last executing test programs:

5.334010024s ago: executing program 2 (id=35):
rtprio_thread(0x1, 0x0, 0x0)
openat$evdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2000000, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x27, &(0x7f00000001c0)=0x4, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd60c3200000282b00feffffff000000000000000000000002ff02"])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000240)={r0, 0x1, &(0x7f0000000040)='\x00', 0xfffffe67, [0x80000001], 0x10001, 0x5, 0x0, {0xfffffffffffff802, 0x4, 0x0}, {0x4, 0x15, @sigval_int=0x66}})
sysarch$I386_SET_GSBASE(0xa, 0x0)
setsockopt$inet_sctp_SCTP_EXPLICIT_EOR(r0, 0x84, 0x1b, &(0x7f0000000140)=0x7, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x48)
bind$unix(r1, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa)
connect$unix(r1, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0)
aio_write(0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0)
readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1)

4.085952382s ago: executing program 2 (id=46):
setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0)
r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x8)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = msgget$private(0x0, 0x20)
msgsnd(r1, &(0x7f0000000000)={0x1, "66db6fe3261735da22e847ccb1e07f1c582be2a38022ff51402ed8e9dcd9bf7cd5117bb49e404706ee677270a9fbc0c76550ba803f2639a2888c1481d9333f34c71aaee7a6adba0d9fdb05ae4d902acfa7a0509af136d457225be04db9a0b49ad2"}, 0x69, 0x800)
rfork(0x1000)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0)
r2 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x47, 0x0, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x401, &(0x7f0000000240)="b852cd44", 0x4)
connect$inet(r2, &(0x7f00000000c0)={0x10, 0x2, 0x2, @loopback}, 0x10)
r3 = kqueue()
kevent(r3, &(0x7f0000000040)=[{0xffffffffffff4eff, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x104)
r4 = semget$private(0x0, 0x7, 0x3c0)
semop(r4, &(0x7f0000000180)=[{0x0, 0x43, 0x1800}, {0x4, 0xe6, 0x1800}, {0x0, 0xfd, 0x800}, {0x1, 0x20, 0x1800}, {0x3, 0x4000, 0x1000}, {0x3, 0x8, 0x1000}], 0x6)
openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000280)='./file1\x00', 0x0)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0))
renameat(r6, &(0x7f0000000200)='./file1\x00', r6, &(0x7f0000000140)='./file0/file0\x00')
mlockall(0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x3000000, 0x3, 0x0, 0x10000, 0x7, 0x3d, 0x0, 0x2, 0x0, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

3.995903003s ago: executing program 0 (id=47):
r0 = socket(0x1c, 0x1, 0x0)
cpuset_getaffinity(0x1, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000600))
freebsd11_mknod(0x0, 0x6000, 0x8)
semget(0x2, 0x4, 0x241)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xfffffffffffffffd, 0x1]}], 0x1, 0x0, 0x0, 0x0)
freebsd10_pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
sendto$inet6(r1, 0x0, 0x0, 0x4, 0x0, 0x0)
ktimer_create(0x4, 0x0, 0x0)
cpuset_setaffinity(0x3, 0x4, 0x2, 0x8, &(0x7f0000000ac0)={[0x8]})
r5 = kqueue()
kevent(r5, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x1, 0x0, 0x3, 0xdc]}], 0x1, 0x0, 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
ioctl$BIOCSETBUFMODE(r3, 0x8004427e, &(0x7f0000000240)=0x9bc8e5d040a43ef8)
r6 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10)
connect$inet(r6, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x180}, 0x20104)
r7 = getpid()
fcntl$setown(r0, 0x6, r7)
setsockopt$sock_int(r0, 0xffff, 0x202e, &(0x7f0000000280)=0x9, 0x4)
socket$inet6_udp(0x1c, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet6_group_source_req(r6, 0x29, 0x53, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0xfffffffc, @empty}}}, 0x108)
bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
rfork(0x3060)

3.666412902s ago: executing program 0 (id=48):
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0xbd)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mprotect(&(0x7f0000639000/0x2000)=nil, 0x2000, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x53, &(0x7f0000000100)={0x6, {{0x10, 0x2, 0x2, @multicast1}}, {{0x10, 0x2, 0x2, @rand_addr=0x6de}}}, 0x108)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f00000000c0), 0x4)

3.665587149s ago: executing program 0 (id=49):
openat$crypto(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x4}, 0x10)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4)
access(&(0x7f00000002c0)='./file1\x00', 0x2)
bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c)
setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000240)={'rack\x00', 0x9}, 0x24)
socket$inet6_sctp(0x1c, 0x5, 0x84)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
r1 = kqueue()
syz_emit_ethernet(0x9e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffa8b4058f11ffffffffffffffffff08004a4d00900067000201679078ac1400bbe0000002940000000100440c0882000000010000000100004e214e2300089078082ecebd8cad0d45717defa9de7ee87b60a7b40ccacd6b2b19b3bdaf38aa364a47fcee69dd7aa21b79fbedcd721fb58d3ba767e41fdf3eab24f306b6f43bbefc46dcda8a5a85a0ae2f897bbc5ea8bcea364b787c48b41bc8421596d8c839c8f4ab23555f005a4818a2b12e974879"])
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8040, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xa1)
r2 = fork()
sigqueue(r2, 0x26, @sival_ptr=0x16)
sigqueue(r2, 0x13, @sigval_ptr)
wait4(r2, 0x0, 0x8, 0x0)
r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0x40000400000002c6, 0x0)
fcntl$lock(r3, 0x0, &(0x7f0000000000)={0x570, 0x0, 0x5})
connect$inet(r0, &(0x7f0000000100)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10)
r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x8000, 0x29)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x100, 0x10)
mlockall(0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0)
sync()
kqueue()
open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0)

3.406208078s ago: executing program 2 (id=53):
ktimer_create(0x4, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0)
minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1)
r0 = kqueue()
kevent(r0, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$MDIOCRESIZE(r1, 0xc1c06d04, &(0x7f0000000440)={0x4, 0x200, 0x2, 0x0, 0x40, 0x2, 0xd, 0xd2, 0x80, 0x352, 0x0, [0x9, 0x7, 0x8, 0x8001, 0x4bd08e5c, 0x6, 0x81, 0x3, 0x2, 0x3, 0xfffffffc, 0x8, 0x588, 0x5, 0x6, 0x1, 0x9, 0x7fffffff, 0x1f2d2830, 0x6, 0x9, 0x4, 0x0, 0x4, 0xce8d, 0x3, 0x5, 0x6, 0x1, 0xf, 0xfffffff4, 0x0, 0x1ff, 0xbd, 0xff, 0x1, 0x40, 0x4, 0xdad, 0x6, 0x0, 0x0, 0x204b0f32, 0x8, 0x6, 0x90, 0x8, 0x5, 0x8, 0xac, 0x7ff, 0x10000, 0x800, 0x5, 0x8bd6, 0xa, 0x0, 0x9, 0x7fff, 0x4, 0x0, 0x7, 0x9, 0x8, 0x0, 0xfffffffc, 0xffff8f2d, 0x80000000, 0x7ff, 0xbf, 0x19, 0x5164, 0x9, 0x6, 0x10, 0x6, 0x96, 0xa, 0x3, 0x4, 0xe36, 0x7, 0xffff, 0x40, 0x2, 0x7, 0x3, 0x9, 0x7, 0x5, 0xb, 0x1, 0xfffffff7, 0x8, 0x80000000, 0x41]})
fork()
fork()
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x81}, 0x1c)
fork()
fork()
openat$ptmx(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
thr_new(&(0x7f00000002c0)={&(0x7f0000000000)="3ef047f69b77187930c463515c500000440f5fe1366566420f383e7e01430f9b75d2f7a59e8a00003e6667f247d9d0c482f924348cc4a1fc5a42cd65660f3a16510573", 0x7, &(0x7f00000000c0)="0d41cac12def1e23919f7c945950a811c93b42c609e81b42aaf1b70916698f9a011479f733b9b721dfc8d73d110f683571678375b3c5a91603c2037ade79140dd57d95fa7543c497cd4be6", 0x4b, &(0x7f00000001c0)="98b2b998ea857f3c0c69c002e6f45c66f8fbde3d498ec5a576bd756466181654dad5e7bf446c22d9565b1ad9de7f359e441c7c4934231354dfa8c16f59776b05b19e66ff91d08a7f04c2", 0x4a, &(0x7f0000000140), &(0x7f0000000240), 0x1, &(0x7f0000000280)={0x4, 0x11}, [0x2, 0x8000, 0x7]}, 0x68)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

3.256493645s ago: executing program 3 (id=54):
r0 = getppid()
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0xb, 0x1, r0, 0xfffffffc})

3.252988194s ago: executing program 1 (id=56):
select(0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0x5, 0xffffffffffffffc0, 0x7, 0x1, 0x4, 0x3}, 0x0, &(0x7f0000000180)={0x0, 0x10000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f00000000c0), 0x4)
procctl$PROC_TRAPCAP_CTL(0x0, 0x0, 0x9, &(0x7f0000000000)=0x1)
setresuid(0xee01, 0xffffffffffffffff, 0xee01)
setresuid(0xee01, 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
r1 = open$dir(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fchownat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x6000)

3.055871208s ago: executing program 3 (id=57):
r0 = open(&(0x7f0000000980)='./file0\x00', 0x615, 0x0) (async)
setitimer(0x2, &(0x7f00000001c0)={{0x0, 0x7fffffff}, {0x0, 0xea60}}, 0x0) (async)
r1 = socket$inet6(0x1c, 0x2, 0x0)
setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4)
bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000280)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x200000}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async)
getgid()
r2 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x16, &(0x7f0000001500)={0x0, 0x8000}, 0x8) (async)
freebsd11_statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r3=>0x0}) (async, rerun: 32)
r4 = semget(0x0, 0x1, 0x8) (rerun: 32)
__semctl$SEM_STAT(r4, 0x0, 0xa, &(0x7f0000000280)=&(0x7f0000000240)={{0x0, 0x0, 0x0, <r5=>0x0}})
fchown(r2, r3, r5) (async)
writev(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000000140)='j', 0x1}], 0x1)
r6 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) (async)
sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@abs={0x8, 0x1, 0x0, 0x0}, 0x8, &(0x7f0000000100)=[{&(0x7f0000000180)="9b59b442a9e23c5dabf5655a4d47ca91e68354162fe0b98bfab0166e64b544fe86dbd8c314d98bc1d622fe347fdfecf84670ab6ec22a3852ad650ba44b06082595d74ccd5f4b6510189712a78c365e7d37b41af45c1fb1534cdc34ccb58b3215eaa25037fa94a5a6847dedd530793957656b07bc683228be5cdb244a292c421b81ca8b3b3059034f8cb7fe97a41b2028eb", 0x91}], 0x1}, 0x100) (async)
socket$inet6_tcp(0x1c, 0x1, 0x0)
sendto$inet(r6, &(0x7f0000000340)="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", 0x2400, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2, @broadcast}, 0x10) (async)
r7 = socket$inet(0x2, 0x4, 0x1)
ppoll(&(0x7f0000000000)=[{r0, 0x80}, {r0, 0x2000}, {r0, 0x40}, {r6, 0x1}, {r7, 0x4}, {r0, 0x10}], 0x6, &(0x7f0000000040)={0x7, 0x5}, &(0x7f0000000080)={[0x55c, 0x101, 0x5, 0x5]}, 0x10)

2.936367926s ago: executing program 1 (id=58):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x34, 0x40}]})
mprotect(&(0x7f0000779000/0x1000)=nil, 0x1000, 0xf)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000), 0x4)

2.796308492s ago: executing program 0 (id=59):
r0 = kqueue()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000340)={r1, 0x80000001, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}})
r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
aio_waitcomplete(&(0x7f00000002c0)=0x0, &(0x7f0000000400))
kevent(r0, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0)
fork()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r4 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="19fdb123c091ae3db1f1c5f51d8be800"}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x2, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x108)
kevent(0xffffffffffffffff, &(0x7f0000000540)=[{0x7, 0xfffffffffffffffa, 0x31, 0x10, 0x1000000009, 0x885, [0x8001, 0x5, 0xfffffffffffffff8, 0x6]}, {0x8, 0xfffffffffffffffd, 0x80dc, 0x8, 0x6bf4, 0x5, [0x2, 0x1bb3, 0x40e, 0x7]}, {0xfffffffffffffffb, 0xfffffffffffffffc, 0x4010, 0xc0000000, 0x5, 0xfffffffffffffffc, [0x6, 0x1, 0x7ef4280f, 0x8]}], 0x3, &(0x7f0000000440)=[{}, {}, {}, {}], 0x4, &(0x7f0000000040)={0xf, 0x2})
lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0x7})

2.57549555s ago: executing program 2 (id=60):
procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000340)=[{0x1007f000000000, 0xfffffffffffffffb, 0x4008, 0xed0e710368f873f, 0x7, 0x8, [0x6, 0x5, 0x6, 0x9]}, {0xfffffffffffffbff, 0x0, 0xc1, 0x10, 0x4, 0x8000, [0x0, 0x0, 0x7dd, 0x5]}], 0x2, 0x0, 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4)
ioctl$BIOCFEEDBACK(0xffffffffffffffff, 0x8004427c, &(0x7f00000001c0)=0x4)
socket(0x10, 0x3, 0x0)
r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000440)={0x19, 0x0, 0x10, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)})
r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
ftruncate(r3, 0x3862)
r4 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r4, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
dup2(r6, r5)
r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r7, r5, 0x1f00, 0x0, 0x0, 0x0, 0x14)
rfork(0x87010)
rfork(0x7010)
fork()
open(&(0x7f00000000c0)='./file0\x00', 0x100000, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0xb, &(0x7f0000000140)={0x0, {{0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}}, {{0x10, 0x2, 0x1, @rand_addr}}}, 0x108)

2.326278037s ago: executing program 1 (id=61):
openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x4}, 0x10)
open(&(0x7f0000000280)='./file0\x00', 0x1, 0x1d7)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, 0x0, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
r1 = kqueue()
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff03ffffffffff00200067090001679078ac1400bbe000000230973c2fe11385edb2e901004600000000000000005a450000000000"])
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100))
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001500)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "3ee90a", 0x14, 0x2c, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}})
open(0x0, 0x80000000000209, 0xa1)
freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d900", 0x30, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cf1404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x29000000, {0x0, 0x6, "06c33e", 0x0, 0x6, 0x0, @loopback={0x1000000}, @empty}}}}}}})

1.896546714s ago: executing program 3 (id=62):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
ftruncate(r0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000240)={r1, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}})
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0)
r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0)
copy_file_range(r3, 0x0, r3, &(0x7f0000000180)=0xff, 0x403, 0x0)
pwritev(r0, 0x0, 0x0, 0xed5)

1.856436868s ago: executing program 2 (id=63):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
ftruncate(r0, 0x10000) (async)
ftruncate(r0, 0x10000)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0)
ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc0306367, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
freebsd11_mknod(0x0, 0x1000, 0x0)
fcntl$lock(0xffffffffffffffff, 0x16, 0x0)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f0000000000)={0x16, 0x22, 0x20, &(0x7f0000000940)="0b6fac4103e7a00d4689e808d0d4755aedaacdd4743c7eaa2c7300d05fe86026", 0x0, 0x0, 0x0, 0x7d86699a})
ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000380), 0x0, 0x0, 0x0}) (async)
ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000380), 0x0, 0x0, 0x0})
open$dir(0x0, 0x1, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x2)
socket$inet6_sctp(0x1c, 0x1, 0x84) (async)
r3 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_sctp_SCTP_MAXSEG(r3, 0x84, 0xe, 0x0, 0x0) (async)
setsockopt$inet6_sctp_SCTP_MAXSEG(r3, 0x84, 0xe, 0x0, 0x0)
bind(r3, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)
dup(r3) (async)
r4 = dup(r3)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x31, 0x0, 0x20)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bindat$unix(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
rfork(0x85000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0)
sync()

1.853322543s ago: executing program 1 (id=64):
vfork() (async)
open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x1010, 0xffffffffffffffff, 0x0)
extattr_set_fd(0xffffffffffffffff, 0x0, &(0x7f0000000040)='{:\x00', 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) (async)
madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) (async)
r1 = socket$inet6_udplite(0x1c, 0x2, 0x88)
sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="fb000000000000000000000086dd60826e03000e000000000000000000000e14fc11133f6400fe8000000000000000000000000000aa0001000000000000050200000502000004010000000000008600907800bc990c9e9ee85f61005b75094400"/107]) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
chroot(&(0x7f0000000100)='./file0\x00') (async)
aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}})
open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async)
open(0x0, 0x615, 0x0) (async)
lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0xee00) (async)
lchown(0x0, 0x0, 0xffffffffffffffff) (async)
thr_suspend(&(0x7f0000000000)={0xfffffffffffffffe, 0x6})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) (async)
mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/231) (async)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/110) (async)
setitimer(0x344085c376b0222, &(0x7f0000000000), 0x0)
pwritev(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x6) (async)
lio_listio(0x1, &(0x7f0000000280)=[{r0, 0x5, &(0x7f00000000c0)="23600bceb2bc9e1abcb926d2d429f760fa390ab9cfd0cf24065908327be8b662b730e95c6bea38cf1f3fd840a7b0970798c8c22cb359214f1ffa2b72a34b9e4695910b4115d4b3cdbfc97aeb5c31743b5c1ad1b89bf5209c24ccbb0a93bc5e17b06865e19cd9547ff3bbe28a37bc40f63e1d69c1652e6a1dd53d6a5e88f9fb2841748f086dd59414065ca8e77c92855b660d74354781928c6dba84e395391825a4398be745e31f39961c93120c170806f73576512d04ab", 0xb7, [0x72, 0x7], 0xcfc, 0x2, 0x8, {0x9, 0xfffffffffffffff6, &(0x7f0000000000)="6a0b9ac2a97377858fc14ffd3dee64cd5725435bef62c0186dbaa87482412d9a29c473fc48408faf6ab6fdbc9bc03921a9b9a005fdc03ad64e0fdcab8fc714b5dd0f43"}, {0x4, 0x3, @sival_ptr=0x2f8, @thr={&(0x7f0000000180)="6766410fe9500740d9eef340a76465417ecbc4c1fb7098e02a000024c402914709c402059384ac23faca28c4a2718e9ab88ae35f460f025501c401a572f300", &(0x7f00000001c0)="2fc472181df9d380e1948a4e9dcbe32f162dfe6b9e7020ac87b73a2ca2fa7f91a698ddc7f478a4d5a80200162ac2e2d9dfa30f6cd0492d2ab27d38eb5584cd321555f1b600d38e84e64ed0696c76c0444654929c175cba881b9924522b"}}}], 0x1, &(0x7f0000000440)={0x2, 0x0, @sigval_ptr=0xe229, @thr={&(0x7f0000000340)="f2460f4aa314d27650d9f766430f3a0b550082d958000f38f17503c200003e44ff949d00000100660fe79d622980f4c4630d02a647000000cac4e279ab09", &(0x7f0000000380)="a965b006aaf36099cc4ccb4bce19c6db6e8a788745d120ddf64e1e75e79d4b8c365ffa0918f20cd9db5eb89dd5818dba35a59445971b40dbdb7e3581b2636d198a88fe7b2cf1cd51218c523a885b7c3837172161359cda8ace10bfec955d8f8e0fb578f8741ae01c67a090fd56d761a1ed12714a0083f6e6b336128b3b2e5747482058ce9881232d74b3920e0b78cd"}}) (async)
r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0xffffff, 0x0, 0x20011, r4, 0x0)

1.446367885s ago: executing program 2 (id=65):
r0 = vfork()
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast1}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x2, @mcast1}, 0x1c)
sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10}], 0x10}, 0x0)
r2 = getpid()
sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b", 0x3}], 0x1, 0x0, 0x0, 0x81}, 0x0)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
procctl$PROC_REAP_KILL(0x0, r0, 0x6, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x1, r2})
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000680))

1.356342328s ago: executing program 3 (id=66):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x3fe, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0)
freebsd10_pipe(0x0)
msync(&(0x7f0000c9d000/0x1000)=nil, 0x1000, 0x1)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
socket(0x2, 0x1, 0x6)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
ksem_init(&(0x7f0000000000)=<r1=>0x0, 0x1)
ksem_trywait(r1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0xa, &(0x7f00000000c0), 0x4)
copy_file_range(r0, &(0x7f0000000000)=0xffffffffffffffff, r0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r3, 0x2020}], 0x1, 0x0)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)

1.186287215s ago: executing program 3 (id=67):
r0 = socket(0x1c, 0x1, 0x0)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f0000000040)={0x29, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff, [0x8]})
ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x0, 0xffe, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000280)})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000280), 0x4)
setsockopt$sock_int(r0, 0xffff, 0x1014, 0x0, 0x0)
r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
ftruncate(r3, 0x3862)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname$inet(r4, &(0x7f0000000040)={0x10}, &(0x7f0000000080)=0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
dup2(0xffffffffffffffff, r4)
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
shmdt(0x0)
sendfile(r5, r4, 0xb00, 0x40, 0x0, 0x0, 0x0)
setuid(0xffffffffffffffff)
rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2})
r6 = fcntl$getown(0xffffffffffffffff, 0x5)
procctl$PROC_REAP_KILL(0x0, r6, 0x6, &(0x7f0000000100)={0x1, 0x0, r6, 0x7fffffff, r6})
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

1.038430211s ago: executing program 0 (id=68):
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
cpuset_setdomain(0x2, 0xa, 0x8000000000000001, 0x20, &(0x7f00000001c0)={[0x1]}, 0x2) (async)
cpuset_setdomain(0x2, 0xa, 0x8000000000000001, 0x20, &(0x7f00000001c0)={[0x1]}, 0x2)
setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000001500)={0x0, 0x8000}, 0x8)
freebsd11_statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r1=>0x0})
__semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=&(0x7f0000000240)={{0x0, 0x0, 0x0, <r2=>0x0}})
socket$inet6_udp(0x1c, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0x1c, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0x1c, 0x1c, 0x1, 0x593974d6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c)
fchown(r0, r1, r2)

986.220325ms ago: executing program 0 (id=69):
r0 = socket(0x1c, 0x1, 0x0)
r1 = kqueue()
kevent(r1, 0x0, 0x0, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000000c0)={0x7, 0xffffffffffffffff})
r2 = socket$inet6_udp(0x1c, 0x2, 0x0)
r3 = getppid()
fcntl$setown(r2, 0x6, r3)
fcntl$setown(r2, 0x6, 0xffffffffffffffff)
setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000240), 0x4)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2)
r5 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
r6 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0)
mlockall(0x0)
r7 = socket(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2, @broadcast}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="163efa099515542b80f11c87b95c878ac51e396cd288afbdbafd6b7fc03755a9e9cbe255cb9ace877e61bf94b04c76cff2e6931c3de4f84d82a011", @ANYRES64=r7, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES32=r5, @ANYRES32, @ANYRES16=r6])
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x20100, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2001a, r6, 0x1)
r8 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
socket(0x2, 0x1, 0x0)
r9 = kqueue()
kevent(r9, &(0x7f00000001c0)=[{0x3, 0xffffffffffffffff, 0x21, 0xffffff7f, 0x4000000000000, 0x0, [0x200, 0x0, 0x0, 0xb8]}], 0x1, &(0x7f0000000300)=[{}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x19, 0x0, 0x0)
shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x2000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
fchflags(r5, 0x40008)
sync()
sync()
openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0)

816.557779ms ago: executing program 1 (id=70):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x200, 0x26)
open(&(0x7f0000000180)='./file0/file0\x00', 0x7843d88b80d1cecd, 0x100)
lgetfh(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080))
mprotect(&(0x7f000040d000/0x3000)=nil, 0x3000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f00000000c0), 0x4)
bindat$unix(r0, r0, &(0x7f0000000000)=@file={0xa, 0x0, './file0\x00'}, 0xa)

811.707497ms ago: executing program 1 (id=71):
openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r1 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
shmdt(r1)
ktimer_create(0x0, &(0x7f0000000700)={0x3, 0x1d, @sigval_ptr=0x5, @spare=[0x7, 0xf81, 0x1f2a9c89, 0xf54d, 0x800, 0x0, 0x0, 0x453f]}, &(0x7f0000000400))
r2 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fc000000200000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x2, 0x8}}}}}}})
ioctl$MDIOCATTACH(r2, 0xc1c06d00, &(0x7f0000000780)={0xf, 0x7, 0x0, &(0x7f0000000180)='./file0\x00', 0x800000008, 0x4, 0xfffffffd, 0xa, 0x0, 0xa7, &(0x7f00000002c0)='\xc9\xedC\xc4\xd5#v!\x02\xc4\x19\'\xe5Td\xb9\xa9\xe3\xb9\xe2\xc6\xa7Q\xcd&\x86\xc4t\xce\x17\x9e\b/n\xdf\xae\x1c\xca\xb3\x83\xb2z\"P\"(\x85\x9a\xd8&Ko\xc7\x1b\x12\xf69#PT&\x9b\x87\xd4\xb7yY\xab -\xf8\xc4m\x14\x8d\xa6\x80\x04y\x10<\x1f\xb9\xaa.AQK\xc3\xba\x8a\xf4\x81\x8d\xdc\xebaW\xca|\xec\xa83ft\v7K+>\xfc\xf2\xc7\xb4S\a\x0e\x1a\xe1\x8b\b', [0x18, 0x6, 0x8, 0x4, 0x4, 0x4, 0x91e, 0xf, 0x6, 0xa, 0x8, 0x7, 0x5, 0x7, 0x1, 0xfffffff3, 0x9, 0xffff3382, 0x8000007, 0x0, 0x401, 0x9, 0xcde, 0x6, 0xfffffff8, 0x7, 0x7, 0x0, 0x5, 0x5ba, 0x7, 0xffbffffa, 0x5, 0x9, 0x3d5532c1, 0x6, 0xfffeffff, 0x8000, 0x2, 0x1, 0x7, 0x0, 0x0, 0x3, 0x271f, 0x3, 0x6, 0x80000003, 0xac5e, 0x2, 0xfff7fff7, 0x6ddbd7a2, 0x4, 0x300, 0xb, 0x8, 0x86, 0x9, 0x20, 0x7, 0x8001, 0x9, 0x5, 0x2, 0x6, 0x4, 0x10001, 0xfffffff5, 0x0, 0x80, 0x6, 0x7, 0xff, 0x0, 0x2, 0x9, 0x388d, 0xfffffffc, 0x3, 0x0, 0x3, 0x40, 0x80000001, 0xe2e, 0x5, 0xed, 0x10000, 0xc, 0xfffffffe, 0xfb, 0x1, 0xe2, 0x7ffffffa, 0x5, 0xc0b0, 0x81]})
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x31, &(0x7f0000000040)={0x11}, 0x8)
sendto$inet6(r3, &(0x7f0000002700)="6a3364f80c0444", 0x7, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r4 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x47, &(0x7f0000000200)=0x3, 0x4)
ioctl$BIOCSETFNR(0xffffffffffffff9c, 0x80104282, 0xfffffffffffffffe)
connect$inet(r4, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10)
cap_rights_limit(0xffffffffffffffff, 0xffffffffffffffff)
r5 = kqueue()
freebsd11_kevent(r5, &(0x7f0000001a40)=[{0x3, 0xfffffffffffffff8, 0x81, 0x20, 0x9, 0x5}], 0x1, &(0x7f0000001ac0)=[{}], 0x1, 0x0)
bind$inet6(0xffffffffffffff9c, &(0x7f0000000280)={0x1c, 0x1c, 0x2, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c)
r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2(&(0x7f0000000140), 0x100000)
ioctl$MDIOCATTACH(r6, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x2, 0xfffffffe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0xfffffffb, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x9]})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000240)=0xfffffffe, 0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

306.168159ms ago: executing program 3 (id=72):
r0 = kqueue()
kevent(r0, &(0x7f0000000100)=[{0x0, 0xfffffffffffffff9, 0xb, 0x8, 0xe8c2, 0x0, [0x0, 0x10000]}], 0x1, 0x0, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
chdir(&(0x7f00000001c0)='./file1\x00')
bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0})
sysarch$I386_SET_LDT(0x1, &(0x7f0000000080)={0x5})
sigaction(0x14, &(0x7f0000000040)={0x0, 0x20, {[0x2, 0xffff, 0x4, 0x93b3]}}, &(0x7f00000000c0)={0x0})
sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0)
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
extattr_get_file(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0, &(0x7f00000013c0)=""/4096, 0x1000)
mkdirat(r5, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlinkat(&(0x7f0000000700)='./file0\x00', r5, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x100)
renameat(r6, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000180)='./file1\x00')
linkat(r6, &(0x7f0000000040)='./file1\x00', r6, &(0x7f0000000080)='./file0\x00', 0x0)
sendto$inet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r7, &(0x7f0000000140)={0x10, 0x2, 0x0, @loopback}, 0x10)
aio_read(&(0x7f0000000380)={r7, 0x3, 0x0, 0x0, [], 0x0, 0x0, 0x9, {0x40000, 0x3, 0x0}, {0x0, 0x0, @sigval_int=0x65, @ke_flags}})
sendmsg$unix(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r7, @ANYRES64=r4, @ANYRES64=r3, @ANYRES16=r7, @ANYRESOCT=r2, @ANYRES32=r6, @ANYRESDEC=0x0], 0x100, 0x20001}, 0x20180)
setresgid(0xee00, 0xee01, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)

0s ago: executing program 32 (id=65):
r0 = vfork()
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast1}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x2, @mcast1}, 0x1c)
sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10}], 0x10}, 0x0)
r2 = getpid()
sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b", 0x3}], 0x1, 0x0, 0x0, 0x81}, 0x0)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
procctl$PROC_REAP_KILL(0x0, r0, 0x6, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x1, r2})
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000680))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts.
Expensive callout(9) function: 0xffffffff8425d3e0(0xfffffe0007fe36f8) 0.018862155 s
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7d800
vnode_pager_putpages: zero-length write at 0 resid 131072
0xfffffe006eb72a50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff835076c0
    usecount 5, writecount 3, refcount 35 seqc users 0
    hold count flags ()
    flags (VIRF_PGREAD|VMP_LAZYLIST)
    v_object 0xfffffe0054912000 ref 1 pages 264 cleanbuf 32 dirtybuf 1
    lock type ufs: EXCL by thread 0xfffffe005492b740 (pid 882, syz-executor, tid 100171)
	nlink=1, effnlink=1, size=1048576, extsize 0
	generation=842f0389, uid=0, gid=0, flags=0x40008<modified>
	ino 71, on dev gpt/rootfs
ip6_ctloutput: mbuf limit hit

FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0)

login: pid 736 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 872 (rtsol), jid 0, uid 0: exited on signal 11 (core dumped)
pid 747 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 335 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
pid 741 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 871 (rtsol), jid 0, uid 0: exited on signal 11 (core dumped)
pid 944 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore
pid 740 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 873 (rtsol), jid 0, uid 0: exited on signal 11 (core dumped)
pid 742 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 745 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 746 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
md0: truncating fractional last sector by 1 bytes
pid 743 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 744 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 865 (rtsol), jid 0, uid 0: exited on signal 11 (no core dump - other error)
ktrace write failed, errno 27, tracing stopped for pid 771
ktrace write failed, errno 27, tracing stopped for pid 781
SYZFAIL: SIGSEGV
Connection to 10.128.0.8 closed by remote host.
pid 949 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 958 (syz-executor), tap1: tun/tap protocol violation, non-controlling process closed last.
ktrace write failed, errno 27, tracing stopped for pid 759
pid 759 (sshd), jid 0, uid 0: exited on signal 11 (no core dump - bad address)
ifaddr cache = 0xfffffe006e585a80 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe005893b000
ktrace write failed, errno 27, tracing stopped for pid 737
pid 737 (sleep), jid 0, uid 0: exited on signal 11 (no core dump - other error)
ktrace write failed, errno 27, tracing stopped for pid 761
ifaddr cache = 0xfffffe006eac5c00 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe005893a800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe005893b000
tap0: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe005893b000
if_delmulti_locked: detaching ifnet instance 0xfffffe005893a800
if_delmulti_locked: detaching ifnet instance 0xfffffe005893a800
pid 963 (syz-executor), tap3: tun/tap protocol violation, non-controlling process closed last.
ifaddr cache = 0xfffffe006eac5900 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b800
tap3: link state changed to DOWN
pid 771 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
2025-04-18T23:50:06.836259+00:00 ci-freebsd-main-2.us-central1-b.c.syzkaller.internal init 965 - - fatal signal: Segmentation fault
pid 938 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 964 (syz-executor), jid 0, uid 0: exited on signal 11 (core dumped)
pid 781 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 946 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 761 (csh), jid 0, uid 0: exited on signal 11 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b800
pid 953 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 956 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 933 (getty), jid 0, uid 0: exited on signal 11 (core dumped)

FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0)

login: pid 961 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe005893a800
if_delmulti_locked: detaching ifnet instance 0xfffffe005893a800
if_delmulti_locked: detaching ifnet instance 0xfffffe005893a800
pid 960 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 962 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
set $maxwidth = 0
Password:if_delmulti_locked: detaching ifnet instance 0xfffffe005893b000
if_delmulti_locked: detaching ifnet instance 0xfffffe005893b000
if_delmulti_locked: detaching ifnet instance 0xfffffe005893b000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b800

Login incorrect
login: show proc
Password:
Login incorrect
login: show all locks
Password:
Login incorrect
login: show uma
Password: