last executing test programs:

13.61871996s ago: executing program 0 (id=93):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000200)={@multicast1, @rand_addr=0xfffffffa}, 0xc)
r1 = kqueue()
kevent(r1, &(0x7f0000000280)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x3, [0xe, 0x2, 0xffffffffffffffff, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
listen(r2, 0xb7c5)
freebsd10_pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1e2)
fork()
preadv(0xffffffffffffffff, &(0x7f0000001780)=[{0x0}], 0x1, 0x0)
fork()
accept4(r2, 0x0, 0x0, 0x18000000)
syz_emit_ethernet(0xe, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240), 0x0)
r4 = socket(0x1c, 0x1, 0x0)
r5 = msgget$private(0x0, 0x790)
msgsnd(r5, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000e5c8eb87bffae1c7a75d9ac50e30ebd02773a861f58070355d6bd6777af9aaca8b92e474a7ebd34c60603dc5c8922aee8d2b11da1d7fd0c3059ff79dae31cebcf594ca5364bee5b07ad5c055461f94c0fd445eb9ed57f8642ffadd03e26cf8a73dc3322d2dea9f69ed2a5060c3ec3ac6975428aac0b0f31c93ef1a64a326f6248445de18a365e6db0087a75c975a931285c02bf3225a37d0bc06f59ca15555080b5e9578e73da91cc0d53dc9331756651b47be4ab1e8a8ca"], 0xbd, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x200, &(0x7f00000002c0)=0x400009, 0x4)
msgctl$IPC_RMID(r5, 0x0)
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0)
msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0)

12.848496184s ago: executing program 0 (id=97):
aio_waitcomplete(0x0, 0x0)
r0 = openat$bpf(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x26, 0x0, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x24, &(0x7f00000005c0)='/il', 0x3)
r4 = fcntl$getown(r2, 0x3)
ioctl$BIOCROTZBUF(r2, 0x400c4280, &(0x7f0000000400)={&(0x7f0000000340)="034f9cbf2f", &(0x7f0000000380)="cdf2e0781c7f60006ea4d1b9117dc0719db7e1a15b4fff45b94ac5a22e961360b3bb61859963eeb724fb900ff1fc7de6bffa47fc83ece4755a6bba19a07ae7c248539603b847cad25ec0b8c76c1dc926a985f5401e912dc056bb5d", 0x5})
sigqueue(r4, 0x16, @sival_ptr=0x4)
aio_write(&(0x7f0000000100)={r1, 0x5, &(0x7f0000000000)="273e12bce4552da969711faee96951e9028b40b136f7fa737ea925c1b1bc4582cdc2ad085bfbda7b7b5b1b8a0271226c059a292f0102d966958b5506dfa251a9e4de59c19e595d65a07f159052da560f48bd02d231cdf69bf3e1fb8020a4a8265e3d8dbf1d3b0c261e13c11e15b6f3f2904ed0b8f4f22f6e9dfc83334757a8000a4d0d48a1f7a6690be0e220855fee670973f6b4cd", 0x95, [0x4, 0xfa50], 0xbe45, 0x6, 0xffffdfde, {0x0, 0x4, 0x0}, {0x3, 0x0, @sigval_int=0x2, @tid=r4}})
getrusage(0xfffffffffffffffe, 0x0)
r5 = socket(0x1, 0x5, 0x0)
ioctl$BIOCSETF32(r0, 0x80084267, &(0x7f00000000c0)={0x397, 0x1})
cpuset_getaffinity(0x2, 0x1, 0x186a5, 0x0, 0x0)
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r6, &(0x7f0000000280)={0x10, 0x2, 0x1, @multicast1}, 0x10)
sendmsg(r6, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB='\x00'/12], 0xc}, 0x20000)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r7, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc)
r8 = kqueue()
kevent(r8, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xe, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100", 0x3}], 0x1)
socket(0x1c, 0x1, 0x0)
r9 = msgget$private(0x0, 0x790)
msgsnd(r9, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000e5c8eb87bffae1c7a75d9ac50e30ebd02773a861f58070355d6bd6777af9aaca8b92e474a7ebd34c60603dc5c8922aee8d2b11da1d7fd0c3059ff79dae31cebcf594ca5364bee5b07ad5c055461f94c0fd445eb9ed57f8642ffadd03e26cf8a73dc3322d2dea9f69ed2a5060c3ec3ac6975428aac0b0f31c93ef1a64a326f6248445de18a365e6db0087a75c975a931285c02bf3225a37d0bc06f59ca15555080b5e9578e73da91cc0d53dc9331756651b47be4ab1e8a8ca"], 0xbd, 0x0)
msgctl$IPC_RMID(r9, 0x0)

12.021200147s ago: executing program 0 (id=101):
aio_waitcomplete(0x0, 0x0)
r0 = openat$bpf(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x26, 0x0, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x24, &(0x7f00000005c0)='/il', 0x3)
r3 = fcntl$getown(0xffffffffffffffff, 0x3)
ioctl$BIOCROTZBUF(0xffffffffffffffff, 0x400c4280, &(0x7f0000000400)={&(0x7f0000000340)="034f9cbf2f", &(0x7f0000000380)="cdf2e0781c7f60006ea4d1b9117dc0719db7e1a15b4fff45b94ac5a22e961360b3bb61859963eeb724fb900ff1fc7de6bffa47fc83ece4755a6bba19a07ae7c248539603b847cad25ec0b8c76c1dc926a985f5401e912dc056bb5d", 0x5})
sigqueue(r3, 0x16, @sival_ptr=0x4)
aio_write(&(0x7f0000000100)={r1, 0x5, &(0x7f0000000000)="273e12bce4552da969711faee96951e9028b40b136f7fa737ea925c1b1bc4582cdc2ad085bfbda7b7b5b1b8a0271226c059a292f0102d966958b5506dfa251a9e4de59c19e595d65a07f159052da560f48bd02d231cdf69bf3e1fb8020a4a8265e3d8dbf1d3b0c261e13c11e15b6f3f2904ed0b8f4f22f6e9dfc83334757a8000a4d0d48a1f7a6690be0e220855fee670973f6b4cd", 0x95, [0x4, 0xfa50], 0xbe45, 0x6, 0xffffdfde, {0x0, 0x4, &(0x7f0000000200)="eb39502d04797d260b308aa4bd5e7cc0eb5947ba418b2239ea5465d448cb72eb6b8e9f852ff5377e2eb902bd6a3134da51842298d54a9452f16dd0ed2b1143cb926e199fe90196a2c199dd9ee481cb0ee34d9429e47d5d19cb636f6d28e3c7e8e0fefd64d74f62cc36bc2e6ca3ae9fe2badd0fcdc1c639d8e4b44684785e89c7566910acdcfbb0fc68e85b33a4948e9b8d07f7bfe37abd54a81fae9bbd9cda1f383ad595dce696b9fb0087dfd804e14768da9867f59fdb593f7982256cb246ff594716fab0ad0bd0c633f0c37ce7caf6cb"}, {0x3, 0x0, @sigval_int=0x2, @tid=r3}})
getrusage(0xfffffffffffffffe, 0x0)
r4 = socket(0x1, 0x5, 0x0)
ioctl$BIOCSETF32(r0, 0x80084267, &(0x7f00000000c0)={0x397, 0x1})
cpuset_getaffinity(0x2, 0x1, 0x186a5, 0x0, 0x0)
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r5, &(0x7f0000000280)={0x10, 0x2, 0x1, @multicast1}, 0x10)
sendmsg(r5, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB='\x00'/12], 0xc}, 0x20000)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc)
r6 = kqueue()
kevent(r6, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xe, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100", 0x3}], 0x1)
socket(0x1c, 0x1, 0x0)
r7 = msgget$private(0x0, 0x790)
msgsnd(r7, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000e5c8eb87bffae1c7a75d9ac50e30ebd02773a861f58070355d6bd6777af9aaca8b92e474a7ebd34c60603dc5c8922aee8d2b11da1d7fd0c3059ff79dae31cebcf594ca5364bee5b07ad5c055461f94c0fd445eb9ed57f8642ffadd03e26cf8a73dc3322d2dea9f69ed2a5060c3ec3ac6975428aac0b0f31c93ef1a64a326f6248445de18a365e6db0087a75c975a931285c02bf3225a37d0bc06f59ca15555080b5e9578e73da91cc0d53dc9331756651b47be4ab1e8a8ca"], 0xbd, 0x0)
msgctl$IPC_RMID(r7, 0x0)

11.170012496s ago: executing program 0 (id=105):
setgroups(0x0, &(0x7f0000001180))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket(0x1c, 0x1, 0x0)
r1 = socket$inet(0x2, 0x5, 0x5)
setsockopt(r1, 0x0, 0x6e, 0x0, 0x0)
kqueue()
sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x10, 0x2, 0x3, @loopback}, 0x10, &(0x7f0000001100)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x149}, 0x0)
r2 = socket(0x2, 0x1, 0x0)
thr_suspend(0x0)
mkdir(&(0x7f0000000580)='./file\x00', 0x20)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x4a)
open(&(0x7f0000000240)='./file/file0/../\x00', 0x205, 0x100)
rmdir(&(0x7f0000000200)='./file/file0/..//file0\x00')
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x40, 0x4)
bind$inet(r2, &(0x7f0000000100)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10)
freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/64, 0x40}, 0x81)
setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000)
r5 = socket(0x1c, 0x1, 0x0)
syz_emit_ethernet(0x106, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"])
getsockname(r0, &(0x7f00000001c0)=@in={0x10, 0x2, 0xffffffffffffffff, @multicast2}, 0x0)
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000)
cpuset_getaffinity(0x2, 0x6, 0x6, 0x8, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket$inet(0x2, 0x3, 0x2)
procctl$PROC_REAP_STATUS(0x0, 0x0, 0x4, &(0x7f00000003c0)={0x0, 0x0, 0x0, <r7=>0x0})
aio_read(&(0x7f0000000440)={r6, 0x5, &(0x7f0000000240)="b6e111b64db3d3aca097d44a710f920f05291f1198a5d5ea5d1c77a5345ae836ae7853adc9c0c5cae2b8fef2dc03956aa89a25d3826e8c8d82103c2f3b9a6673e2aeb4a9dfccebde7eb8c5ce0457a085e718fab5f7a64db9735da7cb8ea7ffe8da3eab96f28d93f89245c76d10808b509f82d5b523291ee92dd7025a9e3ea0f8b7de5cfc9fa502a468fc31c98077f1612b6dc73d2b9ca286f949c434fffa5181a331fa54b7cfa94da9339fb60af0f7e2c806336890ad04c9760f0fcf07c8c9127e0f", 0xc2, [0x81, 0x4], 0x1, 0x0, 0x2f4863cf, {0x5, 0x8, &(0x7f0000000340)="b0cd2877da23919bd3bca776773139a41f57e40011f07079e860e3c3e318f71c8ea8899faca0c81510b9559a99b87cf7ce3b7029d71b193dcd4618dff7e18cd36383e39e94331e4160b5af9538"}, {0x0, 0x10, @sigval_ptr=0x6, @tid=r7}})

10.288585469s ago: executing program 0 (id=111):
aio_waitcomplete(0x0, 0x0)
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f00000004c0)={0xb, 0x0, 0x10, &(0x7f00000000c0)="ec7b00002cfeff02000000000000007f", 0x0, 0x0, 0x0, 0xfdffef89, [0x0, 0x0, 0x40000]})
sigpending(&(0x7f0000000080))
ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x8000, &(0x7f0000000140), 0x0, 0x0, 0x0})
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x105, &(0x7f0000000040)={0x4, [0x0, <r2=>0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="9fdc355508000900"], 0xc)
r3 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1b, &(0x7f0000000080), 0x4)
connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xa}}, 0x1c)
r4 = socket(0x1c, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
setresuid(0xee01, 0xee01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x802000000000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
freebsd11_fhstatfs(&(0x7f0000000100)={{[0x5c8951ac, 0x3bea9983]}, {0x1, 0xfe, "06000000538aa80494d200004000"}}, 0x0)
setrlimit(0x9, &(0x7f0000000100)={0x4})
socket(0x26, 0x2, 0x0)
bindat$unix(0xffffffffffffff9c, r5, &(0x7f0000000240)=@file={0x3e, 0x1, './file0\x00'}, 0xa)
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000)
r6 = shmget(0x0, 0x1000, 0x240, &(0x7f0000607000/0x1000)=nil)
shmat(r6, &(0x7f000031c000/0x4000)=nil, 0x1000)

9.448608516s ago: executing program 0 (id=117):
aio_waitcomplete(0x0, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0)
extattr_list_link(&(0x7f0000000140)='./file1/file1\x00', 0x2, 0x0, 0x0)
semget(0x1, 0x3, 0x301)
r0 = socket(0x0, 0x4, 0x0)
bind$inet6(r0, &(0x7f0000000240)={0x1c, 0x1c, 0x3, 0x0, @mcast2}, 0x7b)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000040)={@local={0xac, 0x14, 0x0}, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @multicast2}, 0xc)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @multicast2, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000100)={@rand_addr=0xfffffaec, @loopback, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r2, 0x0, 0x48, &(0x7f0000000200)={@empty, @rand_addr=0xfffffffd, @multicast1}, 0xc)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f0000000040)={@multicast2, @broadcast, @loopback}, 0x66fde741d7f32cad)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r1, 0x0, 0xc, &(0x7f00000001c0)={@loopback}, 0xc)
setsockopt$inet_mreqsrc(r3, 0x0, 0x48, &(0x7f0000000400)={@multicast1, @rand_addr=0x6}, 0xfd57)
setsockopt$inet_mreqsrc(r4, 0x0, 0x49, &(0x7f0000000180)={@multicast1, @broadcast, @remote={0xac, 0x14, 0x0}}, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x10, 0x2, 0x2, @loopback}, 0x10)
setsockopt$inet_mreq(r5, 0x0, 0x9, &(0x7f0000000080)={@empty, @rand_addr=0x8}, 0x8)
connect$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x6008c, 0x0, 0x25)
setsockopt$inet_mreqsrc(r4, 0x0, 0x48, &(0x7f00000000c0)={@empty, @multicast2, @broadcast}, 0xc)
rfork(0x85000)
r6 = socket(0x1c, 0x5, 0x0)
fhopen(&(0x7f0000000080)={{[0x5c8951ac, 0x3bea9983]}, {0xf, 0x2, "fe020000fd1604001a00"}}, 0x2)
ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000)
socket$inet_tcp(0x2, 0x1, 0x0)

8.427722239s ago: executing program 3 (id=122):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async)
pipe2(0x0, 0x100004) (async)
socket$unix(0x1, 0x2, 0x0) (async)
select(0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = socket(0x1c, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async)
__specialfd$inotify(0x2, &(0x7f00000001c0)={0x100000}, 0x4)
freebsd10_pipe(0x0) (async)
connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async)
sendto$inet(r2, &(0x7f0000000380)="0edfad78b1e800c88082675d25f16f144fdc23a657b5308876d30fde2fa2324769f31e6f476a3167c448388489209bb99a27f59831dcfc1e91781012b7e7a091beda1b8cf6a457a62b6ed1ed0bf5b0be1a902fa89e3a156593d50f24671324ab33472700329fb1e7dc1db924610000000000", 0xd979, 0x20085, 0x0, 0xfffffffffffffca7) (async)
setsockopt$sock_splice(r2, 0xffff, 0x1023, &(0x7f0000000080)={r2, 0x400007, {0x4, 0x5}}, 0x20)
openat$bpf(0xffffffffffffff9c, 0x0, 0x100000, 0x0)
rfork(0x1000) (async)
socket(0x1c, 0x1, 0x0) (async)
aio_write(&(0x7f0000000240)={r1, 0x80000001, &(0x7f00000000c0)='w', 0x1, [0x3], 0x200000000000000, 0x6, 0x0, {0x6, 0x20000000008, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @spare=[0x3, 0x2, 0xb, 0x5, 0xa251, 0x3, 0x4]}}) (async)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x24) (async, rerun: 64)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x80400000000206, 0x0) (rerun: 64)
fhopen(&(0x7f0000000000)={{[0x5c8951ac, 0x3bea9983]}, {0x0, 0x1, "0a0000009a165d5900"}}, 0x400400) (async)
mlockall(0x2) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3, 0x20011, r1, 0xfffffffb) (async)
r5 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0)
copy_file_range(r5, 0x0, r4, &(0x7f0000000080)=0x2ffff, 0xf, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x3)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1, 0x0)

7.778386116s ago: executing program 3 (id=124):
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x10000, 0x20)
aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000000c0)='w', 0x1, [0x3], 0x200000000000000, 0x6, 0x0, {0x6, 0x9, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @spare=[0x3, 0x2, 0xb, 0x5, 0xa251, 0x3, 0x4]}})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x80400000000206, 0x0)
aio_waitcomplete(0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0x1c, 0x5, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$sock_int(r2, 0xffff, 0x1015, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20085, 0x0, 0x0)
setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, 0x0, 0x0)
socket(0x1c, 0x1, 0x0)
r3 = semget$private(0x0, 0x1, 0x2cc)
semop(r3, &(0x7f00000001c0)=[{0x0, 0x43, 0x1800}, {0x4, 0xe6, 0x1800}, {0x3, 0x8003, 0x1000}], 0x3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0xa)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000040)=0x8)
munlockall()
r4 = fork()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
sigqueue(r4, 0xf, @sival_ptr=0x7)
fcntl$lock(0xffffffffffffffff, 0xc, &(0x7f0000000140)={0x3, 0x2, 0x1000, 0x0, r4})
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mlockall(0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x80)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)

7.060217439s ago: executing program 2 (id=125):
aio_waitcomplete(0x0, 0x0)
r0 = openat$bpf(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x26, 0x0, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x24, &(0x7f00000005c0)='/il', 0x3)
r4 = fcntl$getown(r2, 0x3)
ioctl$BIOCROTZBUF(r2, 0x400c4280, &(0x7f0000000400)={&(0x7f0000000340)="034f9cbf2f", &(0x7f0000000380)="cdf2e0781c7f60006ea4d1b9117dc0719db7e1a15b4fff45b94ac5a22e961360b3bb61859963eeb724fb900ff1fc7de6bffa47fc83ece4755a6bba19a07ae7c248539603b847cad25ec0b8c76c1dc926a985f5401e912dc056bb5d", 0x5})
sigqueue(r4, 0x16, @sival_ptr=0x4)
aio_write(&(0x7f0000000100)={r1, 0x5, &(0x7f0000000000)="273e12bce4552da969711faee96951e9028b40b136f7fa737ea925c1b1bc4582cdc2ad085bfbda7b7b5b1b8a0271226c059a292f0102d966958b5506dfa251a9e4de59c19e595d65a07f159052da560f48bd02d231cdf69bf3e1fb8020a4a8265e3d8dbf1d3b0c261e13c11e15b6f3f2904ed0b8f4f22f6e9dfc83334757a8000a4d0d48a1f7a6690be0e220855fee670973f6b4cd", 0x95, [0x4, 0xfa50], 0xbe45, 0x6, 0xffffdfde, {0x0, 0x4, 0x0}, {0x3, 0x0, @sigval_int=0x2, @tid=r4}})
getrusage(0xfffffffffffffffe, 0x0)
r5 = socket(0x1, 0x5, 0x0)
ioctl$BIOCSETF32(r0, 0x80084267, &(0x7f00000000c0)={0x397, 0x1})
cpuset_getaffinity(0x2, 0x1, 0x186a5, 0x0, 0x0)
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r6, &(0x7f0000000280)={0x10, 0x2, 0x1, @multicast1}, 0x10)
sendmsg(r6, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB='\x00'/12], 0xc}, 0x20000)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r7, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc)
r8 = kqueue()
kevent(r8, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xe, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100", 0x3}], 0x1)
socket(0x1c, 0x1, 0x0)
r9 = msgget$private(0x0, 0x790)
msgsnd(r9, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000e5c8eb87bffae1c7a75d9ac50e30ebd02773a861f58070355d6bd6777af9aaca8b92e474a7ebd34c60603dc5c8922aee8d2b11da1d7fd0c3059ff79dae31cebcf594ca5364bee5b07ad5c055461f94c0fd445eb9ed57f8642ffadd03e26cf8a73dc3322d2dea9f69ed2a5060c3ec3ac6975428aac0b0f31c93ef1a64a326f6248445de18a365e6db0087a75c975a931285c02bf3225a37d0bc06f59ca15555080b5e9578e73da91cc0d53dc9331756651b47be4ab1e8a8ca"], 0xbd, 0x0)
msgctl$IPC_RMID(r9, 0x0)

6.228609597s ago: executing program 1 (id=126):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x14c)
chroot(&(0x7f0000000100)='./file0/file0\x00')
chroot(&(0x7f0000000080)='./file0\x00')
pipe2(0x0, 0xd505eb4556f41fdb)
semget$private(0x0, 0x2, 0x7de) (async)
r0 = semget$private(0x0, 0x2, 0x7de)
__semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000080)=[0x199, 0xfffd])
aio_waitcomplete(0x0, 0x0) (async)
aio_waitcomplete(0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x38) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x38)
mount(&(0x7f0000000000)='hfsp\x00', &(0x7f00000002c0)='./file1/file1\x00', 0x980000d1, &(0x7f00000002c0))
rmdir(&(0x7f0000000100)='./file0\x00')
fstatat(r1, &(0x7f0000000040)='./file2\x00', &(0x7f00000005c0), 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0)
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0xe100, 0x0)
accept$unix(r1, &(0x7f0000000a80)=@file={0x1fc, 0x0, ""/506}, &(0x7f0000000440)=0x1fc)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000200)={0x0, 0xb, 0x2, [0x9, 0x0]}, &(0x7f0000000240)=0xc) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000200)={<r3=>0x0, 0xb, 0x2, [0x9, 0x0]}, &(0x7f0000000240)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000280)={r3, 0xfffffffb, 0xb, 0x9}, 0x10)
extattr_list_link(&(0x7f0000000140)='./file1/file1\x00', 0x2, 0x0, 0x0) (async)
extattr_list_link(&(0x7f0000000140)='./file1/file1\x00', 0x2, 0x0, 0x0)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)
open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) (async)
open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0)
r4 = socket(0x1c, 0x1, 0x0)
ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc01c6367, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet6(r6, &(0x7f0000000340)="070292610235a494748dd3f7d737a2f261819f91197b1d9dfe39ecac5e0105b3ad94dcd61288c638a62883afabf3551c4e0ecc24aa5b9285915393da73908424ded6d55282c0c4871e733e88852151c9eab870b6d70da31806a2ca855ad34cb28dde3e16a898248c671d0ee7b17c1b628333d5c738c4c50d6ea4a2ec1a7be684ef0fc2162301ab4ac0df1c1e6efee936d266ce4e0ea097fa979f4d649bf231a160b3d282a8644aed1882569fb960305393fb3019e38fc881794c754dddae9a9d734067134c4e69ef5580d6370b4be5", 0xcf, 0x20004, &(0x7f0000000480)={0x1c, 0x1c, 0x3, 0x9, @rand_addr="fd0577e9cba49f1d00000600", 0x8000}, 0x1c) (async)
sendto$inet6(r6, &(0x7f0000000340)="070292610235a494748dd3f7d737a2f261819f91197b1d9dfe39ecac5e0105b3ad94dcd61288c638a62883afabf3551c4e0ecc24aa5b9285915393da73908424ded6d55282c0c4871e733e88852151c9eab870b6d70da31806a2ca855ad34cb28dde3e16a898248c671d0ee7b17c1b628333d5c738c4c50d6ea4a2ec1a7be684ef0fc2162301ab4ac0df1c1e6efee936d266ce4e0ea097fa979f4d649bf231a160b3d282a8644aed1882569fb960305393fb3019e38fc881794c754dddae9a9d734067134c4e69ef5580d6370b4be5", 0xcf, 0x20004, &(0x7f0000000480)={0x1c, 0x1c, 0x3, 0x9, @rand_addr="fd0577e9cba49f1d00000600", 0x8000}, 0x1c)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000140)={0x5, 0x0}) (async)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000140)={0x5, 0x0})
syz_emit_ethernet(0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000091000800000102907800000000e000000111ff90781a66349572cd318aed15ed58a41e6701082741825a508a0eccfa8aff0d35ca32df0dc90d2477cda820b4e7cb7009274a7223bb214c8c9ac3a71ec9b3b3fbd59a7b464fe2e1864800339fc037757ccf499ff421d23f5fb5831b99dd52bd5e239bc7b27c520fc724b6b0117309000000ab3cc59d6e5d3cc215db"])
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) (async)
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000)

6.227558159s ago: executing program 3 (id=127):
aio_waitcomplete(0x0, 0x0)
profil(0x0, 0x0, 0x1, 0xd6)
socket(0x1c, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000ffff080001"], 0x28, 0x3010b}, 0x0)
socket(0x1c, 0x1, 0x0)
r1 = socket(0x1, 0x5, 0xfc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000340)={r2, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}})
r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0)
r4 = socket(0x1c, 0x1, 0x0)
r5 = openat$md(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f00000003c0)={0x0, 0x7fffff7c, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, [0x0, 0x2, 0x3, 0x0, 0x40, 0x0, 0x3ff, 0x0, 0x2, 0xb32c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0xe122, 0x8000000, 0x2, 0x42c, 0xfffffffd, 0x0, 0xffffffff, 0x400000, 0xf, 0xfffffffd, 0x0, 0x3ff, 0xc4, 0x4, 0x0, 0xa7, 0xc37b, 0x7, 0x0, 0x9, 0x3, 0x2200, 0x0, 0x0, 0xfffffffe, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6cdd1400, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xae, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x7fed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800006, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xfffffffb, 0x1]})
ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f00000003c0)={0x0, 0x7fffffff, 0x3, 0x0, 0x8, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb32c, 0x4, 0x3, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe122, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf, 0xfffffffd, 0x0, 0x3ff, 0x11, 0x4, 0x0, 0x6, 0xc37b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x3, 0x2, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xa, 0x8, 0x1000, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x7fed, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff]})
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)="2eed576d49c9d805ae464c19276226ec488b967d2f", 0x15}], 0x1, 0x0, 0x3c, 0x20108}, 0x20105)
sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x4)
mount(&(0x7f0000000040)='msdosfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
r6 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1b, &(0x7f00000001c0), 0x4)
setresuid(0xffffffffffffffff, 0xee01, 0x0)
socket$inet6_udp(0x1c, 0x2, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000300)=ANY=[@ANYBLOB="9f4c4662c157ffff09ffffff08004500004200680000010290780000ef4ce000000211089078e0000001020000135e7204ed3f3f4d139efae6a44493c4669e87204fac6c917c9100c552c1a3c7ac4e20ebfc098a35335805"])
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)
cpuset_getid(0x1, 0x3, 0x0, 0x0)
cpuset(&(0x7f0000000000))
r7 = socket(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10)

5.361804903s ago: executing program 1 (id=128):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0)
aio_waitcomplete(0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x100000, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f00000000c0)=[{0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, [0x20000, 0x8, 0x1000]}, {0x4, 0xffffffffffffffff, 0x7f2, 0x1, 0x0, 0x0, [0xfffffffffffffffd, 0x0, 0x6]}], 0x2, 0x0, 0x0, 0x0)
sigaction(0xc, &(0x7f0000000200)={&(0x7f00000002c0)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de351365e5e9989999908", 0x35, {[0xfffff801, 0x50e5, 0xfdffffff]}}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000500)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89f908000000000003bd1e9d2db8d4f362bba529204a1d97149966fb5315353879b67ce99ee3faf845bac7da73bea4719afa4cda27570bb2c55aa001012361fe7939af0eb4b74eb31e6f48c89b306bcef962739f975f670981a7f08a6a41f3d5409c8d2864edb73c4377ec6c227c365a35", 0x9a)
sendto$inet(r1, &(0x7f0000000340)="99106f82e5662b474e4ebca47b11f4ccc0b0e44f4e56a2664e512f2c1b20fb2818e400e75b1d16e424b408b93c57912b2defa01e28186ba338532255659eaba774ba6252722c33952ea6778be484b78d2166f42fbc87b6de8ee27b17a6cfef9b989957bffa02a092cb94bf453c4ac6b05a", 0x71, 0x101, &(0x7f0000000240)={0x10, 0x2, 0x2, @multicast2}, 0x10)
lgetfh(0x0, 0x0)
mmap(&(0x7f00006b4000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
fcntl$getown(r2, 0x5)
aio_readv(&(0x7f0000000640)={r1, 0x2, &(0x7f00000001c0)="8b343ee6f8b36e139eef485d557814acad385a3b7b804e17698049a379cb52ce36e9ec2195d3fbb56bbd719cf6114d1ea526b0", 0x1d, [0xc5f, 0x80], 0x1, 0x20, 0x1, {0xab, 0x8, &(0x7f00000005c0)="e059ea2020fe33d0cf28cd31379f25353db56857507999d1a8c9289b04e17e54bcab6c8a9c125ef82aec55f5ed133be20d165bfa17aa3e4d817fe83e65a3adf899ae27aa13eb11c64c"}, {0x3, 0x11, @sival_ptr=0xdf2, @thr={&(0x7f0000000400)="c4c1fde738f30f1aedc4e2792a2d3d480000c4c27947b005000000c4e27d320ad9f8c4c160598f00000100c4e1fa10bc681a569a633e360f71f61d66f2f082506300", &(0x7f00000006c0)="d5c142a62c5be866cf27919bf4f8de6943716014fbfc60e179c2ba1971e67e8d623885bc8e70042259bf54bf2f60f0834bec3671cbcb07443ba90e495c2d3ec087d1d618748d324414fbaf4306b51079df7bf9fd48dfafedf4a82231357a6e43cf78d2f489ae106dc435d888971094ac2a70c22707e87a9ce8e68541546eb9e6c14c0a64d62244ecfa6eb8387304a8b3c1554ef2c2c9fe51070778213cd4d127c8e7d7baecc6"}}})
poll(&(0x7f00000003c0)=[{r2, 0x100}, {r3, 0x8}, {0xffffffffffffffff, 0x2}, {r2, 0x2000}, {r2, 0x4}, {r4, 0x2}, {r3, 0x4}], 0x7, 0x8)
r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = dup2(r5, r5)
ioctl$CIOCGSESSION2(r6, 0xc030636a, &(0x7f00000000c0)={0x0, 0x26, 0x0, 0x0, 0x20, &(0x7f0000000040)="83", 0x0, 0x4d46b76e, [0x0, 0x0, 0xfffffffd]})
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)=@in={0x10, 0x2, 0x2, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x185)
r7 = socket(0x1c, 0x1, 0x0)
openat$md(0xffffff9c, &(0x7f0000000100), 0x40000, 0x0)
r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x2, 0xff, &(0x7f00000000c0))
pwritev(r8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0)
ioctl$KDGETMODE(r7, 0x40046676, 0x22e00000)
socket(0x1c, 0x1, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0)

5.346217687s ago: executing program 2 (id=129):
chdir(0x0)
open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$bpf(0xffffff9c, &(0x7f0000000040), 0x8, 0x0)
r1 = dup(r0)
ioctl$EVIOCRMFF(r1, 0x20044581)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0x1c, 0x1, 0x0)
getsockopt$sock_int(r4, 0xffff, 0x1023, 0x0, 0x0)
sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40182)
kqueue()
r5 = socket$inet6(0x1c, 0x2, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r6, 0x0, 0x9, &(0x7f00000000c0)={@local={0xac, 0x14, 0x0}}, 0x52)
getsockopt$inet_mreqn(r6, 0x0, 0x9, &(0x7f0000000000)={@multicast1, @loopback, <r7=>0x0}, &(0x7f0000000080)=0xc)
r8 = kqueue()
kevent(r8, &(0x7f0000000080)=[{0x7, 0xfffffffffffffffa, 0x31, 0x10, 0x1000000009, 0x885, [0x8001, 0x5, 0xfffffffffffffff8, 0x6]}], 0x1, 0x0, 0x0, 0x0)
lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sival_ptr=0x200000b, @ke_flags})
setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x2e, &(0x7f0000000100)={@empty, r7}, 0x14)
kevent(r1, 0x0, 0xe38188b5, 0x0, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @multicast2}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt(r1, 0xe, 0x0, &(0x7f0000000240)="2b3782755decde2d59bf38213ad629c6eaaa1250a13aff6c74fc4e1fa6e171202c0fd1f9469bc8d19be39b67f57551d21e7c17524bd62ce752cf93aff08a4d16662e6a22905d22fc3454409f93ffbd977805e1f951a58f8838b60c9e71d219b1aa05a18e58455eea2987b1ca57a834e56d8fa9c5dc8e4255499817fb19a37672b5a8447937cda95229b277929d35aaee5581ce99d02c7dc095e2cea9aff726b47fe87f54eb36033d062a5e8ffdc3acb4b6a55191979f", 0xb6)
setitimer(0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x8}}, 0x0)
listen(0xffffffffffffffff, 0x0)
socket(0x2, 0x1, 0x0)
rfork(0x85000)
socket(0x1c, 0x1, 0x0)

5.345632259s ago: executing program 3 (id=130):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0x6, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "10fcff", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @empty}}}}}})
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28)
openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x8, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
mount(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='.\x00', 0x100, &(0x7f0000000000)="aa8fdc505ed189341c7f269dbda865ad4aabecd44e64499d1d04e5e3edd978e9ba2d53d3a00600008b10346d9d170745")
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x4c)
chroot(&(0x7f0000000100)='./file0/file0\x00')
chroot(&(0x7f0000000080)='./file0\x00')
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
profil(0x0, 0x0, 0x1, 0xd6)
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
r3 = socket(0x1c, 0x1, 0x0)
r4 = socket$inet6_sctp(0x1c, 0x800000000000005, 0x84)
r5 = dup2(r2, r4)
ioctl$DIOCCHANGERULE(r5, 0x8048756d, &(0x7f0000000080))
setreuid(0xee00, 0xffffffffffffffff)
clock_nanosleep(0xf, 0x0, 0x0, &(0x7f0000000100))
ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000)
getpriority(0x0, 0x9)
rmdir(0x0)
fhopen(&(0x7f0000000080)={{[0x5c8951ac, 0x3bea9983]}, {0x401, 0x2, "fe026506fd160400"}}, 0x20000)
openat$bpf(0xffffff9c, &(0x7f0000000140), 0x2000000, 0x0)
socket(0x10, 0x5, 0xd7)
socket(0x1c, 0x1, 0x0)

4.348984272s ago: executing program 1 (id=131):
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[0x0, &(0x7f0000000100)='/dev/pf\x00', &(0x7f0000000140)='/dev/pf\x00', &(0x7f0000000200)='*}\xbd[@,)/,#\x00', 0x0], &(0x7f0000000540)=[&(0x7f0000000340)=')\x00', &(0x7f0000000380)='/(-\xd8++\x00', &(0x7f00000003c0)='/dev/pf\x00', &(0x7f0000000400)='/dev/pf\x00', &(0x7f0000000440)='/dev/pf\x00', &(0x7f0000000480)=':\\\\\x00', &(0x7f0000000500)='@\x00']) (async)
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) (async)
getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000000080))

4.347228315s ago: executing program 2 (id=132):
pipe2(0x0, 0xd505eb4556f41fdb)
aio_waitcomplete(0x0, 0x0)
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="68bf8066f6feb100b14b23ce82bc070000000000000025105d78f8f77ea51867c273651b72c4f89d0f6b0e063e765c29e05ff1bc77be5a2cc28d6d4fa5ef53ceba3f62a5b22f3a7e8ce5f52b8b", 0x42}], 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff)
r1 = kqueue()
kevent(r1, &(0x7f0000000300)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}, {0xfffffffa, 0xfffffffffffffffa, 0x80e0, 0x2, 0x2, 0xfffffffa, [0x5, 0x5, 0x4, 0xfffffffffffffffb]}, {0xe16e, 0xfffffffffffffffd, 0x8010, 0x1, 0x1ff, 0x1000, [0x5, 0x5, 0x31057b69, 0x5]}, {0xffffffff, 0xfffffffffffffffd, 0x82, 0x40000000, 0xfa19, 0x7fff, [0x6e, 0x5, 0x5, 0x1794fb2f]}], 0x4, 0x0, 0x10, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x2, @loopback}, 0x10)
socket(0x1c, 0x1, 0x0)
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
socket$inet6_udp(0x1c, 0x2, 0x0)
r3 = openat$smbus(0xffffff9c, &(0x7f0000000000), 0x4, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x1f, &(0x7f00000000c0)=0x5, 0x4)
recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40000)
recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/109, 0x6d}, 0x1c0)
ioctl$SMB_BWRITE(r3, 0x801c690a, &(0x7f00000001c0)={0x1, 0x6, 0x0, @word=0x3ff, @buf="c8db", 0xcb30, &(0x7f00000000c0)=0x7f, 0x1, &(0x7f0000000140)=0x28, 0x1})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r5, 0x6, 0x24, &(0x7f0000000100)='a', 0x1)
sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0xfffffffe})
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480)
r6 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$MDIOCATTACH(r6, 0xc1b46d00, &(0x7f0000000500)={0x0, 0x0, 0x2, &(0x7f0000000200)='./file0\x00', 0x800, 0x0, 0x2, 0x2000000, 0x80000, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0xfffffff9, 0x0, 0x0, 0x1]})

4.320694429s ago: executing program 3 (id=133):
r0 = open(&(0x7f0000000100)='./file0\x00', 0x100000, 0x0)
open(0x0, 0x80400000000206, 0x6) (async)
open(0x0, 0x80400000000206, 0x6)
aio_waitcomplete(0x0, 0x0) (async)
aio_waitcomplete(0x0, 0x0)
socket(0x1c, 0x1, 0x0)
open$dir(&(0x7f00000000c0)='./file0/file0/..\x00', 0x4, 0x0)
ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0)
socket(0x1c, 0x1, 0x0) (async)
r1 = socket(0x1c, 0x1, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x800000000000005, 0x84)
r3 = dup2(r2, r2)
setsockopt$inet_udp(r1, 0x11, 0x0, &(0x7f0000000080)=0x9cb, 0x4)
ioctl$DIOCCHANGERULE(r3, 0x8048756d, &(0x7f0000000080))
socket$inet6_udp(0x1c, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1b, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) (async)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)
rfork(0x1000) (async)
rfork(0x1000)
socket(0x1, 0x2, 0x3) (async)
socket(0x1, 0x2, 0x3)
r5 = socket(0x1c, 0x1, 0x0)
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) (async)
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000)
getpriority(0x0, 0xa)
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
socket(0x1c, 0x1, 0x0)
socket(0x1, 0x5, 0x2a)
socket(0x1c, 0x1, 0x0) (async)
r6 = socket(0x1c, 0x1, 0x0)
setgroups(0x6, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0])
ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000)
r7 = accept$unix(r0, 0x0, &(0x7f00000002c0))
accept$unix(r7, &(0x7f0000000300)=@abs={0x8}, &(0x7f0000000000)=0x8)
getdirentries(0xffffffffffffffff, 0x0, 0x0, 0x0)

3.235693157s ago: executing program 1 (id=134):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000080)={@multicast1, @rand_addr=0xfffffffa}, 0xc) (async)
r1 = kqueue()
kevent(r1, &(0x7f0000000300)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x3, [0xe, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
listen(r2, 0xb7c5)
freebsd10_pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async)
fork() (async)
preadv(0xffffffffffffffff, &(0x7f0000001780)=[{0x0}], 0x1, 0x0) (async)
fork()
accept4(r2, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0xe, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000240), 0x0)
r4 = socket(0x1c, 0x1, 0x0) (async)
r5 = msgget$private(0x0, 0x790)
msgsnd(r5, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) (async)
msgsnd(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000e5c8eb87bffae1c7a75d9ac50e30ebd02773a861f58070355d6bd6777af9aaca8b92e474a7ebd34c60603dc5c8922aee8d2b11da1d7fd0c3059ff79dae31cebcf594ca5364bee5b07ad5c055461f94c0fd445eb9ed57f8642ffadd03e26cf8a73dc3322d2dea9f69ed2a5060c3ec3ac6975428aac0b0f31c93ef1a64a326f6248445de18a365e6db0087a75c975a931285c02bf3225a37d0bc06f59ca15555080b5e9578e73da91cc0d53dc9331756651b47be4ab1e8a8ca"], 0xbd, 0x0) (async)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x200, &(0x7f00000002c0)=0x400009, 0x4) (async)
msgctl$IPC_RMID(r5, 0x0) (async)
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) (async)
openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x300201, 0xd8)

3.235282345s ago: executing program 2 (id=135):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa4fdd9bac97aaaaaaaaaaaaaaaa080046000034fffc00000084906cffffffffac1400aa890302000b01907800020000450800020052000907560ffc7f000001fffffff8"])
r1 = fcntl$dupfd(r0, 0x11, r0)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x40044b40, 0x108)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00004)
kqueue()
r2 = socket(0x1c, 0x1, 0x0)
sendmsg$inet_sctp(r2, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x9, @loopback}, 0x1c, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x149}, 0x0)
setsockopt$inet6_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)=0x200, 0x4)
setuid(0x0)
r3 = socket(0x1b, 0x3, 0x0)
r4 = socket$inet6_udp(0x1c, 0x2, 0x0)
getsockopt$inet6_udp(r4, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000001940)=0x4)
sendto$inet6(r3, &(0x7f0000000080)="02021b00020000008f00a277fce00d8f", 0x10, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x11, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x12, &(0x7f0000000080)={0x8}, 0x1)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f0000000040)={0xb, 0x5000, 0x100, 0x3}, 0x2)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x1010, 0xffffffffffffffff, 0x0)
r5 = socket(0x1c, 0x1, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2, 0x0, @rand_addr=0x9}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x20000, &(0x7f0000000000)={0x10, 0x2, 0x1, @rand_addr=0xe58}, 0x10)
r7 = socket$inet6_udp(0x1c, 0x2, 0x0)
getsockopt$inet6_buf(r7, 0x29, 0x32, &(0x7f0000002340)=""/4096, &(0x7f0000001000)=0x1000)
syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaf8fe7004f5b3750786dd60d9002000383a003bcc694212fae9849cd9402a6cdc5c2486f44e6d2ee900fe8000000000000000000000000000aa0200fc5d5d0eda475fb4416aeb1e030990780000380060060000000080000000000009000000000000000000000100000000000000000000ffff7f000001947bddf014b016a6920829faf9f7c57b840926594c56b8fa0f8e7deb6c659beb141d83fa08b1970f4cee443cff45a0cf53f0c2c44aad7e703faf0c9157f4643eff47297a1d242618ca855dd2eeb4c72b554770d7f0bb1f4eb0c39b4da9cb33ae6c84a3e5d1db2acef0dc"])
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000)
r8 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)
ioctl$CRIOGET(r8, 0xc0046364, &(0x7f00000001c0)=0x456)
setresuid(0x0, 0xee01, 0xee00)

3.234076233s ago: executing program 3 (id=136):
pipe2(0x0, 0x4)
aio_waitcomplete(0x0, 0x0)
open$dir(&(0x7f0000000800)='./file0\x00', 0x100000, 0x80)
r0 = socket(0x1c, 0x1, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x800000000000005, 0x84)
mprotect(&(0x7f0000100000/0x4000)=nil, 0x4000, 0x3)
fork()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_int(r2, 0xffff, 0x1018, 0x0, 0x0)
sendto(r2, 0x0, 0x0, 0x20100, &(0x7f0000001040)=@in={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10)
r3 = dup2(r1, r1)
open$dir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3405467badc1d2af, 0x0)
open$dir(&(0x7f0000000640)='./file0\x00', 0x200, 0x72)
truncate(&(0x7f0000000080)='./file0\x00', 0x7ffe)
mount(&(0x7f0000000000)='ufs\x00', &(0x7f00000002c0)='./file0\x00', 0x41200000, &(0x7f0000000140))
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f0000000300)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c\xb0G\xdc\xed', 0x0, 0x0)
execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000480)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c\xb0G\xdc\xed'], 0x0)
ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000)
getpriority(0x0, 0xa)
rmdir(0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
socket(0x1, 0x4, 0x0)
setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff])
getpriority(0x1, 0xfff)
__semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000b00)=&(0x7f0000000ac0)={{0x0, 0x0, 0x0, 0x0, 0x28, 0x3c, 0x0, 0x5}, 0x57ed, 0x8000, 0x0, 0x0, 0x8, 0x7f})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x9, 0x763, 0x6, 0x4, 0x6}, 0xa)
ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000)

2.308689593s ago: executing program 1 (id=137):
r0 = socket(0x1b, 0x3, 0x0)
sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x188)
aio_waitcomplete(0x0, 0x0)
r1 = socket$inet6_tcp(0x1c, 0x1, 0x0)
aio_writev(&(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}})
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000740)="b100030390000000050008000700ca900f0e08fece6ef0ffffffffffff3fd3357a00000000000000006336acf00b7804be781e4991f7addf5f882b2b7be1aa7923ed00f4c8b2ca3ebbc259699a1f132e27acb5d602000d7d026ba8af080037282934e4fd89720fd3872babfbb77008f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c5000000020000000000000f0208a371a3f8000000800080000001000000000000000000", 0xb1, 0x20000, 0x0, 0x0)
aio_write(&(0x7f0000000280)={r1, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}})
aio_cancel(r1, 0x0)
r3 = socket(0x1, 0x1, 0xa)
r4 = socket(0x1c, 0x1, 0x0)
sigaction(0xf, &(0x7f0000000200)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x3a, {[0xfffff801, 0x50e5, 0xfdffffff]}}, 0x0)
lgetfh(0x0, 0x0)
r5 = socket(0x1b, 0x3, 0x0)
recvmsg(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)=""/171, 0xab}], 0x1, 0x0}, 0x0)
ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000)
sendmsg$inet_sctp(r3, &(0x7f00000004c0)={&(0x7f00000001c0)=@in={0x10, 0x2, 0x3, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x185)
r6 = socket(0x1c, 0x1, 0x0)
openat$md(0xffffff9c, &(0x7f0000000100), 0x40000, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x7e)
lchflags(&(0x7f0000000000)='./file0\x00', 0x8014)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$bpf(0xffffff9c, &(0x7f0000000000), 0xbc26f3d5dde05050, 0x0)
sysarch$I386_SET_LDT(0x1, &(0x7f00000002c0)={0x5, &(0x7f0000000240)=[{0x7e}, {}, {0x80000003}, {0x3ff}, {0x7}, {0x7}, {0x8}], 0x7})
syz_emit_ethernet(0xec, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60006f3300b6000000000000000000020000000000000000fe8000000000000000000000000000aa800090780000000034449ab262f0b92c01e8f7e059ab4f6f9da688f47ebc001b29e856d9bfe6de4aa54897ab43480bafe578e86957e8eeb6ef023d0d895b270119c0c26b35f43c654d8757b3a6d1c89962e888497b273fac24e3dd8709ad243260a6dfe4ebc83dfadcad91f09966c05282b8a6f9b819943a75320b46e525d70ae49c659582856ac51a92c001af54624fca05b630ecbf4492dabb87214c1be645fdb9a42720ca6740db7be2bb27fadb"])
ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x112)
lpathconf(&(0x7f0000000300)='./file1/file0\x00', 0x9)

2.300731205s ago: executing program 2 (id=138):
aio_waitcomplete(0x0, 0x0)
r0 = openat$bpf(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x26, 0x0, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x24, &(0x7f00000005c0)='/il', 0x3)
r4 = fcntl$getown(r2, 0x3)
ioctl$BIOCROTZBUF(r2, 0x400c4280, &(0x7f0000000400)={&(0x7f0000000340)="034f9cbf2f", &(0x7f0000000380)="cdf2e0781c7f60006ea4d1b9117dc0719db7e1a15b4fff45b94ac5a22e961360b3bb61859963eeb724fb900ff1fc7de6bffa47fc83ece4755a6bba19a07ae7c248539603b847cad25ec0b8c76c1dc926a985f5401e912dc056bb5d", 0x5})
sigqueue(r4, 0x16, @sival_ptr=0x4)
aio_write(&(0x7f0000000100)={r1, 0x5, &(0x7f0000000000)="273e12bce4552da969711faee96951e9028b40b136f7fa737ea925c1b1bc4582cdc2ad085bfbda7b7b5b1b8a0271226c059a292f0102d966958b5506dfa251a9e4de59c19e595d65a07f159052da560f48bd02d231cdf69bf3e1fb8020a4a8265e3d8dbf1d3b0c261e13c11e15b6f3f2904ed0b8f4f22f6e9dfc83334757a8000a4d0d48a1f7a6690be0e220855fee670973f6b4cd", 0x95, [0x4, 0xfa50], 0xbe45, 0x6, 0xffffdfde, {0x0, 0x4, &(0x7f0000000200)}, {0x3, 0x0, @sigval_int=0x2, @tid=r4}})
getrusage(0xfffffffffffffffe, 0x0)
r5 = socket(0x1, 0x5, 0x0)
ioctl$BIOCSETF32(r0, 0x80084267, &(0x7f00000000c0)={0x397, 0x1})
cpuset_getaffinity(0x2, 0x1, 0x186a5, 0x0, 0x0)
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r6, &(0x7f0000000280)={0x10, 0x2, 0x1, @multicast1}, 0x10)
sendmsg(r6, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB='\x00'/12], 0xc}, 0x20000)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r7, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc)
r8 = kqueue()
kevent(r8, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xe, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100", 0x3}], 0x1)
socket(0x1c, 0x1, 0x0)
r9 = msgget$private(0x0, 0x790)
msgsnd(r9, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000e5c8eb87bffae1c7a75d9ac50e30ebd02773a861f58070355d6bd6777af9aaca8b92e474a7ebd34c60603dc5c8922aee8d2b11da1d7fd0c3059ff79dae31cebcf594ca5364bee5b07ad5c055461f94c0fd445eb9ed57f8642ffadd03e26cf8a73dc3322d2dea9f69ed2a5060c3ec3ac6975428aac0b0f31c93ef1a64a326f6248445de18a365e6db0087a75c975a931285c02bf3225a37d0bc06f59ca15555080b5e9578e73da91cc0d53dc9331756651b47be4ab1e8a8ca"], 0xbd, 0x0)
msgctl$IPC_RMID(r9, 0x0)

2.012188ms ago: executing program 1 (id=139):
extattr_set_link(&(0x7f0000000080)='./file0/file0\x00', 0x1, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x80000, 0x104)
mount(&(0x7f0000000440), 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.\x00', 0xc4000100, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r1, 0x6, 0x29, &(0x7f00000001c0)={&(0x7f00000000c0), 0x0, 0x0, 0x29, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x3, 0x1}, 0x30)
mount(&(0x7f0000000200)='zfs\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00')
socket(0x1c, 0x1, 0x0)
pipe2(0x0, 0x100004)
open(&(0x7f0000000040)='./file0\x00', 0x8381, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0)
unmount(&(0x7f00000002c0)='./file0/file0\x00', 0x41000282)
mount(&(0x7f0000000400)='ufs\x00', &(0x7f0000000280)='./file0\x00', 0xc0000400, &(0x7f00000001c0))
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)={@multicast2, @loopback}, 0xc)
socket(0x1c, 0x1, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x2ae00000)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0), 0x1000000000000089, &(0x7f0000000540)=""/89, 0x59}, 0x2)
sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000002c0)}, {&(0x7f00000007c0)=""/247, 0xf7}, {0x0}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000240)=""/1, 0x1}], 0x7, 0x8)
syz_emit_ethernet(0xda, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6017b29100a4000000000000fc6a00000000000000000000ff020000000000"])
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x100004)
rfork(0x83000)
fcntl$setflags(r4, 0x2, 0x0)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="f64fa6995d39", 0x6}], 0x1, 0x4)

0s ago: executing program 2 (id=140):
pipe2(0x0, 0xd505eb4556f41fdb)
inotify_rm_watch(0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x2, 0x7de)
__semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000080)=[0x199])
aio_waitcomplete(0x0, 0x0)
__semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0x1c, 0x1, 0x0)
openat$bpf(0xffffff9c, &(0x7f0000000180), 0x200, 0x0)
r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x18, &(0x7f0000000040)={@broadcast, @local={0xac, 0x14, 0x0}}, 0x8)
bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10)
ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0xb, 0x0, 0x10, &(0x7f00000000c0)="ec7b00002cfeff02000000000000007f", 0x0, 0x0, 0x0, 0xfdffef85, [0x0, 0x1]})
ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000)
extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0)
setegid(0x0)
kevent(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0)
socket(0x1c, 0x1, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000040)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x8d, &(0x7f0000001200)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10)
ioctl$KDGETMODE(r1, 0x40046676, 0x5)
r5 = socket(0x1c, 0x1, 0x0)
pipe2(&(0x7f0000000080), 0x100004)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000100))
socket$inet(0x2, 0x1, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRESOCT=r3, @ANYRES32=0x41424344, @ANYBLOB="7a1f00be6e7810f002070100"])
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts.
if_delmulti_locked: detaching ifnet instance 0xfffffe00077e9000
if_delmulti_locked: detaching ifnet instance 0xfffffe00077e9000
ZFS filesystem version: 5
ZFS storage pool version: features support (5000)
lock order reversal: (sleepable after non-sleepable)
 1st 0xfffffe006de06808 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1641
 2nd 0xffffffff83cc7a40 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1340
lock order tun_ioctl -> tun_mtx established at:
#0 0xffffffff81664981 at witness_checkorder+0x781
#1 0xffffffff814ea187 at __mtx_lock_flags+0x187
#2 0xffffffff8184f536 at tuninit+0x76
#3 0xffffffff8183da64 at ether_ioctl+0x1b4
#4 0xffffffff8184e2d2 at tunifioctl+0x3c2
#5 0xffffffff8198934b at in_control_ioctl+0x16db
#6 0xffffffff8182d6e1 at ifioctl+0xe51
#7 0xffffffff8167372a at kern_ioctl+0x4ca
#8 0xffffffff8167316e at sys_ioctl+0x36e
#9 0xffffffff82145702 at amd64_syscall+0x4e2
#10 0xffffffff820ea3eb at fast_syscall_common+0xf8
lock order tun_mtx -> tun_ioctl attempted at:
#0 0xffffffff81665852 at witness_checkorder+0x1652
#1 0xffffffff81553d49 at _sx_xlock+0x139
#2 0xffffffff8184df9a at tunifioctl+0x8a
#3 0xffffffff8182a36d at ifhwioctl+0x1d6d
#4 0xffffffff8184bb88 at tunioctl+0xd38
#5 0xffffffff811c5406 at devfs_ioctl+0x266
#6 0xffffffff82307b87 at VOP_IOCTL_APV+0x87
#7 0xffffffff817d0c67 at vn_ioctl+0x3c7
#8 0xffffffff811c62c9 at devfs_ioctl_f+0x69
#9 0xffffffff8167372a at kern_ioctl+0x4ca
#10 0xffffffff8167316e at sys_ioctl+0x36e
#11 0xffffffff80440dd7 at freebsd32_ioctl+0x607
#12 0xffffffff822cfab2 at ia32_syscall+0x4d2
#13 0xffffffff820eac4f at int0x80_syscall_common+0x9c
if_delmulti_locked: detaching ifnet instance 0xfffffe0058572800
ip6_pcbopts: all specified options are cleared.
if_delmulti_locked: detaching ifnet instance 0xfffffe006de11000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058572800
SYZFAIL: child failed
 (errno 0: No error: 0)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /dev/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: repeatedly failed to execute the program
proc=0 req=117 state=1 status=67 (errno 9: Bad file descriptor)


FreeBSD/amd64 (ci-freebsd-i386-3.us-central1-b.c.syzkaller.internal) (ttyu0)

login: set $lines = 0
Password:
Login incorrect
login: show registers
Password:
Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
show all tcpcbs/bl