last executing test programs:

31.797419358s ago: executing program 1 (id=1962):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x6, &(0x7f0000000100)={@loopback, @local={0xac, 0x14, 0x0}}, 0xc)

31.785968874s ago: executing program 1 (id=1964):
r0 = socket$inet6(0x1c, 0x1, 0x0)
setuid(0xffffffffffffffff)
setsockopt(r0, 0x29, 0x40, 0x0, 0x0)

31.766185689s ago: executing program 1 (id=1965):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket(0x1c, 0x3, 0x40)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000280)=0x7f, 0x4)

31.758123323s ago: executing program 1 (id=1966):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000040)={@local={0xfe, 0x80, '\x00', 0x0}}, 0x14)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c}, 0x1c)

31.748922146s ago: executing program 1 (id=1968):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0)
freebsd11_mknod(&(0x7f0000000080)='./file1\x00', 0x1000, 0x0)

31.72716619s ago: executing program 1 (id=1970):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000))
pread(r0, &(0x7f0000000340)=""/1, 0x1, 0x0)

31.722021047s ago: executing program 32 (id=1970):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000))
pread(r0, &(0x7f0000000340)=""/1, 0x1, 0x0)

6.32423882s ago: executing program 3 (id=2791):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1]}})
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0)
copy_file_range(r1, &(0x7f0000000000)=0x1000000000, r1, 0x0, 0x4, 0x0)

6.302101213s ago: executing program 3 (id=2792):
r0 = socket(0x1c, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0)

6.273596725s ago: executing program 3 (id=2794):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
shutdown(r0, 0x0)
sendmsg(r1, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
connect$unix(r1, &(0x7f0000000040)=@file={0xa, 0x0, './file0\x00'}, 0xa)

6.239987725s ago: executing program 3 (id=2797):
r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1, 0x3)
close(r0)

5.970048477s ago: executing program 3 (id=2801):
r0 = fork()
sigqueue(r0, 0xf, @sival_int=0x8000)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
fcntl$setown(r1, 0x6, r0)

5.969457202s ago: executing program 3 (id=2809):
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)
mknodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xe004, 0x0)
chown(&(0x7f0000000240)='./file0/file0/file0\x00', 0x0, 0x0)

1.236027434s ago: executing program 2 (id=2897):
kqueue()
r0 = kqueue()
kevent(r0, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, [0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0)
lio_listio(0x0, 0x0, 0x0, &(0x7f00000013c0)={0x3, 0x3, @sigval_int, @thr={0x0, 0x0}})

1.129380284s ago: executing program 2 (id=2900):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r0, 0x6, 0x47a, &(0x7f0000000100)=0x10000000, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="47b627c4064b", @local, [], {@arp={0x806, @generic={0x20, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @random="e451a721e29f", "11d14f2e73cbea8f1c7a77aa301f3647"}}}})

1.10234598s ago: executing program 2 (id=2901):
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140))
extattr_delete_link(&(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c')

1.055249174s ago: executing program 4 (id=2903):
kmq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @sigval_ptr, @spare=[0x0, 0x0, 0x10001]})
r0 = openat$bpf(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$lock(r1, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

1.01951361s ago: executing program 2 (id=2904):
setreuid(0xee00, 0x0)
r0 = fork()
setresuid(0x0, 0x0, 0x0)
sigqueue(r0, 0x11, @sival_int=0x3)

974.768472ms ago: executing program 4 (id=2906):
freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x10611, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400001803c1, 0x0)
rfork(0x3060)

876.199987ms ago: executing program 2 (id=2909):
kmq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @sigval_ptr, @spare=[0x0, 0x0, 0x10001]})
r0 = openat$bpf(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$lock(r1, 0xc, &(0x7f0000000000)={0x3, 0x2, 0x400, 0x6, 0xffffffffffffffff})

801.45779ms ago: executing program 2 (id=2911):
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0xfffffffffffffc54)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)

666.765219ms ago: executing program 0 (id=2917):
rfork(0x50)
r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
close(r0)

453.938181ms ago: executing program 0 (id=2918):
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)

442.963047ms ago: executing program 0 (id=2919):
freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000280)='./file0\x00', 0x4, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffe, 0x80c3}], 0x1, 0x0, 0x0, 0x0)

125.18294ms ago: executing program 4 (id=2920):
rfork(0x50)
rfork(0x90010)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(r0)

124.536903ms ago: executing program 0 (id=2927):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x30001)
extattr_set_file(&(0x7f00000001c0)='./file0\x00', 0x2, &(0x7f0000000200)='-\x00', 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x3)

81.282718ms ago: executing program 4 (id=2921):
mkdir(&(0x7f0000000040)='./file2\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file2/file0/file0\x00')

50.39908ms ago: executing program 0 (id=2922):
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140))
extattr_delete_link(&(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c')

50.321164ms ago: executing program 4 (id=2923):
open$dir(&(0x7f00000001c0)='./file1\x00', 0x8200, 0x182b343dfaf80b52)
truncate(&(0x7f0000000340)='./file1\x00', 0x601)
setuid(0xee01)
execve(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280)=[&(0x7f00000001c0)], 0x0)

22.007418ms ago: executing program 4 (id=2924):
r0 = open$dir(&(0x7f0000000440)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
__getcwd(&(0x7f0000000340)=""/200, 0xc8)

0s ago: executing program 0 (id=2925):
setresuid(0x0, 0xee01, 0x0)
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000000c0), 0x4)
bind(r0, &(0x7f0000000840)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts.
UDP6: M_MCAST is set in a unicast packet.
Nov 19 15:45:34 ci-freebsd-i386-4 kernel: nd6_na_input: duplicate IP6 address fe80:5::3aa
Nov 19 15:45:34 ci-freebsd-i386-4 kernel: attempted source route from 255.255.255.255 to 224.0.0.2
md1: truncating fractional last sector by 183 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800
md2: truncating fractional last sector by 183 bytes
md3: truncating fractional last sector by 183 bytes
md4: truncating fractional last sector by 183 bytes
md5: truncating fractional last sector by 183 bytes
md6: truncating fractional last sector by 183 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0058781800
md8: truncating fractional last sector by 4791 bytes
md9: truncating fractional last sector by 1024 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000
Out of ktrace request objects.
if_delmulti_locked: detaching ifnet instance 0xfffffe0058783000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058782000
ip6_pcbopts: all specified options are cleared.
if_delmulti_locked: detaching ifnet instance 0xfffffe0058781800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800
ip6_pcbopts: all specified options are cleared.
md11: truncating fractional last sector by 508 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000
if_delmulti_locked: detaching ifnet instance 0xfffffe00079f8000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058783800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058783000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058781800
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


FreeBSD/amd64 (ci-freebsd-i386-4.us-central1-b.c.syzkaller.internal) (ttyu0)

login: set $lines = 0
Password:
Login incorrect
login: show registers
Password:
Login incorrect
login: ps
Jan  1 00:05:22 ci-freebsd-i386-4 login[748]: 2 LOGIN FAILURES ON ttyu0
Password:
Login incorrect
login: show malloc
Password:
Login incorrect