1, 0x0, 0x2}, 0x8)
listen(r2, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f00000000c0)=[{0x3, 0xfffffffffffffffe, 0x45}], 0x1, 0x0, 0x0, 0x0)

1.377044349s ago: executing program 2 (id=109):
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
setsockopt$inet6_udplite(r0, 0x88, 0x2, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x2, 0x1, @broadcast}, 0x10)
vfork()
lio_listio(0x1, 0x0, 0xfffffe4b, &(0x7f0000000700)={0x2, 0x1f, @sival_ptr=0x5, @spare=[0xffffffffffffffff, 0xffffffffffffff4c, 0x1, 0x1, 0x0, 0x6, 0x10, 0x9]})
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
open$dir(0x0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r1, 0x0, 0xb, &(0x7f0000000000)={@multicast2, @multicast2}, &(0x7f0000000040)=0x1)

1.33656883s ago: executing program 3 (id=110):
socket$inet6(0x1c, 0x2, 0x0) (async)
socket$inet6_udp(0x1c, 0x2, 0x0) (async)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x50, 0x0) (async)
r1 = socket$inet6(0x1c, 0x2, 0x0)
setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) (async)
bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @ipv4}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x0, 0x184, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x55c0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) (async, rerun: 64)
lio_listio(0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
aio_suspend(&(0x7f0000000840)=[{0xffffffffffffffff, 0x3, 0x0, 0x0, [0x200, 0x4], 0x7ff, 0x30, 0xc, {0x2cae3e28, 0x8001, 0x0}, {0x4, 0x2, @sigval_ptr=0x4}}], 0x1, &(0x7f0000000680)={0x7fffffff, 0x966c})
r2 = kqueue()
freebsd11_kevent(r2, &(0x7f0000000000)=[{}], 0x6a81, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x50)
ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000440)={0x2, 0x0, 0x3, 0x5, &(0x7f0000000180)="a4836f91b23661e90bdda731525abd5f623edb4a17698e736049c2d1b0796d64a2c271700ef8d6b34a344d3b386483b03b54ec3dc4bed83c380c8d6dadc9f5d679bc4d1f2035259f5fb0dd74db7a69da802fa6e942dad951e9a3f971bec5409d18616345b102cadb74cd25dd27ec70f6b7f87755d3923310af2dc1f85bcb2d9887cbf57005aec424f68a3348d49947de94bc864fecbfb0bdd371c9a78c8e80451fd73607616ba363e65e92691b77", 0x0, 0x0, &(0x7f0000000400)="588384159dca46202ba5d1aca48d68f91f9d1f98c1aa482e3598ab85d45151fa2bf8cee3b86eaaec683efba65510"})
r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$CIOCFINDDEV(r4, 0xc024636c, &(0x7f00000000c0)={0x1, "86e3cb9be92d80e980903f437159a8b7ca748a7df05ea0928231225f3e07ce7f"}) (async)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080))
openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[]) (async, rerun: 32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (rerun: 32)
mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x80) (async, rerun: 32)
r6 = socket$inet6_udp(0x1c, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18)

1.336195801s ago: executing program 3 (id=111):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10)
listen(0xffffffffffffffff, 0x7fffffff) (async)
listen(0xffffffffffffffff, 0x7fffffff)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x1, 0x4}, &(0x7f00000000c0)=0x10)
socket$inet(0x2, 0x1, 0x6) (async)
r0 = socket$inet(0x2, 0x1, 0x6)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @loopback}, 0xc)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00'])
socket$inet6_udp(0x1c, 0x2, 0x0) (async)
r2 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000001c0), 0x4)
sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x6}, 0x1c, 0x0, 0x0, 0x0}, 0x0)
rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2})
fork()
writev(r1, &(0x7f0000000280), 0x26)
r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0xd2)
rfork(0x10) (async)
rfork(0x10)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
writev(r1, 0x0, 0x0)
listen(r0, 0x0)
select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0)
mlock(&(0x7f00009f8000/0x4000)=nil, 0x4000)
munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) (async)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000)
getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000180), 0x0)
setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)
mlock(&(0x7f00006cf000/0x4000)=nil, 0x4000) (async)
mlock(&(0x7f00006cf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1.143883548s ago: executing program 0 (id=119):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0)
r1 = dup(r0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="70638953e90cef7e00080000000b000000000000916d99e9", 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x450c, &(0x7f0000000000), 0x0, 0x0, 0x0})
ksem_init(&(0x7f0000000100)=<r2=>0x0, 0x0)
ksem_post(r2)
__specialfd$eventfd(0x1, &(0x7f0000000000)={0x40, 0x495a}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x24, &(0x7f0000000100)='a', 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r4, 0x6, 0x24, &(0x7f0000000100)='a', 0x1)
setsockopt$inet_tcp_buf(r4, 0x6, 0x26, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
symlink(0x0, &(0x7f00000000c0)='./file0\x00')
connectat$unix(r5, r1, &(0x7f0000000180)=@file={0xa, 0x0, './file0\x00'}, 0xa)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = kqueue()
kevent(r6, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x4, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
open(0x0, 0x400000, 0x181)
setpriority(0x2, 0x400000, 0xfb)
r7 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
connect$inet6(r7, &(0x7f0000000500)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="ff927c006bd07c8bfd85a79d0828cfb7"}, 0x1c)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setpriority(0x1, 0x0, 0xffffffffffffffcd)
open(&(0x7f00000001c0)='./file1\x00', 0x8000, 0xd)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000080), 0x4)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)

1.086539691s ago: executing program 0 (id=120):
r0 = socket(0x1c, 0x1, 0x0)
open$dir(&(0x7f00000001c0)='./file1\x00', 0x8200, 0x182b343dfaf80b52)
renameat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
r2 = open$dir(0x0, 0x400, 0x9f)
pwritev(r2, 0x0, 0x0, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000440)='PdEwpto\x00', &(0x7f0000000300)='d\x00', &(0x7f00000004c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000500)=']\x00', 0x0, &(0x7f0000000580)=',@}(-\'^])$@[$#.}!{,-k\x00', &(0x7f0000000340)='&\x86!&F%', &(0x7f0000000640)='/dev/crypto\x00'], &(0x7f00000005c0)=[&(0x7f00000006c0)='$\x00', 0x0, &(0x7f0000000740)='4\xd5\xea\x9a+\xba\'\xc70\x8cN*\xea\x99\x01\xab\x198\xcd\x0028\'\xff!\x96\f4(\x98\x1b\x92V\f\xdd\x82\xa1)\x1c\xce\xdf\xf1\x84G\xc9\xe0\xac\xd8\x96E\xd0\'\xd4\x85/h\xe2k\xbfjsf\x16\x90\xd2\x9c\xc1&\x99\xed\a', 0x0, &(0x7f00000007c0)=',(\xe9\'-%^\x05\x00', &(0x7f0000000400)='&!%@\x00', &(0x7f0000000540)='+[&\xa5\x00'])
setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000080)={0x2e49}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x7, @mcast1}, 0x1c)
r3 = socket(0x1c, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x2, 0x6, @empty, 0x2}, 0x1c)
r4 = shm_open2(&(0x7f0000000200)='./file1\x00', 0x400, 0x100, 0x3, &(0x7f0000000240)='/dev/crypto\x00')
ioctl$FIOSSHMLPGCNF(r4, 0x80306664, &(0x7f0000000280)={0x7, 0x1})
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESDEC=r1])
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x21)
r5 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0xd9)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
r6 = open(&(0x7f0000000480)='./file0\x00', 0x40, 0x108)
r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x400, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r7, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
chflags(&(0x7f0000000100)='./file0\x00', 0x106)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140))

1.086175074s ago: executing program 3 (id=121):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r0, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000100)="ddcc48a72777e18b9f0da47ac02354145c39f763e2823cef467d50b9eba90215fea101c8fb1adb0f443c53fc9ee6e34258", 0x0, &(0x7f0000000180)="0000d2ae0355c3481e328856bd59dad6a5a0", 0x29, 0x10, 0xfffffffffffffd8a, 0x0, 0xfe89, 0x0, 0x3, 0x3, "000004f9910700"}, 0x38)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa642868a95614080600010800060400080200000000007f000001aaaa369ae16a0668b7a7"])
ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000440)={0x19, 0x0, 0x10, &(0x7f0000000200)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff})
r3 = fhopen(&(0x7f00000000c0)={{[0x2, 0x5]}, {0x2, 0x1, "d1f50078c5bd0b2cd7b2badb89d30496"}}, 0x100000)
r4 = kqueue()
dup2(r4, r4)
ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r2, 0x100}, {r1, 0x10}, {r1, 0x40}, {r1, 0x4}, {r3, 0x1}, {r4, 0x4}], 0x7, &(0x7f0000000140)={0x7, 0x3}, &(0x7f0000000180)={[0x6, 0x1, 0x8, 0xff]}, 0x10)
__semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)=0x0)
r5 = fcntl$dupfd(r2, 0x11, r1)
ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x1, &(0x7f0000000080)="0fb93f24f416e4b05632ac7082ef84d4c3e5b9db69ae3e0263d1557402", 0x0, &(0x7f0000000540), &(0x7f0000000000)="c74409442fd362b04f74dd6119df9e27e3032e9794bcc8f4a559fd90bf067730ebe16bd9ab8f558d7c6f701c4ccf78c551b9b73edf7c7e8cc5966295f90b53c3bd808f79af75f70faef78aa0"})

646.513748ms ago: executing program 1 (id=122):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0xecea, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0xfffffffffffffffd, 0x0, 0x0, 0x1d3, 0x1c5976a4]}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(0x0, 0x0)
open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x8, @mcast2, 0x3}, 0x1c)
setresuid(0x0, 0xee01, 0xee00)
getresuid(0x0, &(0x7f0000000040)=<r1=>0x0, 0x0)
setresuid(r1, r1, r1)
cpuset_setaffinity(0x2, 0x2, 0x0, 0x6c, &(0x7f0000000040))
open$dir(&(0x7f0000000840)='./file1\x00', 0x20000, 0x0)
r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000040)={0x29, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff})
socket(0x1c, 0x3, 0x0)
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28)
kqueue()
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
fork()
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0)
open(0x0, 0x8004, 0x10a)
cpuset_setid(0x2, 0x0, 0x0)
ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x0, 0xffe, &(0x7f00000004c0)="618b54f6c7cceafd81add7ec3efb0d10c4fb6ff2ab451deb6d12f585fdbb0cc1411aaf09565558d322ba476907a568629f46781e514c381535f6ccac205f56ac90f3dcaede446108474b170551d22094d5ed06d9bc26a41ef4c0442a25b333b4ef71d3cd9c237f25b349f51a0a037b803c7193493c869a1cde76e083bed6ddc8aba4d415269b749b0114fc508a1bd10945d44ef921974f0e6fb9a0eecb99792b1275a8dcda1973e7235f711f443a2c1044aa90a04376eb24137493bfe7da04f6fbca62f5e7fd42f6c5e580844d0c9a08b290cf82014a46bb3bfe13adf2f9b5e360b1e29c7f005e720f947c6c9c8f90e65c8b5e6b21ab553b", 0x0, 0x0, &(0x7f00000000c0)="be1f2ff0713e53e1634934ddc2abfe33808f5d3ed81379558c7e7410a541a91468ce27b56c4b8c966e4b781e49794592244830082e6f945a47f6eac10ba323b119f96279effb8c953be3ac32971926478223bc428a5e1d3b67f66a987d1f0909fd0ee0094cae8bd326a3225a0cee08b1220298620c430ec49d3299ec00ab87cab27777109bf68d79ab9d5bd5c68108f6208fe21ec7cb03ddaeacd8721b48c25ce7c400d60a20c3dd9869ce489e9ced09a14d4f83a608835b0a0e5f7b81b6d38357f0fe4bbaeedf20e9a194c37d1c9cdd7872acb0e9acd0f89e109328ec11ec60a868089d65ef"})
sigtimedwait(0x0, 0x0, &(0x7f00000003c0)={0x7ffffffd, 0x400})
r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)

638.685644ms ago: executing program 0 (id=123):
r0 = dup(0xffffffffffffffff)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="70638953e90cef7e00080000000b1a0000000000916d99e9", 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x450c, &(0x7f0000000000), 0x0, 0x0, 0x0})
ksem_init(&(0x7f0000000280)=<r1=>0x0, 0x0)
ksem_post(r1)
r2 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x40, 0x495a}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
symlink(0x0, &(0x7f00000000c0)='./file0\x00')
connectat$unix(r3, r0, &(0x7f0000000180)=@file={0xa, 0x0, './file0\x00'}, 0xa)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x4, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setpriority(0x2, 0x0, 0xfe)
r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000500)={0x1c, 0x1c, 0x3, 0x6, @rand_addr="ff927c006bd07c8bfd85a79d0828cfb7", 0x1}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setpriority(0x1, 0x0, 0xffffffffffffffcd)
open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$BIOCSETF32(r5, 0x80084267, 0x0)
ppoll(&(0x7f0000000040)=[{r2, 0x2000}, {r3, 0x1}, {r5, 0x40}], 0x3, &(0x7f0000000080)={0xbfffffffffffffff, 0x8000000000000000}, &(0x7f00000000c0)={[0x6, 0xa59, 0x0, 0x6]}, 0x10)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
mount(0x0, 0x0, 0x8, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setrlimit(0xa, 0x0)
fork()
freebsd11_statfs(0x0, &(0x7f0000000540))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
open$dir(0x0, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[])

513.754626ms ago: executing program 1 (id=124):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) (async, rerun: 64)
r0 = kqueue() (rerun: 64)
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) (async)
r1 = socket(0x1c, 0x1, 0x0) (async)
ktimer_create(0x4, 0x0, &(0x7f0000000180)) (async)
ktimer_create(0x0, 0x0, &(0x7f0000000440)) (async, rerun: 64)
ktimer_create(0x0, 0x0, &(0x7f0000000340)) (async, rerun: 64)
ktimer_create(0x4, 0x0, &(0x7f0000000040)) (async, rerun: 32)
ktimer_create(0x0, 0x0, &(0x7f0000000440)) (async, rerun: 32)
ktimer_create(0x0, 0x0, &(0x7f0000000440)) (async)
ktimer_create(0x0, 0x0, &(0x7f0000000080)) (async)
ktimer_create(0x0, 0x0, &(0x7f0000000140)) (async, rerun: 32)
ktimer_create(0x0, 0x0, &(0x7f0000000440)) (rerun: 32)
ktimer_create(0x0, 0x0, &(0x7f0000000440)) (async)
ktimer_create(0x0, 0x0, &(0x7f00000002c0)) (async)
ktimer_create(0x0, 0x0, &(0x7f00000006c0))
ktimer_create(0xf, &(0x7f0000000480)={0x0, 0x0, @sigval_ptr}, &(0x7f00000000c0)) (async)
kmq_timedsend(0xffffffffffffffff, &(0x7f0000000500)="35983c0ee5604e26db5604eda2f4e5ccbd1ccf90bfb579a1334aca98bd901edf681f9667cc154f6562e67385f704511924177e", 0x33, 0x9, &(0x7f0000000480)={0xca, 0x1581}) (async, rerun: 64)
setsockopt$sock_int(r1, 0xffff, 0x1001, 0x0, 0x0) (rerun: 64)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00', 0x3d6}, 0x24)
sendto$inet(r1, &(0x7f00000002c0)="8e2c9a139eb8e7267a8d936f58fa135958e1180a9af8ef32f05378a38262c1ecdaddbe84fedbb416d5d85cbba3053d8a7473ac38a1a5278e3a1f908e9c44f967691b5523bb64a4c0b17cb251f5ea5e391c67f8c19304c07f6458bd3936f19efe81f6a7e38eaa9a3932", 0x69, 0x20004, &(0x7f0000000340)={0x10, 0x2, 0x3, @loopback}, 0x10) (async, rerun: 32)
sendto$inet(r1, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
rfork(0x85000) (async)
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async)
freebsd10_pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$SMB_PCALL(r2, 0x8004667e, &(0x7f0000000280)={0x0, 0x7, 0x0, @word=0x8, @word=0x1, 0x10800, 0x0, 0x0, 0x0}) (async)
connect$unix(r1, &(0x7f0000000080)=@file={0xa, 0x1, './file0\x00'}, 0xa)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

513.059585ms ago: executing program 0 (id=125):
r0 = socket(0x1c, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0xffff, 0x1010, &(0x7f0000000000), &(0x7f0000001840)=0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
freebsd11_mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x2f9, 0x14)
open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000001c0)=[{0x3, 0xffffffffffffffff, 0x21}], 0x1, &(0x7f0000000300)=[{}], 0x1, 0x0)
r2 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000040)={0x28, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x5, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f0000000380)})
r4 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$UI_GET_VERSION(r4, 0x4004552d, 0x8)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0)
copy_file_range(r5, &(0x7f00000000c0)=0x80000000, r5, &(0x7f0000000100)=0x3, 0x1, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x200000, 0x109)

512.21595ms ago: executing program 1 (id=126):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0)
extattr_set_fd(r0, 0x1, &(0x7f0000000080)=':$\xae\x00\x00', 0x0, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x101) (async)
r1 = socket(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10) (async)
connect$inet(r1, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async)
r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
__specialfd$eventfd(0x1, 0x0, 0x0) (async)
socket(0x2, 0x1, 0x0) (async)
open$dir(0x0, 0x0, 0x5) (async)
r3 = kqueue()
kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x17, 0x20000000, 0xa)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, 0x0, 0x0) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
freebsd11_fhstatfs(0x0, &(0x7f00000006c0)) (async)
mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) (async)
setsockopt$inet_mreqsrc(r5, 0x0, 0x49, &(0x7f0000000000)={@remote={0xac, 0x14, 0x0}, @multicast1}, 0xc)
r6 = vfork()
sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) (async)
lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r6})
wait4(r6, 0x0, 0x2, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) (async)
fhlinkat(&(0x7f0000000280)={{[0x2, 0x3]}, {0x5, 0x2, "b45300"}}, 0xffffffffffffffff, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0)

446.386231ms ago: executing program 1 (id=127):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in={0x10, 0x2, 0xffffffffffffffff, @rand_addr}, &(0x7f0000000040)=0x10)
getsockopt$inet6_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x103, &(0x7f0000000080)={<r1=>0x0, 0xaa, "d1356f7b3b8e114bf559368e8bcec2827868ece4225e026c62a4f020a48551fc17ffe09bcff4f4ec098ccfb52e73cf916db44b37ce1b775da938b5cf40d8c3041ac8e6dfa9292dd6cefa7c4a621ac6f7191c18bfed6316c0a0db7097bae9b9c67ebe74a999ba31bdfbcca2d8251adb90ad167654a5f1d44a2ab8eae9863364e6130fd32370640c648e7edfcd13663b4eda379c66e640796411d671fbf7e890c15af633154c65c8760ec1"}, &(0x7f0000000140)=0xb2)
getsockopt$inet6_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000180)={r1, 0x8, 0x0, 0xfffffffffffffff8, 0x12875d1e}, &(0x7f00000001c0)=0x18)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x200, 0x3)
r3 = getpgrp(0xffffffffffffffff)
aio_write(&(0x7f0000000440)={r0, 0x1ff, &(0x7f00000002c0)="cccafc49ccc872970db987d7043a180bc03a3c3df14b9d8fe6af93847acaf9be442f18c78e7fdafd03a6e75a57412f330542cc1d9f43d86c5cbb65199b20114915a0f43e5cd946a9f8a7ec73a2c7d919b513b842dea965b70853596374c0250006602d6438f528f731c8172cd7e616a8388e368b02452950dc4612f6f33f3e4dc81473646f9152ba41aec77c81ff47e863b8e5805da87505af7347aab83103bfd3ec990f5100f1f451c6bb194ca7ea277f0c2ea7f4c4ddd4b073ab056dbb236fda4480b5f2879046ddf2fa33a5511f3e048db370486d14bd1b08f074311d7bfa90", 0xe1, [0x401, 0xf], 0x7, 0x18, 0x800, {0xc1, 0x1, &(0x7f00000003c0)="eaefc241f6c08fdc0de487d2e8a9d8edb933fcc94728b7515a4b4cd05aa3d95f93e5f808feed6aaf208cea45b152c8834b5f66628244e691dfc66246214718a9977288"}, {0x1, 0x1a, @sival_ptr=0x7, @tid=r3}})
mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000500)=""/24)
procctl$PROC_PROTMAX_STATUS(0x2, r3, 0x10, &(0x7f0000000540))
aio_write(&(0x7f0000000740)={r2, 0x9, &(0x7f0000000580)="28b0a7606d319e58003251401fac68d2ad663d529f338542412702941d86ca06b62810ee540b1267968ae362d3e0458aed1c9d5e98056d6f77a845e03d4b6bf2972c472c811a271db21d8fd753a2eba1c3446bdd78c97f976f54fe31e235df76afcc80d497201654d313980c32785fd50c6529c7e236c40c73a60530a178b6b14173", 0x82, [0x3, 0x10], 0x8093, 0x18, 0x7, {0x7, 0xe81c, &(0x7f0000000640)="d9b6621cc80db3952292c3cb2cd906b57e024cbb031908"}, {0x1, 0x16, @sigval_ptr=0x6, @thr={&(0x7f0000000680)="66460f1a5b00426fc481955414fe450f418200000000c4427d23122e410f01d4c442293f920c810000dae9f3420f18ccf344ab", &(0x7f00000006c0)="b32f3fac50081f1d223f3e7ca18b9a6217d08d3245ee3ade176462b7e692a952bfd062297e026e30e2a49fb265783b0b886bfe6cb9718ceb102a4fa158be04cecfefc7b0bd75265edb2fa07afdbf8b3ea707c9d143fd7756e2ca792ec9750ae6f96ca4c9045fc6bd8a070bbe6550a87ab969f7da6795565541e630bb0524"}}})
fstatat(r2, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000940))
getsockopt$inet6_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000980)={r1, 0x2}, &(0x7f00000009c0)=0x8)
freebsd11_fstatat(r0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
setreuid(r4, r5)
setsockopt$inet_mreqsrc(r0, 0x0, 0x1, &(0x7f0000000ac0)={@empty, @loopback, @multicast2}, 0xc)
r6 = shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x1000)
shmdt(r6)
procctl$PROC_REAP_STATUS(0x2, r3, 0x4, &(0x7f0000000c80)={0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
aio_fsync(0x0, &(0x7f0000000d00)={r0, 0xffffffffffff4e5b, &(0x7f0000000b00)="340c88e2d7f1f28524a3dd36d23cbe58a4122e525251357644cfd58617d89e128038c572ba83ddd0a0d0c89423672fdc02e5c55972bf0f07c176d99098ebf6857aeedb3d259a96b8f2931b7cad63b8df5fd6ecb03b2eece75a46924f05bf773837b56b454c579a7bdb152adafa580a6d58a72db886f3cbb0f8ad9d13ed5fc919fa6bc0d6c2ac2bb20e08fbe9f204c851132342e07e92072b59c7b1c8bedc1db29fe18002555cd944b4d4cc77d348ae8a866132ba2261bac135092aa843a1bb31d66d62dd36156e703c24edcefefacf075ababfe4eaf1ca6d6180f2ef8daef508651987febd157ddf62a273bf", 0xec, [0x6, 0x6], 0x4, 0x4, 0x1, {0x0, 0xe6, &(0x7f0000000c00)="5be301521e83aae45be8b8884e8e8d9f30184a31fae5549f54cff4f8fe143368e0be2fa37703ee5b0e7732b8a156c668556abb1a4928115952b95980463bba17ed64b55c937aef8b12d1c47aff1ae867d545cb70003c5193edf0b62a355900c3349d9613e40bc04a1726ba821cf3ab3e5582c33a71a7"}, {0x4, 0x16, @sigval_ptr=0x9, @tid=r7}})
procctl$PROC_PROTMAX_STATUS(0x2, r7, 0x10, &(0x7f0000000dc0))
procctl$PROC_REAP_KILL(0x0, r8, 0x6, &(0x7f0000000e00)={0xb, 0x0, r7, 0x2c, <r9=>r3})
r10 = fcntl$getown(r0, 0x5)
procctl$PROC_REAP_KILL(0x2, r8, 0x6, &(0x7f0000000e80)={0x9db, 0x4, <r11=>r7, 0x4, r8})
r12 = getpgrp(r3)
procctl$PROC_REAP_GETPIDS(0x2, r8, 0x5, &(0x7f00000011c0)={0x9, '\x00', &(0x7f0000000f00)=[{r8, r9, 0x7}, {r8, r10, 0x9}, {r3, r11, 0xfffffffe}, {r3, r7, 0x81}, {r12, 0xffffffffffffffff, 0x40}, {r7, r8, 0xaeb}, {r3, r8, 0x3382c1c0}, {r3, r8, 0x7fff}, {r3, r7, 0x5}]})
r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
ioctl$DIOCGETRULESET(r13, 0xc444443b, &(0x7f0000001280)="883c51865225757a4d527389e21228306ab85b70bcb45925644796c417e2302be162a6906e1dd7c3e1a485aa52de332fc069598fd3c6064e832f921e8242bd650ba129e6d945ca3343607d9c8cb5df6989cf5fb8c805675302457532e1")

446.075708ms ago: executing program 0 (id=128):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x3, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc)
setsockopt(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)='\t', 0x1)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
eaccess(&(0x7f0000000100)='./file0\x00', 0x4)

442.743055ms ago: executing program 3 (id=129):
r0 = openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0)
kmq_timedreceive(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
rtprio_thread(0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xd}) (async, rerun: 64)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) (async)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) (async)
truncate(&(0x7f0000000040)='./file0\x00', 0xa) (async)
open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0xb1) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r3 = socket$inet6(0x1c, 0x1, 0x0)
setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) (async)
bind$inet6(r3, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @ipv4}, 0x1c) (async)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) (async)
ioctl$DIOCRADDADDRS(r2, 0xc0184415, 0x0) (async)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/151, 0x97}, {0x0}], 0x2, 0x78dabc0a) (async)
fork() (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
fhstat(0x0, 0x0) (async)
open(0x0, 0x10200, 0x0)
r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x2a, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500001c0080000008019078e00006000000000000ff8f7800000209"]) (rerun: 32)
aio_write(&(0x7f0000000540)={r4, 0x9, &(0x7f0000000100)="348173fe9f8a6c83423065d610db6761e7ad3b125d03749327742eb52ec7d9bf52c978d21bad4f35ad0c182a51", 0x2d, [0x4, 0x5], 0x4, 0x5, 0x8001, {0x8, 0x8, &(0x7f0000000440)="14c48675ffe645eb57841da788f36d3c41a4967b52ae76fbb77e73e40617535bd9562f74eb165fe6e2a92d36eb86187951f772d616c6d4fcc91b42138fbd7139e45c3b1dc4238d92e48c3494d0a240ac3d6a3775d7b5fb27a9c438d353055edc1a3f12ea602bcc2ed6a97cb9565683614805a87fd0bc44d18edd359f827ae50e2c8e93762289c85e32fef1b962ade3a2db9a99ae9cd10d184170b2df08124997e2429ec3b42661eb548337df323af890d2992dd562fca558095313e96f2fa48e460b20e4a5231ae4637fa1099cd64145ee8912d1481e69d1633c05efe214"}, {0x1, 0x1f, @sigval_int=0x55, @spare=[0x1, 0x6, 0x0, 0x527, 0x1, 0x7, 0x8, 0x6]}})
ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f0000000080)={0x10, 0x8, 0x1, &(0x7f0000000740)='\x00', 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x7d86619b, [0x0, 0x9, 0xc]}) (async, rerun: 32)
ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000140)={0x0, 0x2, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}) (rerun: 32)

423.476126ms ago: executing program 2 (id=130):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8, 0x0, 0x1, 0x2, 0x0, @multicast2, @multicast1}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0xdd}}}}})
symlink(0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
truncate(0x0, 0xfffffffffffffff8)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
socket(0x10, 0x10000000, 0x4)
chdir(0x0)
getpriority(0x2, 0x0)
r2 = socket(0x11, 0x3, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1018, &(0x7f00000004c0)=0x82cc, 0x4)
openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0xf6)
mkdirat(r3, &(0x7f0000000100)='./file1\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0))
r5 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x35)
extattr_set_fd(r5, 0x1, &(0x7f0000000040)=':$\x05\xef\x00', 0x0, 0x0)
extattr_get_fd(r5, 0x1, &(0x7f00000000c0)=':$&{\x00', &(0x7f0000000100)=""/75, 0x4b)
renameat(r4, &(0x7f0000000200)='./file1\x00', r4, &(0x7f0000000140)='./file0/file0\x00')
setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000540)={0x3, {{0x10, 0x2, 0x0, @multicast1}}, {{0x10, 0x2, 0x0, @loopback}}}, 0x108)
syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000f700043e4a86dd6000000000283dff00f0372e0865911feb7ee80000008000ff02000000000000000006000000000189009078000000000000000000018e492194386b16be0c8c63b9c16e00b4"])
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x47, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x1, 0x0)
sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}, 0x0)

421.06398ms ago: executing program 0 (id=131):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d})
openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = semget$private(0x0, 0x7, 0x3c0)
semop(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x1800}, {0x3, 0x4000, 0x1800}, {0x3, 0x2, 0xb05ab3c4f35b161f}], 0x3) (async)
r1 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1)
fcntl$setown(r1, 0x6, 0x0)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
ftruncate(r2, 0x3862) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
dup2(r4, r3)
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r5, r3, 0xc, 0xb5, 0x0, 0x0, 0x8400001f) (async)
mlockall(0x3)
mlockall(0x3)

336.623234ms ago: executing program 3 (id=132):
open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="24967d1091eb", [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x3, 0x1c, 0x66, 0x6, 0x7f, 0x23dec1c0cc2cdd41, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x0, 0x8}}}}}})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
r1 = socket(0x1c, 0x1, 0x0)
socket(0x1c, 0x1, 0x0)
kqueue()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={<r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
getgid()
getgid()
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$bt_l2cap(0x24, 0x3, 0x87)
bind$bt_l2cap(r5, &(0x7f0000000080)={0xe, 0xa8, 0x10, 0x6, 0x5, 0x4}, 0xa)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @udp={{0x1, 0x3, 0x8}}}}}})
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_emit_ethernet(0x0, 0x0)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)

0s ago: executing program 32 (id=132):
open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="24967d1091eb", [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x3, 0x1c, 0x66, 0x6, 0x7f, 0x23dec1c0cc2cdd41, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x0, 0x8}}}}}})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
r1 = socket(0x1c, 0x1, 0x0)
socket(0x1c, 0x1, 0x0)
kqueue()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={<r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
getgid()
getgid()
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$bt_l2cap(0x24, 0x3, 0x87)
bind$bt_l2cap(r5, &(0x7f0000000080)={0xe, 0xa8, 0x10, 0x6, 0x5, 0x4}, 0xa)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @udp={{0x1, 0x3, 0x8}}}}}})
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_emit_ethernet(0x0, 0x0)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts.
Out of ktrace request objects.
md0: truncating fractional last sector by 1 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4800
vnode_pager_putpages: zero-length write at 0 resid 6
0xfffffe006bc5b000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837162a0
    usecount 5, writecount 3, refcount 3 seqc users 0
    hold count flags ()
    flags (VIRF_PGREAD|VMP_LAZYLIST)
    v_object 0xfffffe005490c7c0 ref 1 pages 1 cleanbuf 0 dirtybuf 1
    lock type ufs: EXCL by thread 0xfffffe0054916740 (pid 936, syz-executor, tid 100334)
	nlink=1, effnlink=1, size=6, extsize 0
	generation=ff355bc6, uid=0, gid=-2086816849, flags=0x50000
	ino 100, on dev gpt/rootfs
ZFS filesystem version: 5
ZFS storage pool version: features support (5000)
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800
SYZFAIL: SIGSEGV
pc-offset:0xffffffff217cdfe1 pc:0xdeadbeef addr:0x0 code=65537Connection to 10.128.1.115 closed by remote host.
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800

FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0)

login: pid 424 (devd), jid 0, uid 0: exited on signal 11 (core dumped)
pid 1000 (syz-executor), tap1: tun/tap protocol violation, non-controlling process closed last.
pid 1003 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last.
ifaddr cache = 0xfffffe0059dc8780 is deleted
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
ifaddr cache = 0xfffffe0059dc8600 is deleted
tap2: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
pid 747 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
pid 849 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
pid 817 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 744 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 765 (csh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 745 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 338 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
pid 736 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 741 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 743 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 335 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
pid 746 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 842 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
pid 740 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 742 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 1008 (getty), jid 0, uid 0: exited on signal 11 (core dumped)

FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0)

login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
set $maxwidth = 0
Password:if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe2800

Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
show proc
Password:
Login incorrect
login: show all locks
Password:
Login incorrect
login: show uma
Password: