last executing test programs:

4.640698075s ago: executing program 2 (id=22):
r0 = open$dir(0x0, 0x1, 0x0)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f0000000040)={0x19, 0x0, 0x18, &(0x7f0000000400)="3c022e61192eecb07f8aee18e5aa350590a501001fd5d7dbce1e30f435", 0xe9, 0x0, 0x0, 0xfdffffff, [0x0, 0x4]})
listen(0xffffffffffffffff, 0x7fffffff)
listen(0xffffffffffffffff, 0x80000003)
shmat(0x0, &(0x7f00001be000/0x2000)=nil, 0x5000)
ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x0, 0x10001, &(0x7f00000000c0)="6c0d9e9caf4d76146badbe5f675f596b826a2de005580ce1d2f4565c26ee4d554dc94f33c43c31ab3edb4a1162139beb27666dbd4b1d06db198b1a9ab2f862558cde3d062f0ee9596a5c9de4c89592c26d44fa5a4c7a2fa22f132381b85ef7b512b27b09b207538ff356556836600de1a943f896beac17ede29381ff8d327bb62d1719f5fbe08daf5a93e4def7ab244a64b428e4cba394e216c23489da4bc058c26a698065e1401a6656e968ffe5e00ff463f751ee27ac3b697a042a180419c1c0d1428f6f063fd29d0ea7a575c9cc9b299b2c643d44589ef761814bebb02844edff2ec40fcd", 0x0, 0x0, &(0x7f00000003c0)})
pwritev(r0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f00000002c0)=[{0x4, 0xfffffffffffffff5, 0x80ca, 0x2, 0x6, 0xf1, [0x100, 0xda, 0xa, 0x6]}, {0xf8f, 0xffffffffffffffff, 0x28, 0x40000000, 0x8c, 0xdc, [0x358, 0x800, 0x9, 0x2]}, {0xfffffffffffffefc, 0xfffffffffffffff8, 0x8000, 0x2, 0x4153, 0x3, [0x5, 0x4, 0x2, 0x1]}, {0x800, 0xfffffffffffffffe, 0x81, 0x1, 0x1a11, 0xffffffffffffff81, [0x9, 0x4, 0x3, 0x8000]}, {0xfffffffffffffff8, 0xfffffffffffffffa, 0x10, 0x4, 0x9, 0x8, [0x5, 0x100000000, 0x7, 0x9]}], 0x5, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
fork()
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r3, 0x0)
mprotect(&(0x7f000016d000/0x1000)=nil, 0x1000, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
minherit(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
munlockall()
r4 = semget$private(0x0, 0x0, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
accept$unix(r5, &(0x7f0000000200)=@file={0x4a, 0x0, ""/72}, &(0x7f0000000280)=0x4a)
setuid(0xee01)
vfork()
lio_listio(0x1, 0x0, 0x0, &(0x7f00000047c0)={0xfffffffffffffffe, 0x1001b, @sival_int=0x100, @ke_flags=0x19})
__semctl$GETZCNT(r4, 0x1, 0x7)

4.080681358s ago: executing program 1 (id=30):
setresuid(0x0, 0x0, 0xee00) (async, rerun: 64)
open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x8000, 0x0) (rerun: 64)
setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) (async)
setgroups(0x0, 0x0) (async)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400000, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00')
rfork(0x96014)
sigaction(0x14, &(0x7f0000000100)={&(0x7f00000000c0)="0f0f28a0c4017c53c50f71e20b4229ec4069b50008000000080000c403896ae7d3c4a1ff1153076744c0584e00430f1812c4827d33de", 0x6d}, 0x0)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)) (async)
getpriority(0x0, 0xa04)
ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x40005aa8, 0xffffffffffffffff)

4.078984742s ago: executing program 1 (id=31):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={<r1=>0x0, 0xb40d}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000080)={r1, 0x8}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x0, 0x40, @rand_addr="b42ce21f0ee007d2d3f9dae524f7ec16", 0x10001}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="e18d3d2aa49bd8e6c049d6eaf89aced75c832b034e05f97864d712275e5b7806b14df01ce389dad8f0601b8701edd41abaa80cd1fc808b4f9bf3bd7ab903cdc6c1a55315bbaaed0c5d7163ce46c98ba9438d1df749be16825a0ffb3cee1403a3fe56d754a8084d08dea97debbe206acdf166f7d7f8cd4c7efd3519faec6332db98d8a371eb79", 0x86}, {&(0x7f00000001c0)="c1a3a882e4e497053f695771d24646990490225807bd709496a6f994f0aa6f786e23abbc852aee", 0x27}], 0x2, &(0x7f0000000240)=[@init={0x14, 0x84, 0x1, {0x8, 0x9, 0xff, 0xfff9}}, @sndinfo={0x1c, 0x84, 0x4, {0x3, 0x2120, 0x0, 0x7, r1}}], 0x30, 0x88}, 0x104)
r2 = socket$inet6_tcp(0x1c, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0x1c, 0x1c, 0x2, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c)
openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) (async)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x4, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, 0x200, 0x60f, 0x8001, 0xea67, &(0x7f0000000380)='\x00', [0xffff, 0x6ea3, 0x4, 0x4, 0x6, 0x9, 0x2, 0xd042, 0x5, 0x1, 0x6, 0xf, 0x7de014cb, 0x27b, 0x6e0, 0x3ff, 0xd2, 0xfffffffd, 0x401, 0x38, 0xfffffffe, 0x7, 0x6, 0x9, 0x400, 0x1, 0x100, 0x0, 0xf, 0xb, 0xfffffff8, 0x8, 0x8, 0x6, 0xfffff8ad, 0x3, 0x7, 0x6, 0x2, 0x6, 0x3, 0x3e9, 0x9, 0xc1, 0xb803, 0x582, 0x1, 0x2, 0xf24, 0x40, 0x2, 0x4, 0x59b5bdfe, 0x5, 0x5, 0x1, 0x3, 0xffffffff, 0x905e, 0x8, 0x2, 0xe248, 0xffffdc96, 0x27, 0x81, 0xf0, 0x3, 0x6, 0x2, 0x8000, 0x86, 0x401, 0x8, 0x3, 0x7460, 0x0, 0x0, 0x9, 0x2, 0x7fff, 0x10000, 0x1ff, 0xf8e3, 0xfa3, 0x43, 0x0, 0x0, 0x1, 0x800000, 0xfffffffc, 0x7, 0x7, 0xffff, 0x6, 0xfffff83c, 0x7]})
open$dir(&(0x7f0000000580)='./file0\x00', 0x40002, 0x1)
setsockopt$inet6_int(r2, 0x29, 0x14, &(0x7f00000005c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000600)=0x1, 0x4) (async)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000600)=0x1, 0x4)
listen(r2, 0x7)
r4 = accept$inet(r0, &(0x7f0000000640)={0x10, 0x2, 0xffffffffffffffff, @loopback}, &(0x7f0000000680)=0x10)
extattr_set_fd(r4, 0x2, &(0x7f00000006c0)='/dev/mdctl\x00', &(0x7f0000000700)="85dd8922491b01efbbaa3533e1f413c7969557888cb959e7b80c5891bf1f6cda108c5d176d2f9fd159635fbc6ecb29b57217bbb03a1765fcefa2e41fcc413d6affeac78568cbf1454c53b487e6328fa316a396d9af6ac4dcdf50ab7e2a9890bbb72d4e10bec12a1429d4d0fbc65c5dd2c89469efb4b7896ace2e8f4cc2368a2ecf13f260695eb07e0177f7252173d574ab50effe483728594f9400eb336b13d09921be96fcfd3c200f38a38eb368fb6af7970a485e", 0xb5) (async)
extattr_set_fd(r4, 0x2, &(0x7f00000006c0)='/dev/mdctl\x00', &(0x7f0000000700)="85dd8922491b01efbbaa3533e1f413c7969557888cb959e7b80c5891bf1f6cda108c5d176d2f9fd159635fbc6ecb29b57217bbb03a1765fcefa2e41fcc413d6affeac78568cbf1454c53b487e6328fa316a396d9af6ac4dcdf50ab7e2a9890bbb72d4e10bec12a1429d4d0fbc65c5dd2c89469efb4b7896ace2e8f4cc2368a2ecf13f260695eb07e0177f7252173d574ab50effe483728594f9400eb336b13d09921be96fcfd3c200f38a38eb368fb6af7970a485e", 0xb5)
r5 = fhopen(&(0x7f00000007c0)={{[0x4, 0x3]}, {0xea25, 0x3ff, "1722a29f699dd0948f2689536a53f0c3"}}, 0x8)
ioctl$DIOCGETSTATES(r5, 0xc0104419, &(0x7f0000000800)="25f01f2c32550e262d791ed59d8439dc9ed6062911ef32dc90960cae4a311687b157df7ee2783bf3ceaac9f9f6b717343fcb55c7f2da147f7f7d1e26c1c4d171219b5b50db5728a631dd0fcec9e71043f914a6b0c30b38d0e5ee92c2898b02b94d9c73226d2e44f3891b67248fbbe1bad9853145c41c05c3f1cad0727af5807e65731fb36388a2e0ca313d536fa3879db534a084")
readv(0xffffffffffffff9c, &(0x7f0000000e80)=[{&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/124, 0x7c}, {&(0x7f0000000a40)=""/94, 0x5e}, {&(0x7f0000000ac0)=""/196, 0xc4}, {&(0x7f0000000bc0)=""/175, 0xaf}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/214, 0xd6}], 0x7)
getsockopt$inet6_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r5, 0x84, 0x24, &(0x7f0000000f00)={r1, @in={{0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}}, 0x4}, &(0x7f0000000fc0)=0x90)
read(r3, &(0x7f0000001000)=""/16, 0x10) (async)
read(r3, &(0x7f0000001000)=""/16, 0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000001040)={r1, 0x9}, &(0x7f0000001080)=0x8) (async)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000001040)={<r6=>r1, 0x9}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x15, &(0x7f00000010c0)={r6, 0xc818}, 0x8) (async)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x15, &(0x7f00000010c0)={r6, 0xc818}, 0x8)
getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(r5, 0x84, 0x8003, &(0x7f0000001180)={r6, &(0x7f0000001100)=[@in={0x10}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @empty}, @in={0x10, 0x2, 0xffffffffffffffff, @rand_addr}, @in={0x10, 0x2, 0xffffffffffffffff, @broadcast}]}, &(0x7f00000011c0)=0x10) (async)
getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(r5, 0x84, 0x8003, &(0x7f0000001180)={r6, &(0x7f0000001100)=[@in={0x10}, @in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @empty}, @in={0x10, 0x2, 0xffffffffffffffff, @rand_addr}, @in={0x10, 0x2, 0xffffffffffffffff, @broadcast}]}, &(0x7f00000011c0)=0x10)
close(r4) (async)
close(r4)
setsockopt$inet6_sctp_SCTP_CONTEXT(r5, 0x84, 0x1a, &(0x7f0000001200)={r6, 0x6}, 0x8)
r7 = accept4$inet6(r2, &(0x7f0000001240)={0x1c}, &(0x7f0000001280)=0x1c, 0x0)
bind(r0, &(0x7f00000012c0)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10)
aio_error(&(0x7f00000014c0)={r7, 0x6, &(0x7f0000001300)="4e5334e2054086a0097c24169e58666eb7e97d9dda5bc0b3d15250c5578e2b9f485812abf52b4c949f3ecfd9701fec85777af77c272fc8854d147854e941bf7b6058f1b3c9bb048de866d4a58997628b886a96a2b48d8ad3c4ab7b9d12e123b244a9d02b634ea45f2c6d535b39ac146e835005b2672bf1b398bdc2b0dcfdad2ed535a0069017a8b6ebb662086f0c4dba7c1d180d6dc566800e172067c237d1ede2d7fc201c7266e5f4f24cfa03202e5cff91a2ea56796e50bd7698e703422566d12d660634bf8277e13c3fad704780f8720e9ae08160285adeab3085315a8b66fe", 0xe1, [0x23bf87d2, 0x10001], 0x9, 0xbb6c8d9a93910925, 0xac5, {0x1, 0x81, &(0x7f0000001400)="c627a837cdbca67bdb13e34f5469f08d680fb3ff1631c3224d82c8ed823d5c540a13f4014d0d769d0635119370235a208ab3f551324a937fba6df1ff3bff4294f6b95c6072dfe8fad27efbf957fd8bed725bbe37e70c37a20e429a1d9eb98a184242495e8b80a34b47ef11bb538bf03adc6f10b8ca88202789fcc2df75703479b55f999cdb0a60298c1057a3b1b8c8ab8f7c46de2ee74fa4164b7d5487cedc160f2b0b1dca3f0cc2539f5a2bfec3a3db"}, {0x0, 0x1e, @sival_ptr=0x8, @ke_flags=0x4004}}) (async)
aio_error(&(0x7f00000014c0)={r7, 0x6, &(0x7f0000001300)="4e5334e2054086a0097c24169e58666eb7e97d9dda5bc0b3d15250c5578e2b9f485812abf52b4c949f3ecfd9701fec85777af77c272fc8854d147854e941bf7b6058f1b3c9bb048de866d4a58997628b886a96a2b48d8ad3c4ab7b9d12e123b244a9d02b634ea45f2c6d535b39ac146e835005b2672bf1b398bdc2b0dcfdad2ed535a0069017a8b6ebb662086f0c4dba7c1d180d6dc566800e172067c237d1ede2d7fc201c7266e5f4f24cfa03202e5cff91a2ea56796e50bd7698e703422566d12d660634bf8277e13c3fad704780f8720e9ae08160285adeab3085315a8b66fe", 0xe1, [0x23bf87d2, 0x10001], 0x9, 0xbb6c8d9a93910925, 0xac5, {0x1, 0x81, &(0x7f0000001400)="c627a837cdbca67bdb13e34f5469f08d680fb3ff1631c3224d82c8ed823d5c540a13f4014d0d769d0635119370235a208ab3f551324a937fba6df1ff3bff4294f6b95c6072dfe8fad27efbf957fd8bed725bbe37e70c37a20e429a1d9eb98a184242495e8b80a34b47ef11bb538bf03adc6f10b8ca88202789fcc2df75703479b55f999cdb0a60298c1057a3b1b8c8ab8f7c46de2ee74fa4164b7d5487cedc160f2b0b1dca3f0cc2539f5a2bfec3a3db"}, {0x0, 0x1e, @sival_ptr=0x8, @ke_flags=0x4004}})
connect$inet(r0, &(0x7f0000001580)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) (async)
connect$inet(r0, &(0x7f0000001580)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10)
r8 = accept$inet6(r7, &(0x7f00000015c0)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000001600)=0x1c)
bindat(r8, r2, &(0x7f0000001640)=@in={0x10, 0x2, 0x2, @rand_addr=0x5}, 0x10)

3.410785621s ago: executing program 2 (id=33):
r0 = socket(0x1c, 0x3, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x0, @rand_addr="000000000000000b0500", 0x2}}}, 0x108)
cpuset_getid(0x1, 0x5, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet6_udp(0x1c, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="fefcb1235ed191d855d55a61f51d8fea"}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x53, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0xfffffffc, @local={0xfe, 0x80, '\x00', 0x0}}}}, 0x108)
socket(0x26, 0x2, 0x0) (async)
socket(0x26, 0x2, 0x0)
rfork(0x85000)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x1ff, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d900", 0x8, 0x3f, 0x0, @rand_addr="3bcc2629a17a6c58afb8877c8be162e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x3, 0x0, 0x8}}}}}}}) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d900", 0x8, 0x3f, 0x0, @rand_addr="3bcc2629a17a6c58afb8877c8be162e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x3, 0x0, 0x8}}}}}}})

3.300553743s ago: executing program 2 (id=35):
r0 = socket(0x1c, 0x1, 0x0)
kqueue() (async)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async)
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
sysarch$I386_CLEAR_PKRU(0xd, &(0x7f0000000000)={0x6, 0x4, 0x4fd3, 0x4}) (async)
sysarch$I386_CLEAR_PKRU(0xd, &(0x7f0000000000)={0x6, 0x4, 0x4fd3, 0x4})
socket(0x1c, 0x3, 0x0)
mount(&(0x7f0000000000), 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff])
access(0x0, 0x0)
kqueue() (async)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async)
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
freebsd11_fhstatfs(&(0x7f0000000080)={{[0x5, 0x4752]}, {0x3ff, 0x6, "95f1b892192fae7d6edcc55ae8cb4654"}}, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x141, &(0x7f0000ffb000/0x3000)=nil)
sysarch$I386_CLEAR_PKRU(0xd, &(0x7f00000002c0)={0x240c, 0x690d, 0x7fffffff})
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000f40)=""/218)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4)
r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f00000001c0)=""/204, 0xcc}], 0x2)
ftruncate(r4, 0x3863) (async)
ftruncate(r4, 0x3863)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f00000000c0)={0x15, 0x0, 0x18, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755aedaacdd4743c7eaa", 0x0, 0x0, 0x0, 0x7d86699a})
ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc0306367, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f00000016c0)=ANY=[@ANYBLOB="0004000000000000040100040100c2"], 0x28)
setsockopt$inet6_tcp_TCP_FASTOPEN(r0, 0x6, 0x401, &(0x7f0000000000)={0x5, "727e2b3e7ce6b8a9ce5fd0d1c5b5cd05"}, 0x14)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000040)={'bbr\x00'}, 0x24)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000180)={'freebsd\x00', 0x3}, 0x24)
sendto$inet6(r0, &(0x7f0000000040)="14", 0x1, 0x5, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="fee3a38e5cac1c51deba3c6b07a430a0"}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000000040)="14", 0x1, 0x5, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="fee3a38e5cac1c51deba3c6b07a430a0"}, 0x1c)

3.300158291s ago: executing program 0 (id=36):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}})
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0)
rfork(0x96014)
sync()
socket(0x1c, 0x2, 0x3)
ktimer_delete(0x0)
ktimer_gettime(0x0, 0x0)
ktimer_settime(0x0, 0x1, &(0x7f00000001c0)={{0xe1a, 0x1ff}, {0x6, 0x8}}, &(0x7f0000000200))
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000)
madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3)
sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x1, 0xfffffffffffffff9, 0x9, 0x8, 0x4, 0x0, [0x0, 0x100000000, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="fb000000000000000000000086dd60826e03000e000000000100000000000e14fc11133f6400fe800000000000"])
chroot(&(0x7f0000000100)='./file0\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff)

3.216541332s ago: executing program 1 (id=38):
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0) (async)
r0 = kqueue()
kevent(r0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffc}, {0x7, 0xfffffffffffffff5, 0xc0b1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffe]}, {0x7, 0xfffffffffffffff5, 0x0, 0x64000000}], 0x3, &(0x7f00000002c0)=[{}], 0x1, 0x0)
ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) (async)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
rmdir(&(0x7f0000000200)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
listen(r2, 0x0)
freebsd10_pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3) (async)
accept4(r2, 0x0, 0x0, 0x0) (async)
copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
setsockopt(r2, 0x8, 0xfcb, 0x0, 0x0) (async)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$BIOCSETF32(r5, 0x80084267, &(0x7f0000000180)={0x3, 0x1}) (async)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a", 0x10) (async)
r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x100)
renameat(r7, &(0x7f00000000c0)='./file0\x00', r7, 0x0) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[]) (async)
openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
r8 = kqueue()
kevent(r8, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async)
shmdt(0x0) (async)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20084, 0x0, 0x0) (async)
ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f0000000780)={0xf, 0x7, 0x0, 0x0, 0x800000008, 0x4, 0xfffffffd, 0xa, 0x0, 0xa7, &(0x7f00000001c0)='\x00', [0x18, 0x6, 0x8, 0x4, 0x4, 0x4, 0x91e, 0xf, 0x6, 0xa, 0x8, 0x7, 0x5, 0x7, 0x1, 0xfffffff3, 0x9, 0xffff3382, 0x8000007, 0x0, 0x401, 0x9, 0xcde, 0x6, 0xfffffff8, 0x7, 0x7, 0x0, 0x5, 0x5ba, 0x7, 0xffbffffa, 0x5, 0x9, 0x3d5532c1, 0x6, 0xfffeffff, 0x8000, 0x2, 0x1, 0x7, 0x0, 0x0, 0x3, 0x271f, 0x3, 0x6, 0x80000003, 0xac5e, 0x2, 0xfff7fff7, 0x6ddbd7a2, 0x4, 0x300, 0xb, 0x8, 0x86, 0x9, 0x20, 0x3, 0x8001, 0x9, 0x7f, 0x2, 0x6, 0x4, 0x10001, 0xfffffff5, 0x0, 0x80, 0x6, 0x7, 0xff, 0x0, 0x2, 0x9, 0x388d, 0xfffffffc, 0x3, 0x0, 0x3, 0x40, 0x80000001, 0xe2e, 0x5, 0xed, 0x10000, 0xc, 0xfffffffe, 0xfb, 0x1, 0xe2, 0x7ffffffb, 0x5, 0xc0b0, 0x81]}) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)

3.150876535s ago: executing program 3 (id=39):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0)
cpuset_setaffinity(0x3, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={[0x2]})
symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x6e5d}, &(0x7f00000002c0)=0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000380))
rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00')
setreuid(0x0, 0xee01)
r2 = socket(0x1c, 0x1, 0x0)
r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
ioctl$SMB_READB(r3, 0xc024698a, &(0x7f00000000c0)={0x0, 0x0, 0x0, @buf="dcbf", @buf="de32", 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x3, @empty}, 0x1c)
getsockopt$inet6_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x104, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
socket$inet6_sctp(0x1c, 0x1, 0x84)
r4 = kqueue()
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x205e, 0x2d})
close(r4)
r5 = socket$inet(0x2, 0x3, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x65, 0x0, 0x0)
socketpair(0x11, 0x3, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000040)=0x40004, 0xfe68)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x3, @multicast2}, 0x10)

3.000799077s ago: executing program 1 (id=40):
kqueue()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DIOCIGETIFACES(r0, 0x4004667a, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0xd8})
cpuset_getdomain(0x2, 0x4, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x2, @loopback}, 0x10)
cpuset_setdomain(0x3, 0x2, 0x9, 0x20, &(0x7f0000000100)={[0x0, 0x401, 0x5, 0x2]}, 0x2)
connect$inet(r1, &(0x7f0000000000)={0xffffffffffffffd3, 0x2, 0x2, @loopback}, 0x10)
ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f00000001c0))
r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f00000012c0)={0x7, 0x2, 0x6, 0x4ac3, 0x0, 0x0, &(0x7f0000000200)="d84e66bb2b", 0x0})
r3 = open$dir(&(0x7f0000000000)='./file2\x00', 0x200, 0x0)
posix_fadvise(r3, 0x0, 0x10000100000000, 0x3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000002300), 0x4, 0x0)
freebsd11_fhstatfs(&(0x7f0000000040)={{[0x1, 0x8]}, {0x40, 0x200, "08082e4687dbf5c2b8e2a6e18e8b0916"}}, &(0x7f0000000240))
rfork(0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0)

2.550507189s ago: executing program 2 (id=41):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x84)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0))
open$dir(&(0x7f00000016c0)='./file0\x00', 0x400000, 0x0)
open$dir(0x0, 0x202, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0xf9)
procctl$PROC_PROTMAX_STATUS(0x0, 0x0, 0x10, &(0x7f0000000080))
cpuset_setaffinity(0x3, 0x5, 0x4, 0x8, &(0x7f0000000100)={[0x2]})
bind(0xffffffffffffffff, &(0x7f0000000140)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa)
open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
cap_enter()
open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="5f9784025e9eaaaaaaaaaabb86dd60000080004832ff00000000000000000000000000000000fe8000000000000000000000000000aa41c0e9fb18402dae60fed9f600002b00000000000000000000000000000000004fc55441a7af3a2cc2759ef6f1a26c223c0200fc00000000ff020000000000000000001800000001"])
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x109, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x100003, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x1}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c)
fcntl$lock(0xffffffffffffffff, 0x16, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x1c4)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
extattr_get_file(0x0, 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x11, 0x0, 0x0)
open$dir(0x0, 0x10000, 0x0)
r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
semget$private(0x0, 0x2, 0x20)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10000410, 0xffffffffffffffff, 0x1)

2.460686761s ago: executing program 1 (id=42):
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/114, 0x72}], 0x1, 0x4)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
chroot(0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5)
fork()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
fork()
openat(r0, &(0x7f0000000140)='./file0\x00', 0x200201, 0x0)
r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x40100000, &(0x7f0000000180))
r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0xa0)
r4 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0xc, 0x0, 0x18)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x60000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r6 = __specialfd$eventfd(0x1, &(0x7f0000000540), 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000002640)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0}, 0x0)
readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/255, 0xff}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))

1.300683626s ago: executing program 0 (id=43):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc)
aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1]}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)="ffffffffffff00000000000000", 0xd}, {&(0x7f0000000280)="c6d2ad0d70c599037e863dae71bb99457a1bb935c59a3cf371aa3bea741241703da6c3a7c351ccc8f324e8223124b05df4e63d06be62716d24ca1ef5da15448a5c6a74188769fffcd6219bf8aeb8b16ccffec4d298476baa056de0a6a6b89f4b01423c632590175695eeca1921", 0x6d}, {&(0x7f00000021c0)="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", 0xff}, {&(0x7f0000000400)="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", 0xe3c}], 0x4, 0x0, 0x0, 0x20381}, 0x0)
recvmsg(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000002680)=""/4092, 0xffc}], 0x1, 0x0}, 0x42)
rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2})
r3 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0)
freebsd11_fstatfs(r3, &(0x7f00000002c0))
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5)
r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
ioctl$CIOCCRYPT(r4, 0x80ec4402, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0})
rfork(0x3060)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x2)
mmap(&(0x7f0000029000/0x800000)=nil, 0x800000, 0x3, 0x20011, r5, 0x0)

1.299557058s ago: executing program 3 (id=44):
r0 = kqueue()
fchown(r0, 0xffffffffffffffff, 0x0) (async)
setresgid(0xee00, 0xee01, 0x0) (async)
syz_emit_ethernet(0x0, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
shm_unlink(&(0x7f00000000c0)='./file0\x00') (async)
r1 = kqueue()
clock_settime(0x0, &(0x7f0000000000)) (async)
clock_settime(0x4, &(0x7f0000000280)={0xca9a3c, 0xd}) (async)
kevent(r1, &(0x7f0000000040)=[{0x100000000, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1, [0xff, 0x0, 0x1000, 0x9]}], 0x1, 0x0, 0x0, 0x0) (async)
lio_listio(0x300, 0x0, 0x0, 0x0) (async)
r2 = socket(0x1c, 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0xd, &(0x7f0000000000)={@multicast1, @broadcast}, 0x8) (async)
getsockopt$inet_buf(r3, 0x0, 0x4a, 0x0, 0x0) (async)
setsockopt$sock_int(r2, 0xffff, 0x1001, 0x0, 0x0) (async)
kqueue() (async)
procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) (async)
sigqueue(0x0, 0x2, @sival_ptr=0xfff)
wait4(0x0, 0x0, 0x0, 0x0) (async)
setsockopt$inet_buf(r2, 0x0, 0x47, &(0x7f0000000080)="33b7bd3af422020e9db9db76499449cd1cbc1e829a4ad1bed276f2a4f56efe0ac7f4d0fa4eeecd57da5ba232e8e3a88a4340a83aca1588c2db35fd21322459f9fd9263771219e2ae8505005260e8c786b671b3b53b1eb352fee622fb372a0a98e89a101d08a60812a16c1c6e44188ed0a0e2d13e00e3ae65", 0x78) (async)
open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x1cf) (async)
bind$inet6(r2, 0x0, 0x0)
syz_emit_ethernet(0x99, &(0x7f0000000a40)={@random="73b9ccc300", @random="00f7000400", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x63, 0x3a, 0x0, @rand_addr="00f0372e0865911feb7ee80000008000", @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "8f574f1de0cc99388fd6df951f34a64b35581d5298f4bc4e458de4eee9a0917792d46c1b31bfd49d7a33c29d250905db3638ccf70d5ef6ef0c8f2ee0266547efd5a0ee85e773b37650b2c3feacd2bb4388cf0e1ac10178db75deac"}}}}}})
mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
setreuid(0xee00, 0x0) (async)
getuid() (async)
socket$unix(0x1, 0x2, 0x0)

1.250612278s ago: executing program 3 (id=45):
fork()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
pwritev(r1, 0x0, 0x31, 0x5)
setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000000)={'bbr\x00', 0x9}, 0x24)
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=<r2=>0x0)
r3 = getegid()
freebsd11_fstatat(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
fhstat(&(0x7f0000001300)={{[0xe1d, 0xffff]}, {0xfff9, 0x627f, "41330c33eee63d9080b2ac11869fc5ec"}}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstatat(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x0)
freebsd11_fstatat(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x4200)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001640), 0x200000, 0x0)
r9 = openat(0xffffffffffffffff, &(0x7f0000001680)='./file0\x00', 0x100000, 0x74)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000140)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8, &(0x7f00000005c0)=[{&(0x7f00000002c0)="c88c04ef53e6c13b1b4892f6b1dea1ab758cf391757a113283fa30850ad1ea197ddd9e586ace5857aa63ce77e131e6bdcb9c7621880351253301c88e1f45cfc6d66ec32b6787da39c85a2fcd247c", 0x4e}, {&(0x7f0000000500)="0d7222e33348dc669991e42145fdb7d732d3fd06f1c15f1bcd3c200d14b75e267862850826d8080c5bd5f432580bc3c74f506677dc2576042fb0f6028ec4ff49cbff31868d984dd8a5eeb8226f5c59d0fe3f7999e74960a3b81ef18e49cdf79eaafa632187c1b26c3150261f738dc08946dbbce92538217e1d1ffe2115c42a101828dc21fcb5088dccb1415be10eb7a5dcf569", 0x93}, {&(0x7f00000001c0)="9396750be3a1b7eef9273d8dd13f8adc047a88d0aa5073ef98588f7a8992eaba6f5c92", 0x23}, {&(0x7f0000000380)="805869622ed9443ca051f9a5e58653bb6c3e0f1c4cfead3ea93cc8f9b73a3b94b20577b23c1e5dd65e25bc236a830ab636cd2ec17dbc7c2b54b5861805d6ace0fed65bfba9c8", 0x46}], 0x4, &(0x7f00000016c0)=[@rights={0x18, 0xffff, 0x1, [0xffffffffffffffff]}, @cred={0x68, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @cred={0x68, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, r4, 0x0, 0x0, r5, 0xffffffffffffffff, r6, r7]}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x30, 0xffff, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x18, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x178, 0x20001}, 0xd)
fchown(r0, 0x0, r5)
fork()
sync()
mlock(&(0x7f00009f8000/0x4000)=nil, 0x4000)
cpuset_setaffinity(0x1, 0x4, 0x6, 0x81, &(0x7f0000000440)={[0xa737]})
sysarch$I386_SET_LDT(0x1, 0x0)
mlock(&(0x7f0000c05000/0x3000)=nil, 0x3000)
mprotect(&(0x7f0000d2b000/0x2000)=nil, 0x2000, 0x0)
munlock(&(0x7f0000144000/0xc00000)=nil, 0xc00000)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x55, 0x0, 0x0)
r10 = kqueue()
kevent(r10, &(0x7f00000001c0), 0x800e4a, 0x0, 0xa9fa, 0x0)
procctl$PROC_STACKGAP_CTL(0x2, 0xffffffffffffffff, 0x11, &(0x7f0000000040)=0x7)
mincore(&(0x7f0000156000/0xc00000)=nil, 0xc00000, &(0x7f0000000480)=""/4096)
procctl$PROC_PDEATHSIG_STATUS(0x2, 0x0, 0xc, 0x0)

1.245563378s ago: executing program 0 (id=46):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f00000016c0)=ANY=[@ANYBLOB="0004000000000000040100040100c2"], 0x28)
setsockopt$inet6_tcp_TCP_FASTOPEN(r0, 0x6, 0x401, &(0x7f0000000000)={0x5, "727e2b3e7ce6b8a9ce5fd0d1c5b5cd05"}, 0x14)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x5, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="fee3a38e5cac1c51deba3c6b07a430a0"}, 0x1c)

1.200783354s ago: executing program 2 (id=47):
setuid(0xffffffffffffffff) (async)
r0 = msgget$private(0x0, 0x790)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) (async)
msgsnd(r0, &(0x7f0000001f40)=ANY=[], 0x401, 0x0) (async)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200013100000000"], 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0) (async)
r1 = getuid()
setreuid(r1, r1) (async)
getgroups(0x5, &(0x7f0000000040)=[<r2=>0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) (async)
freebsd11_stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}) (async)
freebsd11_fstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
r5 = getppid()
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{r1, r2, r3, r4, 0x10, 0xffff, 0x0, 0x2}, 0x400000000000000, 0x7, 0x1ff, 0x0, 0x2, 0x5, r5, 0xffffffffffffffff}) (async)
r6 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r6, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x12, &(0x7f0000000440), 0x1) (async)
connect$inet6(r6, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f00000020c0)="d1", 0xffef, 0x20184, 0x0, 0x0) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f5769e47f", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r7 = socket(0x2, 0x1, 0x0)
bind(r7, &(0x7f0000000000), 0x10) (async)
r8 = dup(r7)
listen(r8, 0x0) (async)
r9 = socket(0x2, 0x1, 0x0)
fcntl$setstatus(r9, 0x4, 0x40) (async)
r10 = getpgid(0x0)
fcntl$setown(r9, 0x6, r10)

1.04328476s ago: executing program 2 (id=48):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000002c0)=[{0x3, 0xfffffffffffffffe, 0x8, 0x1, 0x7, 0x2420277d, [0x8, 0x8, 0x2, 0x8]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x10a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60f1936a00d4070100000000000000000000000000000001000000000000000000000000000000005c01000000000000040105010005000401080500000000004e224e210008907851acd0856a41f4b4c282cd0529660ab69626dad242896be4ca4f50725f89b2306febe6ad2fd8d118290ccbe6707df765e89a8c8415793605f0a85b82455315afb9a0187ff31402e77f75edd75ab2dd8a80adccf8862c4d559f035616ec463541389cd4e04e4c696873456058154bb5ddbcc336"])
kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1, 0xfffffffffffffffd, 0x9, 0x4, 0xe8c4, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}, {0x7fff, 0xfffffffffffffff3, 0x70, 0x20000000, 0x0, 0x7f6, [0xffffffff80000001, 0x2, 0x1bc8fee3, 0x1]}, {0x4, 0xfffffffffffffff8, 0xc00c, 0x1, 0x9, 0xffffffff, [0x5, 0x200, 0xfffffffffffeffff, 0x200]}], 0x3, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0)
procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0)
vfork()
lio_listio(0x0, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x20)

1.042712829s ago: executing program 0 (id=49):
setreuid(0xee00, 0x0)
r0 = fork()
fhstat(&(0x7f0000000000)={{[0xffffffff, 0x7]}, {0x0, 0x4, "209f5f000000000000006000"}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet6(0x1c, 0x3, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080), 0x4)
fstatfs(0xffffffffffffffff, &(0x7f0000000140))
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000440)={0x28, 0x0, 0x10, &(0x7f0000000200)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x2, 0xe]})
fstatat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4000)
freebsd11_fhstatfs(&(0x7f00000005c0)={{[0xfff, 0x4]}, {0x8001, 0x8, "f7925378e7fc395c9c826ac46bcd404b"}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r4=>0x0})
r5 = socket$inet6(0x1c, 0x1, 0x0)
setsockopt(r5, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4)
bind$inet6(r5, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c)
r6 = socket$inet6(0x1c, 0x1, 0x0)
setsockopt(r6, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4)
bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c)
lchown(0x0, r4, 0x0)
freebsd11_stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(r4, r7, r1)
socketpair(0x1, 0x1, 0xde, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
openat$filemon(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc)
chflagsat(r8, &(0x7f00000000c0)='./file0\x00', 0x201608, 0x200)
aio_write(&(0x7f0000000240)={r9, 0x80001001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}})
mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, &(0x7f00000001c0))
extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\x04\xaeQ\x02j\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1*\x1a\xb9g\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
sigqueue(r0, 0x0, @sigval_int=0x20)
socketpair(0x1c, 0x4, 0x8, &(0x7f0000000b40))

920.89454ms ago: executing program 3 (id=50):
r0 = kqueue()
kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) (async)
socket$inet(0x2, 0x3, 0x0) (async, rerun: 64)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) (rerun: 64)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r1 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1)
ioctl$DIOCBEGINADDRS(r1, 0x80306664, &(0x7f0000000040)) (async, rerun: 32)
aio_fsync(0x4fb6c9497fdf3192, &(0x7f00000001c0)={0xffffffffffffffff, 0xfff, 0x0, 0x0, [0xc, 0x2], 0xa, 0x6, 0x2, {0x92, 0xbac7, 0x0}, {0x0, 0x8, @sival_int=0x32bc3360, @spare=[0x5, 0x1, 0xffff, 0x8, 0x5be6d9a9, 0xfffffffc, 0x7, 0x6]}}) (rerun: 32)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_sctp_SCTP_MAXSEG(r2, 0x84, 0xe, &(0x7f0000002580)={0x0, 0x37}, 0x8) (async)
bind(r2, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) (async)
r3 = socket$inet6(0x1c, 0x2, 0x0)
setsockopt(r3, 0x29, 0x40, 0x0, 0x0)
r4 = dup(r2)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x31, &(0x7f00000001c0)=ANY=[@ANYBLOB="000300"], 0x20)
sendto$inet6(r4, &(0x7f0000000200)="d39b2845e7ba3176e4274c88fadfa5c97fcd5e5dc0e3faf8152b08516a85021e4e44df284df341e812601743bbd41d16f5f4940090eb8e4de3d83a9831e0d22ea7d470e904a9b060ebc8a685bda77a67145eff01521c88ea73c9f838e773fc308188c6ee56b9e6afac9d32999f9ba4db09ff4333a648fecd5002dd930b8876bfd5c149cd35528a5f44a17db43d3e018eda", 0x91, 0xc0, 0x0, 0x0)

713.899748ms ago: executing program 3 (id=51):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
bind(r0, &(0x7f0000000840)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0) (async)
freebsd10_pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$DIOCNATLOOK(r2, 0x20045600, 0x0) (async)
r3 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg$inet6_sctp(r4, &(0x7f0000000680)={&(0x7f0000000640)=@in6={0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)='|', 0x1}], 0x1}, 0x0) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$FILEMON_SET_FD(r3, 0xc0045301, &(0x7f0000000100)=r4) (async)
setsockopt$inet6_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={@in={{0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}}}, 0x88)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
ftruncate(r5, 0x3862) (async)
r6 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r6, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff})
dup2(r8, r7) (async)
ioctl$EVIOCGKEYCODE(r5, 0xc0084504, 0x4) (async)
r9 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendfile(r9, r7, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="b76f06", 0x3}], 0x1}, 0x0, 0x14)
ioctl$DIOCGETLIMIT(r2, 0xc0084427, &(0x7f0000000000)={0xffa, 0x8}) (async)
bind(r1, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x8, @mcast2, 0x1}, 0x1c)

370.845166ms ago: executing program 0 (id=52):
rfork(0x1000)
r0 = kqueue()
kevent(r0, &(0x7f0000000580)=[{0xfb51, 0x45c3d2c16631eba2, 0x48, 0x0, 0x0, 0x56a2dac8, [0xd, 0x8000, 0x0, 0x200]}, {0xd, 0xffffffffffffffff, 0x1, 0x200, 0x4, 0x3, [0x9, 0xfffffffffffffffc, 0x1, 0xa5d7]}, {0x8, 0xfffffffffffffffb, 0x0, 0x10, 0x6, 0xffffffffffffffff, [0x8000, 0x7fffffff, 0xdfe5, 0xc]}], 0x400000000000250, 0x0, 0xffff3955, 0x0)
fork()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
fork()
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000018c0), 0x8000, 0x0)
fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
cap_rights_limit(r5, &(0x7f0000000000)=[0x20000000000000a, 0x400000000000000])
fchdir(r5)
freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r6=>0x0}, 0x1d8, 0x4)
r7 = getgid()
fchown(r5, r6, r7)
freebsd11_stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setgroups(0x4, &(0x7f00000004c0)=[r3, r4, r7, r8])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
kmq_timedreceive(r1, 0x0, 0x0, 0x80000000000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
ppoll(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0)
ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, &(0x7f0000000080)={0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x100, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x81, 0x0, 0x40, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0xd6df65, 0xfffffffc, 0x0, 0x0, 0x5, 0x73, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401, 0x101]})
setuid(0xffffffffffffffff)
aio_waitcomplete(0x0, 0x0)
r9 = getegid()
freebsd11_mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
chown(&(0x7f0000000200)='./file0\x00', 0x0, r9)
readlinkat(r1, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/52, 0x34)
setregid(r9, r3)

156.989062ms ago: executing program 0 (id=53):
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
r1 = getuid()
setreuid(r1, r1)
r2 = getuid()
__semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=&(0x7f0000000040)={{0x0, 0x0, <r3=>0x0}})
sendto(r0, &(0x7f0000000100)="0a129aff3933b0bf23da3c56a909ee4bf0ed16dc69c2c0f69ef2726cbb8e97e10acc751f7ba7f93f9a9aed11036e0c10", 0x30, 0x0, &(0x7f0000000140)=@un=@abs={0x8, 0x1, 0x0, 0x1}, 0x8)
setreuid(r3, r2)
setreuid(0x0, r2)
r4 = socket(0x1c, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1, 0x0}, 0xc2)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000280), 0x4)
setsockopt$sock_int(r4, 0xffff, 0x1014, 0x0, 0x0)
r7 = open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x114)
ftruncate(r7, 0x3862)
fspacectl(r6, 0x1, &(0x7f0000000080)={0x0, 0x7cfe1424}, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r8, 0xffffffffffffffff, 0xb00, 0x40, &(0x7f0000000000)={&(0x7f0000000040)=[{&(0x7f0000000200)="aa09", 0x2}], 0x1, 0x0}, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r9 = shmget$private(0x0, 0x4000, 0x186, &(0x7f0000ffc000/0x4000)=nil)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0xffffffffffffffff, 0x0, 0x4000)
r10 = shmat(r9, &(0x7f0000001000/0x3000)=nil, 0x1000)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
shmdt(r10)
r11 = fcntl$getown(0xffffffffffffffff, 0x5)
procctl$PROC_REAP_KILL(0x0, r11, 0x6, &(0x7f0000000100)={0x4, 0x0, r11, 0x7fffffff, r11})
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000180)=[{0x105, 0xfffffffffffffff5, 0x40a0, 0x1000000, 0xd8, 0x2, [0x9, 0x0, 0x7, 0x2]}], 0x1, 0x0, 0x0, 0x0)

80.735145ms ago: executing program 3 (id=54):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300201, 0xd0)
aio_write(&(0x7f0000000240)={r0, 0x80000002, &(0x7f0000000080)="1f", 0x1, [], 0x0, 0xb, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_ptr, @thr={0x0, 0x0}}})
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480)
r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
r3 = openat$smbus(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00')
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
freebsd11_getdents(r5, &(0x7f00000012c0)=""/4096, 0x1000)
fsync(r3)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x20000)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300201, 0xd0) (async)
aio_write(&(0x7f0000000240)={r0, 0x80000002, &(0x7f0000000080)="1f", 0x1, [], 0x0, 0xb, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_ptr, @thr={0x0, 0x0}}}) (async)
open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) (async)
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) (async)
open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) (async)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async)
openat$smbus(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) (async)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
mkdirat(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') (async)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
freebsd11_getdents(r5, &(0x7f00000012c0)=""/4096, 0x1000) (async)
fsync(r3) (async)
open$dir(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0) (async)
preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x20000) (async)

1.102348ms ago: executing program 1 (id=55):
r0 = kqueue()
kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
openat$crypto(0xffffffffffffff9c, 0x0, 0x100000, 0x0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xd2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0)
ioctl$BIOCGBLEN(r1, 0x40044266, &(0x7f00000001c0))
setsockopt$sock_accept_filter(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000080)={'accf_dns\x00', "90cb54647f06bc248b79e84dba7cfc40b006d7b67ba0c9adf843885cc2df5239cd8b6af25f6e5c3d7ebc805960097d32a4a07ba751ffa152a7ee7423040a6aeeecf8db8c487e6e24232f86a3a3a2544f0100000000000000ae6358d66d755bd5e56aeca85c427b829a4a7a079a432c3eb62cbeb96c47e0da52cf97c8f1eeb87a2b481c05b51c04d03302da6f7e3b1ffd75fca578c8e003daea02de910fe49b770eb72f103f0e420ec6382fc4ca1939c6b4767113820e8cfa542e7209c394b313619c058520f8f343e93efc8ec27672524aa48d2c2d160d7149cf40e65479466ff750b8809500"}, 0x100)
getsockopt$inet6_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000700)=0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN(r2, 0x6, 0x401, 0x0, 0x0)
__specialfd$eventfd(0x1, &(0x7f0000000040), 0x8)
socket(0x1c, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x2004556b)
open(0x0, 0x1, 0x26)
ktrace(&(0x7f0000000640)='./file0/file0\x00', 0x4, 0x18, 0x0)
r3 = open$dir(&(0x7f0000000680)='./file0/file0\x00', 0x20000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
copy_file_range(r3, 0x0, r3, &(0x7f0000000180)=0xffff, 0x3ff, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, 0x0, 0x0)
cap_rights_limit(0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x1)
ioctl$DIOCRDELADDRS(r4, 0xc4504444, &(0x7f0000000180)={{"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", "1dbfa57c1c6dc6dc61fe0148fd03e50098b9a46ba0367165aa4dff0ac76195d4", 0x7fff}, 0x0, 0x8, 0x7, 0x2000000040000000, 0x4, 0x9, 0x2, 0x6e, 0x6})
__cap_rights_get(0x10803, r4, 0x0)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000006c0)='./file0/file0\x00', 0x40, &(0x7f0000000700))

0s ago: executing program 32 (id=48):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000002c0)=[{0x3, 0xfffffffffffffffe, 0x8, 0x1, 0x7, 0x2420277d, [0x8, 0x8, 0x2, 0x8]}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x10a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60f1936a00d4070100000000000000000000000000000001000000000000000000000000000000005c01000000000000040105010005000401080500000000004e224e210008907851acd0856a41f4b4c282cd0529660ab69626dad242896be4ca4f50725f89b2306febe6ad2fd8d118290ccbe6707df765e89a8c8415793605f0a85b82455315afb9a0187ff31402e77f75edd75ab2dd8a80adccf8862c4d559f035616ec463541389cd4e04e4c696873456058154bb5ddbcc336"])
kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1, 0xfffffffffffffffd, 0x9, 0x4, 0xe8c4, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}, {0x7fff, 0xfffffffffffffff3, 0x70, 0x20000000, 0x0, 0x7f6, [0xffffffff80000001, 0x2, 0x1bc8fee3, 0x1]}, {0x4, 0xfffffffffffffff8, 0xc00c, 0x1, 0x9, 0xffffffff, [0x5, 0x200, 0xfffffffffffeffff, 0x200]}], 0x3, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0)
procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0)
vfork()
lio_listio(0x0, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x20)

kernel console output (not intermixed with test programs):

Starting background file system checks in 60 seconds.

Fri May 30 18:07:00 UTC 2025

FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0)

Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts.
login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b000
Out of ktrace request objects.
SYZFAIL: SIGILL
pc-offset:0xffffffff217cdfe1 pc:0xdeadbeef addr:0x0 code=65537 (errno 9: Bad file descriptor)
Connection to 10.128.1.124 closed by remote host.
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7000
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7000
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7000


FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0)

login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7a800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7a800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7a800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b000
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7800
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7800
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7800
pid 761 (csh), jid 0, uid 0: exited on signal 4 (core dumped)
pid 880 (rtsol), jid 0, uid 0: exited on signal 4 (core dumped)
pid 338 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped)
pid 748 (getty), jid 0, uid 0: exited on signal 4 (core dumped)

FreeBSD/amd64 (ci-freebsd-main-4.us-central1-b.c.syzkaller.internal) (ttyu0)

login: pid 736 (sh), jid 0, uid 0: exited on signal 4 (core dumped)
pid 424 (devd), jid 0, uid 0: exited on signal 4 (core dumped)
pid 745 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 878 (rtsol), jid 0, uid 0: exited on signal 4 (core dumped)
pid 335 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7000
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7000
pid 741 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7a800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7a800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7a800
pid 780 (sh), jid 0, uid 0: exited on signal 4 (core dumped)
pid 740 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d7b000
pid 742 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 746 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
set $maxwidth = 0
pid 744 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
Password:pid 743 (getty), jid 0, uid 0: exited on signal 4 (core dumped)

Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7800
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7800
if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd7800
show proc
Password:
Login incorrect
login: show all locks
Password:
Login incorrect
login: show uma
Password:
Login incorrect