last executing test programs:

3.776539581s ago: executing program 2 (id=650):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MDIOCATTACH(r0, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x200, 0x2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8, 0x3e, 0x0, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]})

3.37458445s ago: executing program 2 (id=653):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)

3.142082015s ago: executing program 3 (id=655):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x17, 0x0, 0x10, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x0, 0xfff, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000280)})

3.132605235s ago: executing program 0 (id=656):
execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

2.710455656s ago: executing program 0 (id=657):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000100)={'rack\x00', 0x9}, 0x24)
setsockopt$inet_tcp_int(r0, 0x6, 0x451, &(0x7f00000001c0), 0x4)

2.394030024s ago: executing program 2 (id=659):
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendmsg$inet6_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fe2c21ff0700000000f9ff08e3000055"}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x80)
getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={@in6={{0x1c, 0x1c, 0x3, 0x3, @loopback={0xffff0000}}}, 0x0, 0x0, 0x0, 0x19}, &(0x7f0000000040)=0x98)

2.382705942s ago: executing program 3 (id=660):
cpuset_setaffinity(0x3, 0x7, 0x8, 0x8, &(0x7f0000000000)={[0x4]})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x2000000, 0x0)
ioctl$DIOCGETRULESETS(r0, 0xc444443a, &(0x7f0000000540)="2e1fa049b0735e00bb13c3b6f19b2f1ac1f0a33c7d10a95d8f30d01a4e8333b26ad406e87c1c08f86eb1641da4ef59e4549708cc0870db07e6b336afc77bde3415bcb10848ab5db26b8eac84f9c3ac810592eda9d386")

2.379675873s ago: executing program 1 (id=661):
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup2(r0, r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x24, &(0x7f0000000200)={@in6={{0x1c, 0x1c, 0x0, 0x0, @loopback, 0x10000000}}, 0x0, 0xbffe}, 0x8c)

2.059396612s ago: executing program 2 (id=662):
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000000)={'rack\x00'}, 0x24)
setsockopt$inet6_tcp_TCP_FASTOPEN(r0, 0x6, 0x462, &(0x7f0000000040)={0x8, "000108000700fc0626e6e2a4067aefaa"}, 0x14)

1.734970787s ago: executing program 0 (id=663):
setreuid(0x0, 0xee00)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x118)
extattr_delete_fd(r0, 0x2, &(0x7f0000000300)='/dev/bpf\x00')

1.399354783s ago: executing program 1 (id=664):
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
aio_write(&(0x7f0000000280)={r0, 0x0, 0x0, 0x0, [0x0, 0x4], 0xfffffffffffffffe, 0x0, 0x0, {0x4, 0x0, 0x0}, {0x4, 0x3, @sigval_int=0x4, @ke_flags=0x48}})
aio_cancel(r0, 0x0)

1.386319923s ago: executing program 3 (id=665):
r0 = getppid()
rtprio(0x1, r0, &(0x7f0000000000)={0x2, 0x4019})

1.225659805s ago: executing program 1 (id=666):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r0, 0xffff, 0x20000, 0x0, 0x0)

1.204931373s ago: executing program 2 (id=667):
setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000080)={0x2e49}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.096457896s ago: executing program 1 (id=668):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0)

860.298652ms ago: executing program 0 (id=669):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BIOCLOCK(r0, 0x2000427a)
ioctl$BIOCROTZBUF(r0, 0x40184280, 0x0)

853.272304ms ago: executing program 3 (id=670):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0xd00, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x19, 0x0, 0x10, &(0x7f0000000040)="0100743adeff", 0xfffffffffffffea9, 0x0, 0x0, 0x7d86619a, [0x0, 0x7]})
ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000001500)={0x0, 0x1, 0x0, 0xffb0, &(0x7f0000000300), 0x0, &(0x7f00000013c0), &(0x7f00000014c0)})

845.122576ms ago: executing program 2 (id=671):
ktimer_create(0x0, 0x0, &(0x7f0000000180))
ktimer_create(0x0, 0x0, &(0x7f00000001c0))
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x0, 0xffffffffffffffff})

526.133248ms ago: executing program 1 (id=672):
syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @random="d43106de617d", [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@rr={0x7, 0x7, 0x0, [@multicast2]}]}}, @udp={{0x3, 0x1, 0x8}}}}}})
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg$inet6_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x102}, 0x0)

518.66712ms ago: executing program 3 (id=673):
r0 = kqueue()
r1 = dup2(r0, r0)
ioctl$EFIIOC_VAR_NEXT(r1, 0x8004667d, &(0x7f0000000540)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "119ffee87856"}, 0x0, 0x0})

356.401573ms ago: executing program 0 (id=674):
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000340)={0x1c, 0x1c, 0x1, 0x1ff, @local={0xfe, 0x80, '\x00', 0x0}, 0x247}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0x1c, 0x1c, 0x2, 0xfffffffe, @loopback}, 0x1c)

227.679µs ago: executing program 1 (id=675):
open$dir(&(0x7f0000000200)='./file0\x00', 0x10258, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
utimensat(r0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{0x0, 0xfffffffffffffffe}}, 0x0)

109.147µs ago: executing program 0 (id=676):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000180)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r0, 0x6, 0x45f, &(0x7f0000000100)=0x6000000, 0x4)

0s ago: executing program 3 (id=677):
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@dest_unreach={0x3, 0x3, 0x0, 0x0, 0xc8, 0xe59, {0x15, 0x4, 0x3, 0x16, 0x6, 0x66, 0x9, 0xfc, 0x87, 0x1, @rand_addr=0x6, @rand_addr=0x3, {[@noop, @ra={0x94, 0x6, 0x10000}, @timestamp={0x44, 0x34, 0x3, 0x1, 0x4, [{[@remote={0xac, 0x14, 0x0}], 0xc}, {[@local={0xac, 0x14, 0x0}], 0x1000}, {[@loopback], 0x2}, {[@broadcast], 0xffff}, {[], 0x10001}, {[], 0x5}, {[@multicast1], 0x80000000}]}, @rr={0x7, 0x3, 0x6}]}}}}}}})
select(0x0, 0x0, 0x0, 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts.
WARNING pid 1106 (syz-executor): ioctl sign-extension ioctl 40004000453f
WARNING pid 1203 (syz-executor): ioctl sign-extension ioctl 2000000040184542
if_delmulti_locked: detaching ifnet instance 0xfffffe005421f800
if_delmulti_locked: detaching ifnet instance 0xfffffe005421f800
if_delmulti_locked: detaching ifnet instance 0xfffffe005421f800
if_delmulti_locked: detaching ifnet instance 0xfffffe005421f800
if_delmulti_locked: detaching ifnet instance 0xfffffe005421f800
if_delmulti_locked: detaching ifnet instance 0xfffffe005421f800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662000
SYZFAIL: SIGILL
if_delmulti_locked: detaching ifnet instance 0xfffffe006e663000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e663000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e663000
Connection to 10.128.1.224 closed by remote host.


FreeBSD/amd64 (ci-freebsd-main-5.us-central1-b.c.syzkaller.internal) (ttyu0)

login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058726800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058726800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058726800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662800

FreeBSD/amd64 (ci-freebsd-main-5.us-central1-b.c.syzkaller.internal) (ttyu0)

login: pid 763 (csh), jid 0, uid 0: exited on signal 4 (core dumped)
pid 747 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 1361 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped)
pid 736 (sh), jid 0, uid 0: exited on signal 4 (core dumped)
pid 746 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0058726800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058726800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058726800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662000
pid 745 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
set $lines = 0
pid 338 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped)
pid 744 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
Password:pid 743 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 335 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped)
pid 742 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 741 (getty), jid 0, uid 0: exited on signal 4 (core dumped)
pid 740 (getty), jid 0, uid 0: exited on signal 4 (core dumped)

Login incorrect
login: pid 1596 (syz-executor), jid 0, uid 0: exited on signal 4 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe006e663000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e663000
if_delmulti_locked: detaching ifnet instance 0xfffffe006e663000
show registers
Password:if_delmulti_locked: detaching ifnet instance 0xfffffe006e662800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662800
if_delmulti_locked: detaching ifnet instance 0xfffffe006e662800

Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect