last executing test programs:

176.387565ms ago: executing program 1 (id=2):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x5, 0x10000012, 0xffffffffffffffff, 0x2ee77f61)
sigaction(0x6, &(0x7f0000000200)={&(0x7f0000000000)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de351c4c211de4700b69989999908", 0x35, {[0xfffff801, 0x50e8, 0xfffffffe]}}, 0x0)
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async)
lio_listio(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x1, 0x6, @sival_ptr, @spare=[0x101, 0x3, 0x0, 0x2e1, 0x9, 0x3, 0xd5, 0x8]}) (async)
r1 = getuid()
r2 = getegid()
r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
sendto$inet6(r3, 0x0, 0x0, 0x20004, &(0x7f0000000300)={0x1c, 0x1c, 0x2, 0x7ff, @rand_addr="55bff20c8f9dd7090f4bc10aa6969709", 0x4}, 0x1c) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
fork() (async)
setregid(r2, 0xffffffffffffffff) (async)
fchown(r0, r1, r2)
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x280059a7})

52.935609ms ago: executing program 2 (id=3):
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000001140)={0x1c, 0x1c, 0x3, 0x100, @mcast2, 0x2}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@random="e727dc07001f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "3d0400", 0x0, 0x2c, 0x3, @rand_addr="000000000000000100", @mcast2}}}})
aio_write(&(0x7f0000000340)={r1, 0x80000001, &(0x7f0000000300)="e2", 0x1, [0xfffffffe, 0xffffffff], 0x0, 0x0, 0xf, {0x5, 0x7, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x9, 0x9, 0xf, 0x2, 0x100000000, 0xd24, 0x10000, 0x6b]}})
preadv(r1, 0x0, 0x0, 0xa2)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
r3 = socket(0x26, 0x2, 0x0)
bind(r3, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}}}}})
recvfrom$inet(r3, 0x0, 0x0, 0x40081, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0)
sync()
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x4)
r4 = kqueue()
kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7]}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f0000000040)={0x29, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff, [0x8]})
ioctl$CIOCCRYPT(r5, 0xc0306367, &(0x7f0000000180)={0x7ff, 0x1, 0x0, 0x8, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)="962d00000000778c8622930fd894ecca833ed7132bca2a2f1b12d625a939c3374c80120c66c4b8d7554586d5f89b83705fd6f515fdceb0e795f4e30de9628cd1824363aef0bd0fdad3d853d3d3168d85e7de636c4b20401d39aa1a66770cc16063c155c5c940f2ca379d84bb627691430b00000055b0e55d00682afb5942dde1db714fa7e8d6a464353fc422797af972271e94fb306ebb0afe65266c29d5143ea1fb3501f304dea9ffacfd8f70196b8a2437fbb0f56140327bc0dab77a47193a75d8758f089c7f345f351f5cc749db0205d0f058"})
r6 = msgget$private(0x0, 0x790)
msgsnd(r6, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r6, &(0x7f0000000180)=ANY=[@ANYRES8], 0x401, 0x0)
r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
preadv(r7, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0)
fcntl$lock(r0, 0x16, &(0x7f0000000440)={0x570, 0x0, 0x80000000000000, 0xfffffffffffffffe})

45.657329ms ago: executing program 0 (id=1):
chown(&(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000480)="0814883b8a8a2b7f67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c87eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00000000000000000000000000000000008d9f0d67d27d4bb23c80a71aeb76e21bdb93e966be002c08ae6b0f2c1426577e900c418602745187ebe624a27d0e4701d95fce657852a9fa3b0ba2d97b74324320d9a371231f1b49a2542dc629c0a9f04b5cc113d5dc328c895b86f1c222a7a1db4db61d28fc95", 0xe7, 0x100, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)=0x3, 0x4)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000240)=0x9, 0x4) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000240)=0x9, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00', 0x6}, 0x24)
connect$inet(r0, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10)
freebsd10_pipe(&(0x7f0000000040)) (async)
freebsd10_pipe(&(0x7f0000000040))
msync(&(0x7f0000920000/0x2000)=nil, 0x2000, 0x2)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x7, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0)
dup2(r1, 0xffffffffffffffff) (async)
dup2(r1, 0xffffffffffffffff)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r2, &(0x7f0000000100)=@in={0x0, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x1c) (async)
bind(r2, &(0x7f0000000100)=@in={0x0, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x1c)
setsockopt$inet6_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x12, &(0x7f0000000180)={0xff}, 0x1)
connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x80000001, @loopback, 0x2}, 0x1c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1)
sendto$inet6(r2, &(0x7f00000020c0)="d1", 0xffef, 0x20184, 0x0, 0x0)
kqueue() (async)
kqueue()
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
kqueue()
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff5, 0x9, 0x8, 0x1001, 0x1, [0x0, 0x240000000000000, 0x0, 0xfffffffd]}], 0x1, 0x0, 0x0, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff5, 0x9, 0x8, 0x1001, 0x1, [0x0, 0x240000000000000, 0x0, 0xfffffffd]}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_udp(0x1c, 0x2, 0x0)
ioctl$SMB_OLD_TRANS(r3, 0xc01c690c, &(0x7f0000000140)={0x6c, 0x6f, 0x30, @word, @buf="e2f7", 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$SMB_OLD_TRANS(r3, 0xc01c690c, &(0x7f0000000140)={0x6c, 0x6f, 0x30, @word, @buf="e2f7", 0x0, 0x0, 0x0, 0x0})
open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) (async)
r4 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0)
fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) (async)
fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005})
open$dir(&(0x7f0000000440)='./file0\x00', 0x80, 0xeb) (async)
open$dir(&(0x7f0000000440)='./file0\x00', 0x80, 0xeb)

0s ago: executing program 3 (id=4):
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$sock_int(r0, 0xffff, 0x1015, &(0x7f00000006c0)=0xfffdfff9, 0x4)
r1 = kqueue()
kevent(r1, &(0x7f0000000000)=[{0x401, 0xfffffffffffffff3, 0x20, 0x1, 0x7, 0x0, [0x1, 0xffff, 0x3, 0x46]}, {0x5, 0xfffffffffffffffa, 0xc7, 0x1000000, 0x528, 0x1, [0x0, 0x5, 0x8, 0xffffffffffffff21]}, {0x5, 0xfffffffffffffffe, 0xa, 0x400, 0x400, 0x4, [0x5, 0x8, 0x100000001, 0x2]}, {0x6, 0xfffffffffffffff5, 0x58, 0x2, 0xa, 0x1, [0x2, 0x1, 0x2, 0x100]}, {0x3, 0xfffffffffffffff8, 0x8008, 0xc0000000, 0x7fff, 0x8, [0x3, 0x80000000, 0x200, 0x4]}, {0x2ed, 0xfffffffffffffffe, 0x10000, 0x1, 0x7fff, 0xfffffffffffffff9, [0xffff, 0x9, 0x8, 0x9]}], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000300)={0xbeb1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts.
SYZFAIL: SIGFPE
Connection to 10.128.1.106 closed by remote host.
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400

if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400

FreeBSD/amd64if_delmulti_locked: detaching ifnet instance 0xfffffe0054244400
 (ci-freebsd-main-9.us-central1-b.c.syzkaller.internal) (ttyu0)

login: pid 685 (cron), jid 0, uid 0: exited on signal 8 (core dumped)
pid 746 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244800
if_delmulti_locked: detaching ifnet instance 0xfffffe0054244800
pid 423 (devd), jid 0, uid 0: exited on signal 8 (core dumped)
pid 760 (csh), jid 0, uid 0: exited on signal 8 (core dumped)
pid 817 (dhclient), jid 0, uid 0: exited on signal 8 (core dumped)
pid 744 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 784 (sh), jid 0, uid 0: exited on signal 8 (core dumped)
pid 740 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 334 (dhclient), jid 0, uid 0: exited on signal 8 (core dumped)
set $lines = 0
pid 742 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
Password:pid 735 (sh), jid 0, uid 0: exited on signal 8 (core dumped)
pid 337 (dhclient), jid 0, uid 0: exited on signal 8 (core dumped)
pid 743 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 739 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 805 (dhclient), jid 0, uid 0: exited on signal 8 (core dumped)
pid 745 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 741 (getty), jid 0, uid 0: exited on signal 8 (core dumped)

Login incorrect
login: if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3000
show registers
Password:if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400
if_delmulti_locked: detaching ifnet instance 0xfffffe00077c3400

Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
show all tcpcbs/bl