last executing test programs:

12.84182315s ago: executing program 1 (id=137):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1010)
setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x100000003, {0x9, 0x8}}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x469, &(0x7f0000000040)={0x6, "50afe2c27f64c6559500ab4a3cff00"}, 0x14)
setreuid(0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x17, 0x1e, 0x20, &(0x7f00000001c0)="0000ac4103f48e8d7b066db952c14a4908afe5de0300000000000000743c7eaa", 0x0, 0x0, 0x1000, 0x7d86699a, [0x0, 0x9, 0x7f]})
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f00000000c0)="d7", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "716cffffffffffff"}, 0x40)
sendmsg$unix(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000015c0)=ANY=[], 0xe0, 0x20100}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000380)=[{0x10c8, 0xffffffffffffffff, 0x4007, 0x0, 0xef4, 0x0, [0x3]}, {0x5d2, 0xfffffffffffffff3, 0x401c, 0x4, 0x69, 0x1, [0x7fff, 0x0, 0x1, 0x7]}], 0x2, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x10000, 0x0, 0xfc, 0x0)
rfork(0x3060)
socket$inet6_sctp(0x1c, 0x0, 0x84)
r6 = open$dir(&(0x7f0000000280)='./file0/file0/..\x00', 0x40000, 0x100)
openat(r6, &(0x7f0000000340)='./file0\x00', 0x400000, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0/file0/..\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x38, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}]}}}}}}})
thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000006c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "d99ffd", 0x4, 0xf, 0x0, @loopback, @loopback={0x0, 0xfffffffffffffffe}}}}}}}})

11.14013125s ago: executing program 0 (id=421):
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="218b3d9d1e6a27b52718967b0b0a00", 0xf}], 0x1, 0xffff)
r1 = socket(0x1c, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)
cpuset_setaffinity(0x3, 0x7, 0x2, 0x8, &(0x7f0000000200)={[0x200002]})
socketpair(0x1, 0x1, 0x2, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f00000002c0)=0x4, 0x4)
r3 = vfork()
procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0)
r4 = socket(0x1c, 0x1, 0x0)
listen(r4, 0x7f)
sendmsg$inet_sctp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80)
lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r3})
wait4(r3, 0x0, 0x2, 0x0)
sendto(r2, &(0x7f0000000300)="0814883b79", 0x5, 0x100, 0x0, 0x0)
rfork(0x86000)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c)
sendfile(r0, r1, 0x6, 0x0, 0x0, 0x0, 0x15)
chflags(&(0x7f0000000040)='./file0/file0\x00', 0x200)

10.287565173s ago: executing program 1 (id=137):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1010)
setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x100000003, {0x9, 0x8}}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x469, &(0x7f0000000040)={0x6, "50afe2c27f64c6559500ab4a3cff00"}, 0x14)
setreuid(0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x17, 0x1e, 0x20, &(0x7f00000001c0)="0000ac4103f48e8d7b066db952c14a4908afe5de0300000000000000743c7eaa", 0x0, 0x0, 0x1000, 0x7d86699a, [0x0, 0x9, 0x7f]})
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f00000000c0)="d7", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "716cffffffffffff"}, 0x40)
sendmsg$unix(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000015c0)=ANY=[], 0xe0, 0x20100}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000380)=[{0x10c8, 0xffffffffffffffff, 0x4007, 0x0, 0xef4, 0x0, [0x3]}, {0x5d2, 0xfffffffffffffff3, 0x401c, 0x4, 0x69, 0x1, [0x7fff, 0x0, 0x1, 0x7]}], 0x2, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x10000, 0x0, 0xfc, 0x0)
rfork(0x3060)
socket$inet6_sctp(0x1c, 0x0, 0x84)
r6 = open$dir(&(0x7f0000000280)='./file0/file0/..\x00', 0x40000, 0x100)
openat(r6, &(0x7f0000000340)='./file0\x00', 0x400000, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0/file0/..\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x38, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}]}}}}}}})
thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000006c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "d99ffd", 0x4, 0xf, 0x0, @loopback, @loopback={0x0, 0xfffffffffffffffe}}}}}}}})

10.217825884s ago: executing program 0 (id=427):
r0 = socket(0xc, 0x5, 0xff)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f00000000c0)={'bbr\x00'}, 0x24)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0)
posix_fadvise(r1, 0x5, 0x0, 0x2)
posix_fadvise(r1, 0x140004, 0xc, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x1ff, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c)
sendto(r0, &(0x7f0000000500)="b9d5cf29033fda9f0d47f14a5babefe85e2f1027c0bb21378a3d78aef12d04ee87a68f4323d818a91259db9fd1aaf026a235647bf27a0443ed4b8192e7b591b1592001d1632f2f74b1cd1043c1f242135d868693021711dbbf2091", 0x5b, 0x100, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x2006}, 0x1c)
ioctl$DIOCRADDTABLES(0xffffffffffffffff, 0xc450443d, &(0x7f0000000200)={{"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", "45c7a3903b0e929ef2844c77c9f9b8d30102a25cd90935ea0777a101eb6784c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3})
mount(&(0x7f0000000740)='ext2fs\x00', 0x0, 0x4080014, &(0x7f0000000100)="ade8425168c9b0ebae21f7633aca48509e9974900600000000000000a586d90a306cb74264620500000032de6c39d4332680bcfd0f4d702e0d69a62e7d5efef18f8b9f07034c39f8a2e9fa885e1d06c271aa3c8f3bf6f03a6c2d4ea36ee70b34fb124407e7b5adaffc6f41c2149b21129e423a20311923690842afcdc580800d716f3eee2b8575deb997caba02986de353030e87e9e8d3393d8b8c8ae242bb86e1709443f6e8fb6f940f1c")
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fork()
wait4(r2, 0x0, 0x1, &(0x7f00000000c0))
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2)
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x308202, 0x0)
extattr_set_fd(r3, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000780)={@random="84ff00b11587", @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x60, 0x66, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x17, 0x5, [@loopback, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @rand_addr=0x3ff, @multicast2]}]}}, @icmp=@redirect={0x5, 0x3, 0x0, @empty=0x7e, {0xb, 0x4, 0x2, 0x32, 0x6, 0x67, 0x3, 0x4, 0x32, 0x4, @local={0xac, 0x14, 0x0}, @broadcast, {[@rr={0x7, 0xf, 0xfe, [@rand_addr=0x3, @rand_addr=0x1, @local={0xac, 0x14, 0x0}]}, @end, @noop, @lsrr={0x83, 0x3, 0xfb}, @noop]}}}}}}})
setsockopt$inet_mreqsrc(r3, 0x0, 0x47, 0x0, 0x4e)
setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f0000000040)={@loopback, @rand_addr, @broadcast}, 0xc)
r4 = open$dir(0x0, 0xa, 0x0)
procctl$PROC_PROTMAX_STATUS(0x1, r2, 0x10, &(0x7f00000006c0))
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1)
ioctl$EVIOCGPHYS(r1, 0x40004507)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x33, &(0x7f00000001c0)={0x20, 0x2, 0x0, 0x3, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}]}, 0x18)
rfork(0x1000)

8.330293133s ago: executing program 0 (id=428):
extattr_delete_file(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000040)='&-\x83)\x00')
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x100)
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x800) (async)
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x800)
chflagsat(r0, &(0x7f0000000100)='./file0\x00', 0x11008, 0x200) (async)
chflagsat(r0, &(0x7f0000000100)='./file0\x00', 0x11008, 0x200)
r1 = vfork()
fcntl$lock(r0, 0xd, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xffffffff, r1})
fcntl$lock(r0, 0xd, &(0x7f0000000180)={0x2, 0x1, 0x2, 0x0, r1})
socket(0x1c, 0x2, 0x5) (async)
r2 = socket(0x1c, 0x2, 0x5)
freebsd11_lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)) (async)
freebsd11_lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200))
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet6_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x29, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) (async)
getsockopt$inet6_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x29, &(0x7f0000000280)={<r4=>0x0, 0x8}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x107, &(0x7f0000000300)={<r5=>r4, 0x1a6, 0x1, 0x8000000000000001, 0x6}, &(0x7f0000000340)=0x18)
close(r0)
r6 = socket$bt_rfcomm(0x24, 0x1, 0x88)
connectat(r0, r6, &(0x7f0000000380)=@in6={0x1c, 0x1c, 0x2, 0x2, @mcast1, 0x1}, 0x1c)
r7 = openat$evdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$EVIOCGBIT(r7, 0x40004534)
sendto(r3, &(0x7f0000000400)="0008a23393725aff9ad3348b221baa68efdca4fa40e4fa3307a248dda85b8d41d68e37cddb7fae67072a1230bc9040b2d72444f029627e5f5edf3d51d6b38ebddc63be27fa6043894deb6aba87355aa0ee4a894a42f029da8c5f8cf74fec937797250dfbb05273a648c3e9c92d4a1ad12d33c2a889912808331e0a2f679350d2ea84eb38a47b30a07df947c8c1b8150450b71dbf4293295bea44eca4e8a7dc84a7ab66eacb263befb421c495", 0xac, 0x0, &(0x7f00000004c0)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000500)={0xf7, 0x8, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0xd, 0x7f}, 0xb)
posix_fallocate(r6, 0x2, 0x5) (async)
posix_fallocate(r6, 0x2, 0x5)
symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0/file0\x00') (async)
symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0/file0\x00')
sync()
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0)
ioctl$DIOCRTSTADDRS(r8, 0xc4504449, &(0x7f0000000640)={{"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", "16dd9eb68c846438fe2a14692708fa930a67dcc7c2199b065a11a83e64985403", 0x3, 0x6}, &(0x7f0000000600)="48f3aac82bfcff00572bcea1ff24953ca155b75d3f44fc7e027654023596aa45e267ff09cca7a558fb596eae4943b092793cff0c49733db8d5ef98", 0x7, 0x1, 0x6, 0x2, 0x8, 0xffffffffffffffee, 0x3, 0x48})
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000ac0)="cbfe1a75", 0x4)
sync() (async)
sync()
setsockopt$inet6_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000b00)={r5, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x18, &(0x7f0000000b40)=0x10001, 0x4)
mkdir(&(0x7f0000000b80)='./file0/file0\x00', 0x80)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x902, &(0x7f0000000c40), 0x4) (async)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x902, &(0x7f0000000c40), 0x4)

7.975642655s ago: executing program 1 (id=137):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1010)
setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x100000003, {0x9, 0x8}}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x469, &(0x7f0000000040)={0x6, "50afe2c27f64c6559500ab4a3cff00"}, 0x14)
setreuid(0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x17, 0x1e, 0x20, &(0x7f00000001c0)="0000ac4103f48e8d7b066db952c14a4908afe5de0300000000000000743c7eaa", 0x0, 0x0, 0x1000, 0x7d86699a, [0x0, 0x9, 0x7f]})
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f00000000c0)="d7", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "716cffffffffffff"}, 0x40)
sendmsg$unix(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000015c0)=ANY=[], 0xe0, 0x20100}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000380)=[{0x10c8, 0xffffffffffffffff, 0x4007, 0x0, 0xef4, 0x0, [0x3]}, {0x5d2, 0xfffffffffffffff3, 0x401c, 0x4, 0x69, 0x1, [0x7fff, 0x0, 0x1, 0x7]}], 0x2, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x10000, 0x0, 0xfc, 0x0)
rfork(0x3060)
socket$inet6_sctp(0x1c, 0x0, 0x84)
r6 = open$dir(&(0x7f0000000280)='./file0/file0/..\x00', 0x40000, 0x100)
openat(r6, &(0x7f0000000340)='./file0\x00', 0x400000, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0/file0/..\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x38, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}]}}}}}}})
thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000006c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "d99ffd", 0x4, 0xf, 0x0, @loopback, @loopback={0x0, 0xfffffffffffffffe}}}}}}}})

6.077775969s ago: executing program 0 (id=434):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x2, @rand_addr=0x5}, 0x10)
sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffe5})
r0 = socket(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10)
copy_file_range(r0, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, 0x0, 0xb2, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x800)
connect$inet(r0, &(0x7f0000001680)={0xffffffffffffff2e, 0x2, 0x0, @rand_addr=0x4}, 0x10)
listen(r0, 0x4)
syz_emit_ethernet(0x66, &(0x7f00000025c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ae029d00303afffe8000000000000000000000000000aaff02000000000000000000000000000101039078060000ba00ad526c08d9150100000000000000000000000000000000bf7be6b9fa06f549927f5637d5bf4695"])
vfork()
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xb32, 0x1000300010005})
aio_return(0x0)
socket(0x1c, 0x1, 0x0)
rfork(0x83000)
r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
posix_fadvise(r2, 0x5, 0x80000000, 0x5)
r3 = kqueue()
kevent(r3, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0)
madvise(&(0x7f00000a1000/0x2000)=nil, 0x2000, 0x6)
mincore(&(0x7f0000156000/0xc00000)=nil, 0xc00000, &(0x7f0000001640)=""/4096)
symlink(0x0, 0x0)
r4 = socket(0x1, 0x1, 0xa)
cpuset_getaffinity(0x2, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000))
r5 = kqueue()
accept$unix(r4, 0x0, &(0x7f00000002c0))
kevent(r5, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0)

5.254292131s ago: executing program 1 (id=137):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1010)
setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x100000003, {0x9, 0x8}}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x469, &(0x7f0000000040)={0x6, "50afe2c27f64c6559500ab4a3cff00"}, 0x14)
setreuid(0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x17, 0x1e, 0x20, &(0x7f00000001c0)="0000ac4103f48e8d7b066db952c14a4908afe5de0300000000000000743c7eaa", 0x0, 0x0, 0x1000, 0x7d86699a, [0x0, 0x9, 0x7f]})
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f00000000c0)="d7", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "716cffffffffffff"}, 0x40)
sendmsg$unix(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000015c0)=ANY=[], 0xe0, 0x20100}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000380)=[{0x10c8, 0xffffffffffffffff, 0x4007, 0x0, 0xef4, 0x0, [0x3]}, {0x5d2, 0xfffffffffffffff3, 0x401c, 0x4, 0x69, 0x1, [0x7fff, 0x0, 0x1, 0x7]}], 0x2, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x10000, 0x0, 0xfc, 0x0)
rfork(0x3060)
socket$inet6_sctp(0x1c, 0x0, 0x84)
r6 = open$dir(&(0x7f0000000280)='./file0/file0/..\x00', 0x40000, 0x100)
openat(r6, &(0x7f0000000340)='./file0\x00', 0x400000, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0/file0/..\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x38, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}]}}}}}}})
thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000006c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "d99ffd", 0x4, 0xf, 0x0, @loopback, @loopback={0x0, 0xfffffffffffffffe}}}}}}}})

3.243984267s ago: executing program 0 (id=438):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000080)={0x10, 0x25, 0x1, &(0x7f0000000740)='$', 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x7d86619b, [0x0, 0xa, 0xc, 0xfffffffd]})
kevent(0xffffffffffffffff, &(0x7f0000000540)=[{0xc8, 0xfffffffffffffffe, 0x4007, 0x0, 0x1, 0x0, [0x3, 0x7fffffffffffffff]}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
aio_write(&(0x7f00000023c0)={r1, 0x7, 0x0, 0x0, [0x7, 0xa], 0x4, 0x18, 0x7, {0x0, 0xcf, 0x0}, {0x3, 0x1a, @sival_int=0x101, @thr={&(0x7f0000001380)="c4a101d12d280f00000f62347ad8c9660f3acec20026660f5d789c673e643ef341a4660f78c3e66166460f57420c660f7c75f1c423894205c50730bb65", 0x0}}})
r2 = kqueue()
mkdir(&(0x7f0000000100)='./file0\x00', 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x402, &(0x7f0000000100)="5abea7c2", 0x4)
kevent(r2, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffc}], 0x1, &(0x7f00000004c0), 0x0, 0x0)
kevent(r2, 0x0, 0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0)

2.876033557s ago: executing program 1 (id=137):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1010)
setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x100000003, {0x9, 0x8}}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x469, &(0x7f0000000040)={0x6, "50afe2c27f64c6559500ab4a3cff00"}, 0x14)
setreuid(0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x17, 0x1e, 0x20, &(0x7f00000001c0)="0000ac4103f48e8d7b066db952c14a4908afe5de0300000000000000743c7eaa", 0x0, 0x0, 0x1000, 0x7d86699a, [0x0, 0x9, 0x7f]})
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f00000000c0)="d7", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "716cffffffffffff"}, 0x40)
sendmsg$unix(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000015c0)=ANY=[], 0xe0, 0x20100}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000380)=[{0x10c8, 0xffffffffffffffff, 0x4007, 0x0, 0xef4, 0x0, [0x3]}, {0x5d2, 0xfffffffffffffff3, 0x401c, 0x4, 0x69, 0x1, [0x7fff, 0x0, 0x1, 0x7]}], 0x2, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x10000, 0x0, 0xfc, 0x0)
rfork(0x3060)
socket$inet6_sctp(0x1c, 0x0, 0x84)
r6 = open$dir(&(0x7f0000000280)='./file0/file0/..\x00', 0x40000, 0x100)
openat(r6, &(0x7f0000000340)='./file0\x00', 0x400000, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0/file0/..\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x38, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}]}}}}}}})
thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000006c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "d99ffd", 0x4, 0xf, 0x0, @loopback, @loopback={0x0, 0xfffffffffffffffe}}}}}}}})

768.090465ms ago: executing program 0 (id=443):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r2 = __specialfd$eventfd(0x1, &(0x7f00000003c0)={0x7, 0x5}, 0x8)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r3, 0x6, 0x27, &(0x7f0000000140)={&(0x7f0000000080)="00b2c06df480cfe19f0da4833728dc14", 0x0, &(0x7f0000000040)="cf", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "00ff03ff8e3500"}, 0x40)
sendto$inet(r3, &(0x7f0000000000)="727f4c98e6e3b6d62e469a3ba2e66dba9106d9b78a10424b958051429e1dce150e1970605333c5f442aa7ab1e26f9aecabf014a76c0000e80000000000", 0x100a4, 0x185, &(0x7f0000000280)={0xfffffffffffffeac, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10)
r4 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connectat(r3, r2, &(0x7f0000000340)=@un=@file={0xa, 0x1, './file1\x00'}, 0xa)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
lseek(r5, 0xfffffffffffffffd, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
__semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000001a40)=&(0x7f0000001a00)={{0x0, 0x0, 0x0, <r6=>0x0}})
fhstat(&(0x7f0000001a80)={{[0x0, 0x2]}, {0x6, 0x7, "35c0d40b00"}}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getresgid(&(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40)=<r8=>0x0)
fstatat(r4, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x8000)
freebsd11_stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
getresgid(&(0x7f0000001e80), &(0x7f0000001ec0)=<r11=>0x0, &(0x7f0000001f00))
getgroups(0x5, &(0x7f0000001f40)=[<r12=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0])
r13 = fork()
freebsd11_lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r14=>0x0, <r15=>0x0})
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r14, r15, 0x2c, 0x4, 0x0, 0xa}, 0xc13, 0x8, 0x1, 0xffff, 0x8, 0xdfbd, r13, r13})
sendmsg$unix(r2, &(0x7f0000002000)={&(0x7f00000000c0)=@file={0xa, 0x0, './file1\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="ae6eb65a46d1194b42505c5f8237e0c6352372292503f768b8db98e04b4eefaba5b027833e39062f4ea302f17fb14e6a1d0ffbba0bb5f1d10e518cf23f030f54562079f8664a791b6fb22944a42a127595f5d5a77004d4e11ed3ce04d3235fe7cb9404c66ba70e73bfdc1db92222439116f75f8695a9a5c9a1bb0acccac6986b8ec0d53e08ebac41864f8a8328bd45eee939dadac7bfd45e7185", 0x9a}, {&(0x7f00000014c0)="083fc02b634d3e9907151589ea7f7019b674df5e82c7931b03b6e9377e7aecd634743587fba259ed191be2955de53edef57b2c2bc1bc08585d94e3cc503a6aefe6c597d4130d0e33325e441d5374aa7fbe48733c1ae37f247c44b8e6c605d783f6b6a231a5b62cc14cfb8822cb9faf6b4347da8484c5198ef4834132249d00cba318ac332adb5ab4da740d4515384d60f3a14dea9e05241692c9236b956732bac13407797b7830f847209c2a3dc4002bfb2041f7dbeee5e603706473d152cb162f4243d07a55f4a4bde610f0222657b2e60be656ac1b1107119af661", 0xdc}, {&(0x7f00000001c0)="7b386ac5961a98d629685efb815dee3a6e411e80bae656953bc452401fea3c18bd61748af18a0f754fff518171b450445fa060eefd5188a18fb9676eaadb88a7e14ea953de331ebc2c5d708baf2c4abc", 0x50}], 0x4, &(0x7f0000001f80)=[@cred={0x68, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r7, r8, r9, r10, r11, 0x0, r12, r15]}], 0x68, 0x85}, 0x81)
r16 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r16, 0x29, 0x31, 0x0, 0x8)

709.446261ms ago: executing program 3 (id=445):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) (async)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
kqueue() (async)
kqueue()
socketpair(0x0, 0x4, 0x0, &(0x7f0000000040)) (async)
socketpair(0x0, 0x4, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
aio_cancel(0xffffffffffffffff, 0x0)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) (async)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000380003000000019078ac1400bbe0000001030990780000fffd450000400000000007880000e0000001000000e06cacac773109ed74"])
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000080)={@in={{0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}}, <r2=>0x0, 0x7, 0x15, 0xfffeffff, 0x4, 0xb}, &(0x7f0000000140)=0x98)
r3 = kmq_open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x190, &(0x7f0000000200)={0x100, 0x77, 0xe11a, 0x8000000000000001})
r4 = getppid()
kmq_notify(r3, &(0x7f00000003c0)={0x4, 0x1, @sigval_int=0xffff7fff, @tid=r4})
getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000300)={@in6={{0x1c, 0x1c, 0x2, 0xa, @loopback, 0x2e}}, r2, 0x7, 0x4, 0x4, 0xf, 0x1}, &(0x7f0000000180)=0x98)
socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8)
cpuset_getaffinity(0x1, 0x1, 0x186a5, 0xff99, 0x0) (async)
cpuset_getaffinity(0x1, 0x1, 0x186a5, 0xff99, 0x0)
mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0)
munlockall()

538.172359ms ago: executing program 3 (id=446):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0)
connectat(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=@un=@abs={0x8, 0x1, 0x0, 0x2}, 0x8)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
sendto$inet(r0, &(0x7f0000000340)="bb64489dc4d984d461a15f1fb34626fc0a0667c6e489df7773122023cee541835a8ae48c538864e978b7ff9243dd90a15a1c2ef1f30d9ad6edafc5190c7ba83dd7d1494147ef36852a6d3151114f509f9793f6005f2d2ea42da8fcdfb23730a93951f87452d5967cfe5f0d352475ddfa52d98e45630356dc2f430df7f4b78371c51a7a4694d57f6209d621347f383278c9f1e1bd3ac4e4c291a445be570f0a8121a43dac1af9ae873300398d511e15eba78f5d7f40bb44e608f5c21e48e1f7ec108bbd6280ec78c8f6358833fa04c4d9cc75997b58e687f8a823cbdd4e9fcc8ed13fceea719b3a1ae94daee8bc6eac80462131eea0a17dbdbe01ae00431ec0c400e07d4609ff8e7b3f79838ed2ce69863f30543a175e12435a1cee2a156e4b07914438aa195df2f2196b674d2852ef4a5d21178ed8bea73ed86340981ba3ea5fc2e26577d1ca67236f1895b3a2d086f6196f7bb569ce7cb861ffa6f168f7bd757616786f3fbd23c1daf5c0dc9eb82961ba90fe56d34b81c402260ff39862e440478b0b2fd7a2f010dcebca58fcb64a14cceaee566980dacb09892d80df8cb2af19cc7b9ffabfbc85a82472a64f92402ea347039450dcb95ea46ebda03699cae10408fe025b95f61b3602fc1d3253e2bd16bb83285125a5eb8339a23d25b89b569ee80b85bec0af477754d30e2b5167c7825072108d4017d261cc383158b5171b31189ed797edff1ded9559ff410fffa82d9b48bba5c83a784b798193375ca9b66aa0c4f37336dcc6f3b54eab5e82f14a7f9fc28c5584eb284ecc8ae9ca7d15da607cbfabdab80c76d74eae58e00e7fb610509eb9f6247cc52ef36663913465425b620c408feea2de5ac11e59378ef4c87cdedd5cf81f3596d3fa188fc2e03c84ec9f1d52df3834f97b01b853d029043f5d757cfe3d7178ddbfa205d7d4a4f421e6152b35469f0505383bda3ed02f2c4a4310ccdbcc2864e92da50425dd7f3b797f9cbc556ae659b7beb2a3e11514931dbb924e6205b172265f44faf1d5b5c4a8d7900117fed088afc1a56d2275573064487fa5454aa38240ecbd122b1e35d3886bbffc8c0a3bc84ad39b5a8a4f6da0bfab8f98de92dbd40812b0b4a1e039fb1033ebfdc8a71e9131add3ad7c98fb35762b031c1cd9fa2f85eabf929c4b2a11c2894d8a34288f9fd576fdb5475876fd5bfb916a604d5775cb77854ff176a1d280968d97a8b9859fbb3eb1823931fabba572b09c239ea231fcfb48ec34c78296850cb588f7baea114f013b4840e1b22b99a5042ef51087760d5dbb99d4f7ba89c621c2ed4ec8a495e8f65555a7a75a9b0d9161cb9503c2586704de2c43358da5a361bc7f0c99f0e93fdfee81a3dd07e1f60a7df38fa0ecaa5cdecea53b44fa55dba9c6c22505f6c14e112a9cf6a81fc99193c5e66a98d89c9238ef264cae28074a30c31e9f0506282b655e6361bd5e6377d06e544c69c49a6db9903b91241a4fa5c8a991f37489f70b0b0fcee7f5c3f611cbb7144eee4d09146a5010d2343352d45f3688dbdd8842a6d9bdcdbeeeb2f19312fb5e17753f6201a1af2e0dfc70922f749a69014d4d756261d18590017649001bde483c70f3feeb34c045b995dbb1254637a30f5a7a6925b249f34ab6b9cc1525cf41dd7ca6135f1b8c2512bef68c8b1564b008ad1dfd4e5c0b147ae277719917c07ce473446ac3dc5db8e7dc0d9df76f9da25b83a5a1b229233863d2295522813e19772bcf87bd39f77d4483198bce9627d0d2c7d5e6265e962275644839b25026c4ff977dd481f01601719b9c41b0a6bffb2c0a9dddd4cd132df67bdb724b5afd9eebc86af056d0698440e1f9d8e2138cc4be33c37c591f5c7151a5b8380a38170c97a4e6b0574f0501a39db96ccda1ccce121f77fccbbad872852a65979a53047cd37e60c92e63ebe8ecf3c23a5d530e8869533d8a359cfb3a7e7b9d2f3dbe0c79fcdd22558813157365c9fc867dec18a7f05a0125acbee23cddb5cb52dd2963537d0a8aff53e445e53e74c87c5563af03696d1b7b8a5cd0d37d89bb52881d7fc5fd6023e975d3abfd8a1b", 0x5bd, 0x20184, &(0x7f0000000000)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10)

432.768323ms ago: executing program 3 (id=449):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x52, &(0x7f00000000c0)={0x4, {{0x1c, 0x1c, 0x0, 0x4, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="19fdb123c0a8a841280b53f7ac8be800"}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x0, @mcast2}}, {{0x1c, 0x1c, 0x2, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x51, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0xfffffffe, @mcast2}}, {{0x1c, 0x1c, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
setreuid(0x0, 0xee01)
futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x5}, {0x8, 0x2}})
flock(r0, 0xc)

432.184569ms ago: executing program 2 (id=450):
__semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=&(0x7f0000000000)={{0x0, <r0=>0x0, 0x0, <r1=>0x0}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
listen(r2, 0x8a0) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r3, &(0x7f00000000c0)="5ea4a90360cfe93592237591837f22badebc0e21daedafb67651d8d53196112b18bbbbfe4672f4996f3f8445050f26dcae82e7ab253839c1ec8e2704b0c0658a1ac347e030f8149b8d26a53c604b19d3656d2f6d8082cf2216724802124739ea0d36035e703d7c5d332c95a27d789c60712ef16bce1c7100063835ac6ebb93700d15edac1de9c8190cd8b39a81f0f0d0649ef0ede2c8ca9589511e4485378c3f7f2843967f95c19023671425a3a666e1a68310326ec273ae9725043e066cf2d583c9", 0xc2, 0x109, &(0x7f00000001c0)={0x10, 0x2, 0x1, @multicast2}, 0x10) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x103, &(0x7f0000000200)={<r4=>0x0, 0x73, "f6274a8026e34bc03540184c8fb64b2bad5f7d201a47b4bf9d47d0fe8824566214d2711e38ad3e02b598cd9fcb64c7a30eb416c080c8049ca0b2ace1d5f95844c8d012977687a030ec164800ddabcb666a0a38db6dbf15332e6b8639891545f7470dc07a0588b9494de6098a7a705e80504ae6"}, &(0x7f0000000280)=0x7b)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={r4, 0x10, 0x4, 0x3, 0x5, 0xfffd}, 0x14) (async)
fstatat(r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4200) (async)
getgroups(0x8, &(0x7f0000000440)=[r0, r1, r0, r0, <r6=>r1, r0, r0, r0])
setregid(r5, r6) (async)
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{0x9, 0xfffffffffffffff3, 0x8010, 0x10, 0x1, 0x8000000000000001, [0xffff, 0xbc, 0xa, 0xd8ef]}, {0x80, 0xfffffffffffffff3, 0x22, 0x8, 0x101, 0x800, [0x18, 0xdfd, 0x10001, 0x5]}, {0x4c, 0xfffffffffffffff3, 0x8c, 0x200, 0x7, 0x8000, [0x0, 0x5, 0x1, 0x1]}, {0x9, 0xfffffffffffffffb, 0x1, 0xc0000000, 0x8, 0x23, [0x9, 0x0, 0x4237f02c, 0x2]}], 0x4, &(0x7f0000000580)=[{}, {}, {}, {}], 0x4, &(0x7f0000000680)={0x9fca, 0x4})
syz_emit_ethernet(0xc4, &(0x7f00000006c0)={@broadcast, @local, [{[], {0x8100, 0x4, 0x1}}], {@generic={0x802f, "c341b95757e42093f89d91361572ccf059536214947078bc4fcde2acf7221a5cd4be8d7182e67e6a86e1061b56d29a00397c70e9a80dcd3db8c92090e50c71fb85c043879046151e883fc515aa8074cf6d4e3c2508300a5622d47beab63c9e05e21d80f6e175a93cd5514acec16cc61557ed9961c7a87030900cfd3b21b9eab95f3302fea47bb637ebbe9a47dd4e053e72555d39f26af61ac2dd84610c4079db30da8b82fe181cd2d62af6b6b2487cdab667"}}}) (async)
r7 = socket$inet6_udplite(0x1c, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x31, &(0x7f00000007c0)={0x41, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x40000000}, @ra, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @ra={0x5, 0x2, 0x1}]}, 0x38) (async)
aio_write(&(0x7f0000000980)={r3, 0x5, &(0x7f0000000800)="44942c25733fc9e44e95996e3e8a9f3264b9ce0eab28af8348dc6d56b964b62a5d899bee7be2580816a16dc5fa34561e7311d32c1840c1e24263a29d83c3afb96a12f26a7a8a57f30fe48a5342d01ece80a76bab1dd740904dc8f28501bd5c0d2cae23c91f272b300c7ea4a631d2ab5470b707e8ca3ff51afd46", 0x7a, [0x4, 0x1], 0x3, 0x8, 0x2, {0x6, 0x4, &(0x7f0000000880)="f72a480a880a41cf3b87d908ba611c76f7bad77f69ff3443dff7dbe29d8873302cb3c918bb9019f15e8ff12c726296dfa7443afc144e2b00faac77afce7bb0993af28ac04fb280297d8a8ce5a0c73692a919d36267144fe00f2710f22557e663754ee10f834f58e3a062fb263ffd05a4ba76c67d57c4bd262eed5070b6105a5390fafbc0e14a267a236194b1180b8b3a71950ee8a7560c0518dc213f4b741e34969b69add340c185926f527ab702a5202f86f44a59088ef0b0a38a71d56faedcbcd3856f4eeadaa3b53f8904d2071f496922"}, {0x1, 0xb, @sigval_int=0x1, @spare=[0x7, 0xa9, 0x5, 0x5c10, 0x7fff, 0x66, 0x40, 0x2]}}) (async)
r8 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r8, 0x0)
socket(0x1c, 0x3, 0x9b)
rfork(0x1044) (async)
syz_emit_ethernet(0x47, &(0x7f0000000a40)={@broadcast, @broadcast, [{[{0x88a8, 0x4, 0x0, 0x1}], {0x8100, 0x4, 0x1, 0x2}}], {@arp={0x806, @generic={0x6, 0x802f, 0x6, 0xd, 0x9, @empty, "b5943107af566e2f8176eaeceb", @broadcast, "e81c53d60e0b88be67f7c1df2c367fc8"}}}})
execve(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000bc0)=[&(0x7f0000000b00)='[&])%\\%z\x00', &(0x7f0000000b40)='-\x00', &(0x7f0000000b80)=']\x00'], &(0x7f0000000d00)=[&(0x7f0000000c00)='!\x00', &(0x7f0000000c40)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)='\xff\xff\xff\xff\xff\xff']) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r9, 0x6, 0x2000, &(0x7f0000000d40)={'bbr\x00', 0x1}, 0x24) (async)
getsockopt$inet_sctp_SCTP_EVENT(r3, 0x84, 0x1e, &(0x7f0000000d80)={r4, 0xa}, &(0x7f0000000dc0)=0x8) (async)
syz_extract_tcp_res$synack(&(0x7f0000000e00), 0x1, 0x0) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000e40), 0x2000000, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000e80), 0x1, 0x0)
clock_getres(0x4, &(0x7f0000000ec0)) (async)
thr_new(&(0x7f0000001180)={&(0x7f0000000f00)="42dad98f69a801b6feeffffff044808a5d000000fe663edfc50fb7c78f49a801cdc442bd45296465f3410f2da50020b511c4c27ddda91b4600003e65420f31", 0xe, &(0x7f0000000f40)="2346418560d8ecb539ce7c79807b7237d0a499b91280af4e3233c48cf94851fccb58fd9bab5cef81ea3de961c36de6621be7354f971ce76016dadc6c7ad06ebc08f405ea4bc53c3cd440a34425ca29d61b9c44cd7a12eb92477fe0d49c58c29c8c649ad1d6bf19d5ff887f2d18a25b1082d2a5b5bd095207eda8d1d6ad26765fcac53364a6542b2b0063d35733b562884d78d5145bd89ac6407185bc445ca2397fda317b95a045db580b59e9e5e5619736aba4257156a348100693f5f5bc7fc72e46009fac09e53d97e2", 0xca, &(0x7f0000001040)="1cfbf4ce73827f61afd24fba6abe489586dd87e413e2a82ec989406763bbd884ad949fb97857bfb36f73455742f6633330a206ed2c2ddc126f5a3ba77375d66b1807b4606432b7e18161eff6067f565efc0d94ef0a1e9fc53e9dec00c1789971acba83e3060e92cdb30b45ef19be5f4bb059da924fb58e37b470bd6e21", 0x7d, &(0x7f00000010c0), &(0x7f0000001100), 0x1, &(0x7f0000001140)={0x3, 0x15}, [0x7, 0x0, 0xff]}, 0x68) (async)
setsockopt$inet_mreqsrc(r3, 0x0, 0x49, &(0x7f0000001200)={@rand_addr=0x24317700, @rand_addr=0xffffff4e, @multicast1}, 0xc)

358.298191ms ago: executing program 3 (id=451):
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000000000)={0x6, {{0x60, 0x2, 0x3, @remote={0xac, 0x14, 0x0}}}}, 0x88)
sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0)
r0 = fork()
r1 = msgget$private(0x0, 0xc3)
r2 = socket$inet(0x2, 0x20000000, 0x8)
r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x1, 0x0, @loopback}, {0x1c, 0x1c, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x9, 0xfffffffe, 0x2000, 0x2000, 0x0, 0xfffb]}, 0x5c)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38)
connect$inet6(r3, &(0x7f0000000000)={0xffd7, 0x1c, 0x3, 0x0, @rand_addr="0000000000000000000001080a4000"}, 0x1c)
sendmsg(r3, &(0x7f0000000640)={&(0x7f0000000100)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}, 0x4d)
setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000002c0), 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa)
recvfrom$unix(r5, 0x0, 0x0, 0x40042, 0x0, 0x0)
r6 = socket(0x1c, 0x1, 0x0)
syz_emit_ethernet(0x60, 0x0)
syz_extract_tcp_res(0x0, 0x1, 0x401)
syz_emit_ethernet(0x11a, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES64=r1, @ANYRESOCT=0x0])
r7 = socket$inet6_udp(0x1c, 0x2, 0x0)
ioctl$SMB_OLD_TRANS(r7, 0xc01c690c, 0x0)
pipe2(0x0, 0x100004)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80)
sigqueue(r0, 0x11, @sival_ptr)

356.989368ms ago: executing program 2 (id=452):
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="218b3d9d1e6a27b52718967b0b0a00", 0xf}], 0x1, 0xffff)
r1 = socket(0x1c, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f00000002c0)=0x4, 0x4)
sendfile(r0, r1, 0x6, 0x0, 0x0, 0x0, 0x15)

321.447906ms ago: executing program 2 (id=453):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, &(0x7f0000000040)={0x34, 0xc, 0x0, 0x4, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, @local={0xfe, 0x80, '\x00', 0x0}]}, 0x68)
socket$inet6_icmp(0x1c, 0x2, 0x3a)
symlink(&(0x7f0000000000)='.\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_sctp(0x1c, 0x5, 0x84)
recvfrom(r1, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0)
open(0x0, 0x80000000000208, 0x0)
openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x1c, 0x1, 0x0)
r3 = fork()
sigqueue(r3, 0x2c, @sigval_ptr=0x10)
wait4(0x0, 0x0, 0x7, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000002c0)=@file={0xa, 0x1, './file1\x00'}, 0xa)
listen(r4, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f00000000c0)=[{0x3, 0xfffffffffffffffe, 0x45}], 0x1, 0x0, 0x0, 0x0)
rfork(0x85000)
mkdir(&(0x7f0000000000)='./file\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x4a)
open(&(0x7f0000000240)='./file/file0/../\x00', 0x205, 0x0)
chroot(&(0x7f0000000040)='./file/file0/..//file0\x00')
open$dir(0x0, 0x1, 0x0)
mlockall(0x2)
sendto(r2, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0)

248.154637ms ago: executing program 3 (id=454):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000001040)='./file0\x00', 0x1)
mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x20000000, &(0x7f0000000140))
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x10000, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f00000001c0)='./file1\x00', 0x0)
renameat(r1, 0x0, r2, 0x0)
renameat(r1, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./file0\x00')
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2)
fdatasync(r3)
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00')
mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

128.266662ms ago: executing program 2 (id=455):
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x47, &(0x7f0000000080)={@remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @rand_addr=0xa}, 0xc) (async, rerun: 32)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 32)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64)
mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000005c0)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async, rerun: 64)
rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') (async, rerun: 64)
unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async)
unlinkat(r2, &(0x7f0000000040)='./file2\x00', 0x0)
rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlinkat(&(0x7f0000000700)='./file0\x00', r3, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00')

50.938918ms ago: executing program 2 (id=456):
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}, 0x1c, 0x0}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "0200", 0x8, 0x3a, 0x1, @rand_addr="78042000000014000001000000086500", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@mlv2_report={0x8f, 0x0, 0x0, 0x7747}}}}}})
execve(0x0, &(0x7f0000000240), &(0x7f0000000440)=[&(0x7f0000000240)='-:\x00'])

7.994751ms ago: executing program 2 (id=457):
mkdir(&(0x7f0000000340)='./file\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0)
mkdir(&(0x7f0000000080)='./file/file0/../\x00', 0x40)
r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0)
sigtimedwait(0x0, 0x0, 0x0)
rfork(0x3060)
cap_fcntls_limit(r0, 0x0)
chdir(&(0x7f0000000400)='./file/file0/..//file0\x00')
socket$inet6(0x1c, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108)
open$dir(0x0, 0x100000, 0x140)
vfork()
rfork(0x3040)
rfork(0x1000)
__getcwd(&(0x7f0000000380)=""/11, 0xb)
freebsd11_statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r3=>0x0})
getgroups(0x2, &(0x7f0000000100)=[0x0, <r4=>0x0])
lchown(&(0x7f0000000000)='./file/file0\x00', r3, r4)

7.691865ms ago: executing program 1 (id=137):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1010)
setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000040)={r0, 0x100000003, {0x9, 0x8}}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x469, &(0x7f0000000040)={0x6, "50afe2c27f64c6559500ab4a3cff00"}, 0x14)
setreuid(0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x17, 0x1e, 0x20, &(0x7f00000001c0)="0000ac4103f48e8d7b066db952c14a4908afe5de0300000000000000743c7eaa", 0x0, 0x0, 0x1000, 0x7d86699a, [0x0, 0x9, 0x7f]})
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000040)={&(0x7f0000000080)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f00000000c0)="d7", 0xb, 0x10, 0x0, 0x7, 0x1, 0x0, 0x3, 0x3, "716cffffffffffff"}, 0x40)
sendmsg$unix(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000015c0)=ANY=[], 0xe0, 0x20100}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000380)=[{0x10c8, 0xffffffffffffffff, 0x4007, 0x0, 0xef4, 0x0, [0x3]}, {0x5d2, 0xfffffffffffffff3, 0x401c, 0x4, 0x69, 0x1, [0x7fff, 0x0, 0x1, 0x7]}], 0x2, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x10000, 0x0, 0xfc, 0x0)
rfork(0x3060)
socket$inet6_sctp(0x1c, 0x0, 0x84)
r6 = open$dir(&(0x7f0000000280)='./file0/file0/..\x00', 0x40000, 0x100)
openat(r6, &(0x7f0000000340)='./file0\x00', 0x400000, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0/file0/..\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x38, 0x3a, 0x0, @rand_addr="3bcc694212fae9849cd9404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x2c}]}}}}}}})
thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000006c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x30, 0x3a, 0xff, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "d99ffd", 0x4, 0xf, 0x0, @loopback, @loopback={0x0, 0xfffffffffffffffe}}}}}}}})

0s ago: executing program 3 (id=458):
open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async)
fhlink(&(0x7f0000000000)={{[0x9, 0x74]}, {0x400, 0xb, "a8401d41d08e4c50b30266a5d33331eb"}}, &(0x7f0000000040)='./file0\x00')
r0 = kqueue() (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
fchmod(r1, 0x40)
kevent(r0, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x0)
unlink(&(0x7f0000001080)='./file0\x00')

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts.
vnode_pager_putpages: zero-length write at 0 resid 131072
0xfffffe0077d75528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837162c0
    usecount 5, writecount 3, refcount 35 seqc users 0
    hold count flags ()
    flags (VIRF_PGREAD|VMP_LAZYLIST)
    v_object 0xfffffe005492c2e8 ref 1 pages 264 cleanbuf 12 dirtybuf 21
    lock type ufs: EXCL by thread 0xfffffe005491b000 (pid 905, syz-executor, tid 100217)
	nlink=1, effnlink=1, size=1048576, extsize 0
	generation=748dcf2, uid=0, gid=0, flags=0x40008<modified>
	ino 86, on dev gpt/rootfs
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
md0: truncating fractional last sector by 1 bytes
Out of ktrace request objects.
md1: truncating fractional last sector by 1 bytes
Jan  1 00:00:16 ci-freebsd-main-2 kernel: nd6_na_input: duplicate IP6 address fe80:6::2aa
lock order reversal:
 1st 0xfffffe0077d75ac0 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3385
 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:189
lock order proctree -> ufs established at:
#0 0xffffffff81652dc1 at witness_checkorder+0x781
lock order ufs -> proctree attempted at:
Expensive callout(9) function: 0xffffffff81469e40(0xfffffe006eb63d20) 0.002636970 s
Jan  1 00:00:35 ci-freebsd-main-2 kernel: arp: 4c:6f:a5:7c:30:6b attempts to modify permanent entry for 172.20.0.187 on tap0
vnode_pager_putpages: zero-length write at 0 resid 131072
0xfffffe0077c406e0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff837162c0
    usecount 8, writecount 6, refcount 70 seqc users 0
    hold count flags ()
    flags (VIRF_PGREAD|VMP_LAZYLIST)
    v_object 0xfffffe00549eee88 ref 2 pages 544 cleanbuf 61 dirtybuf 7
    lock type ufs: EXCL by thread 0xfffffe00549e8740 (pid 1344, syz-executor, tid 100860)
	nlink=1, effnlink=1, size=2147483650, extsize 0
	generation=25a04721, uid=0, gid=0, flags=0x40008<modified>
	ino 168, on dev gpt/rootfs
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
Jan  1 00:00:36 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
ci-freebsd-main-2 syslogd: last message repeated 1 times
Jan  1 00:00:04 ci-freebsd-main-2 syslogd: exiting on signal 15
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800

FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0)

login: ifaddr cache = 0xfffffe0059dc8480 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc7300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc7180 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc7480 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc7480 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.3.170 on tap3!
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800
ifaddr cache = 0xfffffe0059dc7300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
tap1: link state changed to DOWN
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe005893d180 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: link state changed to DOWN
md0: truncating fractional last sector by 1 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc8480 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
tap1: link state changed to DOWN
arp: packet with invalid ieee802 address length 0 received on tap0
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc7480 is deleted
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
pid 1555 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large)
ifaddr cache = 0xfffffe0059dc7300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc6c00 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc6480 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe00790be800
if_delmulti_locked: detaching ifnet instance 0xfffffe00790be800
if_delmulti_locked: detaching ifnet instance 0xfffffe00790be800
Expensive callout(9) function: 0xffffffff8445c480(0xfffffe00082406e0) 0.013883336 s
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4800
if_delmulti_locked: detaching ifnet instance 0xfffffe00790be800
if_delmulti_locked: detaching ifnet instance 0xfffffe00790be800
if_delmulti_locked: detaching ifnet instance 0xfffffe00790be800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc6300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc6a80 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc7300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc8480 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc6900 is deleted
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe0059dc7300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
ifaddr cache = 0xfffffe005893cc00 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
tap1: Ethernet address: 58:9c:fc:10:ff:98
tap1: link state changed to UP
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: No error: 0)
ifaddr cache = 0xfffffe0059dc7300 is deleted
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
SYZFAIL: repeatedly failed to execute the program
proc=1 req=137 state=3 status=67 (errno 9: Bad file descriptor)


FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0)

login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
set $lines = 0
Password:
Login incorrect
login: show registers
Password:if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800

Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect