last executing test programs:

14.44026143s ago: executing program 2 (id=567):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f00000002c0)={0x0, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000380)="e6a12a00"})
open$dir(0x0, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000400)='./file1\x00')
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)=0x5, 0x4)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xc, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10)
openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket(0x1c, 0x1, 0xfe)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
r5 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0})
unlink(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xc, &(0x7f0000000000)={0xd9, 0x0, 0x0, 0x0, 0xfd, 0x3, 0x5, 0xfd, 0xb, 0x10, 0x40}, 0xb)
statfs(&(0x7f0000000d00)='./file1\x00', &(0x7f0000001700))
socket$inet6_sctp(0x1c, 0x5, 0x84)
getegid()
getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0xb)
extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, &(0x7f00000016c0)='{!\"`', 0x0, 0x0)
statfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0))

13.91452866s ago: executing program 3 (id=573):
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31)
socket$inet_sctp(0x2, 0x5, 0x84)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10)
openat$smbus(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)

13.17074489s ago: executing program 0 (id=575):
r0 = kqueue()
kevent(r0, &(0x7f0000000200)=[{0x80000000, 0xfffffffffffffffc, 0x8000, 0x200, 0x7, 0x4, [0x0, 0x3, 0x8, 0x6]}, {0x2, 0xfffffffffffffffc, 0xd4, 0x0, 0x9, 0x2, [0x5, 0x5, 0xf1e8, 0xffffffff]}], 0x2, &(0x7f00000003c0)=[{}, {}], 0x2, &(0x7f0000000100)={0x5, 0xe4})
rfork(0x85000)

13.17018707s ago: executing program 1 (id=576):
socket$inet6_sctp(0x1c, 0x5, 0x84) (async)
socket$inet6_sctp(0x1c, 0x5, 0x84)
open$dir(0x0, 0x0, 0x0)
kqueue()
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84)
r0 = kqueue()
kevent(r0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0)
socket(0x1c, 0x1, 0x0) (async)
r1 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) (async)
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c)
sendto$inet(r1, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r3 = kqueue()
kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) (async)
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) (async)
r4 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
sync() (async)
sync()
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4)
open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
listen(r5, 0x0)
setsockopt$inet6_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) (async)
setsockopt$inet6_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9)
getgid()
__semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000f80)=&(0x7f0000000f40))
getgid() (async)
getgid()
__semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1, {[@rr={0x7, 0x7, 0x7, [@multicast2]}]}}, @udp={{0x1, 0x3, 0x8}}}}}})

12.813213116s ago: executing program 1 (id=577):
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
setuid(0xffffffffffffffff)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000)
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000)
minherit(&(0x7f0000d93000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3)

12.80601478s ago: executing program 3 (id=578):
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
setuid(0xffffffffffffffff)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000)
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000)
minherit(&(0x7f0000d93000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3)

12.507615671s ago: executing program 3 (id=579):
r0 = socket(0x1c, 0x1, 0x0)
r1 = open$dir(0x0, 0x400, 0x62)
fcntl$setstatus(r1, 0x4, 0x4c)
writev(r1, 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x6, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0)
aio_write(&(0x7f0000000240)={r2, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={&(0x7f0000000080)="f0825b329dc4e108545599720c260faea43565ffffffc4e17e1110f26f8fe818a3c3008fe978d671fef20f5f31c4e37d083fb8", &(0x7f00000000c0)="4d3bb43e95489fd75808dcabdb"}}})
setitimer(0x0, &(0x7f0000001d40)={{0x6, 0xff}, {0x200, 0x7fffffff}}, 0x0)
mlockall(0x2)
r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
setresuid(0xee00, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x60000000)
sync()
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="65cb30df060000000b603666ab2f3df4", 0x100}}, {{0x1c, 0x1c, 0x1, 0x0, @rand_addr="381d5d463c93ce1d6ed5412f86da9357", 0x200}}}, 0xfc)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sysarch$I386_SET_PKRU(0xc, 0x0)
mprotect(&(0x7f0000615000/0x2000)=nil, 0x2000, 0x3)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)
aio_readv(0x0)
ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000)

12.506852334s ago: executing program 0 (id=587):
r0 = kqueue()
kevent(r0, &(0x7f0000000200)=[{0x80000000, 0xfffffffffffffffc, 0x8000, 0x200, 0x7, 0x4, [0x0, 0x3, 0x8, 0x6]}, {0x2, 0xfffffffffffffffc, 0xd4, 0x0, 0x9, 0x2, [0x5, 0x5, 0xf1e8, 0xffffffff]}], 0x2, &(0x7f00000003c0)=[{}, {}], 0x2, &(0x7f0000000100)={0x5, 0xe4})
rfork(0x85000)

12.49185329s ago: executing program 2 (id=580):
rtprio_thread(0x1000000, 0x0, 0x0)

12.422753886s ago: executing program 2 (id=581):
syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0x0, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@routing={0x64, 0x2, 0x0, 0x73, 0x0, [@rand_addr="c4acf386fe723f9a8b6676444ba8cba9"]}]}}}}}}})
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x106)
statfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r1=>0x0})
r2 = getgid()
fchown(r0, r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)={<r3=>0xffffffffffffffff})
getsockname(r3, &(0x7f0000000a40)=@in={0x10, 0x2, 0xffffffffffffffff, @broadcast}, &(0x7f0000000a80)=0x10)
connect$unix(r3, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa)
freebsd11_stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
r4 = shmget$private(0x0, 0x4000, 0x225, &(0x7f0000ffa000/0x4000)=nil)
freebsd11_fstatfs(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r5=>0x0})
r6 = kqueue()
fcntl$setown(r6, 0x6, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/file0\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
r7 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r7)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000cc0)={{r1, r2, r5, r2, 0x8, 0x2, 0x0, 0x2}, 0x5, 0xa, 0x40, 0x2, 0x0, r7, 0x3fd2})

12.42247333s ago: executing program 2 (id=582):
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31)
socket$inet_sctp(0x2, 0x5, 0x84)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10)
openat$smbus(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)

12.34217265s ago: executing program 1 (id=583):
open$dir(&(0x7f0000000800)='./file0\x00', 0x40000400000002c2, 0x1c0)
r0 = getuid()
chown(0x0, r0, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x10, 0x0)
ktrace(&(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
r2 = open$dir(0x0, 0x400, 0x62)
fcntl$setstatus(r2, 0x4, 0x4c)
writev(r2, 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x6, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0)
setitimer(0x0, 0x0, 0x0)
open(0x0, 0x80400000000206, 0x0)
setresuid(0xee00, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
sendmsg$inet_sctp(r4, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x228877ef1afea74e)
pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)

12.341551713s ago: executing program 0 (id=592):
r0 = kqueue()
kevent(r0, &(0x7f0000000200)=[{0x80000000, 0xfffffffffffffffc, 0x8000, 0x200, 0x7, 0x4, [0x0, 0x3, 0x8, 0x6]}, {0x4, 0xfffffffffffffff5, 0x9, 0x8, 0xfffffffffffffffb, 0x7f, [0x7, 0x8, 0x3, 0x6]}], 0x2, &(0x7f00000003c0)=[{}, {}], 0x2, &(0x7f0000000100)={0x5, 0xe4})
rfork(0x85000)

12.233146853s ago: executing program 1 (id=584):
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31)
socket$inet_sctp(0x2, 0x5, 0x84)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10)
openat$smbus(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (fail_nth: 1)
open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)

12.224532927s ago: executing program 0 (id=585):
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31)
socket$inet_sctp(0x2, 0x5, 0x84)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x2, 0x0)
r2 = dup2(r0, r1)
getsockopt$sock_int(r2, 0xffff, 0x1023, 0x0, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r4 = openat$crypto(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$CIOCGSESSION2(r4, 0xc030636a, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffd6c})
r5 = openat$bpf(0xffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
ioctl$BIOCGDLTLIST(r5, 0xc0084279, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[0x3b, 0x1, 0x800, 0x6, 0x7bc0, 0x5, 0x2]})
ioctl$CIOCCRYPT(r4, 0xc01c6367, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10)
openat$smbus(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)

12.215382512s ago: executing program 2 (id=586):
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) (async)
openat$crypto(0xffffffffffffff9c, &(0x7f0000000200), 0x200800, 0x0) (async, rerun: 64)
r0 = socket(0x1c, 0x5, 0x0) (rerun: 64)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) (async)
aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cea}})
open(0x0, 0x80400000000206, 0x0) (async)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
fork() (rerun: 32)
cap_rights_limit(0xffffffffffffffff, &(0x7f0000000000)=[0xfffffffffffffffa, 0x3])

11.690719217s ago: executing program 1 (id=588):
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
setuid(0xffffffffffffffff)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000)
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000)
minherit(&(0x7f0000d93000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3)

11.51625442s ago: executing program 3 (id=589):
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31)
socket$inet_sctp(0x2, 0x5, 0x84)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff)
mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100))
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10)
openat$smbus(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
setrlimit(0x7, &(0x7f0000000100))
fork()
open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)

10.940959484s ago: executing program 0 (id=590):
rtprio_thread(0x1000000, 0x0, 0x0)

8.590585044s ago: executing program 3 (id=591):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f00000002c0)={0x0, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000380)="e6a12a00"})
open$dir(0x0, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000400)='./file1\x00')
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)=0x5, 0x4)
socket$inet6_sctp(0x1c, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xc, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x8c, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10)
openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket(0x1c, 0x1, 0xfe)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000400000002c2, 0x52)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
r5 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0})
unlink(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xc, &(0x7f0000000000)={0xd9, 0x0, 0x0, 0x0, 0xfd, 0x3, 0x5, 0xfd, 0xb, 0x10, 0x40}, 0xb)
statfs(&(0x7f0000000d00)='./file1\x00', &(0x7f0000001700))
socket$inet6_sctp(0x1c, 0x5, 0x84)
getegid()
getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0xb)
extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, &(0x7f00000016c0)='{!\"`', 0x0, 0x0)
statfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0))

3.518127372s ago: executing program 1 (id=593):
syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x38, {0x0, 0x6, "06c33e", 0x0, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@routing={0x64, 0x2, 0x0, 0x73, 0x0, [@rand_addr="c4acf386fe723f9a8b6676444ba8cba9"]}]}}}}}}})
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x106)
statfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r1=>0x0})
r2 = getgid()
fchown(r0, r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)={<r3=>0xffffffffffffffff})
getsockname(r3, &(0x7f0000000a40)=@in={0x10, 0x2, 0xffffffffffffffff, @broadcast}, &(0x7f0000000a80)=0x10)
connect$unix(r3, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa)
aio_suspend(0x0, 0x0, &(0x7f0000000e40)={0xffffec7b, 0x1c})
r4 = shmget$private(0x0, 0x4000, 0x225, &(0x7f0000ffa000/0x4000)=nil)
freebsd11_fstatfs(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, <r5=>0x0})
r6 = kqueue()
fcntl$setown(r6, 0x6, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/file0\x00')
rmdir(&(0x7f0000000140)='./file0/file0/..\x00')
r7 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r7)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000cc0)={{r1, r2, r5, r2, 0x8, 0x2, 0x0, 0x2}, 0x5, 0xa, 0x40, 0x2, 0x0, r7, 0x3fd2})

3.390812773s ago: executing program 2 (id=594):
open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
setuid(0xffffffffffffffff)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000)
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000)
minherit(&(0x7f0000d93000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3)

1.630793181s ago: executing program 0 (id=595):
r0 = kqueue()
kevent(r0, &(0x7f0000000200)=[{0x4, 0xfffffffffffffff5, 0x9, 0x8, 0xfffffffffffffffb, 0x7f, [0x7, 0x8, 0x3, 0x6]}], 0x1, &(0x7f00000003c0)=[{}, {}], 0x2, &(0x7f0000000100)={0x5, 0xe4})
rfork(0x85000)

0s ago: executing program 3 (id=596):
open$dir(&(0x7f0000000800)='./file0\x00', 0x40000400000002c2, 0x1c0)
r0 = getuid()
chown(0x0, r0, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x10, 0x0)
ktrace(&(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
r2 = open$dir(0x0, 0x400, 0x62)
fcntl$setstatus(r2, 0x4, 0x4c)
writev(r2, 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x6, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0)
setitimer(0x0, 0x0, 0x0)
open(0x0, 0x80400000000206, 0x0)
setresuid(0xee00, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
sendmsg$inet_sctp(r4, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x228877ef1afea74e)
pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0)
ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts.
if_delmulti_locked: detaching ifnet instance 0xfffffe0058d88800
if_delmulti_locked: detaching ifnet instance 0xfffffe005894e800
ip6_pcbopts: all specified options are cleared.
witness_lock_list_get: witness exhausted
maxproc limit exceeded by uid 0 (pid 2348); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 3510); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 3180); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 5684); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 3529); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 4523); see tuning(7) and login.conf(5)
SYZFAIL: posix_spawnp failed
 (errno 35: Resource temporarily unavailable)


FreeBSD/amd64 (ci-freebsd-i386-4.us-central1-b.c.syzkaller.internal) (ttyu0)

login: maxproc limit exceeded by uid 0 (pid 8282); see tuning(7) and login.conf(5)
set $lines = 0
Password:maxproc limit exceeded by uid 0 (pid 2480); see tuning(7) and login.conf(5)

Login incorrect
login: maxproc limit exceeded by uid 0 (pid 6149); see tuning(7) and login.conf(5)
show registers
Password:maxproc limit exceeded by uid 0 (pid 4215); see tuning(7) and login.conf(5)

Login incorrect
login: maxproc limit exceeded by uid 0 (pid 2512); see tuning(7) and login.conf(5)
ps
Password:Feb 14 16:15:26 ci-freebsd-i386-4 login[748]: 2 LOGIN FAILURES ON ttyu0
maxproc limit exceeded by uid 0 (pid 8650); see tuning(7) and login.conf(5)

Login incorrect
login: maxproc limit exceeded by uid 0 (pid 8701); see tuning(7) and login.conf(5)
show malloc
maxproc limit exceeded by uid 0 (pid 5990); see tuning(7) and login.conf(5)
show uma
maxproc limit exceeded by uid 0 (pid 5990); see tuning(7) and login.conf(5)
maxproc limit exceeded by uid 0 (pid 1668); see tuning(7) and login.conf(5)