last executing test programs:

2.728482123s ago: executing program 3 (id=133):
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x3, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000900)="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", 0x5b5, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r1 = socket$inet6_udp(0x1c, 0x2, 0x0)
ioctl$CIOCCRYPTAEAD(0xffffffffffffffff, 0xc040636d, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]})
cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000))
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x101, @remote={0xfe, 0x80, '\x00', 0x0}, 0xffffffff}, 0xffffffffffffffe4)
sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

2.72797406s ago: executing program 3 (id=134):
kqueue()
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
r1 = kqueue()
kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
fspacectl(r0, 0x1, &(0x7f0000000040)={0x3ff, 0x7ffffffffffffc00}, 0x0, 0x0)
r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvfrom(r5, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0)
sendto(r6, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/127, 0x7f, 0x100, 0x0, 0x0)
fstatat(r6, &(0x7f00000009c0)='./file0\x00', 0x0, 0x0)
extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
shmdt(r4)
open$dir(0x0, 0x110ac0, 0x82)
ksem_init(0x0, 0xfffffffc)
fork()
getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x3}, &(0x7f0000000680)=0x8)
truncate(0x0, 0xaa480)
truncate(&(0x7f0000000080)='./file0\x00', 0x80008)
openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
r7 = socket$inet6_udp(0x1c, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0xfffffffc, @loopback, 0x20}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r8 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1b, &(0x7f00000001c0), 0x4)

2.30695666s ago: executing program 0 (id=140):
openat$evdev(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mprotect(&(0x7f000016d000/0x1000)=nil, 0x1000, 0x3)
mprotect(&(0x7f00005bd000/0x3000)=nil, 0x3000, 0x5)
minherit(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

2.265090546s ago: executing program 2 (id=141):
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
unlink(&(0x7f0000001080)='./file0\x00')
rfork(0x4)

2.264538714s ago: executing program 0 (id=142):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x7, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x4, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}})
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x0, 0xa, &(0x7f0000000140)="70ddcea6d6a0d3b94743", 0x0, 0xfdffffff, [0x0, 0x2, 0x0, 0x5]})
ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x12, &(0x7f0000000200), 0x0, 0x0, 0x0})
mlockall(0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0)
r3 = open$dir(&(0x7f00000006c0)='./file0\x00', 0x40000400000002c2, 0x0)
shm_open2(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x20, 0x1, &(0x7f0000000200)='/dev/crypto\x00')
copy_file_range(r3, 0x0, r3, &(0x7f0000000700)=0x7f, 0x8, 0x0)
shm_open2(&(0x7f00000000c0)='./file0\x00', 0x800, 0x94, 0x1, &(0x7f0000000180)='/dev/crypto\x00')
fspacectl(r0, 0x1, &(0x7f0000000040)={0x3ff, 0x7ffffffffffffc00}, 0x0, 0x0)

2.140015655s ago: executing program 0 (id=143):
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000300)={'rack\x00'}, 0x24)
openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
cpuset_setaffinity(0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)="99bd7e8aaa9cf6dd286648d42c714d511aaf0b2fac201cbb05ffb82884fcb6b7", 0x20}], 0x5}, 0x0, 0x4)
listen(r0, 0xc00000)
getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000500)={@in6={{0x1c, 0x1c, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000}}, 0x0, 0x7fffffff, 0xda59, 0x1000, 0x0, 0xffff}, &(0x7f00000005c0)=0x98)
socket$inet_sctp(0x2, 0x1, 0x84)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x1000041e, 0xffffffffffffffff, 0x0)
openat$filemon(0xffffff9c, 0x0, 0x200000, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
r1 = fcntl$dupfd(r0, 0x11, 0xffffffffffffffff)
ioctl$BIOCGETZMAX(r1, 0x4008427f, &(0x7f0000000000))
connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$sock_int(r2, 0xffff, 0x1010, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_buf(r3, 0x0, 0x4a, &(0x7f0000003600)="aa28c4cacb4e87b348498e492916ef0eec4449222ea48033d984539af6d41221f8a31eb9e1c2104f1e437a2de541290ca1ddb84f6ae5739948903758c3750d78874d4ab66625f5257f7e38140ac43d8d16e92af5e4ef578517dd591463a4bb548544cfdf243f8113f0c5e05c64eb8898fd240f9549c0054aa00856a9941d55dbf9ea7760f0d0a6f754b851459d568069123ba3aa398107b1", 0x98)
r4 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x10000, 0x1d8)
getsockopt$inet_tcp_buf(r4, 0x6, 0x26, &(0x7f0000000100)=""/78, &(0x7f0000000080)=0x4e)
shutdown(0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000003200)="1d", 0x1, 0x0, &(0x7f0000000480)=@un=@abs={0x8, 0x1, 0x0, 0x2}, 0x8)

1.864522522s ago: executing program 2 (id=144):
socket$inet6_icmp(0x1c, 0x2, 0x3a)
socket$inet6_udplite(0x1c, 0x2, 0x88)
syz_emit_ethernet(0x47, 0x0)
socket(0x1c, 0x1, 0x0)
socketpair(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvfrom(r0, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0)
r2 = fork()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x400, 0xfffffffffffffffe, 0x0)
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f00000003c0)={0x13, 0x2, r2, 0x7})
rtprio(0x1, r2, &(0x7f0000000000)={0x2, 0x1d})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x6)
sendto(r1, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0)

1.862409998s ago: executing program 0 (id=145):
socket(0x26, 0x2, 0x0)
freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
rfork(0x85000)
ksem_init(&(0x7f0000000280), 0x2)
ioctl$DIOCNATLOOK(r0, 0x8004667d, &(0x7f0000000400)="af")
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x1, 0xffffffffffffffff, 0x0, <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
fhopen(0xfffffffffffffffe, 0x400000)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x41e, &(0x7f0000000100), 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
procctl$PROC_TRACE_CTL(0x2, r1, 0x7, &(0x7f0000000140)=0x2)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x2000268fffffe})
r4 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x26, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ksem_wait(0x0)
ksem_wait(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1003, 0x0, 0x0)
fork()
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @multicast1, @local={0xac, 0x14, 0x0}}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000000)={@multicast1, @rand_addr, @local={0xac, 0x14, 0x0}}, 0xc)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/223, 0xdf}, 0x802)

1.859390836s ago: executing program 2 (id=146):
r0 = socket(0x1c, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2, 0x6, @empty, 0xfe}, 0x1c)
r1 = socket(0x1c, 0x1, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x6, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x149}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr="00000000080001000000001b00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x43}}}}}}})

1.858925648s ago: executing program 2 (id=147):
r0 = socket(0x26, 0x2, 0x0)
bind(r0, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x300, @mcast1}, 0xc)
bind(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r1 = socket(0x26, 0x2, 0x0)
bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x300, @mcast1}, 0xc)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
aio_write(&(0x7f0000000340)={r2, 0x80000001, &(0x7f0000000080), 0x0, [], 0x0, 0x4, 0x0, {0x0, 0x8, 0x0}, {0x0, 0x2000000}})
msgget$private(0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715", 0x16)
sendto$inet(r3, 0x0, 0x0, 0x20081, &(0x7f0000000000)={0x10, 0x2, 0x0, @loopback}, 0x10)
r4 = kqueue()
kevent(r4, &(0x7f0000000040)=[{0x1, 0xfffffffffffffff9, 0x9, 0x20000000, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0)
socket(0x1c, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
r5 = kqueue()
kevent(r4, &(0x7f0000000080)=[{0x3, 0xfffffffffffffff5, 0xc023, 0x0, 0x3, 0x0, [0x0, 0x4000000]}], 0x1, 0x0, 0x0, 0x0)
kevent(r5, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x60, 0x0)
syz_extract_tcp_res(0x0, 0x1, 0x401)
syz_emit_ethernet(0x11a, &(0x7f0000000080)=ANY=[])
open(&(0x7f0000000100)='./file0\x00', 0x1, 0x1a9)
truncate(&(0x7f0000000040)='./file0\x00', 0xaa480)
r6 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
r7 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mlockall(0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r7, 0x0)
fchflags(r6, 0x40008)
sync()
socket$inet6_udp(0x1c, 0x2, 0x0)

1.856783594s ago: executing program 0 (id=148):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
setitimer(0x0, &(0x7f0000000040)={{0x8843, 0x26}, {0x0, 0x400cfe}}, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0)
r2 = open(&(0x7f0000000480)='./file1\x00', 0x8004, 0x10a)
cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]})
cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)={[0x2000000025c0]})
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000040)={0x2a, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff})
ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000001300)={0x0, 0x1, 0x2, 0xc, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x12, r2, 0x0)
open$dir(0x0, 0x40000400000002c2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0)
openat$crypto(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140))
r4 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000040), 0x4)
r5 = socket(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10)
sendto(r5, &(0x7f0000000380)="9e", 0x1, 0x20005, 0x0, 0x0)
recvmsg(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x0}, 0xc1)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
open$dir(0x0, 0x488200, 0x176)
truncate(&(0x7f0000000040)='./file0\x00', 0xa)
getpeername(0xffffffffffffffff, 0x0, 0xfffffffffffffffe)

1.479103702s ago: executing program 3 (id=151):
open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x5)
r0 = kqueue()
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000380)=[{0x1, 0x2, 0x88, 0xffffff, 0xe474, 0x7f, [0x7f, 0x0, 0x4, 0x8]}, {0x7, 0xfffffffffffffffc, 0x2f, 0x200, 0xfffffffffffffffa, 0x4, [0x8, 0xfffffffffffffffe, 0x3ff, 0x3]}, {0x6, 0xfffffffffffffff3, 0x84, 0x4, 0x1, 0x1, [0x7, 0x0, 0x1, 0x1f]}], 0x3, 0x0, 0x0, 0x0)
close(r1)
kevent(r0, &(0x7f0000000100)=[{0x3, 0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000040)='./file1\x00', 0x4000040000100ac2, 0x100)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$bt_hci(0x24, 0x3, 0x86)
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4}, {r4, 0x10}, {r6, 0x40}], 0x6, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28)
r7 = kqueue()
kevent(r7, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$inet6_sctp(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x1)
r8 = open$dir(&(0x7f0000000840)='./file1\x00', 0x20000, 0x75)
setitimer(0x0, 0x0, 0x0)
pwritev(r8, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x10a)
r9 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CIOCGSESSION2(r9, 0xc040636a, &(0x7f0000000040)={0x2a, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff})
r10 = msgget$private(0x0, 0x442)
msgrcv(r10, 0x0, 0x0, 0x1, 0x0)

1.239766829s ago: executing program 2 (id=153):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0)
ftruncate(r0, 0x80002)
socket$inet6_sctp(0x1c, 0x1, 0x84)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x22a, 0x4)
connect$inet(r1, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
lgetfh(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140))
open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
linkat(r2, &(0x7f0000000000)='./file1\x00', r2, &(0x7f00000000c0)='./file0/file0\x00', 0x0)
open(&(0x7f0000000140)='./file0/file0\x00', 0x80, 0x41)
sendmsg$inet6_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x14b}], 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket(0x26, 0x5, 0x0)
r4 = socket(0x26, 0x2, 0x0)
bind(r4, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x300, @mcast1}, 0xc)
bind(r3, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc)
ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x27)
freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0)
lpathconf(&(0x7f0000000000)='./file0\x00', 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0x3}, 0x10)
r5 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r5, &(0x7f0000000300)={0x1c, 0x1c, 0x2, 0xfffffffe, @loopback, 0x8be}, 0x1c)
socket(0x2, 0x1, 0x0)

749.866635ms ago: executing program 0 (id=154):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc)
open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
r2 = kqueue()
r3 = vfork()
lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0xf})
kevent(r2, &(0x7f0000000140)=[{0x5, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x3, [0x100000000000004, 0x0, 0xfffffffffffffffe]}], 0x1, 0x0, 0x0, 0x0)
close(r1)
setsockopt$inet_mreq(r0, 0x0, 0xd, &(0x7f0000000000)={@empty, @broadcast}, 0x8)
rfork(0x96014)
fork()
fcntl$getown(r1, 0x5)
procctl$PROC_SPROTECT(0x0, r3, 0x1, &(0x7f0000000280)=0x7ffffe)
r4 = socket$bt_sco(0x24, 0x5, 0x89)
__cap_rights_get(0x5, r4, &(0x7f00000001c0))
getsockopt$inet_buf(r0, 0x0, 0x4a, 0x0, 0x0)
getsockopt$inet6_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x100, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x9, 0x9, 0x6, 0x5, 0x0, {@in={{0x10, 0x2, 0x3, @broadcast}}, <r5=>0x0, 0x9, 0x4, 0x9, 0x2, 0x81}}, &(0x7f0000000100)=0xb0)
fork()
procctl$PROC_REAP_KILL(0x0, r3, 0x6, &(0x7f0000000200)={0x8, 0x0, r3, 0xb, r3})
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000140)={r5, 0x5, 0x7, 0x10, 0x0, 0x2}, &(0x7f0000000180)=0x14)

479.904962ms ago: executing program 1 (id=156):
socket(0x26, 0x2, 0x0)
freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
rfork(0x85000)
ksem_init(&(0x7f0000000280), 0x2)
ioctl$DIOCNATLOOK(r0, 0x8004667d, &(0x7f0000000400)="af")
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x1, 0xffffffffffffffff, 0x0, <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
fhopen(0xfffffffffffffffe, 0x400000)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x41e, &(0x7f0000000100), 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
procctl$PROC_TRACE_CTL(0x2, r1, 0x7, &(0x7f0000000140)=0x2)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x2000268fffffe})
r4 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x26, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ksem_wait(0x0)
ksem_wait(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1003, 0x0, 0x0)
fork()
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @multicast1, @local={0xac, 0x14, 0x0}}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000000)={@multicast1, @rand_addr, @local={0xac, 0x14, 0x0}}, 0xc)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/223, 0xdf}, 0x802)

456.126788ms ago: executing program 1 (id=157):
r0 = socket$inet6(0x1c, 0x1, 0x0)
setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4)
bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r1, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr, @multicast1}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000080)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc)
setsockopt$inet_mreqn(r1, 0x0, 0xd, &(0x7f0000000000)={@broadcast, @remote={0xac, 0x14, 0x0}}, 0xffffff5f)
r2 = socket(0x1c, 0x1, 0x0)
r3 = socket$inet6_tcp(0x1c, 0x1, 0x0)
r4 = socket$inet6_udp(0x1c, 0x2, 0x0)
rfork(0x85000)
socket(0x1c, 0x3, 0x0)
freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "000015", 0x0, 0x2c, 0x0, @rand_addr="e1aaa2241dc0fb2800", @local={0xfe, 0x80, '\x00', 0x0}}}}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0)
write(r4, &(0x7f0000000080)="d272", 0x2)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
setsockopt$inet6_int(r3, 0x29, 0x1b, &(0x7f0000000080), 0x4)
bind$inet6(r3, &(0x7f0000000100)={0x1c, 0x1c, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, 0xffffffff}, 0x1c)
setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_mreqsrc(r8, 0x0, 0x48, &(0x7f0000000000)={@multicast1, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, 0xc)

391.726597ms ago: executing program 1 (id=158):
r0 = fhopen(&(0x7f0000000000)={{[0x5c8951ac, 0x3bea9983]}, {0xfffe, 0x1, "0a0000009a165d5900"}}, 0x8)
freebsd11_fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = getuid()
setreuid(r1, r2)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
__cap_rights_get(0x0, r3, 0xfffffffffffffffe)

387.471906ms ago: executing program 1 (id=159):
socket(0x26, 0x2, 0x0)
freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
rfork(0x85000)
ksem_init(&(0x7f0000000280), 0x2)
ioctl$DIOCNATLOOK(r0, 0x8004667d, &(0x7f0000000400)="af")
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x1, 0xffffffffffffffff, 0x0, <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
fhopen(0xfffffffffffffffe, 0x400000)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x41e, &(0x7f0000000100), 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
procctl$PROC_TRACE_CTL(0x2, r1, 0x7, &(0x7f0000000140)=0x2)
r3 = openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x2000268fffffe})
r4 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x26, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ksem_wait(0x0)
ksem_wait(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1003, &(0x7f0000000180)=0x18000003, 0x4)
fork()
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @multicast1, @local={0xac, 0x14, 0x0}}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000000)={@multicast1, @rand_addr, @local={0xac, 0x14, 0x0}}, 0xc)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/223, 0xdf}, 0x802)

342.351108ms ago: executing program 1 (id=160):
socket(0x26, 0x2, 0x0)
freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
rfork(0x85000)
ksem_init(&(0x7f0000000280), 0x2)
ioctl$DIOCNATLOOK(r0, 0x8004667d, &(0x7f0000000400)="af")
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x1, 0xffffffffffffffff, 0x0, <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
fhopen(0xfffffffffffffffe, 0x400000)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x41e, &(0x7f0000000100), 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
procctl$PROC_TRACE_CTL(0x2, r1, 0x7, 0x0)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x2000268fffffe})
r4 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x26, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ksem_wait(0x0)
ksem_wait(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1003, &(0x7f0000000180)=0x18000003, 0x4)
fork()
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @multicast1, @local={0xac, 0x14, 0x0}}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000000)={@multicast1, @rand_addr, @local={0xac, 0x14, 0x0}}, 0xc)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/223, 0xdf}, 0x802)

302.964291ms ago: executing program 3 (id=161):
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc040636a, 0x0)

298.87801ms ago: executing program 1 (id=162):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x4b, 0x0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
r2 = socket(0x1c, 0x1, 0x0)
syz_emit_ethernet(0x59, &(0x7f0000001480)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x23, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}, [{0x1, 0x1, '!\t\tb5Nd'}, {0x1}]}}}}}})
kqueue()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
getsockopt$inet_tcp_TCP_RXTLS_MODE(r2, 0x6, 0x2a, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0)

283.342576ms ago: executing program 3 (id=163):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_int(r0, 0xffff, 0x1018, &(0x7f0000000040), 0xe9)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)=@in={0x10, 0x2, 0x0, @multicast2}, 0x10)
open(&(0x7f00000000c0)='./file0\x00', 0x80400000000286, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
fcntl$setstatus(r1, 0x4, 0x4c)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
extattr_set_link(&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0)
extattr_list_link(&(0x7f0000000540)='./file0\x00', 0x2, 0x0, 0x0)

126.013623ms ago: executing program 3 (id=164):
munmap(&(0x7f0000359000/0x2000)=nil, 0x2000)
mprotect(&(0x7f000016d000/0x1000)=nil, 0x1000, 0x3)
mprotect(&(0x7f00005bd000/0x3000)=nil, 0x3000, 0x5)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
minherit(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

0s ago: executing program 2 (id=165):
socket(0x26, 0x2, 0x0)
freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
rfork(0x85000)
ksem_init(&(0x7f0000000280), 0x2)
ioctl$DIOCNATLOOK(r0, 0x8004667d, &(0x7f0000000400)="af")
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x1, 0xffffffffffffffff, 0x0, <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
fhopen(0xfffffffffffffffe, 0x400000)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x41e, &(0x7f0000000100), 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40082)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
procctl$PROC_TRACE_CTL(0x2, r1, 0x7, &(0x7f0000000140)=0x2)
r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x2000268fffffe})
r4 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x26, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ksem_wait(0x0)
ksem_wait(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1003, 0x0, 0x0)
fork()
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @multicast1, @local={0xac, 0x14, 0x0}}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x46, &(0x7f0000000000)={@multicast1, @rand_addr, @local={0xac, 0x14, 0x0}}, 0xc)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/223, 0xdf}, 0x802)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts.
md0: truncating fractional last sector by 192 bytes
Expensive callout(9) function: 0xffffffff84766480(0xfffffe0077e32458) 0.009399297 s

FreeBSD/amd64 (ci-freebsd-main-5.us-central1-b.c.syzkaller.internal) (ttyu0)

login: WARNING pid 899 (syz-executor): ioctl sign-extension ioctl 16042c4c9
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4000
May 21 13:45:06 ci-freebsd-main-5 kernel: nd6_na_input: duplicate IP6 address fe80:6::3aa
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800
SYZFAIL: SIGFPE
Connection to 10.128.1.150 closed by remote host.
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4000
pid 761 (csh), jid 0, uid 0: exited on signal 8 (core dumped)
pid 857 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 796 (sh), jid 0, uid 0: exited on signal 8 (core dumped)
pid 825 (dhclient), jid 0, uid 0: exited on signal 8 (core dumped)
pid 854 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 853 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800
pid 850 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800
pid 851 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20800

FreeBSD/amd64 (ci-freebsd-main-5.us-central1-b.c.syzkaller.internal) (ttyu0)

login: set $lines = 0
pid 855 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000
Password:pid 852 (getty), jid 0, uid 0: exited on signal 8 (core dumped)
pid 856 (getty), jid 0, uid 0: exited on signal 8 (core dumped)

Login incorrect
login: show registers
Password:
Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
login: