last executing test programs:

5.88886524s ago: executing program 0 (id=27):
symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0)
clock_nanosleep(0xd, 0x0, &(0x7f0000000200)={0xc, 0x5}, 0x0)
rfork(0x85000)

5.768667073s ago: executing program 0 (id=28):
kqueue()
r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0)
r3 = socket(0x1c, 0x1, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080)=0x1, 0x4)
rfork(0x93010)
copy_file_range(r4, &(0x7f0000000000)=0x80000001, r4, 0x0, 0x100000, 0x0)
kmq_timedsend(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x9, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00', 0x3d6}, 0x24)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x1, 0x1, 0x8)
connect$inet(r5, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10)
shutdown(r5, 0x2)
ioctl$BIOCSTSTAMP(r0, 0x80044284, &(0x7f0000000040)=0xbd)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
r6 = open(&(0x7f0000000240)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r6, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0)
r7 = socket(0x1c, 0x1, 0x0)
sendto(r7, 0x0, 0x0, 0x1, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c)
openat$crypto(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000240)={r8, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0xecea, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}})
open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)

4.528310504s ago: executing program 0 (id=30):
open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
extattr_delete_link(&(0x7f0000000300)='./file1\x00', 0x1, &(0x7f0000000700)='/&\x00')
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
r1 = socket$inet6_tcp(0x1c, 0x1, 0x0)
listen(r1, 0x0)
shutdown(r1, 0x1)
setsockopt$inet6_group_source_req(r0, 0x29, 0x55, &(0x7f0000000200)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @mcast1}}, {{0x1c, 0x1c, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x53, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0xfffffffb, @mcast2}}, {{0x1c, 0x1c, 0x2, 0x7, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}}}, 0x108)
setresuid(0x0, 0xee01, 0x0)
r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
freebsd11_fstat(r2, &(0x7f00000003c0))
r3 = openat$kbd(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0)
ioctl$KDGKBSTATE(r3, 0x40044b13, 0x40)

4.487429766s ago: executing program 2 (id=31):
open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0x1c, 0x1, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0)
r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0xaa480)
r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r4, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
listen(r1, 0x0)
openat$md(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
accept(r1, 0x0, 0x0)
dup2(r0, r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendto$unix(r5, 0x0, 0x0, 0x20008, 0x0, 0x0)
open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
r6 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, &(0x7f0000000640)="e2220252f84fcc257c7153b6af43df4b75ec00cd3961747ee46b6949e5e99d72011733e1fce6e9835d102592262c4daa846c1a61ebc69ef9778df28954de115cf7a692da76ad949984a65e7d7de226f4e73e948280f7d601f1a65c2c40d038c1596f6eeea07fa6fe6d88d86e325a77cf0a255237e59b703794149532772a0380ac9c9a3189ba184a204e551b2c78eaed3b3bf369057e76708d326ec66be2a8f31795d2fc4250ccfb75702556495e32035b70193fa39a7ca67559838331fc4c37d02641b0d00c09a921471db77fa0b0cf69f995c28931ba7f4e58543e51abf5617f4d7dae6c4d5c5ab30cae188f67d0ece9965b484c1f63a14c1082371ccf5ef84f474437f9e0a9ddeba97879620d5657f8400ea45944288a7b3983a47735624d60931a8d1606c743109fa89c4dec54a3330bc0ae49642d29dd70c6d3ccf591782dd0ba79b815427a212c107d6bfe794b2998bb49882dbddb04342dd7f0696b09d64fbfce580a0a45b248a3e69852977f753df761018ead387e2308bc005d4edeb04e226a6ba2c1c964db2a49d5dff522f37bb8313e4c3e713349e77a77ceb28fbe0d44c56d585fd223bec2d79e03ef9c", 0x1b0, [0x5, 0x3], 0xfffffffffffffffb, 0x4, 0x0, {0x0, 0x12, 0x0}, {0x0, 0x15, @sigval_int=0x40000000, @spare=[0x1, 0x7, 0x4, 0x3, 0x7, 0x2, 0x6, 0x85a]}})
r7 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r7, 0x0)
pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="16", 0x1}, {&(0x7f0000000140)="87028dbb119e623cd47a0cd8d8d1d4", 0xf}], 0x3, 0xb546)
socket$inet6_sctp(0x1c, 0x1, 0x84)
r8 = kqueue()
kevent(r8, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x7, 0xffffffffffffff00, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_icmp(0x1c, 0x2, 0x3a)
socket$inet6_udplite(0x1c, 0x2, 0x88)

4.486655829s ago: executing program 0 (id=32):
openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r1 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
shmdt(r1)
ktimer_create(0x0, &(0x7f0000000700)={0x3, 0x1d, @sigval_ptr=0x5, @spare=[0x7, 0xf81, 0x1f2a9c89, 0xf54d, 0x800, 0x0, 0x0, 0x453f]}, &(0x7f0000000400))
r2 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_emit_ethernet(0x70, &(0x7f00000002c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x3a, 0x11, 0x0, @rand_addr="fc000000200000000100", @ipv4={'\x00', '\xff\xff', @rand_addr=0xb4}, {[], @generic="528a0b7c60c581b79fbd5f368d6bae90dcfc1810d28cd205124cf8c05075e272774ee9710111824a397a1ccbf3690bbd35193d2cb3417d6d0ff7"}}}}})
ioctl$MDIOCATTACH(r2, 0xc1c06d00, &(0x7f0000000780)={0xf, 0x7, 0x0, &(0x7f0000000180)='./file0\x00', 0x800000008, 0x4, 0xfffffffd, 0xa, 0x0, 0xa7, &(0x7f00000001c0)='\x00', [0x18, 0x6, 0x8, 0x4, 0x4, 0x4, 0x91e, 0xf, 0x6, 0xa, 0x8, 0x7, 0x5, 0x7, 0x1, 0xfffffff3, 0x9, 0xffff3382, 0x8000007, 0x0, 0x401, 0x9, 0xcde, 0x6, 0xfffffff8, 0x7, 0x7, 0x0, 0x5, 0x5ba, 0x7, 0xffbffffa, 0x5, 0x9, 0x3d5532c1, 0x6, 0xfffeffff, 0x8000, 0x2, 0x1, 0x7, 0x0, 0x0, 0x3, 0x271f, 0x3, 0x6, 0x80000003, 0xac5e, 0x2, 0xfff7fff7, 0x6ddbd7a2, 0x4, 0x300, 0xb, 0x8, 0x86, 0x9, 0x20, 0x3, 0x8001, 0x9, 0x7f, 0x2, 0x6, 0x4, 0x10001, 0xfffffff5, 0x0, 0x80, 0x6, 0x7, 0xff, 0x0, 0x2, 0x9, 0x388d, 0xfffffffc, 0x3, 0x0, 0x3, 0x40, 0x80000001, 0xe2e, 0x5, 0xed, 0x10000, 0xc, 0xfffffffe, 0xfb, 0x1, 0xe2, 0x7ffffffb, 0x5, 0xc0b0, 0x81]})
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000080)={0x4, {{0x2, 0x0}}}, 0x88)
setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000005c0)={0x5, {{0x2, 0x0}}, {{0x2, 0xfffd}}}, 0x108)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x31, &(0x7f0000000040)={0x11}, 0x8)
sendto$inet6(r3, &(0x7f0000002700)="6a3364f80c0444", 0x7, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x47, &(0x7f0000000200)=0x3, 0x4)
ioctl$BIOCSETFNR(0xffffffffffffff9c, 0x80104282, 0xfffffffffffffffe)
connect$inet(r5, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10)
cap_rights_limit(0xffffffffffffffff, 0xffffffffffffffff)
r6 = kqueue()
freebsd11_kevent(r6, &(0x7f0000001a40), 0x0, &(0x7f0000001ac0)=[{}], 0x1, 0x0)
bind$inet6(0xffffffffffffff9c, &(0x7f0000000280)={0x1c, 0x1c, 0x2, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c)
r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2(&(0x7f0000000140), 0x100000)
freebsd11_fhstatfs(&(0x7f0000000100)={{[0x4, 0xffffffff]}, {0x100, 0x5, "0fe6b4580d9480a0c8030387ad7768e6"}}, &(0x7f0000000440))
ioctl$MDIOCATTACH(r7, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x2, 0xfffffffe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0xfffffffb, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x9]})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000240)=0xfffffffe, 0x4)

4.398739252s ago: executing program 1 (id=34):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x17, 0x24, 0x10, &(0x7f0000000080)="3c022e61793eece1c4ca3d18e5aa3545", 0x0, 0x0, 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x0, 0x7, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
close(r1)
setsockopt$inet_sctp_SCTP_BINDX_ADD_ADDR(r1, 0x84, 0x8001, &(0x7f00000000c0)=@in={0x10, 0x2, 0x2}, &(0x7f0000000100)=0x10)

3.778661242s ago: executing program 1 (id=35):
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
pipe2(&(0x7f0000000080), 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x4, @rand_addr="feb65a5074b2b30000000001000000dc"}, 0x1c)
setgid(0xffffffffffffffff)
r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
shmctl$IPC_STAT(r0, 0x2, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f00000016c0)=ANY=[@ANYBLOB="0004000000000000040100040100c2"], 0x28)
setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x401, &(0x7f0000000000)={0x6, "fda1076645ee4a1ec4dd162f1327d0e8"}, 0x14)
shmctl$IPC_RMID(r0, 0x0)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000000, 0x0)
ioctl$MDIOCRESIZE(r2, 0xc1c06d04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000001, 0x0, [0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff, 0x40009, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x176a6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x403, 0x5, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x400000, 0x1, 0xa44f, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0xfffffffc, 0x0, 0x4, 0x0, 0x401, 0xfffffc01, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0305d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d3133fa]})
freebsd11_mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31)
pathconf(&(0x7f0000000080)='./file0\x00', 0x35)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8, 0x3e, 0x0, 0x3, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1]})

3.728732785s ago: executing program 1 (id=36):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
shm_open2(0x0, 0x0, 0x0, 0x1efaa502b225ceaa, 0x0)
getresuid(0x0, &(0x7f0000000040), &(0x7f0000000080))
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00')
chroot(&(0x7f0000000080)='./file0\x00')
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000180)='./file1/../file0\x00')
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1/../file0\x00')

3.727781841s ago: executing program 1 (id=37):
r0 = socket(0x1c, 0x1, 0x0)
accept(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000000040)=0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0xc, &(0x7f0000000000)={@multicast2, @loopback}, 0x8)
getsockopt$inet_buf(r1, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x3ff}, 0x1c)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0xffffffffffffffff, 0x0, 0x4000)
setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d})
mlockall(0x1)
syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, <r2=>0x41424344}, 0x1, 0x401)
syz_emit_ethernet(0x131, &(0x7f0000000480)={@random="ef258162e50c", @broadcast, [{[], {0x8100, 0x2, 0x0, 0x2}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x11f, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x9, {[@end]}}, @tcp={{0x0, 0x1, 0x41424344, r2, 0x0, 0x0, 0xd, 0x0, 0x23b, 0x0, 0x6, {[@window={0x3, 0x3}, @eol, @md5sig={0x13, 0x12, "073bbff5ba82486751b1076c6a6e5bf9"}, @nop, @window={0x3, 0x3, 0x7c}, @window={0x3, 0x3, 0xce}]}}, {"418be4171739917c58e244038e9f67e762df616dda83e57778e106ac2e723df807c2cd59707637925481c17ccc93e2aaac721515481ffb077e6eedf12e57a3ac4e2d9df24be04a5f6e8a4b32fb48c5edac24dff592d5f953dcbc6162b93b00513fb0435b016169348814685f25d59818e4aef3c51cffbcbfd53c8445c831ee9f0c6a9cc96b61ae3820c5d95224a77a961839cf6949d7cc1eaf1751059600429183fa4cccca2d20630f9e290d83adf3301f60386f9ae8645a20900e207cd5eca87e5d80a889da5ac06c743b6fbdccba1fa04812"}}}}}})
syz_emit_ethernet(0x141, &(0x7f0000000480)={@random="ef258162e50c", @broadcast, [{[{0x88a8, 0x6, 0x1, 0x2}], {0x8100, 0x2, 0x0, 0x2}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x12b, 0x67, 0x401, 0x4, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x9, {[@end, @end]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x23b, 0x0, 0x6, {[@window={0x3, 0x3}, @md5sig={0x13, 0x12, "073bbff5ba82486751b1076c6a6e5bf9"}, @nop, @window={0x3, 0x3, 0x7c}, @window={0x3, 0x3, 0xce}]}}, {"418be4171739917c58e244038e9f67e762df616dda83e57778e106ac2e723df807c2cd59707637925481c17ccc93e2aaac721515481ffb077e6eedf12e57a3ac4e2d9df24be04a5f6e8a4b32fb48c5edac24dff592d5f953dcbc6162b93b00513fb0435b016169348814685f25d59818e4aef3c51cffbcbfd53c8445c831ee9f0c6a9cc96b61ae3820c5d95224a77a961839cf6949d7cc1eaf1751059600429183fa4cccca2d20630f9e290d83adf3301f60386f9ae8645a20900e207cd5eca87e5d80a889da5ac06c743b6fbdccba1fa048124b29ed744cfc52654cddbbb86e883e3e"}}}}}})
syz_emit_ethernet(0x82, &(0x7f0000000140)={@empty, @remote, [{[], {0x8100, 0x0, 0x0, 0x1}}], {@ipv4={0x800, {{0x15, 0x4, 0x3, 0x6, 0x70, 0x65, 0x1000, 0x9b, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}, {[@lsrr={0x83, 0x7, 0x2, [@rand_addr=0x2]}, @ra={0x94, 0x6, 0x1ff}, @lsrr={0x83, 0x17, 0x5, [@loopback, @rand_addr=0x1, @empty, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}]}, @timestamp={0x44, 0x1c, 0x5, 0x0, 0x4, [{[@multicast2], 0x6}, {[@multicast2], 0x9}, {[@loopback]}]}]}}, @tcp={{0x1, 0x3, r2, 0x41424344, 0x0, 0x0, 0x7, 0x80, 0xb, 0x0, 0x2, {[@generic={0x5, 0x7, "426fd6d362"}]}}}}}}})
r3 = semget$private(0x0, 0x4, 0x710)
r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x50, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x54, &(0x7f0000000900)={0x6, {{0x1c, 0x1c, 0x2, 0x0, @mcast1, 0x4}}, {{0x1c, 0x1c, 0x0, 0x4, @local={0xfe, 0x80, '\x00', 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x54, &(0x7f0000000180)={0x6, {{0x1c, 0x1c, 0x2, 0xfffffffc, @mcast1, 0x7}}, {{0x1c, 0x1c, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, 0xe0000}}}, 0x108)
sysarch$I386_GET_IOPERM(0x3, 0xffffffffffffffff)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @random="7222f24108e0", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @rand_addr=0x4, @broadcast, @multicast2}}}})
__semctl$GETZCNT(r3, 0xf70abfccd90da9ef, 0x7)
munlockall()
madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3)
connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0}, 0x40040)
rfork(0x1000)

3.628661759s ago: executing program 3 (id=39):
r0 = socket(0x1c, 0x1, 0x0)
r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
r3 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="16", 0x1}], 0x1, 0xb542)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
ioctl$BIOCGDLT(r4, 0x4004426a, 0x0)
lchflags(&(0x7f0000000040)='./file0\x00', 0x60091)
copy_file_range(r2, 0x0, r1, 0x0, 0x100000, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x2000000, 0x0)
setuid(0xee01)
fchmod(r5, 0x83)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@file={0xa, 0x0, './file0\x00'}, 0xa, &(0x7f0000000100)=[{&(0x7f0000000240)="2ba999b7b1f16ed0f1ffd508d25c52e96a7ef62045fec707675af2d80de69aa7c2aebbeba0d2ab2f3305b31f80fda1ff63de3a1b19e58b72ed85854bb1bfa8c228668b501284833576f95ffb4ff9041d6485624d008ca6e20340a618521955032cd4bfca54a1a1a92e914a46aee926e035c496aa511b4a929754078eb9fde333abf8612ba765d1dc0ce8403aeb916351468363766779f8d88b221da5a5a89d452194f344673d30a02e44b4ab5a642a8b5d9b9f5a41880f9af747387b81dc62d10856", 0xc2}, {&(0x7f0000000080)="e3cf99d1384a279dd6c6516aabf04d1671e704cf68462a8275437210f1596039297cc56461", 0x25}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x328}, 0x194)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
r6 = semget$private(0x0, 0x4000000009, 0x82)
semop(r6, &(0x7f0000000140), 0x0)
semop(r6, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x1000000}, 0x1c)
ppoll(&(0x7f0000000000)=[{r0, 0x188}, {r0}, {0xffffffffffffffff, 0x4}], 0x3, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0)

3.538523826s ago: executing program 0 (id=40):
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
ftruncate(r2, 0x3862)
r3 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r3, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
dup2(r5, r4)
r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r7, r4, 0x0, 0x0, 0x0, 0x0, 0x14)
dup2(r7, r6)
mkdir(0x0, 0x0)
syz_emit_ethernet(0x10a, &(0x7f0000000380)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "f1936a", 0xd4, 0x7, 0x1, @loopback, @empty, {[@hopopts={0x5c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn, @generic={0x5}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x5}]}], @udp={{0x2, 0x1, 0x8}, {"51acd0856a41f4b4c282cd0529660ab69626dad242896be4ca4f50725f89b2308febe6ad2fd8d118290ccbe6707df765e89a8c8415793605f0a85b82455315afb9a0187ff31402e77f75edd75ab2dd8a80adccf8862c4d559f035616ec463541389cd4e04e4c696873456058154bb5ddbcc336146de0e95803bb6c2e27dfda61479b8b5e83d3a62a259d643abef51fd7bf319eb33fbb02a020b4ccb0490325735086aecb1283d2c45a1b9c176ee3d20c83791307"}}}}}}})
syz_emit_ethernet(0x50, &(0x7f0000000300)={@local, @random="34ed432a7a6e", [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x1a, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}, [{0x4}]}}}}}})
setsockopt$inet6_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2f5105", 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@routing={0x6, 0x0, 0x0, 0x3}], @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}})
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r8 = kqueue()
kevent(r8, &(0x7f0000000080)=[{}], 0x44000000, &(0x7f00000004c0), 0x80000000, 0x0)
kevent(r8, &(0x7f0000000000), 0x800, 0x0, 0x7ff, 0x0)
write(r1, &(0x7f0000000140)='\x00', 0xfe80)
poll(&(0x7f0000000680)=[{r1, 0x4}], 0x1, 0x10000008)
dup2(r1, r0)

3.488591724s ago: executing program 2 (id=41):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x29, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x8000000]})
mlockall(0x2) (async)
mlockall(0x2)
truncate(&(0x7f0000000000)='./file0\x00', 0x480)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
fcntl$setstatus(r1, 0x4, 0x4c) (async)
fcntl$setstatus(r1, 0x4, 0x4c)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013)
open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0)
sync()

2.711310336s ago: executing program 2 (id=42):
openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) (async)
open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
r0 = socket(0x2, 0x1, 0x0) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) (async)
sysarch$I386_SET_IOPERM(0x4, 0x0) (async)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000200)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000003c0)=0x3, 0x4) (async)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) (async)
r2 = socket$inet6_udp(0x1c, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x28, 0x0, &(0x7f0000000200)) (async)
r3 = dup(r1) (async)
ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="70638953e90cef7e00080000000b000000000000916d99e9", 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x450c, &(0x7f0000000000), 0x0, 0x0, 0x0})
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) (async)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000000)={'freebsd\x00', 0x5}, 0x24) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
open(0x0, 0x40, 0x154)
r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
flock(r4, 0x3) (async)
open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) (async)
rfork(0x85000) (async)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) (async)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async)
rfork(0x90014)
r5 = socket$unix(0x1, 0x1, 0x0)
bindat$unix(r5, r5, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa)

2.458793984s ago: executing program 3 (id=43):
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8)
utimes(&(0x7f0000000080)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0)

2.348708998s ago: executing program 3 (id=44):
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4)
sendmsg(r0, &(0x7f0000000100)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0xc, 0x200, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r2 = socket(0x2, 0x1, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
chflags(&(0x7f0000000180)='./file0/file0\x00', 0x7)
rename(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$inet_sctp_SCTP_EXPLICIT_EOR(r2, 0x84, 0x1b, &(0x7f0000000040)=0x8, 0x4)
r3 = socket$inet6(0x1c, 0x3, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x19, &(0x7f0000000040)='z', 0x30dd458e3b66443e)
bind(r2, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10)

2.347645615s ago: executing program 2 (id=45):
socketpair(0x11, 0x3, 0x2, 0x0)
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8ca, 0x0, [0xfffffffffffffffc, 0x400000000, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r2 = socket(0x2, 0x1, 0x0)
connect$inet(r2, 0x0, 0x0)
close(0xffffffffffffffff)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
cpuset_setdomain(0x2, 0x6, 0xfffffffffffffffc, 0x20, &(0x7f0000000040)={[0x1]}, 0x3)
ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x15, 0x0, 0x10, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755a", 0x0, 0x0, 0x0, 0x7d86699a})
ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000a00), 0x0, 0x0, 0x0})

1.068783918s ago: executing program 3 (id=46):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x1c, 0x2, 0x0)
rfork(0x85000)
ksem_open(&(0x7f0000000000), 0x0, 0x200, 0x4c, 0x0)
freebsd10_pipe(0x0)
r3 = socket$inet6(0x1c, 0x2, 0x0)
setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4)
bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x9}, 0x20080)
freebsd10_pipe(0x0)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0)=[{0x4, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}, {0x4, 0xffffffffffffffff, 0xc792}], 0x2, 0x0, 0x0, 0x0)
freebsd11_fstatfs(r0, &(0x7f0000000140))
setsockopt(r1, 0x0, 0x2, &(0x7f0000000100)="8f", 0xd)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)

268.6641ms ago: executing program 1 (id=47):
symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00')
chroot(&(0x7f0000000000)='./file0\x00')
r0 = open$dir(&(0x7f0000000300)='./file0/file0/..\x00', 0x20000, 0x6)
getfhat(r0, &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x2000)
r1 = socket(0x1c, 0x3, 0x1)
sendto(r1, &(0x7f0000000340)="11d5cf2924e2da9f0d47f14a5babefe85e2f1027c0bb21378a3d78aef12d04ee87a68f4323d818a904e7db03833a52c42786af927b53db64b2a36900b3f108000000135e253088155b735abf8d530ef8f2f0cd01df", 0x55, 0x105, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1, 0xffffffff, @empty, 0x1}, 0x1c)

188.667029ms ago: executing program 2 (id=48):
openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
shmdt(0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x3, @loopback}, 0x10)
r1 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$MDIOCATTACH(r1, 0xc1c06d00, &(0x7f0000000780)={0xf, 0x7, 0x0, &(0x7f0000000180)='./file0\x00', 0x800000008, 0x4, 0xfffffffd, 0xa, 0x0, 0xa7, &(0x7f00000001c0)='\x00', [0x18, 0x6, 0x8, 0x4, 0x4, 0x4, 0x91e, 0xf, 0x6, 0xa, 0x8, 0x7, 0x5, 0x7, 0x1, 0xfffffff3, 0x9, 0xffff3382, 0x8000007, 0x0, 0x401, 0x9, 0xcde, 0x6, 0xfffffff8, 0x7, 0x7, 0x0, 0x5, 0x5ba, 0x7, 0xffbffffa, 0x5, 0x9, 0x3d5532c1, 0x6, 0xfffeffff, 0x8000, 0x2, 0x1, 0x7, 0x0, 0x0, 0x3, 0x271f, 0x3, 0x6, 0x80000003, 0xac5e, 0x2, 0xfff7fff7, 0x6ddbd7a2, 0x4, 0x300, 0xb, 0x8, 0x86, 0x9, 0x20, 0x3, 0x8001, 0x9, 0x7f, 0x2, 0x6, 0x4, 0x10001, 0xfffffff5, 0x0, 0x80, 0x6, 0x7, 0xff, 0x0, 0x2, 0x9, 0x388d, 0xfffffffc, 0x3, 0x0, 0x3, 0x40, 0x80000001, 0xe2e, 0x5, 0xed, 0x10000, 0xc, 0xfffffffe, 0xfb, 0x1, 0xe2, 0x7ffffffb, 0x5, 0xc0b0, 0x81]})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
kmq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x0, @sigval_ptr})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
cap_rights_limit(0xffffffffffffffff, 0xffffffffffffffff)
r2 = kqueue()
freebsd11_kevent(r2, &(0x7f0000001a40)=[{0x3, 0xfffffffffffffff8, 0x81, 0x20, 0x9, 0x5}], 0x1, &(0x7f0000001ac0), 0x0, 0x0)
fchmod(r1, 0xa92f499f9b7256ff)
bind$inet6(0xffffffffffffff9c, &(0x7f0000000280)={0x1c, 0x1c, 0x2, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2(&(0x7f0000000140), 0x100000)
r4 = socket$inet6_tcp(0x1c, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x41, &(0x7f0000000d40)=""/4096, &(0x7f0000000040)=0x1000)
getpgid(0xffffffffffffffff)
ioctl$MDIOCATTACH(r3, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x2, 0xfffffffe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0xfffffffb, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x9]})

187.451097ms ago: executing program 3 (id=49):
socket$inet6_sctp(0x1c, 0x1, 0x84)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x1)
open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DIOCADDSTATE(r0, 0xc0f24425, &(0x7f0000000300)="2ec8abe1bf9f5e3fab59519e7f137fe000a74f82ddbb4dcc30b52c1d82f62c759dddb3e9561c672f4efff62d7a98d3268e20af3add79805d977008857f9ee30c10dbe5766a7d47734812fe721c00cb5c04f116663b82a9297fe92f7c55970f0029d05e1a5bb84e0bdd0cc8a9b74a72eed9349c327b7fef9711fb3770667e8f63e78d3b4fdf735fa7bb2baa7fffde1989d8a0dd49a89edcbfad3a0b9b580b747187edaf1158cc43a22f7096d667eec11db315b9")
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x29, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4b, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r2, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="00b2c06df480", 0x0, &(0x7f0000000800)="2c061978cd8fca52f19497dc8dcacc25954e6d00d7f30f56f851a16c14248fd56742995e3480c0acfd1d6fc07ba3eaafce5a5398ead46daec7ce08deba403489cf", 0xb, 0x6, 0x0, 0x12, 0x41, 0x0, 0x3, 0x3, "710800000094ffff"}, 0x40)
socket$inet6_sctp(0x1c, 0x5, 0x84)
kqueue()
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{0xfffffffffffffffd, 0xfffffffffffffffc, 0xa, 0x8, 0xe8c5, 0x2, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x100000, 0x0)
socket(0x1c, 0x1, 0x0)
syz_emit_ethernet(0x101, &(0x7f0000000880)=ANY=[@ANYBLOB="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"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x130)
fork()
r4 = socket$inet6_udplite(0x1c, 0x2, 0x88)
setsockopt$inet6_udplite(r4, 0x88, 0x1, 0x0, 0x0)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0)
aio_write(&(0x7f0000000140)={r5, 0x40000000006, 0x0, 0x0, [0x5], 0x0, 0x0, 0x1, {0x0, 0xffffffffffffffff, 0x0}, {0x0, 0x0, @sival_ptr=0x5}})
r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1ba)
aio_read(&(0x7f0000000180)={r6, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x100000, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_ptr=0x4000, @ke_flags=0x40d0}})
cpuset_setaffinity(0x2, 0x2, 0x2, 0x8, &(0x7f00000001c0)={[0x3]})
aio_return(&(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, {0x0, 0x4, 0x0}, {0x0, 0x0, @sival_int, @ke_flags}})
open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
preadv(r3, 0x0, 0x0, 0x0)
ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x0, 0xffe, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000280)})

139.437906ms ago: executing program 0 (id=50):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
kqueue()
aio_readv(&(0x7f0000000180)={r0, 0xffffffffffffffff, &(0x7f0000000000)="4ff15b89efcb3d8ba06e2700f9dd3d36893e041d361ea311f9e866550ec0161bc12511b44381e83b1457870d580ab1f661380fe2aac243db2420f7f2df8f8aa96983b4a1f5232c00201d8ba310c41b9a825dabd79bb90a588d472dca92188d7122c116ab16051554adfd46360abc01e5943c9c22ead5012ed0d79e987f99359f7b59630e440c2d32d86c392ab7a2f03d5c0eb5a26aaede46bd1a5faa2fe63165faa7e4342af420cfaae91d5d6a83ab033cc26a8d4aa624a40f7f478a9c1ccb48465b973e08f3c11a15172a8465fe85e05e222d98471572819d69a305814c0daf6e7cdb934be3bf895dbb622ca950cd114e5f", 0xf2, [0x8, 0x5], 0x9, 0x4, 0x4e, {0x511600ce, 0x5, &(0x7f0000000100)="77d8f607c019883a4172094e4d6659f3fa44fd64e70ba23a98e96cb3e2d8d7c08375fd9897e67a844a0b0fbc5b57eed023bb5a4455d0adce3613c8bd7191b24bd8a03cc4b7f31b27d19669a8532bba5e35a277f9976abd43771608749ed6fefb0ec0cb00afb749184d787714eb9dc5d2b896654d0e6925ea441f4c2d1a5a0299"}, {0x1, 0x8, @sigval_ptr=0x8, @ke_flags=0x8000}})
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000240)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000000280)=0x1c, 0x30000000)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f00000002c0)={0x44, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xa3}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x800}, @enc_lim={0x4, 0x1, 0x6}, @pad1]}, 0x20)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000300)={0x0, 0x101}, 0x8)
freebsd11_fstatat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
setgid(r3)
sendto(r0, &(0x7f0000000400)="dbac1a9ed0d3bd337649ad0b70d28fa6fdd6", 0x12, 0x20008, &(0x7f0000000440)=@un=@abs={0x8, 0x1, 0x0, 0x0}, 0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000480)={<r4=>0x0, 0x7}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000500)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, r4, 0x1, 0x7, 0x280, 0x1, 0x8a1a, 0x9}, 0x98)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000005c0)={0x7}, 0x1)
r5 = getpid()
r6 = getpgrp(0x0)
procctl$PROC_REAP_KILL(0x0, r5, 0x6, &(0x7f0000000600)={0xb, 0x0, r6, 0xfffffff8, 0xffffffffffffffff})
ksem_init(&(0x7f0000000680), 0x5b)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$BIOCGSTATS(r7, 0x4008426f, &(0x7f0000000700))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0)
procctl$PROC_TRACE_STATUS(0x2, r6, 0x8, &(0x7f0000000780))
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2)
rfork(0x3044)
rfork(0x4004)
r8 = kmq_open(&(0x7f00000007c0)='./file0\x00', 0x200, 0x22, &(0x7f0000000800)={0x7fffffffffffffff, 0x6, 0xebb, 0x7})
kmq_notify(r8, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0)
getsockopt$inet6_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000880)={r4, 0x4}, &(0x7f00000008c0)=0x8)
extattr_set_link(&(0x7f0000000900)='./file0\x00', 0x2, &(0x7f0000000940)='/dev/bpf\x00', &(0x7f0000000980)="cb1b36211aafabdbe0d559b3473d9ec3389546f159d66744c052e042b2a1089b0250490a9a15e384d96b9e7fa08c573c", 0x30)
ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000009c0)={0x10, @ifru_broadaddr={0x8, 0x1b, "30dfef4bc632a1362833cc1f8e3d"}})

98.775726ms ago: executing program 1 (id=51):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f0000000040)={0x1f, 0x0, 0x10, &(0x7f0000000200)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff, [0x0, 0x0, 0xfffffffd]}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000001340)={&(0x7f0000000e40)=@abs={0x8, 0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x100) (async)
open$dir(&(0x7f0000000000)='./file0\x00', 0x4, 0x20) (async)
r3 = fcntl$dupfd(r1, 0x11, r0)
ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x8202, &(0x7f0000000480), 0x0, 0x0})

92.755608ms ago: executing program 3 (id=52):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000340000000000019078ac1400bbe000000103059078000000044673000a006708000614000900000000e400000188020000"])
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
kqueue()
bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, &(0x7f0000000240)={0x4b}, 0x8)
procctl$PROC_STACKGAP_CTL(0x0, 0x0, 0x11, &(0x7f0000000300)=0x9)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
chdir(&(0x7f00000001c0)='./file0\x00')
socket$inet(0x2, 0x3, 0x0)
openat$filemon(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
procctl$PROC_PROTMAX_CTL(0x0, 0x0, 0xf, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd)
r3 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
shmdt(r3)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000040), 0x0)
setsockopt$inet_opts(r4, 0x0, 0x1, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x3, @loopback}, 0x10)
r5 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$MDIOCATTACH(r5, 0xc1c06d00, &(0x7f0000000780)={0xf, 0x7, 0x0, &(0x7f0000000180)='./file0\x00', 0x800000008, 0x4, 0xfffffffd, 0xa, 0x1c800000, 0xa7, &(0x7f00000001c0)='\x00', [0x18, 0x6, 0x8, 0x4, 0x4, 0x4, 0x91e, 0xf, 0x6, 0xa, 0x8, 0x7, 0x5, 0x7, 0xfffffffe, 0xffffffd3, 0x9, 0xffff3382, 0x8000007, 0x0, 0x401, 0x9, 0xcde, 0x6, 0xfffffff8, 0x7, 0x7, 0x0, 0x5, 0x5ba, 0x7, 0xffbffffa, 0x5, 0x9, 0x3, 0x6, 0xfffeffff, 0x8000, 0x2, 0x1, 0x7, 0x0, 0x0, 0x3, 0x271f, 0x3, 0x9, 0x80000003, 0xac5e, 0x2, 0xfff7fff7, 0x6ddbd7a2, 0x4, 0x300, 0xb, 0x8, 0x86, 0x9, 0x20, 0x3, 0x8001, 0x9, 0x82, 0x2, 0x6, 0x4, 0x10001, 0xfffffff5, 0x0, 0x80, 0x6, 0x7, 0xff, 0x0, 0x2, 0x9, 0x388d, 0xfffffffc, 0x3, 0x0, 0x3, 0x40, 0x80000001, 0xe2e, 0x5, 0xed, 0x10000, 0xc, 0xfffffffe, 0xfb, 0x1, 0xe2, 0x7ffffffb, 0x5, 0xc0b0, 0x81]})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r6 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="11f10000004000"], 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10)
cap_rights_limit(0xffffffffffffffff, 0xffffffffffffffff)

91.24059ms ago: executing program 2 (id=53):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) (async)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x4, 0x160)
setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0)
ktimer_create(0x0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
ktimer_settime(r2, 0x0, &(0x7f0000000800)={{}, {0x0, 0x8}}, 0x0)
ktimer_settime(r2, 0x0, &(0x7f0000000080)={{0x5, 0x73}, {0x100000001, 0x8}}, &(0x7f00000000c0)) (async)
ktimer_gettime(0x0, 0x0) (async)
r3 = open(&(0x7f0000000480)='./file1\x00', 0x4, 0x102)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r3, 0x0) (async)
open$dir(0x0, 0x40000400000002c2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000"]) (async)
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x12, 0x1, 0xffffffffffffffff, 0xfffffffc})
clock_gettime(0x2, 0x0) (async)
mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0)
mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140))

0s ago: executing program 32 (id=52):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000340000000000019078ac1400bbe000000103059078000000044673000a006708000614000900000000e400000188020000"])
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
kqueue()
bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, &(0x7f0000000240)={0x4b}, 0x8)
procctl$PROC_STACKGAP_CTL(0x0, 0x0, 0x11, &(0x7f0000000300)=0x9)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
chdir(&(0x7f00000001c0)='./file0\x00')
socket$inet(0x2, 0x3, 0x0)
openat$filemon(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
procctl$PROC_PROTMAX_CTL(0x0, 0x0, 0xf, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd)
r3 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
shmdt(r3)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000040), 0x0)
setsockopt$inet_opts(r4, 0x0, 0x1, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x3, @loopback}, 0x10)
r5 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$MDIOCATTACH(r5, 0xc1c06d00, &(0x7f0000000780)={0xf, 0x7, 0x0, &(0x7f0000000180)='./file0\x00', 0x800000008, 0x4, 0xfffffffd, 0xa, 0x1c800000, 0xa7, &(0x7f00000001c0)='\x00', [0x18, 0x6, 0x8, 0x4, 0x4, 0x4, 0x91e, 0xf, 0x6, 0xa, 0x8, 0x7, 0x5, 0x7, 0xfffffffe, 0xffffffd3, 0x9, 0xffff3382, 0x8000007, 0x0, 0x401, 0x9, 0xcde, 0x6, 0xfffffff8, 0x7, 0x7, 0x0, 0x5, 0x5ba, 0x7, 0xffbffffa, 0x5, 0x9, 0x3, 0x6, 0xfffeffff, 0x8000, 0x2, 0x1, 0x7, 0x0, 0x0, 0x3, 0x271f, 0x3, 0x9, 0x80000003, 0xac5e, 0x2, 0xfff7fff7, 0x6ddbd7a2, 0x4, 0x300, 0xb, 0x8, 0x86, 0x9, 0x20, 0x3, 0x8001, 0x9, 0x82, 0x2, 0x6, 0x4, 0x10001, 0xfffffff5, 0x0, 0x80, 0x6, 0x7, 0xff, 0x0, 0x2, 0x9, 0x388d, 0xfffffffc, 0x3, 0x0, 0x3, 0x40, 0x80000001, 0xe2e, 0x5, 0xed, 0x10000, 0xc, 0xfffffffe, 0xfb, 0x1, 0xe2, 0x7ffffffb, 0x5, 0xc0b0, 0x81]})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r6 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="11f10000004000"], 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10)
cap_rights_limit(0xffffffffffffffff, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts.
Out of ktrace request objects.
Expensive callout(9) function: 0xffffffff819260a0(0) 0.002520310 s
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d26800
md0: truncating fractional last sector by 1 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe005895f800
ip6_ctloutput: mbuf limit hit
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d28000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d26800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d26800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d26800
if_delmulti_locked: detaching ifnet instance 0xfffffe005895f000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895f000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895f000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e000
SYZFAIL: SIGSEGV
Connection to 10.128.10.8 closed by remote host.
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e800
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e800
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e800

FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0)if_delmulti_locked: detaching ifnet instance 0xfffffe005895e800
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e800


login: if_delmulti_locked: detaching ifnet instance 0xfffffe005895e800
if_delmulti_locked: detaching ifnet instance 0xfffffe005895f000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895f000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895f000
pid 781 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 746 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
set $lines = 0
pid 335 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
Password:pid 885 (rtsol), jid 0, uid 0: exited on signal 11 (core dumped)
pid 740 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d26800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d26800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d26800
pid 736 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 888 (rtsol), jid 0, uid 0: exited on signal 11 (core dumped)
pid 741 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 747 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 771 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 743 (getty), jid 0, uid 0: exited on signal 11 (core dumped)

Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe005895e000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e000
if_delmulti_locked: detaching ifnet instance 0xfffffe005895e000
pid 745 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 742 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
pid 744 (getty), jid 0, uid 0: exited on signal 11 (core dumped)
show registers
Password:
Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect