last executing test programs:

3.704240274s ago: executing program 1 (id=33):
r0 = socket(0x2, 0x2, 0x80)
r1 = kqueue()
kevent(r1, &(0x7f0000000040), 0x400024c, 0x0, 0xffffffffffffff94, 0x0)
r2 = fork()
fork()
r3 = kqueue()
kevent(r3, &(0x7f0000000340)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0x20000e8c8, 0x0, [0x0, 0x2]}, {0x3413, 0xfffffffffffffffd, 0x6023, 0x1, 0x5, 0x0, [0x2, 0xb1, 0x5]}, {0xe500, 0xfffffffffffffffc, 0x0, 0x1, 0x989, 0xb, [0x9, 0x0, 0x7, 0x7]}], 0x3, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
r5 = dup2(r0, r0)
setsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f0000000080)={0x100048, 0xffffff98}, 0x8)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="000000008d4069b9"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket(0x2, 0x1, 0x0)
bind(r6, &(0x7f0000000000), 0x10)
dup(r6)
listen(r0, 0xfffffffd)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x8, 0x1, 0x0, 0x2}, 0x8)
close(r4)
accept$unix(r6, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r7, 0x0, 0x47, 0x0, 0x0)
setsockopt$inet_mreq(r6, 0x0, 0xc, &(0x7f0000000100)={@broadcast, @multicast2}, 0xffffffffffffff35)
setsockopt$inet_mreqn(r7, 0x0, 0xd, 0x0, 0x0)
r8 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r8, 0x0)
getsockopt$inet6_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xb, 0x0, 0x0)
rtprio(0x0, r2, &(0x7f0000000140)={0x3, 0x4})

3.376183103s ago: executing program 2 (id=38):
socket$inet6_sctp(0x1c, 0x0, 0x84)
open(0x0, 0x80000000000209, 0x0)
r0 = open$dir(0x0, 0x1, 0x20)
pwritev(r0, 0x0, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f00000002c0)=0x7f, 0x4)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa)
truncate(&(0x7f0000000040)='./file0\x00', 0x10000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$inet6_icmp(0x1c, 0x2, 0x3a)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
open$dir(0x0, 0x1, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
r4 = fcntl$dupfd(r3, 0x0, r3)
write(r4, &(0x7f00000004c0)="96", 0x1)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)

3.174206288s ago: executing program 0 (id=42):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300201, 0xc5)
aio_write(&(0x7f0000000240)={r1, 0x80000002, &(0x7f0000000300)='_', 0x1, [0x0, 0x20000000], 0x0, 0x0, 0x0, {0x0, 0x4000007, 0x0}, {0x0, 0x201, @sigval_int=0x401, @spare=[0x40, 0x3bc, 0x8000000000000000, 0x2, 0x2, 0x4, 0x8, 0x2]}})
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480)
aio_write(&(0x7f0000000340)={0xffffffffffffffff, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x3, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xa9}})
r2 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdir(&(0x7f0000001040)='./file0\x00', 0x1)
aio_waitcomplete(0x0, &(0x7f00000022c0)={0xda96})
aio_mlock(&(0x7f00000028c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, [0x3ae93a64, 0x81], 0x1, 0x18, 0x7, {0xe113, 0xffffffffffffffff, 0x0}, {0x0, 0xd, @sigval_ptr=0x9f, @spare=[0x6, 0x0, 0x7fffffff, 0x5, 0x8001, 0x4cf, 0x1d1, 0x2]}})
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8, 0xa3d, 0x4, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0xfffffffe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sigaction(0x9, &(0x7f0000001300)={0x0, 0x18, {[0xa, 0x2da, 0x9, 0xf1]}}, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x15, 0x0, 0x18, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755aedaacdd4743c7eaa", 0x0, 0x0, 0x0, 0x7d86699a})
sigprocmask(0x2, 0xfffffffffffffffe, 0x0)
r4 = socket(0x11, 0x10000000000003, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x8000, 0x0, 0x0)
sendto$unix(r4, &(0x7f0000000500)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0x6, 0x0, 0x0, 0xffffffffffffff8b)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0]}, &(0x7f00000000c0)=0x1c)
getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0x101, &(0x7f0000000680)={@in6={{0x1c, 0x1c, 0x2, 0xa7, @rand_addr="b177c2c16859195a1b20cd899387db63", 0x7}}, r6, 0x1, 0x4819f9df, 0x1000000, 0x8368, 0x7fffffff}, &(0x7f00000002c0)=0x98)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffff9c, 0x84, 0x24, &(0x7f00000002c0)={r6, @in6={{0x1c, 0x1c, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xf34e}}, 0x7}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x901, &(0x7f00000000c0)={r6, 0x3, 0x7, [0x1, 0x7, 0x353, 0x9, 0x5b9, 0x7fff, 0x3]}, &(0x7f0000000100)=0x16)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={@in={{0x10, 0x2, 0x3, @rand_addr=0x800}}, r6}, 0x88)
getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, &(0x7f0000000440)={r5, 0x4, 0x6, 0x200, 0x2, 0x800, 0x5, 0x0, {@in6={{0x1c, 0x1c, 0x0, 0x3, @mcast1, 0x3}}, r6, 0x8000, 0x92, 0x3, 0x7}}, &(0x7f0000000200)=0xb0)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x24, &(0x7f00000004c0)={r5, @in6={{0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}}, 0x3}, &(0x7f0000000400)=0x90)
ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x10000, &(0x7f0000000100), 0x0, 0x0, 0x0})

3.114299604s ago: executing program 3 (id=43):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x300201, 0xd0)
aio_write(&(0x7f00000002c0)={r0, 0x80000000, &(0x7f0000000080)="1f", 0x1, [], 0x3, 0x0, 0x0, {0x100000, 0x0, 0x0}, {0x0, 0x1b, @sival_ptr, @spare=[0x5, 0x7, 0x8, 0x7, 0xffff, 0x8, 0x3, 0xa]}})
mlockall(0x2)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0)
r2 = open$dir(0x0, 0x202, 0x0)
aio_write(&(0x7f0000000140)={r2, 0x40000000006, &(0x7f0000000240), 0x0, [0x5], 0x0, 0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0}, {0x0, 0x0, @sival_ptr=0x5}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x20011, r1, 0x0)
r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, 0x0, 0x0)
getsockopt$inet6_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x107, &(0x7f0000000380)={0x0, 0x5, 0x2, 0x7d, 0x21be}, 0x0)
r4 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0xfffffffe, @mcast1}, 0x1c)
sendto$inet(r4, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0)
sync()

3.064336046s ago: executing program 1 (id=44):
r0 = kqueue()
kevent(r0, &(0x7f00000003c0)=[{0xffffffffffffffff, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x5, [0x0, 0x0, 0x7, 0x40000000000000]}, {0x7fff, 0xfffffffffffffffb, 0xc040, 0x2, 0x0, 0xfffffffffffffffc, [0xfb7, 0x4, 0x10, 0xdba2]}, {0x1, 0x3fed61d8a043796, 0x4020, 0x1, 0x1, 0x7fffffffffffffff, [0x3fc, 0x7, 0x4]}, {0x2, 0xfffffffffffffffb, 0x2, 0x4, 0x1, 0x9, [0x0, 0x2, 0x1163, 0x56de]}], 0x4, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1, 0xfffffffffffffffc, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000004]}, {0x7fff, 0xfffffffffffffff3, 0xc071, 0x40000000, 0x2, 0x7f6, [0xffffffff80000001, 0x0, 0x20001bc8fee3, 0x1]}, {0x4, 0xffffffffffffffff, 0xc00c, 0x100, 0x9, 0x20000000ffffffff, [0x6, 0x200, 0xfffffffffffeffff, 0x200]}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
sendto$unix(r1, &(0x7f00000000c0)="b10005019000e80348031bc75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257", 0x4b, 0x0, 0x0, 0x0)
getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0x101, 0x0, &(0x7f00000002c0))
setsockopt$inet6_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5)
lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int, @ke_flags})
r2 = kqueue()
kevent(r2, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0)
extattr_delete_fd(0xffffffffffffffff, 0x0, &(0x7f0000000000)='\x00')

2.994389205s ago: executing program 3 (id=45):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fpathconf(r0, 0x40)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fstatat(r1, 0x0, &(0x7f0000000200), 0x4200)
setsockopt$inet_mreqsrc(r1, 0x0, 0x46, &(0x7f0000000100)={@multicast2, @multicast2, @local={0xac, 0x14, 0x0}}, 0xc)
getresuid(0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r2, 0x0, 0x41, &(0x7f0000000040)=0xda, 0x4)
mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffffe)
r3 = kqueue()
kevent(r3, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0)
ktimer_create(0x4, 0x0, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x2000)
socket$inet_udplite(0x2, 0x2, 0x88)
ksem_init(0x0, 0xb)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fork()
r4 = kqueue()
kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff6, 0x8, 0x8, 0xe8c5, 0x6, [0x0, 0x0, 0x64]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0xd, &(0x7f0000000040)={@multicast2}, 0xc)
procctl$PROC_STACKGAP_CTL(0x0, 0x0, 0x11, &(0x7f0000000580)=0x6)
procctl$PROC_STACKGAP_CTL(0x0, 0x0, 0x11, &(0x7f0000000000)=0x5)
ktimer_create(0x4, 0x0, &(0x7f0000000080))
sendmsg(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffff35, 0x0, 0x15b}, 0x8)
cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x6a, &(0x7f0000000000))

1.924079162s ago: executing program 3 (id=46):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x10000000)
r1 = getpid()
ktrace(0x0, 0x1, 0x40005206, r1)
r2 = fork()
sigqueue(r2, 0x5d, @sigval_int=0x1ff)
procctl$PROC_REAP_KILL(0x0, r1, 0x6, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200201, 0x148)
r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0)
ioctl$CIOCGSESSION2(r4, 0xc040636a, &(0x7f0000000080)={0x10, 0x8, 0x1, &(0x7f0000000000)='\x00', 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x4, [0x0, 0x3, 0xc]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176)
truncate(&(0x7f0000000040)='./file0\x00', 0xb)
r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
r9 = kqueue()
kevent(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x400000000000, 0x0, 0x0, 0xb)
r10 = open$dir(&(0x7f0000000180)='./file0\x00', 0x4, 0x0)
unlinkat(r10, &(0x7f0000000000)='./file0\x00', 0x2000)
rfork(0x3060)
ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000140)={0x0, 0x2, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0})
poll(&(0x7f00000000c0), 0x0, 0x9)
aio_write(&(0x7f0000000240)={r3, 0xe1, &(0x7f0000000300)="e2", 0x1, [0x5, 0x2], 0x401, 0x6, 0x0, {0x0, 0xfffffffffffffffd, 0x0}, {0x1, 0x20, @sival_int=0x8000000}})
fcntl$setstatus(r0, 0x4, 0x4c)
listen(0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013)
socket(0x2, 0x1, 0x0)

1.884166367s ago: executing program 2 (id=47):
r0 = kqueue()
ioctl$SMB_OLD_TRANS(0xffffffffffffffff, 0xc01c690c, &(0x7f00000001c0)={0x6c, 0x4, 0x30, @word=0x4a, @buf="e300", 0x7f, 0x0, 0x0, 0x0})
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
fcntl$setstatus(r1, 0x4, 0x10008)
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000240), 0x3}], 0x1, 0x8)
r2 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1003, &(0x7f0000000080)=0x10000005, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c)
r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x200000, 0x5)
sendfile(r3, r2, 0x0, 0x400000000000, 0x0, 0x0, 0x2d)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
ioctl$SMB_READB(r4, 0x80246989, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @buf="de32", 0x0, 0x0, 0x0, 0x0})
kevent(r0, &(0x7f00000008c0)=[{0xb, 0xfffffffffffffff3, 0x20, 0x20000000, 0x7, 0x1ff, [0x0, 0x5, 0x8, 0x8]}, {0x2, 0xfffffffffffffffd, 0x84, 0x40000000, 0x3, 0x2, [0x5, 0x800, 0x7, 0x9]}, {0x5, 0xfffffffffffffff8, 0x80, 0xc0000000, 0x4, 0x7, [0x1, 0xe, 0x0, 0x7]}, {0x7c, 0xfffffffffffffff8, 0x4040, 0x4, 0x1, 0x1, [0x80, 0xfffffffffffffffa, 0x9, 0x3ff]}, {0x7fffffff, 0xfffffffffffffffd, 0x40, 0x2, 0x4, 0x5, [0x2b6a, 0x9, 0x200, 0xffffffffffffff42]}, {0x5, 0xfffffffffffffffa, 0x80, 0x4, 0xffffffffffffffff, 0xffffffffffff8000, [0xfd7, 0x17e6ee9800, 0x1c000000, 0x8de]}, {0xff, 0xfffffffffffffffa, 0xd, 0x20000000, 0x4, 0x0, [0x200, 0x0, 0xfb, 0x3]}], 0x7, 0x0, 0x0, 0x0)
r5 = socket(0x1c, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x10, 0x0)
r6 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000040)=0x8, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x20086, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x9, @empty, 0x7}, 0x1c)
sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x18c)
r7 = socket(0x11, 0x3, 0x0)
sendto$unix(r7, &(0x7f00000000c0)="b100050160200000a80000000700000012df8106cfa10500fef96ecfc73fd3357ae36caa0416fa4f376b36acf00b7804be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257169ed0d44a699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
open(&(0x7f0000000180)='./file0\x00', 0x200, 0x18d)
mount(&(0x7f0000000000), 0x0, 0xc4, 0x0)
open$dir(&(0x7f00000005c0)='./file1\x00', 0x0, 0x0)
extattr_get_file(0x0, 0x1, &(0x7f0000000280)='\x00', &(0x7f00000013c0)=""/4096, 0x1000)

1.784391737s ago: executing program 0 (id=48):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000003600)="aa28c4cacb4e87b348498e492916ef0eec4449222ea48033d984539af6d41221f8a31eb9e1c2104f1e437a2de541290ca1ddb84f6ae5739948903758c3750d78874d4ab66625f5257f7e38140ac43d8d16e92af5e4ef578517dd591463a4bb548544cfdf243f8113f0c5e05c64eb8898fd240f9549c0054aa00856a9941d55dbf9ea7760f0d0a6f754b851459d568069123ba3aa398107b1", 0x98)
socket(0x26, 0x3, 0x0)

1.604232809s ago: executing program 0 (id=49):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[])
getresuid(0x0, 0x0, 0x0)
setrlimit(0x0, 0x0)
setreuid(0xee00, 0x0)
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00'])
writev(r1, &(0x7f0000000280), 0x26)
write(r1, &(0x7f00000004c0)="9665a44f", 0x2000)
sysarch$I386_SET_GSBASE(0xa, 0xfffffffffffffffe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0xc, 0x0, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x48, 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000100)={@multicast1, @rand_addr=0x1, @remote={0xac, 0x14, 0x0}}, 0xc)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc)
kevent(r1, &(0x7f00000005c0)=[{0x7fffffff, 0xfffffffffffffff9, 0x0, 0xffffff, 0x2, 0x0, [0x4, 0xf, 0x7, 0x1]}, {0x756a782d, 0xfffffffffffffffc, 0x4, 0x80000113, 0x8, 0x7, [0xfff, 0x57bf, 0x5]}, {0x4, 0xfffffffffffffff5, 0x9, 0x8, 0x9, 0x7, [0x5, 0x95f9, 0x1, 0x4]}, {0xfaa, 0xfffffffffffffffe, 0x4, 0x2, 0x4, 0x2, [0x3, 0x8, 0x44a8, 0xffffffffffff1876]}, {0x2, 0xfffffffffffffffe, 0x8015, 0x1, 0x3, 0xea, [0x5, 0x0, 0x8, 0x9]}, {0x81, 0xfffffffffffffff8, 0x17, 0x40, 0x344, 0x80000000, [0x7, 0xa51e, 0x700000, 0x2]}, {0x6, 0xfffffffffffffff4, 0x4048, 0x4, 0x1, 0x6, [0x10, 0x4, 0x200, 0xb]}, {0x401, 0xfffffffffffffffe, 0x21, 0x80, 0x9, 0x4, [0x0, 0x2, 0x5, 0x9]}], 0x8, &(0x7f00000001c0)=[{}, {}, {}], 0x3, &(0x7f0000000040)={0x40})
socket$inet_tcp(0x2, 0x1, 0x0)
select(0x40, &(0x7f0000000f80)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6}, 0x0, 0x0, &(0x7f0000001080)={0x2})
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fork()
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc)
kevent(0xffffffffffffffff, &(0x7f0000000540)=[{0xc8, 0xfffffffffffffffe, 0x4007, 0x0, 0x1, 0x0, [0x3, 0x7fffffffffffffff]}], 0x1, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f5769e67f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x2, 0x1, 0x0)
bind(r3, &(0x7f0000000000), 0x10)
dup(r3)

1.603242113s ago: executing program 1 (id=50):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={<r0=>0xffffffffffffffff})
setgid(0x0)
recvfrom(r0, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0)
ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, &(0x7f0000000080)={0x95f8, [{0x566e, [0xee0d, 0xd871, 0x7, 0xff, 0x7fff, 0x3, 0xfffffff7, 0xaa8, 0x7ff, 0x9, 0xfffffffc, 0x9, 0x7, 0x6219848d, 0x515, 0x8, 0x5, 0x0, 0x0, 0x3, 0x0, 0xf, 0xd6, 0x8, 0x1de, 0xfffffffb, 0x5, 0x2, 0x7f, 0x10001, 0x9, 0x6, 0x3, 0x5, 0x4, 0x5, 0x4, 0x401, 0x7, 0xba5c, 0xe8c, 0x80000001, 0x8, 0xfffffffd, 0x3, 0xedf, 0x1, 0xffffffff, 0x4c04, 0x4, 0x3, 0x10001, 0xffffffde, 0x0, 0x10, 0x400, 0x715, 0x7e1, 0x4, 0xd, 0xa, 0xa09, 0x2, 0x3, 0x4, 0x5131, 0x2, 0x1, 0xbe9a, 0xfff, 0x731, 0x9, 0xbc, 0xb, 0xc74f, 0x0, 0x9, 0x5, 0x4, 0x101, 0xfffffff8, 0x2, 0x0, 0x5, 0x5229, 0x9, 0x7, 0xfffffffb, 0x81, 0x8001, 0xf, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5, 0xe0, 0x7ff, 0x2, 0x0, 0x8, 0xc, 0x8]}, {0x5c, [0x15, 0x6, 0x4, 0xbae, 0x2, 0x4, 0x86f13b53, 0x401, 0x1000, 0x7, 0x6, 0x7, 0x7fff, 0x0, 0x5, 0x400, 0x9, 0x96a9, 0xbe, 0xfffffffe, 0xb, 0x8, 0xae0, 0x6, 0x7, 0x40000, 0x40, 0x9, 0x7fff, 0x3, 0x200000, 0x7, 0x0, 0x5, 0x3b5, 0x6, 0x2, 0x58, 0x2, 0x1, 0xffffff00, 0x4, 0x4, 0x6, 0x3, 0x3, 0x8, 0x100, 0x0, 0x907, 0x101, 0x9, 0x6, 0xc95, 0x6, 0xc, 0x4, 0x2, 0xb, 0x3eb, 0x0, 0x7fff, 0x0, 0xff8, 0x9, 0x7, 0x8, 0x9, 0x61a, 0x2, 0x80000001, 0x90fd, 0x6, 0xd, 0x6eed, 0x0, 0x4, 0x1, 0x7, 0x5, 0x0, 0x10001, 0x40000010, 0x80000001, 0x9, 0x4b2, 0x100, 0x7fffffff, 0x2, 0x0, 0x7, 0x5, 0x1000, 0x0, 0x8, 0x6, 0x2, 0x1, 0x2, 0x1, 0x3ff, 0x1000, 0x1, 0x4]}, {0x0, [0x1, 0x6, 0x3, 0x2, 0x800, 0x0, 0xff, 0x6, 0x7, 0x3, 0xe, 0x1, 0xdd, 0x538, 0x7bac, 0xa, 0xd, 0x9, 0x10001, 0x8, 0x8, 0xff, 0x6, 0x2, 0x800000, 0x2, 0x4, 0x8, 0x4, 0xb, 0x9, 0x1, 0x3, 0xfff, 0x343d3543, 0x400000, 0xfffffff8, 0x9, 0xa87f, 0x800, 0x7, 0x2, 0x1, 0xdb4, 0x101, 0xb369000, 0x9, 0x92, 0x4, 0x0, 0x98, 0x3d104cc0, 0x52, 0x8, 0x40000c, 0x0, 0x437, 0x3, 0x3, 0x1, 0x1000, 0x8001, 0xfff, 0x17e7, 0x8, 0xa, 0x6, 0x0, 0x5, 0xf10, 0x5, 0x1, 0xffffffb8, 0x7fff, 0x9, 0xfffffffd, 0xfffffffe, 0x3158, 0x5, 0x2, 0x8, 0x36d5, 0x9, 0x1, 0xfffffffb, 0x2, 0x8, 0x8000, 0x5, 0x3, 0x1, 0xfffffffd, 0x4, 0x1, 0xfffffff7, 0x40, 0x6, 0x3, 0x6, 0x1ff, 0x4, 0x9, 0x9, 0x39]}, {0x3, [0x7, 0x5, 0x8, 0xfc, 0x12, 0xd683, 0x2, 0x5, 0x8, 0xadd, 0x5, 0xdb, 0x80000003, 0xc, 0x0, 0xfffffff7, 0xffffffff, 0x2, 0x5, 0x2, 0x3eb3, 0x0, 0x7, 0x7, 0x7, 0x6, 0x5, 0x7673faf3, 0x0, 0x9, 0x1, 0x2, 0xffffffff, 0x1, 0x4f124442, 0x8, 0x0, 0x2, 0x8007, 0x190, 0x5, 0x3, 0x1, 0x800, 0x9, 0x9, 0x3, 0x7, 0x5, 0x7, 0x8, 0x7, 0x0, 0x10001, 0x1, 0x0, 0x7ff, 0xe, 0x9, 0x2df, 0x7, 0x7fffffff, 0x80000001, 0x4, 0x3, 0x3, 0x4, 0x496a, 0x7, 0x7fffffff, 0x74, 0x2, 0x9, 0x3, 0x6, 0xf3, 0x1, 0xa3, 0x49c, 0xec0, 0x100, 0x3, 0x6, 0x9, 0x2, 0x0, 0x6, 0x6, 0x9, 0x1, 0x0, 0x5, 0xa, 0x2, 0x4, 0x3b, 0x3, 0x40, 0x225, 0x80, 0x4, 0x4, 0x7fff, 0x2]}, {0xe8bc, [0x5, 0x4, 0x8, 0x5, 0x4, 0x80, 0x9, 0x1ff, 0xfff, 0xfffffff9, 0x1ff, 0x1, 0x800, 0x80000000, 0x8, 0x7, 0x7ff, 0x6, 0x8, 0x9, 0xe92, 0x8, 0x13, 0x2, 0x0, 0x7f, 0x401, 0x8, 0x7, 0x8, 0x4, 0x5, 0xffffe6ff, 0x7, 0x80000000, 0x6f88, 0x2, 0x9, 0x7f, 0xa5de, 0xfffffffa, 0x8, 0x3, 0x800, 0x5, 0x403, 0x54, 0x80, 0xf, 0x3ff, 0x8, 0xfffffffa, 0x9, 0x0, 0x800, 0x8, 0x1, 0x4, 0x6, 0x8, 0x3, 0x5, 0x5, 0x2, 0x1, 0xb26, 0x6, 0x81, 0x1, 0x101, 0x3, 0x2, 0x6, 0x200, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x3, 0x1, 0x800, 0x5, 0x7, 0x468, 0x7f, 0x94, 0x7, 0x6, 0x3, 0x8, 0x7ff, 0xfffffffe, 0x10000, 0x44, 0x4b, 0x435c9460, 0x3ff, 0x7ff, 0x4b, 0x40, 0x0, 0x5, 0x7]}, {0x3, [0x7, 0x2, 0x1, 0x5, 0xf, 0x40, 0x6, 0x1000, 0x4, 0x3, 0x5, 0x8, 0x1, 0x5, 0xa, 0x81, 0x7, 0x8, 0x8, 0x6, 0x80000000, 0x60, 0x0, 0xd2, 0x1, 0x9, 0x10001, 0x6, 0xc, 0x6, 0x200, 0x5, 0x3, 0x52fd0a00, 0x8, 0x3, 0xfffff1b2, 0x1d, 0x8, 0xff, 0x2000, 0x4b, 0x808f, 0x5, 0xb, 0xfffffffa, 0x3, 0x7ff, 0x430c, 0x1000, 0xb35, 0x0, 0x3, 0x9, 0x1ff, 0x6, 0x400000, 0x5, 0x50001, 0x1, 0x6, 0x1, 0xffff, 0x10, 0x0, 0x9, 0x3, 0xce94, 0x4, 0x0, 0xfffffc01, 0x80, 0x200007ff, 0x2, 0x3, 0x4, 0x8, 0x400, 0x8, 0x81, 0xfffffff7, 0x9, 0x6, 0x7ff, 0x7, 0x0, 0x124f8, 0x7fffffff, 0x6, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x4ab464c, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x5, 0x9, 0x5b8b7924, 0x7ac5]}, {0xffffff7f, [0x3, 0x4, 0x131f, 0x1, 0x8, 0x6, 0x0, 0x7, 0x3, 0x3, 0x1, 0x200, 0x4a2, 0x49, 0xfd, 0xd0, 0x39e, 0x3, 0x5, 0xffff, 0x2c, 0x3, 0x3, 0x9, 0xffffffff, 0x7, 0xffffffff, 0x4, 0xc, 0x9, 0x263, 0xabd1, 0x3, 0x2, 0x9, 0x6, 0xb7af, 0x6, 0x2, 0x6, 0x1ff, 0x7, 0x10000, 0x2, 0x80000000, 0x4, 0xfffffff5, 0x1, 0x3041, 0x8, 0x6f, 0x2, 0x7, 0x3, 0xfff, 0x1, 0x8, 0x1, 0x5, 0x52, 0x3, 0x80, 0xe5, 0xa, 0x3f, 0x10, 0x6, 0x1, 0x4, 0xfffffff8, 0x4, 0x8001, 0x4220c0b8, 0xfff, 0xfffffff1, 0x6, 0x6, 0x7d, 0x6, 0xc9, 0x2, 0x7, 0x52, 0x8000, 0xc, 0x6, 0x5, 0xe, 0x9, 0x8, 0x1, 0x5, 0x5, 0x7, 0x5, 0x6, 0x1d33945, 0xd, 0x8, 0x9fc, 0xffff, 0x4, 0x5, 0x8]}, {0xfffffffa, [0x1ff, 0x2b, 0x9, 0x1, 0x7, 0x3, 0x1, 0x2, 0x80, 0x10000, 0x8, 0xae, 0x7, 0x3, 0x2, 0x6, 0x2, 0x42, 0xec7, 0x0, 0x3, 0x1, 0x9, 0x8, 0x7, 0xfff, 0x3, 0x8d4, 0x7ca, 0x5, 0x283, 0xd3b2, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x7ff, 0x200, 0x54, 0x1, 0x4, 0x40, 0x9, 0x40, 0x7, 0xc, 0x3, 0x1, 0x6, 0x10000, 0x6, 0x2, 0x7fffffff, 0xfffffff1, 0x0, 0xffff9594, 0x6, 0x2, 0x6ef, 0x1, 0x3, 0x0, 0x40, 0xfffffffe, 0x1, 0x3, 0xb28a, 0x1, 0x80000001, 0x800, 0x30e, 0x7b, 0x2, 0x5, 0x9, 0x7ff, 0x5, 0x7, 0x1, 0x9, 0x100000c, 0x6, 0x1, 0x272, 0xc, 0x0, 0x2, 0x4, 0x400, 0x5, 0xfffffffc, 0xffffffff, 0xd, 0x19d, 0x5, 0xf0, 0x6, 0x4, 0x9, 0x4, 0xe6dc, 0x7, 0x1ff0]}, {0x0, [0x9, 0x5, 0x314, 0x1, 0x7, 0x7f, 0x9, 0x4, 0x79, 0x0, 0x7ff, 0xe, 0xffff, 0x0, 0x80000000, 0x7, 0x1000, 0x3ff, 0x3, 0xf7, 0x0, 0x0, 0x40000000, 0x5, 0xfffffff7, 0xfffffffe, 0x1ff, 0x2, 0x3, 0x1, 0x2, 0x1, 0x4, 0x81, 0x8, 0x2, 0x4, 0x6, 0x1, 0x6, 0xffff, 0x1, 0xf, 0x3, 0x2, 0x6, 0x7, 0xa, 0x1ff, 0x7ff, 0xe, 0x0, 0x8, 0x7, 0xc0, 0xf58f, 0x1000, 0x0, 0x3, 0x7ff, 0xfe0, 0x3, 0x400007, 0x8, 0x9, 0x3, 0x1, 0x1, 0x5, 0x3, 0x1000, 0xfffffff7, 0x1ff, 0xffffffff, 0x4, 0x8001, 0x1, 0x8, 0x0, 0x6, 0x8, 0x1, 0x100, 0x8, 0x0, 0xd7fb, 0xa, 0x0, 0x5, 0x4, 0x1a0, 0x2, 0x5, 0x0, 0x6, 0x1ff, 0x40, 0x5, 0x4, 0xbc, 0x8, 0x5, 0x7, 0xfffffffb]}, {0x6, [0x10, 0x40, 0x1, 0x253, 0x8, 0x8, 0xc, 0x1, 0x7, 0x8, 0x3, 0x60, 0x7ff00000, 0x80, 0x8, 0x2, 0x2, 0x6, 0x80, 0x800, 0x1, 0x0, 0x529b, 0x3, 0x0, 0x5, 0x0, 0xfffffffa, 0x1000, 0xa, 0x9, 0xf, 0x5, 0x7, 0x5, 0x0, 0x2, 0x2, 0x5, 0x7, 0x9, 0x4, 0x7, 0xb, 0x101, 0x8, 0x4, 0xfb8e, 0xf3b, 0x4, 0x7, 0x8, 0x8, 0x7, 0x5, 0x4, 0x4, 0x5, 0xfffffff9, 0x2, 0x8, 0x3, 0x2, 0x400, 0x6, 0x7, 0x9bc7, 0x80000000, 0x8, 0x1, 0x200, 0x4, 0xc, 0x6, 0xc2c4, 0x5, 0x5, 0x7, 0x6, 0xf, 0x80, 0x3, 0xfffffffd, 0x20000000, 0x21, 0x2, 0x1, 0x3, 0x80, 0x5, 0x4, 0x7d7, 0x9, 0x4, 0x7f, 0x0, 0x7ff, 0x7fff, 0x1, 0x8a6, 0xfffffff9, 0x1, 0x6, 0x4]}, {0xc0, [0x3f04, 0xf, 0xfffffff7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x9, 0x6, 0x7fffffff, 0x0, 0xfffffffe, 0x7fff, 0x0, 0x0, 0x400000, 0x2, 0xe, 0x401, 0x6, 0x800, 0x7, 0x9, 0x40, 0x0, 0x5144b3ea, 0x694, 0x4, 0x7fe, 0x99, 0x81, 0x5, 0x4, 0x3, 0x0, 0x3ff, 0x1000, 0x9, 0x6, 0x7, 0x8, 0x1, 0xf, 0x1, 0x8, 0x5627aa48, 0x5, 0x4455, 0xfffffffd, 0x1000, 0x7, 0x3, 0x8, 0x0, 0x3, 0x7, 0xffff0000, 0x7ffffffd, 0x7, 0x7fff, 0x0, 0x3, 0x2, 0x9, 0xe, 0x3, 0x7, 0x0, 0xa, 0x3, 0x54d, 0x100, 0x8, 0x3ff, 0x8, 0xfffffffd, 0xffffe64b, 0x400, 0x9, 0x200, 0x3, 0x7, 0x9, 0x40, 0x8, 0x9, 0x2, 0xb0000000, 0x3, 0xb, 0x400000, 0x99, 0xeae, 0xe8, 0xfffffc00, 0xd8b5, 0x4, 0x9, 0xf, 0x2ab, 0x5, 0x8000]}, {0x0, [0x7, 0x44f, 0x4, 0x9, 0x4, 0xfdffffff, 0x6, 0xffffffed, 0x7f, 0x7, 0x3, 0x4, 0x80000001, 0x1, 0xdf96, 0x10000, 0x2, 0xc1e, 0x1000, 0x9, 0x6, 0x9b6, 0x404000, 0x1, 0x5, 0x7f, 0x0, 0x2, 0xf, 0x80, 0x8f7, 0x6, 0x2, 0x7f, 0xf7b2, 0x4, 0x0, 0xfffffff7, 0x6, 0x8, 0x1, 0x4, 0xfffff800, 0x8, 0x7, 0x7, 0x14, 0x10, 0x9, 0x7, 0x80, 0xffffffff, 0x10, 0x800, 0x3, 0x3ff, 0xb7, 0x5, 0x4, 0x4, 0x0, 0x882, 0x8001, 0x1, 0x2800000, 0x2e0, 0x10000, 0x8, 0x3, 0x800, 0x1, 0x7f, 0x9, 0x6, 0x10001, 0x8, 0x92, 0x40a54e46, 0x1, 0x7, 0x1ff, 0x1, 0x4, 0x7fff, 0x0, 0xf16, 0x800, 0x1, 0x0, 0x6, 0x1, 0x3a2, 0xf769, 0x80000001, 0x6, 0xc0000, 0x8, 0xfffffff2, 0x7fffffff, 0x400, 0xb, 0x9, 0xffffffff, 0xffff]}, {0x5, [0x10000, 0x5, 0x25a, 0x1, 0xe15, 0x2, 0x8, 0xfffffffd, 0x6, 0x3, 0x5, 0x100, 0x1, 0x5, 0x27c, 0x10000, 0x0, 0xfffffff3, 0x1, 0x7, 0xfffffff7, 0xfd4, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0xf, 0x6, 0x0, 0x100, 0x0, 0xe296, 0x0, 0x8000, 0xffffa59e, 0x7, 0x1, 0x4, 0x4, 0x100, 0x8, 0x1ca, 0x2, 0x5, 0x8, 0xfffffff9, 0xa, 0x52b, 0xe, 0x4, 0xfffffff9, 0x5f, 0x5, 0x8, 0xfffffff7, 0x2, 0x4, 0x6, 0x0, 0x5, 0x3, 0x7, 0xff, 0x10a, 0x7, 0x6, 0x1ff, 0x1, 0x4, 0x0, 0x4, 0x6, 0x401, 0x4a1, 0x5, 0x8001, 0x7, 0x6f, 0xc1f6, 0x2, 0x6, 0x1, 0x7, 0xff, 0x9, 0x43d, 0x2, 0xffff, 0x5, 0x7, 0x9a, 0x7ff, 0xb9, 0x800, 0x3, 0xc, 0xffffffff, 0x5, 0x7, 0x9, 0x7ff, 0x32, 0x7]}, {0x6, [0x1, 0x5, 0xcd4, 0xb0, 0x1000, 0x8, 0xfff, 0x8, 0x6, 0xc, 0x4a, 0x9, 0x74, 0x6, 0xa, 0x75e7, 0x4, 0x0, 0x8, 0x3, 0x4, 0x1ff, 0x4, 0x80, 0x7, 0x7, 0x8, 0xaa9, 0x0, 0x7, 0xd46, 0x7, 0x5, 0x80000000, 0x9, 0x4f9b3d50, 0x800, 0x3, 0x8, 0x8, 0xdd62, 0x25ae, 0x0, 0x7, 0xfffffff9, 0x450, 0x3, 0x5, 0x2271, 0x1, 0x2, 0x1, 0x3, 0x7fffffff, 0x0, 0x3, 0xc, 0x86, 0x0, 0xb959, 0x200, 0x8, 0x5, 0x2, 0x92ad, 0x1, 0x2, 0x38e, 0x7ff, 0x10, 0x7f, 0x8, 0x5, 0x7, 0xf, 0x86, 0x2, 0x5, 0x8001, 0x0, 0x3, 0x78aa0000, 0x0, 0x0, 0x8, 0x84e1, 0xd934, 0xe000, 0x8, 0xb5d, 0x9, 0x7ff, 0x4, 0x0, 0x4, 0xfffffff8, 0x1, 0x13, 0xecb, 0x1000, 0x10, 0x0, 0x80000001, 0x3]}, {0x3, [0x1, 0x8, 0x3, 0xc, 0x0, 0xf91, 0x4, 0x7, 0x4, 0x6, 0xfff, 0x6, 0xfffffffa, 0xa000, 0xfffffff9, 0x80, 0x1, 0x1, 0xff, 0x3, 0xf, 0x3, 0x70f, 0x100, 0x2, 0x2, 0xe3, 0x1, 0x7, 0x7fffffff, 0x1, 0x9, 0x5, 0x7, 0x9, 0xa, 0xf4, 0x1, 0x2, 0x1, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x2, 0x401, 0x8, 0x8, 0x1, 0x7, 0xf2, 0x8, 0x7fffffff, 0x10001, 0x8, 0x4, 0x9, 0x5, 0x13f7, 0x779, 0x9, 0xffffffff, 0x0, 0x8, 0xeb7, 0x7, 0x9, 0x10000, 0x9, 0x4, 0x7fffffff, 0x6, 0x8, 0x7, 0x6cec, 0x10001, 0x3, 0x7, 0xb2, 0x1, 0x1, 0x5, 0x9, 0x3, 0x2, 0x5508c39c, 0x7, 0x5b3, 0x1, 0x400, 0x7, 0x1, 0x4, 0x2, 0x3, 0xe, 0x4, 0x2, 0x7, 0xffffffff, 0x50, 0x9, 0x0, 0x3]}]})
kqueue()
r1 = socket(0x11, 0x10000000000003, 0x0)
sendto$unix(r1, &(0x7f0000000140)="b10005019000e80343031bc75786ca900f0e08fecea11ea8fef96ec2c70c932fedd0fa62d416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a300a300010090d2c4e50100"/177, 0xb1, 0x4, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket(0x1c, 0x1, 0x2)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4)
bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10)
r5 = socket(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000180)={0x10, 0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2f5105", 0x14, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}})

1.5143448s ago: executing program 3 (id=51):
r0 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0)
truncate(0x0, 0x8001)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) (async)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
r1 = open$dir(0x0, 0x1, 0x10d) (async)
acct(0x0) (async)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x83)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0x2a2}], 0x1, 0x7) (async)
r3 = vfork() (async)
procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0)
fork()
fork() (async)
lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_ptr=0x6, @tid=r3}) (async)
wait4(r3, 0x0, 0x4, 0x0) (async)
r4 = socket(0x1c, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) (async)
socket$inet6(0x1c, 0x4, 0x0) (async)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="1903c2"], 0x20)
sendto$inet(r4, &(0x7f0000000000)="f09a8a80eb2bed38fce7fc61d440e82c3a010a342f34ce6cae256eae3dc856ada16d734b59a94e", 0x27, 0x4, &(0x7f0000000040)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) (async)
sendfile(r0, r4, 0xeba, 0x20000000000, 0x0, 0x0, 0x11) (async)
freebsd11_fstatat(r1, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
setuid(r5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
madvise(&(0x7f0000eee000/0x4000)=nil, 0x4000, 0x1) (async)
munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) (async)
shmdt(0x0) (async)
rfork(0x85000)

1.404363036s ago: executing program 2 (id=52):
r0 = socket(0x1c, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c)
listen(r0, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x2a, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00', 0x90e547e}, 0x24)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x4}, 0x1c)
sendto$inet(r1, &(0x7f0000000200)="0e", 0xff66, 0x300, 0x0, 0x0)
socket(0x1c, 0x1, 0x0) (async)
bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) (async)
listen(r0, 0x5) (async)
setsockopt$inet6_int(r0, 0x29, 0x2a, 0x0, 0x0) (async)
socket(0x1c, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00', 0x90e547e}, 0x24) (async)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x4}, 0x1c) (async)
sendto$inet(r1, &(0x7f0000000200)="0e", 0xff66, 0x300, 0x0, 0x0) (async)

1.284238433s ago: executing program 2 (id=53):
r0 = socket(0x26, 0x2, 0x0)
r1 = socket(0x26, 0x2, 0x0)
setresgid(0xee00, 0xee01, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0x0)
bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x300, @mcast1}, 0xc)
bind(r0, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013)
copy_file_range(r2, &(0x7f0000000000)=0xaa4, r2, 0x0, 0x0, 0x0)
r3 = socket(0x26, 0x2, 0x0)
bind(r3, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3, 0x3, @mcast1}, 0x1c)

1.014175644s ago: executing program 3 (id=54):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000)
cpuset_setdomain(0x2, 0x2, 0xffffffffffffffff, 0x20, &(0x7f0000000040)={[0x1]}, 0x3)
ioctl$PIO_DEADKEYMAP(0xffffffffffffffff, 0x20006b09, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
minherit(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, 0x0, 0x0) (async)
bind$inet(r0, 0x0, 0x0)
listen(r0, 0x7fffffff)
accept$inet(r0, 0x0, 0x0) (async)
accept$inet(r0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
thr_new(&(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, &(0x7f0000000300)={0xa, 0x6}, [0x20000000000008, 0x4, 0x14]}, 0x68)
socket(0x1c, 0x1, 0xfc)
execve(0x0, &(0x7f00000001c0), 0x0)
socket$inet6(0x1c, 0xed20c934ba875093, 0xf)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r1, 0xc040636a, 0x0)
r2 = kqueue()
kevent(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
kqueue()
socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async)
r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r3, 0x29, 0x55, &(0x7f0000000180)={0x6, {{0x1c, 0x1c, 0x2, 0x200, @mcast1}}, {{0x1c, 0x1c, 0x3, 0x0, @mcast1}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x55, &(0x7f0000000180)={0x6, {{0x1c, 0x1c, 0x2, 0x200, @mcast1}}, {{0x1c, 0x1c, 0x3, 0x0, @mcast1}}}, 0x108)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0)
openat$smbus(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
r4 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1)
ioctl$FIOGSHMLPGCNF(r4, 0x40306665, 0x0) (async)
ioctl$FIOGSHMLPGCNF(r4, 0x40306665, 0x0)

744.314949ms ago: executing program 2 (id=55):
r0 = socket$inet6(0x1c, 0x1, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x14c)
chroot(&(0x7f0000000100)='./file0/file0\x00')
chroot(&(0x7f0000000080)='./file0\x00')
chroot(&(0x7f0000000100)='./file0/file0/..\x00')
bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0x9, @loopback, 0xfffffffc}, 0x1c)
sendmsg$inet6_sctp(r0, &(0x7f0000000480)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x0, 0x9, @loopback={0x0, 0xfffffffffffffffe}, 0xffffffff}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x20184}, 0x20080)
syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0xd0, 0x3a, 0xff, @rand_addr="78040010000000000023000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local={0xfe, 0x80, '\x00', 0x0}, [{0x2, 0x17, "93d996b5c97254c2c6456f4519126d842303f3a2bf6a9cd79f96437f6ee9be5c8ecb3c9dc54cf003cd4de98f20a4da81f3de698b8572c77969d3fe4c7935502dc76d54651dcffdbf2c64d0002fefa5c082966ed92e940cd05de3b36960d66d87e619e7485ebf74cb5602bd4cc0ea183c7f1918a519ab98cd6b55f77145a96fd4bbf86081d1db413d9ddec17facda8c577cb92406816c0a4662f763b760fea02d93b087344fc1f031bc4aafb95f3f4d16839cdc70cc91"}]}}}}}})

664.304267ms ago: executing program 3 (id=56):
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
sysarch$I386_CLEAR_PKRU(0xd, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x8})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r0, 0x0)
r1 = open$dir(0x0, 0x40000400000002c2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fork() (async)
r4 = fork()
fcntl$lock(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x1, 0x3, 0x3, 0x3ff, r4})
recvfrom(r2, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0)
sendto(r3, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0)
pwritev(r1, &(0x7f0000000080), 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x190) (async)
r5 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x190)
setuid(0xffffffffffffffff) (async)
setuid(0xffffffffffffffff)
extattr_list_fd(r5, 0x2, 0x0, 0x2a)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)

663.501292ms ago: executing program 1 (id=57):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
open$dir(0x0, 0x40000400000002c2, 0x0)
sysarch$I386_SET_LDT(0x1, &(0x7f0000000180)={0x4cd4fb55, 0x0})
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0)
sysarch$I386_SET_LDT(0x1, &(0x7f0000000100)={0x8, 0x0})
openat$bpf(0xffffff9c, 0x0, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0)
setgid(0x0)
listen(0xffffffffffffffff, 0x0)
setsockopt$sock_accept_filter(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
freebsd12_shm_open(&(0x7f0000000140)='./file0\x00', 0x2, 0x14)
socket(0x26, 0x2, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local={0xac, 0x14, 0x0}, @empty, @local={0xac, 0x14, 0x0}}}}})
r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
fork()
r3 = socket(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x20100, &(0x7f0000000000)={0x10, 0x2, 0x2, @rand_addr=0x7ffffffe}, 0x10)
setsockopt$sock_splice(r3, 0xffff, 0x1023, &(0x7f0000000040)={r3, 0x40000, {0x0, 0x6}}, 0x20)

434.145857ms ago: executing program 2 (id=58):
openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176)
truncate(&(0x7f0000000280)='./file0\x00', 0x4677)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0xa)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
r2 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0)
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005})
open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MDIOCATTACH(r4, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0xe2ab, 0x2, &(0x7f0000000040)='./file0\x00', 0x7c, 0x8, 0x41, 0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b86, 0x8f, 0x5, 0xffff0e63, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffe]})
fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x2, 0x0, 0xfffffffffffffffd, 0x2000269000000})
r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000080)=0xfc80, 0x4)
syz_emit_ethernet(0x3c6, &(0x7f0000000840)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x390, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x3f, 0x20, '\x00', [@ra={0x5, 0x2, 0xa73}, @generic={0x5, 0xf4, "c4273bbe8047a9a1c3abef149d37ada89120c04449c1cc20c353e935c25af5820a879cde7b242cce50d8b206ac097c55835d9794ba9665a6ee6503e76163c4069f8eea017cbca0c523f70c8cd0935cf3e8a10c26428b2dcec44b85aa48f7c6022ad8bb1794a617a3c3eaf9a4189f2e348b07c545125b07901189357b8f285aceb908dc61ca3e6e52780fc7049e078a35b3497275ea38805cfc2cc56efe8eccac73500037bb5ee2a5903c50243a2ef09d8e7d274c16a067a5cfd2381cae68f11e29e10c4c40685f5a18a16c538e50b8c611acc435830caa3574f2667c1a1e7e7ec3f120676adbb1de5c65701f30c3f80e2d304710"}, @ra={0x5, 0x2, 0x101}, @ra={0x5, 0x2, 0x4}]}, @routing={0x1e, 0x2, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}]}, @dstopts={0x19, 0xa, '\x00', [@generic={0x8, 0x4e, "9a6cce9d41750c735fff6d1ee24f60f8247595de46840e8abcfdb1f0bc72ee61f6bc853b0662b7ab71f7746df5ae03bd692b408da4e7ec9dc063cc0e7a1da8638db9eba8db1de42e57bb42099093"}]}, @routing={0x24, 0xa, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @remote={0xfe, 0x80, '\x00', 0x0}]}, @fragment={0x56, 0x0, 0x4, 0x1, 0x0, 0x2, 0x68}, @routing={0x52, 0x12, 0x0, 0x4, 0x0, [@rand_addr="76bbf1c72c79a9efc1ef207c4beed344", @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x2}, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x123}, @mcast1]}, @routing={0x30, 0x6, 0x0, 0x0, 0x0, [@rand_addr="829e952047fc81d0282bd1ba3c3d4739", @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}]}, @dstopts={0x5b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x60, 0x1, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6a}]}, @routing={0x26c0d6be8403a5ad, 0xe, 0x1, 0xec, 0x0, [@mcast2, @rand_addr="3bfdfaf04ce9722af827ab873746aa97", @loopback, @loopback, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0x0, 0x3e, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback={0x0, 0x3b}, [@routing={0x64, 0x0, 0x0, 0x73}]}}}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
sendfile(r0, r8, 0x101, 0x400000000000, 0x0, 0x0, 0x1c)
rfork(0x85000)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176)
r9 = fork()
sigqueue(r9, 0x11, @sigval_int=0xfd51)
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000140)={0x4, 0x0, <r10=>0xffffffffffffffff, 0x81, r9})
procctl$PROC_ASLR_STATUS(0x2, r10, 0xe, &(0x7f00000000c0))
fork()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

334.231044ms ago: executing program 0 (id=59):
r0 = socket$inet(0x2, 0x1, 0x6)
r1 = fcntl$dupfd(r0, 0x11, 0xffffffffffffffff)
execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00'])
writev(r1, &(0x7f0000000280), 0x26)
writev(r1, 0x0, 0x0)
sendfile(r1, r1, 0x8, 0x7, &(0x7f0000000800)={&(0x7f0000000880)=[{&(0x7f00000004c0)="95ff0f02d0d4dbffaf27f719dd27306e7d63510db9f3fd8663144487fbb0b743a9d032bf1bf2a2d3ed193309860a6d45d0244979785764ddaea7143239986f674d40f2bc0345477439f0c95328c922265f8d63d60dbfb03cc9640c1ed017d64934d9fb0ea8e57be3294dff9e7003823f27d97749d18af6b2ace2f3e4714493348c66e1a030dbbce294ead3ca55e5f19c42c0f73716d88e0fde5296053e069ad60aa001e3ffda8b61fac538d7e40b66a7cc6843de3f5f4f21225e473b7a599d94ba89b82f5aafc0a9e32e", 0xca}, {&(0x7f00000001c0)="24d739bd76b15f7366ae87b7c4d3a3ac4da71c57697c411edea75a8fdac2dae88716e3e8aa5f1d553347e62a5c790734e2524b984e9691767c2f965ec9b267b468998f0864e15e34fe5918f541f3e823c61c658a16b42c3d001e39b4f0967fbc6bbe5701f194d4976872a1181f2b5f3df315bb36addc6819cf291067dc2b46abf7e139d5b24cf1ba7ac61c7d00e0ab756fdd", 0x92}, {&(0x7f00000003c0)="dd93eb43d0b10c02ef0e6f36f937f7b3f03edd30fd764053048dc8d951d9f066d87c9b64d1d9e9fe3a994fbbf3966efc4a40848c6041a32bf56a94273f3957bd1e4e24850b5916a016357ca6e949c13682897977017608a77c3e1e35e994b222528437c02502a7", 0x67}, {&(0x7f00000005c0)="d48083eb0f2c84964d7bcc5236639f110bf3d1663d08e10dcb7d9dd84e91d84d1ddfc291149ead1b864ea8b9952f29dd73f86ac7e1212fa0252a69a467e9cff65a22f02d77657ddcccda778f88d7d0b6fac79adf6bab2d2a02ccefc9ed89748efbd75244d179f96e70d8a747e4bfcf0f980e088873", 0x75}, {&(0x7f0000000640)="71797613021e111dea98e6f26eba696021d407cae970f5c67e21c27639e4b41cc5957a75447519bdd2a5de5acfa5749787e8c933c65189eabf277aa2082a720c317f03eb8f745c8a97351e21fe3adf51d3ff428081fd307331be2340d660b84e85cb0099316c7e1e34b74d9ec6ba932c0dd5c2d4bd23bfe74c53f01e23bd442b6ef55b2ac30746ed42a175116d2a6c240e2d72d1e49af5e2b967b50f52f1cdb4720a5d613c0a2ef5f6fd8f14273540f7e55a8d7c2ae5961654b7b5cc3215", 0xbe}, {&(0x7f0000000700)="12b0a37ecd060ee9d9a0373025006e00744b8b02af25494ff7b7abb72f95d78b8d845abece8062dad20058551d0ba191b053a68ec12c21dba2f4a9ae4ebb174d17323722a799b796aff1f133d260a5f2b85fa16f7b2545003de37f41054bdfdd506b65939bd7a92f17b1cadb1a42e81b1fae6fb7385d3d84ef0b687184d1b297a6217d245dd046557d7f7b949cff0975a3211c0bbbd49a7eacf154cedaa2f920fd10a95dad44dc6b13f8f8f3225173c94be87e991117f48d1123a106a34e7f6fdd87ced7ad312e1e468be8d113fb225b6c6b9b7ec8940ec6937a667746a60788e0075ccf1e34449dadfe230b9c315140d24b008d32", 0xf5}, {&(0x7f0000000300)="3536e7d14583647df1b3a41c411a13bd3d017702b59ffa23f689b84a", 0x1c}], 0x7, &(0x7f0000000440)}, &(0x7f0000000900), 0x8)
__semctl$SEM_STAT(0x0, 0x2, 0xa, &(0x7f0000000380)=0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x1c, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
openat$evdev(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
__specialfd$inotify(0x2, 0x0, 0x0)
open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
r2 = socket(0x1c, 0x2, 0x4)
sendmsg$inet6_sctp(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0x1c, 0x1c, 0x2, 0x7, @local={0xfe, 0x80, '\x00', 0x0}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x14, 0x4}, 0x2000c)
aio_write(&(0x7f0000000100)={0xffffffffffffffff, 0x80001001, &(0x7f00000000c0)="0b643858db936d6b", 0x8, [], 0xfffffffffffffffb, 0x1, 0x5, {0x0, 0x4, 0x0}, {0x0, 0xffffffff, @sival_int=0x40, @spare=[0x9, 0x1, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x1]}})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
r3 = open$dir(0x0, 0x0, 0x0)
cap_fcntls_limit(r3, 0x0)
renameat(r3, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/..\x00')

330.927683ms ago: executing program 1 (id=60):
r0 = openat$evdev(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f0000000040)={0x19, 0x0, 0x18, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735", 0x0, 0x0, 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)})
ioctl$UI_SET_FFBIT(r0, 0x2004556b)
procctl$PROC_REAP_KILL(0x2, 0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x8, 0xf98a, 0x0, 0x3, <r2=>0xffffffffffffffff})
procctl$PROC_REAP_ACQUIRE(0x2, r2, 0x2, 0x0)
r3 = socket(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10)
connect$inet(r3, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10)
sendto(r3, &(0x7f0000000380)="8e", 0x1, 0x20004, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400c3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x1)
r5 = socket(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x54, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x46, 0x0, 0x0)
r6 = fork()
r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x96)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
posix_fallocate(r8, 0x0, 0x8)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r7, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00')
rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f00000003c0)='./file0\x00', 0x80000000000206, 0x23)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000280)={0x8, 0xa3, r6, 0x6})

134.277623ms ago: executing program 1 (id=61):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0)
rfork(0x5000)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000340)={r1, 0x7fffffff, &(0x7f0000000300)="e2", 0x1, [0xfffffffe, 0xfffffffd], 0x1, 0x8, 0xf, {0x1, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x3, @spare=[0x7fff, 0x9, 0xf, 0x2, 0x100000008, 0xd24, 0x10000, 0x6b]}})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r3 = kqueue()
kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x7, 0xffffffffffffff00, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_udplite(0x1c, 0x2, 0x88)
socket(0x1b, 0x3, 0xd)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00')
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2e, 0x0, @rand_addr, @multicast1}}}}})
ioctl$MDIOCDETACH(0xffffffffffffffff, 0xc1c06d01, 0x0)
kqueue()
r4 = socket$inet(0x2, 0x5, 0x0)
bind$inet(r4, 0x0, 0x0)
listen(r4, 0x14040000)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x1ff, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xa7, 0x0, 0x0, {[@window={0x3, 0x3, 0x2}]}}}}}}})
open$dir(&(0x7f0000000880)='./file0\x00', 0x8, 0x0)
cpuset(&(0x7f0000000080))
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x860, 0x0, 0x0)
setresgid(0xee00, 0xee01, 0x0)
unmount(&(0x7f00000000c0)='./file0\x00', 0x180244)
mount(&(0x7f0000000040)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140))
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0)
copy_file_range(r5, &(0x7f0000000000)=0x80000001, r5, 0x0, 0x100000, 0x0)
open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0)

128.912344ms ago: executing program 0 (id=62):
r0 = kqueue()
open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$crypto(0xffffffffffffff9c, 0x0, 0x100000, 0x0)
r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r2, 0x29, 0x55, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0)
ioctl$MDIOCDETACH(r3, 0xc1c06d01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x8, 0x10000, 0xe12, 0x0, 0x0, 0x1, 0xf, 0x1146, 0x8d, 0xffffffff, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xdf8, 0xaca, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, 0x0, 0x40000, 0x0, 0x4000, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffd9, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x3, 0xfffffffc]})
ioctl$BIOCFEEDBACK(0xffffffffffffffff, 0x8004427c, 0x0)
r4 = __specialfd$eventfd(0x1, &(0x7f0000000600)={0xfde6, 0x5}, 0x8)
fcntl$setstatus(r4, 0x4, 0x10040)
r5 = socket(0x1c, 0x1, 0x0)
setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r5, 0x6, 0x29, &(0x7f00000001c0)={&(0x7f0000000200)="0162", &(0x7f0000000100)='\x00'/12, 0x0, 0x19, 0x2, 0xc, 0x1b, 0x0, 0x0, 0x3, 0x4}, 0x40)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r6 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1b, &(0x7f00000001c0), 0x4)
setsockopt$inet6_udp(r6, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r6, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4}, 0x1c)
cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001])
getfh(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280))
openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0})
sysarch$I386_GET_LDT(0x0, &(0x7f0000000140)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000200)={@random="717dc35b11bf", @random="c61800b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @udp={{0x0, 0x2, 0x8}}}}}})
rfork(0x85000)

14.431076ms ago: executing program 0 (id=63):
fcntl$lock(0xffffffffffffffff, 0x8, 0x0)
r0 = kqueue()
listen(0xffffffffffffffff, 0x2)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, 0x0, 0x0)
cpuset_getaffinity(0x2, 0x3, 0x5, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x6f2, @rand_addr="fee3a38e5cac1c51deba3c6b07a430a0", 0x2300}, 0x1c)
kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0)
truncate(0x0, 0x8000)
socket$inet6_udp(0x1c, 0x2, 0x0)
mount(&(0x7f00000001c0)='hammer\x00', &(0x7f0000000200)='./file1\x00', 0x2, 0x0)

0s ago: executing program 32 (id=56):
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
sysarch$I386_CLEAR_PKRU(0xd, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x8})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r0, 0x0)
r1 = open$dir(0x0, 0x40000400000002c2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fork() (async)
r4 = fork()
fcntl$lock(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x1, 0x3, 0x3, 0x3ff, r4})
recvfrom(r2, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0)
sendto(r3, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0)
pwritev(r1, &(0x7f0000000080), 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x190) (async)
r5 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x190)
setuid(0xffffffffffffffff) (async)
setuid(0xffffffffffffffff)
extattr_list_fd(r5, 0x2, 0x0, 0x2a)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts.
Warning! syz-executor[814] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800
Out of ktrace request objects.
Nov 13 11:13:58 ci-freebsd-main-2 kernel: nd6_na_input: duplicate IP6 address fe80:5::2aa
if_delmulti_locked: detaching ifnet instance 0xfffffe006e854800
Nov 13 11:13:58 ci-freebsd-main-2 kernel: arp: aa:aa:aa:aa:aa:bb is using my IP address 172.20.1.170 on tap1!
md58027: truncating fractional last sector by 4 bytes
SYZFAIL: SIGILL
Connection to 10.128.0.217 closed by remote host.
if_delmulti_locked: detaching ifnet instance 0xfffffe006e854800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e854800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e854800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000


FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0)

login: if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800

FreeBSD/amd64 (ci-freebsd-main-2.us-central1-b.c.syzkaller.internal) (ttyu0)

login: ktrace write failed, errno 27, tracing stopped for pid 494
if_delmulti_locked: detaching ifnet instance 0xfffffe006e854800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e854800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e854800
pid 744 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 934
ktrace write failed, errno 27, tracing stopped for pid 744
ktrace write failed, errno 27, tracing stopped for pid 935
ktrace write failed, errno 27, tracing stopped for pid 1
pid 781 (sh), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 781
pid 876 (rtsol), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 876
set $lines = 0
pid 742 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 742
pid 337 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 337
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
pid 944 (syz-executor), tap1: tun/tap protocol violation, non-controlling process closed last.
ifaddr cache = 0xfffffe0057f0b900 is deleted
tap1: link state changed to DOWN
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000
Password:ktrace write failed, errno 27, tracing stopped for pid 944
pid 872 (rtsol), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 872
pid 746 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 735 (sh), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 746
ktrace write failed, errno 27, tracing stopped for pid 735
pid 739 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 739
pid 875 (rtsol), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 875
pid 770 (sh), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 770
pid 740 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 740
pid 743 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 743
pid 741 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 741
pid 745 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
ktrace write failed, errno 27, tracing stopped for pid 745

Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
show registers
Password:
Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000
ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
show all tcpcbs/bl