last executing test programs:

22.747231369s ago: executing program 32 (id=236):
r0 = openat$bpf(0xffffff9c, &(0x7f0000000180), 0x200, 0x0)
ioctl$BIOCSETF(r0, 0x80084267, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x6, 0xf, 0x0, 0x4}, {0x3, 0x6, 0x7f, 0x200}]})

12.260006716s ago: executing program 2 (id=823):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x68, 0x0, 0x0)

12.24570315s ago: executing program 2 (id=825):
extattr_get_link(&(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000100)='$*\x00', 0x0, 0x0)
freebsd11_mknod(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x0)
getfh(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

12.224267192s ago: executing program 2 (id=830):
fspacectl(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$DIOCGETSTATES(r0, 0xc0106663, &(0x7f0000000040))

12.169695081s ago: executing program 33 (id=830):
fspacectl(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$DIOCGETSTATES(r0, 0xc0106663, &(0x7f0000000040))

8.059923675s ago: executing program 5 (id=1093):
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000040)=0x5, 0x1)

8.040461415s ago: executing program 5 (id=1097):
r0 = socket$inet6(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000010c0)=0x8, 0x4)

7.964543217s ago: executing program 5 (id=1106):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000080)={0x19, 0x0, 0x10, &(0x7f00000000c0)="ec7b00002cfeff02000000000000007f", 0x0, 0x0, 0x0, 0xfdffef85, [0x0, 0x0, 0x8]})
ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)})

7.85248645s ago: executing program 5 (id=1113):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f0000000080))

7.826239791s ago: executing program 5 (id=1116):
freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)

7.787408985s ago: executing program 5 (id=1119):
r0 = socket(0x2, 0x3, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000000), 0x4)

7.770814429s ago: executing program 34 (id=1119):
r0 = socket(0x2, 0x3, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000000), 0x4)

7.733742154s ago: executing program 1 (id=1124):
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="16", 0x1}], 0x1, 0xb542)
sysarch$AMD64_SET_FSBASE(0x81, &(0x7f00000000c0))

7.70943537s ago: executing program 1 (id=1126):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000340)=0xfffffffc, 0x4)

7.686887481s ago: executing program 1 (id=1128):
r0 = vfork()
lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0x8, @sigval_int, @spare})
wait4(r0, &(0x7f0000000200), 0x10, 0x0)

7.636446155s ago: executing program 1 (id=1131):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300010005})

7.613562654s ago: executing program 1 (id=1134):
freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)

7.598058496s ago: executing program 1 (id=1135):
r0 = socket(0x2, 0x1, 0x0)
sendmsg$inet6_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20081}, 0x13)

7.592387978s ago: executing program 35 (id=1135):
r0 = socket(0x2, 0x1, 0x0)
sendmsg$inet6_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20081}, 0x13)

7.175044697s ago: executing program 6 (id=1153):
cap_enter()
cpuset_getaffinity(0x2, 0x2, 0x6, 0x0, 0x0)

7.13134396s ago: executing program 6 (id=1155):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000a40))

7.111296016s ago: executing program 6 (id=1157):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r0, 0xffff, 0x1018, &(0x7f0000000040), 0x4)

7.074092181s ago: executing program 6 (id=1160):
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0)

7.05885615s ago: executing program 6 (id=1162):
freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x1)
mount(&(0x7f0000000080)='ufs\x00', &(0x7f00000000c0)='.\x00', 0x93000700, &(0x7f0000000100))

7.006424254s ago: executing program 6 (id=1168):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000001f80)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x559edf87, [0x0, 0x3, 0x0, 0xc6]})

6.958295751s ago: executing program 36 (id=1168):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000001f80)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x559edf87, [0x0, 0x3, 0x0, 0xc6]})

6.503399673s ago: executing program 8 (id=1199):
clock_settime(0x0, &(0x7f00000002c0)={0x3, 0x3})
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

6.439428714s ago: executing program 8 (id=1200):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
sysarch$AMD64_SET_FSBASE(0x88, &(0x7f00000000c0))

6.427155697s ago: executing program 8 (id=1201):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="ee08665d19ac14d5e51348770200ff418420aef617be001900d4b38311001b0000000000000000006a89dbde", 0x2c)

6.403293365s ago: executing program 8 (id=1205):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$MDIOCATTACH(r0, 0xc1c07200, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]})

6.391823206s ago: executing program 8 (id=1206):
freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x1)
mount(&(0x7f0000000080)='ufs\x00', &(0x7f00000000c0)='.\x00', 0x93000700, &(0x7f0000000100))

6.301537994s ago: executing program 3 (id=1210):
r0 = socket(0x1c, 0x1, 0x0)
fpathconf(r0, 0x35)

6.282449962s ago: executing program 8 (id=1211):
setresgid(0x0, 0xee00, 0x0)
setresgid(0xee00, 0xee01, 0x0)

6.228935299s ago: executing program 37 (id=1211):
setresgid(0x0, 0xee00, 0x0)
setresgid(0xee00, 0xee01, 0x0)

6.22174143s ago: executing program 3 (id=1214):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp(r0, 0x11, 0x1, 0x0, 0x0)

6.187764482s ago: executing program 3 (id=1216):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_buf(r0, 0x0, 0x18, 0x0, &(0x7f0000000280))

6.141547318s ago: executing program 3 (id=1218):
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000080)=0xffffffff, 0x4)

6.130589325s ago: executing program 3 (id=1219):
freebsd11_mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x1)
mount(&(0x7f0000000080)='ufs\x00', &(0x7f00000000c0)='.\x00', 0x93000700, &(0x7f0000000100))

6.084660219s ago: executing program 3 (id=1221):
freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x40081)

6.080773595s ago: executing program 38 (id=1221):
freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x40081)

680.861141ms ago: executing program 9 (id=1715):
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0x800007, 0x1, 0x0)

595.983474ms ago: executing program 9 (id=1720):
r0 = socket$inet6(0x1c, 0x3, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000001c0)=0xa, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, 0x0)

569.04197ms ago: executing program 9 (id=1722):
r0 = socket$inet6(0x1c, 0x3, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0xa, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x28, &(0x7f0000000100)=0x7, 0x4)

509.692776ms ago: executing program 4 (id=1737):
r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0xa0)

503.652851ms ago: executing program 9 (id=1729):
rtprio(0x1, 0x0, &(0x7f0000000140)={0x2, 0xb})
r0 = fork()
sigqueue(r0, 0xf, @sival_int=0x8000)

465.889696ms ago: executing program 9 (id=1733):
extattr_get_link(&(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000100)='$*\x00', 0x0, 0x0)
freebsd11_mknod(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x0)
getfh(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

455.894888ms ago: executing program 4 (id=1743):
r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0xa0)

414.442759ms ago: executing program 9 (id=1738):
setuid(0xee01)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f00000000c0)=0x20000, 0x4)

409.983938ms ago: executing program 4 (id=1739):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
write(r0, &(0x7f0000000080)="c3", 0x1)
read(r1, &(0x7f0000000100)=""/133, 0x85)

404.109357ms ago: executing program 39 (id=1738):
setuid(0xee01)
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f00000000c0)=0x20000, 0x4)

385.818989ms ago: executing program 4 (id=1740):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f00000001c0)={0xb, 0x21, 0x18, &(0x7f0000000140)="ec7b00000900ff2425c3f0a58b519798d25cd0a9cfbc8c96", 0x0, 0x0, 0x0, 0xfdfffd05, [0x0, 0x0, 0x0, 0x2]})
ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x8000, &(0x7f0000000140), 0x0, 0x0, 0x0})

356.723963ms ago: executing program 7 (id=1745):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x8000008, @loopback}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x2, 0x2, 0x8}}}}}}})

292.925788ms ago: executing program 4 (id=1747):
extattr_get_link(&(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000100)='$*\x00', 0x0, 0x0)
freebsd11_mknod(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x0)
getfh(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

289.87212ms ago: executing program 7 (id=1748):
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0)
freebsd10_pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$DIOCNATLOOK(r0, 0x8004745b, &(0x7f0000000080))

286.149355ms ago: executing program 0 (id=1749):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
write(r0, &(0x7f0000000080)="c3", 0x1)
read(r1, &(0x7f0000000100)=""/133, 0x85)

254.736406ms ago: executing program 7 (id=1750):
open$dir(&(0x7f0000000040)='./file0\x00', 0x110206, 0x1)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000006c0)='\x90\xcf\xb8+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce\x8d\xb9\x94\x9c\x94\x15( \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xaf\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8\x83>\x83?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1', 0x0, 0x0)

205.159956ms ago: executing program 4 (id=1751):
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2004, 0x4, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic="179d64ca430bb096c6832cde18679e29dba3ef488e11ee14"}}}})
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}})
syz_emit_ethernet(0x36, &(0x7f0000001ec0)={@random="b90531074b01", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x1b15, 0x0, 0xfffb}}}}}})

201.203942ms ago: executing program 40 (id=1751):
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2004, 0x4, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic="179d64ca430bb096c6832cde18679e29dba3ef488e11ee14"}}}})
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}})
syz_emit_ethernet(0x36, &(0x7f0000001ec0)={@random="b90531074b01", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x1b15, 0x0, 0xfffb}}}}}})

185.927229ms ago: executing program 0 (id=1753):
r0 = semget$private(0x0, 0x4, 0xb1)
__semctl$IPC_RMID(r0, 0x0, 0x0)
__semctl$GETVAL(r0, 0x2, 0x5)

99.981535ms ago: executing program 0 (id=1754):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f00000001c0)={0xb, 0x21, 0x18, &(0x7f0000000140)="ec7b00000900ff2425c3f0a58b519798d25cd0a9cfbc8c96", 0x0, 0x0, 0x0, 0xfdfffd05, [0x0, 0x0, 0x0, 0x2]})
ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x8000, &(0x7f0000000140), 0x0, 0x0, 0x0})

98.756813ms ago: executing program 7 (id=1755):
rtprio(0x1, 0x0, &(0x7f0000000140)={0x2, 0xb})
r0 = fork()
sigqueue(r0, 0xf, @sival_int=0x8000)

52.608317ms ago: executing program 2 (id=1742):
mlock(&(0x7f000018e000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

37.269008ms ago: executing program 7 (id=1756):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='hd\x00', 0x3)
rfork(0x85000)

37.120555ms ago: executing program 0 (id=1757):
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0)
freebsd10_pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$DIOCNATLOOK(r0, 0x8004745b, &(0x7f0000000080))

23.746033ms ago: executing program 0 (id=1758):
extattr_get_link(&(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000100)='$*\x00', 0x0, 0x0)
freebsd11_mknod(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x672cda28f543e327, 0x0)
getfh(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

22.528664ms ago: executing program 2 (id=1765):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_TXTLS_MODE(r0, 0x6, 0x28, &(0x7f0000000100)=0x2, 0x4)

10.817213ms ago: executing program 2 (id=1759):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
rfork(0x1000)
fcntl$lock(r0, 0xb, &(0x7f0000000140)={0x1, 0x0, 0x4, 0x200})

9.677342ms ago: executing program 0 (id=1760):
open$dir(&(0x7f0000000040)='./file0\x00', 0x110206, 0x1)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000006c0)='\x90\xcf\xb8+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce\x8d\xb9\x94\x9c\x94\x15( \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xaf\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8\x83>\x83?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1', 0x0, 0x0)

6.211388ms ago: executing program 7 (id=1761):
open(&(0x7f00000001c0)='./file0\x00', 0x80000000000209, 0xffffffffffffffbe)
setuid(0xee01)
extattr_get_file(&(0x7f0000000280)='./file0\x00', 0x2, &(0x7f0000000300)='^\x00', 0x0, 0x0)

0s ago: executing program 41 (id=1760):
open$dir(&(0x7f0000000040)='./file0\x00', 0x110206, 0x1)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000006c0)='\x90\xcf\xb8+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce\x8d\xb9\x94\x9c\x94\x15( \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xaf\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8\x83>\x83?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1', 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts.
md2147483519: truncating fractional last sector by 1 bytes
md0: truncating fractional last sector by 2047 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
Jan  1 00:00:03 ci-freebsd-i386-2 dhclient[820]:if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
 Interface tap0 if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
is down, dhclient exiting
Jan  1 00:00:04 ci-freebsd-i386-2 dhclient[820]: connection closed
Jan  1 00:00:04 ci-freebsd-i386-2 dhclient[820]: exiting.
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793800
md1: truncating fractional last sector by 3 bytes
md2: truncating fractional last sector by 8 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0054217800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054217800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007793000
ip6_pcbopts: all specified options are cleared.
md0: truncating fractional last sector by 249 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0054217800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
md3: truncating fractional last sector by 8 bytes
md4: truncating fractional last sector by 3 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054218000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054216000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054216000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054216000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054216000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054216000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054216000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215000
if_delmulti_locked: detaching ifnet instance 0xfffffe0054215000
md5: truncating fractional last sector by 3 bytes
md6: truncating fractional last sector by 3 bytes
md7: truncating fractional last sector by 3 bytes
md8: truncating fractional last sector by 3 bytes
md9: truncating fractional last sector by 3 bytes
md10: truncating fractional last sector by 8 bytes
if_delmulti_locked: detaching ifnet instance 0xfffffe0054217800


FreeBSD/amd64 (ci-freebsd-i386-2.us-central1-b.c.syzkaller.internal) (ttyu0)

login: if_delmulti_locked: detaching ifnet instance 0xfffffe0077d12000
if_delmulti_locked: detaching ifnet instance 0xfffffe0077d12000
if_delmulti_locked: detaching ifnet instance 0xfffffe0077d12000
Jan  1 00:05:13 ci-freebsd-i386-2 dhclient[2753]: Interface tap2 is down, dhclient exiting
set $lines = 0
Jan  1 00:05:13 ci-freebsd-i386-2 dhclient[2753]: connection closed
Jan  1 00:05:13 ci-freebsd-i386-2 dhclient[2753]: exiting.
Password:
Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe0077d12000
if_delmulti_locked: detaching ifnet instance 0xfffffe0077d12000
if_delmulti_locked: detaching ifnet instance 0xfffffe0077d12000
show registers
Password:
Login incorrect
login: ps
Jan  1 00:05:17 ci-freebsd-i386-2 login[747]: 2 LOGIN FAILURES ON ttyu0
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
show all tcpcbs/bl