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", 0x1000}, {&(0x7f0000000240)="5084f0e8124fd0260d9855a30a521565", 0x10}, {&(0x7f0000000280)="afe395183c525d3abe131f90d77100722030647b89aba22c7083c1d8e7726b8839", 0x21}, {&(0x7f00000002c0)="cf9711d9d16f2036c98fbdc8111ce68f594eb69c7adaf62f48ca0dfbb5d32ceb674a09fb3d875d827f1f908722c4396e387ed5fc121f33bb8762de876ec1e262d8a473bb80cbe344ace529d03477d682f717359bbb5950456b007407111110b1cb0f8e091b365356a474f3726ca5f6fe8fcdff5a1fa2751b261b2a0bef5b938c414c0a7099c5f5f2f2d9e82268a566b480be69dd1db1d306aba4bf2629e839e339395b5ea40068ed8a3da5077d695c44fede909da1cbc7514a0a50b5aa0ad7c0bc6e08", 0xc3}], 0x4, &(0x7f00000005c0)=[@cred={0x20, 0xffff, 0x0, r24, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r29, r30, r31}, @cred={0x20, 0xffff, 0x0, r33, r36, r44}], 0x60, 0x400}, 0x404)
shmctl$IPC_SET(r19, 0x1, &(0x7f0000000200)={{0x3ff, r17, r18, r4, r18, 0x184, 0x3}, 0xffb, 0x94fd, r24, r21, 0x7d55, 0xd75, 0xfa})
lchown(&(0x7f00000003c0)='./file0/file0\x00', r17, r18)
getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r18, <r45=>0x0, 0xffffffffffffffff, 0x0])
r46 = getgid()
semctl$IPC_SET(r14, 0x0, 0x1, &(0x7f0000000140)={{0xfffffffffffff7ea, r16, r45, 0xffffffffffffffff, r46, 0x100, 0xfffffffffffeffff}, 0x400, 0x10001, 0x40})
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r47=>0x0}, 0xc)
sendmsg$unix(r1, &(0x7f0000001680)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0xa, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000240)="5084f0e8124fd0260d9855a30a521565", 0x10}, {&(0x7f0000000280)="afe395183c525d3abe131f90d77100722030647b89aba22c7083c1d8e7726b8839", 0x21}, {&(0x7f00000002c0)="cf9711d9d16f2036c98fbdc8111ce68f594eb69c7adaf62f48ca0dfbb5d32ceb674a09fb3d875d827f1f908722c4396e387ed5fc121f33bb8762de876ec1e262d8a473bb80cbe344ace529d03477d682f717359bbb5950456b007407111110b1cb0f8e091b365356a474f3726ca5f6fe8fcdff5a1fa2751b261b2a0bef5b938c414c0a7099c5f5f2f2d9e82268a566b480be69dd1db1d306aba4bf2629e839e339395b5ea40068ed8a3da5077d695c44fede909da1cbc7514a0a50b5aa0ad7c0bc6e08", 0xc3}], 0x4, &(0x7f00000005c0)=[@cred={0x20, 0xffff, 0x0, r3, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r9, r10, r11}, @cred={0x20, 0xffff, 0x0, r13, r16, r47}], 0x60, 0x400}, 0x404)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r48=>0x0}, 0xc)
r49 = geteuid()
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r50=>0x0, <r51=>0x0}, &(0x7f0000000080)=0xc)
r52 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r52, 0x2, &(0x7f0000000100)=""/114)
r53 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r53, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r54 = fcntl$getown(r53, 0x5)
shmctl$IPC_SET(r52, 0x1, &(0x7f0000000200)={{0x3ff, r50, r51, r50, r51, 0x104, 0x5}, 0xfff, 0x9, r54, r54, 0x7d55, 0xd75, 0xfa})
r55 = accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8)
r56 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r56, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r56, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r56, 0xffff, 0x1022, &(0x7f0000000400)={<r57=>0x0}, &(0x7f0000000440)=0xc)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r58=>0x0, <r59=>0x0}, &(0x7f0000000080)=0xc)
r60 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r60, 0x2, &(0x7f0000000100)=""/114)
r61 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r61, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r62 = fcntl$getown(r61, 0x5)
shmctl$IPC_SET(r60, 0x1, &(0x7f0000000200)={{0x3ff, r58, r59, r58, r59, 0x104, 0x5}, 0xfff, 0x9, r62, r62, 0x7d55, 0xd75, 0xfa})
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r63=>0x0}, 0xc)
r64 = getgid()
r65 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r65, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r65, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r65, 0xffff, 0x1022, &(0x7f0000000500)={<r66=>0x0}, &(0x7f0000000540)=0xc)
r67 = semget$private(0x0, 0x7, 0x286)
semop(r67, &(0x7f0000000000)=[{0x6, 0x4}, {0x3, 0x1, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x0, 0x1800}], 0x4)
semop(r67, &(0x7f0000000100)=[{0x1, 0x3, 0x1800}, {0x0, 0x9, 0x800}, {0x2, 0x6, 0x800}, {0x1, 0x0, 0x1000}, {0x4, 0x80, 0x800}, {0x1, 0x9, 0x1800}], 0x6)
semctl$SETVAL(r67, 0x0, 0x8, &(0x7f00000000c0))
r68 = socket(0x18, 0x2, 0x0)
setsockopt(r68, 0x29, 0x9, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000018c0)={0x0, <r69=>0x0}, 0xffffffffffffff18)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r70=>0x0, <r71=>0x0}, &(0x7f0000000080)=0xc)
r72 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r72, 0x2, &(0x7f0000000100)=""/114)
r73 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r73, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r74 = fcntl$getown(r73, 0x5)
shmctl$IPC_SET(r72, 0x1, &(0x7f0000000200)={{0x3ff, r70, r71, r70, r71, 0x104, 0x5}, 0xfff, 0x9, r74, r74, 0x7d55, 0xd75, 0xfa})
lchown(&(0x7f00000003c0)='./file0/file0\x00', r70, r71)
getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r71, <r75=>0x0, 0xffffffffffffffff, 0x0])
r76 = getgid()
semctl$IPC_SET(r67, 0x0, 0x1, &(0x7f0000000140)={{0xfffffffffffff7ea, r69, r75, 0xffffffffffffffff, r76, 0x100, 0xfffffffffffeffff}, 0x400, 0x10001, 0x40})
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r77=>0x0}, 0xc)
getsockopt$sock_cred(r23, 0xffff, 0x1022, &(0x7f0000000640)={0x0, <r78=>0x0}, &(0x7f0000001840)=0xc)
sendmsg$unix(r55, &(0x7f0000001880)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"/363], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0xfffffef0}, {&(0x7f0000000240)="5084f0e8124fd0260d9855a30a521565", 0x10}, {&(0x7f0000000480)="afe395183c525d3abe131f90d77100722030647b89aba22c7083c1d8e7726b8839", 0x21}, {&(0x7f00000002c0)="cf9711d9d16f2036c98fbdc8111ce68f594eb69c7adaf62f48ca0dfbb5d32ceb674a09fb3d875d827f1f908722c4396e387ed5fc121f33bb8762de876ec1e262d8a473bb80cbe344ace529d03477d682f717359bbb5950456b007407111110b1cb0f8e091b365356a474f3726ca5f6fe8fcdff5a1fa2751b261b2a0bef5b938c414c0a7099c5f5f2f2d9e82268a566b480be69dd1db1d306aba4bf2629e839e339395b5ea40068ed8a3da5077d695c44fede909da1cbc7514a0a50b5aa0ad7c0bc6e08", 0xc3}], 0x4, &(0x7f00000005c0)=[@cred={0x20, 0xffff, 0x0, r57, r78}, @cred={0x20, 0xffff, 0x0, r62, r63, r64}, @cred={0x20, 0xffff, 0x0, r66, r69, r77}], 0x60, 0x400}, 0x404)
r79 = socket$inet(0x2, 0x3, 0x102)
shutdown(r79, 0x1)
getsockopt$sock_cred(r79, 0xffff, 0x1022, &(0x7f0000000300)={<r80=>0x0}, &(0x7f0000000340)=0xc)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x7ff, r10, r48, r49, r51, 0x2d, 0xff}, 0x6, 0x9, r57, r80, 0x0, 0x7, 0x1, 0x8})
getpgid(r57)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r81=>0x0, <r82=>0x0}, &(0x7f0000000080)=0xc)
r83 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r83, 0x2, &(0x7f0000000100)=""/114)
r84 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r84, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r85 = fcntl$getown(r84, 0x5)
shmctl$IPC_SET(r83, 0x1, &(0x7f0000000200)={{0x3ff, r81, r82, r81, r82, 0x104, 0x5}, 0xfff, 0x9, r85, r85, 0x7d55, 0xd75, 0xfa})
lchown(&(0x7f00000003c0)='./file0/file0\x00', r81, r82)
getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r82, 0x0, 0xffffffffffffffff, 0x0])
getgroups(0x8, &(0x7f0000002640)=[0x0, r82, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0])
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r86=>0x0, <r87=>0x0}, &(0x7f0000000080)=0xc)
r88 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r88, 0x2, &(0x7f0000000100)=""/114)
r89 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r89, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r90 = fcntl$getown(r89, 0x5)
shmctl$IPC_SET(r88, 0x1, &(0x7f0000000200)={{0x3ff, r86, r87, r86, r87, 0x104, 0x5}, 0xfff, 0x9, r90, r90, 0x7d55, 0xd75, 0xfa})
r91 = accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8)
r92 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r92, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r92, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r92, 0xffff, 0x1022, &(0x7f0000000400)={<r93=>0x0}, &(0x7f0000000440)=0xc)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r94=>0x0, <r95=>0x0}, &(0x7f0000000080)=0xc)
r96 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r96, 0x2, &(0x7f0000000100)=""/114)
r97 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r97, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r98 = fcntl$getown(r97, 0x5)
shmctl$IPC_SET(r96, 0x1, &(0x7f0000000200)={{0x3ff, r94, r95, r94, r95, 0x104, 0x5}, 0xfff, 0x9, r98, r98, 0x7d55, 0xd75, 0xfa})
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r99=>0x0}, 0xc)
r100 = getgid()
r101 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r101, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r101, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r101, 0xffff, 0x1022, &(0x7f0000000500)={<r102=>0x0}, &(0x7f0000000540)=0xc)
r103 = semget$private(0x0, 0x7, 0x286)
semop(r103, &(0x7f0000000000)=[{0x6, 0x4}, {0x3, 0x1, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x0, 0x1800}], 0x4)
semop(r103, &(0x7f0000000100)=[{0x1, 0x3, 0x1800}, {0x0, 0x9, 0x800}, {0x2, 0x6, 0x800}, {0x1, 0x0, 0x1000}, {0x4, 0x80, 0x800}, {0x1, 0x9, 0x1800}], 0x6)
semctl$SETVAL(r103, 0x0, 0x8, &(0x7f00000000c0))
r104 = socket(0x18, 0x2, 0x0)
setsockopt(r104, 0x29, 0x9, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4)
getsockopt$SO_PEERCRED(r104, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, <r105=>0x0}, 0xc)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r106=>0x0, <r107=>0x0}, &(0x7f0000000080)=0xc)
r108 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r108, 0x2, &(0x7f0000000100)=""/114)
r109 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r109, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r110 = fcntl$getown(r109, 0x5)
shmctl$IPC_SET(r108, 0x1, &(0x7f0000000200)={{0x3ff, r106, r107, r106, r107, 0x104, 0x5}, 0xfff, 0x9, r110, r110, 0x7d55, 0xd75, 0xfa})
lchown(&(0x7f00000003c0)='./file0/file0\x00', r106, r107)
getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r107, <r111=>0x0, 0xffffffffffffffff, 0x0])
r112 = getgid()
semctl$IPC_SET(r103, 0x0, 0x1, &(0x7f0000000140)={{0xfffffffffffff7ea, r105, r111, 0xffffffffffffffff, r112, 0x100, 0xfffffffffffeffff}, 0x400, 0x10001, 0x40})
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r113=>0x0}, 0xc)
sendmsg$unix(r91, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"/363], 0xa, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000240)="5084f0e8124fd0260d9855a30a521565", 0x10}, {&(0x7f0000000280)="afe395183c525d3abe131f90d77100722030647b89aba22c7083c1d8e7726b8839", 0x21}, {&(0x7f00000002c0)="cf9711d9d16f2036c98fbdc8111ce68f594eb69c7adaf62f48ca0dfbb5d32ceb674a09fb3d875d827f1f908722c4396e387ed5fc121f33bb8762de876ec1e262d8a473bb80cbe344ace529d03477d682f717359bbb5950456b007407111110b1cb0f8e091b365356a474f3726ca5f6fe8fcdff5a1fa2751b261b2a0bef5b938c414c0a7099c5f5f2f2d9e82268a566b480be69dd1db1d306aba4bf2629e839e339395b5ea40068ed8a3da5077d695c44fede909da1cbc7514a0a50b5aa0ad7c0bc6e08", 0xc3}], 0x4, &(0x7f00000005c0)=[@cred={0x20, 0xffff, 0x0, r93, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r98, r99, r100}, @cred={0x20, 0xffff, 0x0, r102, r105, r113}], 0x60, 0x400}, 0x404)
r114 = socket(0x2, 0xc003, 0x2)
setsockopt(r114, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4)
r115 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x0, 0x0)
dup2(r114, r115)
r116 = socket(0x2, 0xc003, 0x2)
setsockopt(r116, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4)
r117 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x0, 0x0)
r118 = dup2(r116, r117)
ioctl$PCIOCREAD(r118, 0xc0207534, &(0x7f0000000100))
openat$diskmap(0xffffffffffffff9c, &(0x7f0000002680)='/dev/diskmap\x00', 0x1728cfdfe8cad7fe, 0x0)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000026c0), 0xc)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000002700), &(0x7f0000002740)=0xc)
r119 = socket(0x2, 0xc003, 0x2)
setsockopt(r119, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4)
r120 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x0, 0x0)
dup2(r119, r120)
getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000002780), &(0x7f00000027c0)=0xc)
r121 = socket(0x2, 0xc003, 0x2)
setsockopt(r121, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4)
r122 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x0, 0x0)
dup2(r121, r122)
open$dir(&(0x7f0000002800)='./file0/file0\x00', 0x10100, 0x40)
r123 = socket(0x2, 0xc003, 0x2)
setsockopt(r123, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4)
r124 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x0, 0x0)
dup2(r123, r124)
r125 = socket(0x2, 0xc003, 0x2)
setsockopt(r125, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4)
r126 = dup2(r125, 0xffffffffffffffff)
ioctl$PCIOCREAD(r126, 0xc0207534, &(0x7f0000000100))
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000002880), 0xc)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000028c0), 0xc)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000002900), &(0x7f0000002940)=0xc)
accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8)
r127 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r127, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
r128 = socket(0x2, 0x2, 0x0)
connect$unix(r128, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10)
write(r128, 0x0, 0x0)

16:00:07 executing program 1:
msgget$private(0x0, 0x40d)
r0 = msgget(0x1, 0x40)
msgrcv(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a1742592e00000000000000000000000000000000000000000000000000000000000000000000000400"/156], 0x9c, 0x0, 0x1c00)
r1 = msgget(0x2, 0x200)
msgsnd(r1, &(0x7f0000000d80)={0x2, "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"}, 0x4a4, 0x800)
r2 = msgget$private(0x0, 0x400)
msgsnd(r2, &(0x7f00000001c0)={0x2, "0bb64eb7eda4abcc32d1cad5702b9f4d0733a5c88e431aa4774f2fee09c1a25306357c8268aa6fc3c808c9a070c90521203b183fddd8ed32469f5f12d3b8b40e0d565092eafb5198dc1960269561d5ea7654d36fd010ae1fb976e35646f261e9e7807306a8fcc2b2cd26fe74dc36cc5288ce7b60d5763d800eb57b3c60f2886b9e233cba4e3dbf04fa423b39637fdbcc0819ff4a01250e0e5db5e3c1e987a8cc4bfde9818103bde1bfc78686c4eb1f4f7cda2f6b08696957eddaf8c3caf4d6fb1128b68dae605869231c1203f89b25737c3ee408709e71d53b97fbaaca83529f321658be51d88e6baee880c5e0c83132aefdd942df6d"}, 0xfe, 0x1000)
r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000840)=0x4)
msgrcv(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000e9ffff3f00"/162], 0xa2, 0x2, 0xc00)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyCcfg\x00', 0x2, 0x0)
msgrcv(r2, &(0x7f00000003c0)={0x0, ""/81}, 0x59, 0x2, 0x1000)
ioctl$TIOCCHKVERAUTH(0xffffffffffffff9c, 0x2000741e)
socket$inet(0x2, 0x4, 0x2)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0)
sendto(r4, &(0x7f00000000c0)="0200000000000000974625f2417f1208aabdf12a889cf871e23b40de4651d89b55000000007fffffffc8f4e70b1692d45e5c80", 0x33, 0x9, 0x0, 0xffffffffffffff2c)
ioctl$TIOCMBIS(r4, 0x8004746c, &(0x7f00000003c0)=0x80000001)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0)
sendto(r5, &(0x7f00000000c0)="0200000000000000974625f2417f1208aabdf12a889cf871e23b40de4651d89b55000000007fffffffc8f4e70b1692d45e5c80", 0x33, 0x9, 0x0, 0xffffffffffffff2c)
ioctl$TIOCMBIS(r5, 0x8004746c, &(0x7f00000003c0)=0x80000001)
poll(&(0x7f0000000100)=[{r5, 0x10}, {r5}, {r5, 0x2}, {r5, 0x100}, {r5, 0x4}], 0x5, 0xffffffffffffffc0)
getsockname(r5, &(0x7f0000000140)=@in6, &(0x7f0000000180)=0xc)
fchdir(r5)
poll(&(0x7f0000000040), 0x0, 0xffffffffffffffc0)
getsockname(r4, &(0x7f0000000140)=@in6, &(0x7f0000000180)=0xc)
fchdir(r4)
getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000440)=""/146, &(0x7f0000000500)=0x92)
open(&(0x7f0000000540)='./file0\x00', 0x10, 0x0)
setitimer(0x2, &(0x7f0000000040)={{0x2, 0x33a}, {0x0, 0x20aef}}, &(0x7f00000005c0))
syz_open_pts()
r6 = msgget$private(0x0, 0x20)
msgrcv(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000004000"/148], 0x94, 0x0, 0x1000)
msgget$private(0x0, 0x220)
r7 = syz_open_pts()
ioctl$TIOCGETA(r7, 0x402c7413, &(0x7f0000000780))
msgsnd(r6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x3d, 0x0)
getegid()
msgget$private(0x0, 0x9411b68c080dc3a7)
msgsnd(0x0, &(0x7f00000006c0)={0x1, "73128f962ded706d037ffccb28d0fb7c8e1cff8ed6f0ba025094bf01ea0e80b0"}, 0x28, 0x400)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r107 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r108=>0x0}, 0xc)
r109 = getgid()
semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r107, r108, r109, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)

16:00:07 executing program 1:
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETA(r0, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, 0xc)
fchown(r0, 0x0, r4)
r5 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r4, r4, r4, r4, <r6=>r4, r4, r4, r4])
msgctl$IPC_SET(r5, 0x1, &(0x7f0000000380)={{0x401, r3, r4, r3, r6, 0x0, 0x10000}, 0x8, 0x6, r2, r2, 0x101, 0x2, 0x1000, 0x7})
setegid(r4)
r7 = socket(0x18, 0x3, 0x0)
pipe2(&(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x30004)
setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000200)={0xfffffffa, 0x6}, 0x342)
connect$unix(r8, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)
setsockopt(r7, 0x28, 0x26, &(0x7f0000000180)="23b184ed051e5dac0d3aa76900053dc20d3267ce26a201d295bbc800"/37, 0x100000046)
r9 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r9, 0x0, 0x64, 0x0, 0x0)
setsockopt(r9, 0xc5, 0x2, &(0x7f0000000000)="66a8e68feae00e072972a0c4233d28f16c6928dba1fd237b86d15699c66148f59c1db9df0b5dfe7bb1dac527f4b02864ef4dd6a3bf0a86d2fd7c2477e527790df501e76472781553a53c01cd294e9cef3d432283fa4fbed873b07f0ffce5c115f0bcb30981bef35ad87bdd6e615fdc0b5f19d8250968e36574efdaa8af4254b04b9a8cf1ba5f645de5a9c05bfa03bfa9391452a79808a2e220a6b050aeb00a7a2acc4a4e843d7776e713a938e292727c2140e536edd6b3ce37a57e09fac6b4a72d55a35db1cfd4099ccefd6e00893c353f4e0220f8dfb3", 0xd7)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r107 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r108=>0x0}, 0xc)
r109 = getgid()
semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r107, r108, r109, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()

16:00:07 executing program 1:
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/wsmouse0\x00', 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x2, 0x10000}, {0x3}], 0x2})
mknod(&(0x7f00000009c0)='./bus\x00', 0x31334a145e628090, 0x65a)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)=0xc)
accept(r1, &(0x7f00000008c0)=@in6, &(0x7f0000000900)=0xc)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000200))
poll(&(0x7f0000000140)=[{r2, 0x15}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x8, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000980)='/dev/bpf\x00', 0x10, 0x0)
preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000180)=""/24, 0x18}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/215, 0xd8}, {&(0x7f00000003c0)=""/247, 0xf7}, {&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000500)=""/27, 0x30c}, {&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f0000000640)=""/16, 0x23}, {&(0x7f0000000680)=""/194, 0xca}], 0xa, 0x0, 0x5)

16:00:07 executing program 1:
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x40067664, &(0x7f0000000000))
getrusage(0xfffffffffffffffe, &(0x7f0000000180))
r0 = getpgid(0x0)
getpgid(r0)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r107 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r108=>0x0}, 0xc)
r109 = getgid()
semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r107, r108, r109, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()

16:00:07 executing program 1:
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETA(r0, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, 0xc)
fchown(r0, 0x0, r4)
r5 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r4, r4, r4, r4, <r6=>r4, r4, r4, r4])
msgctl$IPC_SET(r5, 0x1, &(0x7f0000000380)={{0x401, r3, r4, r3, r6, 0x0, 0x10000}, 0x8, 0x6, r2, r2, 0x101, 0x2, 0x1000, 0x7})
msgrcv(r5, &(0x7f0000000080)={0x0, ""/95}, 0x67, 0x0, 0x1000)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x1fd, 0x0)
ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x25}, {0x28}, {0x6, 0x0, 0x0, 0x100}]})
ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
pwrite(r7, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0x3a, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)

16:00:07 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x462, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000000)=0x3)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x1c}, {0x24}, {0x6, 0x0, 0x0, 0x46}]})
pwrite(r0, &(0x7f0000000240)="fbaf84ea37679be96914f6357e3a", 0xe, 0x0, 0x0)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r107 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r108=>0x0}, 0xc)
r109 = getgid()
semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r107, r108, r109, 0x10, 0x9}, 0x8, 0x1, 0x9})

16:00:07 executing program 1:
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="3b7c0f8208a076b9d3c382842bed547d75a38abff5ca2991190fe8e130b013ca6c32afbae7f7f7be66289c01003889"], 0x1)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}})
r0 = socket(0x18, 0x1, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x2}, 0x8)
close(r0)
r1 = socket(0x18, 0x6, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r1, &(0x7f0000000100)="8c65", 0x6d2)

16:00:07 executing program 1:
mknod(&(0x7f00000000c0)='./file0\x00', 0x143, 0x2900)
ktrace(&(0x7f0000000000)='./file1\x00', 0x2, 0x400, 0x0)

16:00:07 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x80000000ff, 0x0, 0xfffffffffffffffe], [], [{}, {0x0, 0x0, 0x0, 0x80}, {0x5}, {}, {}, {}, {}, {0x0, 0x6}]}})
r0 = syz_open_pts()
ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000000))
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0x8, 0x598e, 0x7, 0x1, "360640a95c3343216d7cf8b915c7aedb9ee70c0a", 0x20000000, 0x6f5})
r1 = socket(0x2, 0x3, 0x0)
connect$unix(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x10)
r2 = dup2(r1, r1)
write(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x0)
r4 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x64, 0x0, 0x0)
r5 = accept$unix(r2, &(0x7f0000000740)=@abs, &(0x7f0000000780)=0x8)
r6 = open$dir(&(0x7f00000007c0)='./file0\x00', 0x17e9ecd9e854e383, 0x40)
r7 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x64, 0x0, 0x0)
r8 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x64, 0x0, 0x0)
r9 = syz_open_pts()
close(r9)
ioctl$TIOCSETA(r9, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r9, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f0000000040)={<r11=>0x0, <r12=>0x0, <r13=>0x0}, 0xc)
fchown(r9, 0x0, r13)
r14 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r13, r13, r13, r13, <r15=>r13, r13, r13, r13])
msgctl$IPC_SET(r14, 0x1, &(0x7f0000000380)={{0x401, r12, r13, r12, r15, 0x0, 0x10000}, 0x8, 0x6, r11, r11, 0x101, 0x2, 0x1000, 0x7})
r16 = getpgid(r11)
r17 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r17, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f0000000800)={0x0, <r18=>0x0}, 0xc)
r19 = syz_open_pts()
close(r19)
ioctl$TIOCSETA(r19, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r19, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r20=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r20, 0xffff, 0x1022, &(0x7f0000000040)={<r21=>0x0, <r22=>0x0, <r23=>0x0}, 0xc)
fchown(r19, 0x0, r23)
r24 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r23, r23, r23, r23, <r25=>r23, r23, r23, r23])
msgctl$IPC_SET(r24, 0x1, &(0x7f0000000380)={{0x401, r22, r23, r22, r25, 0x0, 0x10000}, 0x8, 0x6, r21, r21, 0x101, 0x2, 0x1000, 0x7})
r26 = syz_open_pts()
close(r26)
ioctl$TIOCSETA(r26, 0x80047466, &(0x7f0000000dc0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0", 0xfffffffe, 0xfffffffd})
readv(r26, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r27=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r27, 0xffff, 0x1022, &(0x7f0000000040)={<r28=>0x0, <r29=>0x0, <r30=>0x0}, 0xc)
fchown(r26, 0x0, r30)
r31 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r30, r30, r30, r30, <r32=>r30, r30, r30, r30])
msgctl$IPC_SET(r31, 0x1, &(0x7f0000000380)={{0x401, r29, r30, r29, r32, 0x0, 0x10000}, 0x8, 0x6, r28, r28, 0x101, 0x2, 0x1000, 0x7})
r33 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r33, 0x0, 0x64, 0x0, 0x0)
sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f00000006c0)=[{&(0x7f00000004c0)="898a9fdde0fbace0cac40e4b420dde0ef98ee8bd75864d9c38aeafe6083714841c2433c274fb8aa14d345e1b6d", 0x2d}, {&(0x7f0000000500)="5afb930395938dd5c2d837a262fa3c182aae6bbcd919bd5c8e7338d2452d903e7c6ef85769724a7934b8492871", 0x2d}, {&(0x7f0000000540)="838799e7840685114d004b4b87355287", 0x10}, {&(0x7f0000000580)="9b34edc5", 0x4}, {&(0x7f00000005c0)="1abf98140d1dce33ba5a8dac198c11f934164d0e5665d08aeeaf277ccce13c98ad63ecfb49b1f95373c9524d643744f38457fdd76b21c43bac2b4744aa", 0x3d}, {&(0x7f0000000600)="e37a8293929dc40ddc221168934107362ca7feac3c6be78be46223b42a279e7890966514af9c0b098167bb38d1f539dad9e7ea11cba06ec00861cc1affa5e40cc4628ee9d87606eea72cf0796a3ac2210bb8a464ecde98b977c3c5a5c2c05ad981f716f7d187256d7cb149fb82141ffc8ff15abe348cfeee4bf03ee7a3c8ee8bbef68edd58377104", 0x88}], 0x6, &(0x7f0000000840)=[@rights={0x30, 0xffff, 0x1, [r2, r1, r4, r5, r6, r7, r1, r8]}, @cred={0x20, 0xffff, 0x0, r16, r18, r23}, @cred={0x20, 0xffff, 0x0, 0x0, r29, 0xffffffffffffffff}, @rights={0x18, 0xffff, 0x1, [r1, r33]}], 0x88, 0x409}, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
getsockname(r3, &(0x7f0000000080)=@in, &(0x7f0000000180)=0xc)
r34 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETF(r34, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x40}, {0x4c}, {0x6}]})
ioctl$BIOCSETIF(r34, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$FIONREAD(r34, 0x4004667f, &(0x7f0000000040))
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r35 = socket(0x2, 0x3, 0x0)
r36 = socket(0x10000000002, 0x2, 0x0)
setsockopt$sock_int(r36, 0xffff, 0x1023, &(0x7f0000000000), 0x12b)
syz_open_pts()
fcntl$dupfd(r35, 0x0, r35)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000), 0xc)
getgid()

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000), 0xc)

16:00:07 executing program 1:
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000140)="af7f4d7db077d6414e1986df04f0ccad853ae3826bb2c1be9a0d6bbee1b3433b12c8991581e1c8c77a9f9bad961210c1968baed49e8b464fdc742b15d62cd55358adfe15cefc861d8244d5cab8b695ed1b1e78e8956566a3fbec", 0x5a}, {&(0x7f00000001c0)="ec0735c3aff6ce7d9e896edfd2c098a3b307d7093e2aabed4cf678d8ab65be0413ff43537b968709bd1c0460595663b37f5b5c7c2a325cc1ab602ca816e5c02a328dfe7c70b0eebdad6e91e039408f82859a42b2bf327a9fb7f9fb42619ecc8b8b847e46b5d57b0b14f7e48f95dd4ee7a57c543367f60148ad9c8b9cf65056171247dfbb4ec6ef19e81223b5560d91534b3ce1c65536d20e161960d8784001ffe5bc86d8005a79cf24136941f8ecfd65cfc7de06255408ebdff7b50432e6a8f2563e4abe0f35db8efd467a42c967f71a4a87c89dbb06b703f39c870a5191629428ec98da252e4668093b073ffc45d6796725579cb1be24fa0e", 0xf9}, {&(0x7f00000002c0)="ae56e76a67123661670ba9c14bb80ab1e8a66f21a5af54e55b3528b1f578fc7ea82ae762007aac20d0c33322a05c479f9aeb4bd124774dea009242d484c10a2780d7c88bf28f02e780464afb6a31c51ae8424a9cd5dd9af993419e6dbc0ff1fe3d6f6f8bb01ba02096a959adde3a0a8714cc6ad123d55e66f36b4c2ca86899012eca4da6683545d6ade7b208aaf5bd1d53", 0x91}, {&(0x7f0000000380)="8f1085ff9538399513f2b97d67eb9e2500a777a4d782274d4c980a26d93aabdc418bc48e5db18adb964ea2dc7f02ee15caf388344074b7cacdc8699990f916f7ecd56f4875a859b963b0", 0x4a}, {&(0x7f0000000400)="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", 0x1000}], 0x5)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='$\x14')
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETA(r0, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, 0xc)
fchown(r0, 0x0, r4)
r5 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r4, r4, r4, r4, <r6=>r4, r4, r4, r4])
msgctl$IPC_SET(r5, 0x1, &(0x7f0000000380)={{0x401, r3, r4, r3, r6, 0x0, 0x10000}, 0x8, 0x6, r2, r2, 0x101, 0x2, 0x1000, 0x7})
r7 = syz_open_pts()
close(r7)
ioctl$TIOCSETA(r7, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r7, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000040)={<r9=>0x0, <r10=>0x0, <r11=>0x0}, 0xc)
fchown(r7, 0x0, r11)
r12 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r11, r11, r11, r11, <r13=>r11, r11, r11, r11])
msgctl$IPC_SET(r12, 0x1, &(0x7f0000000380)={{0x401, r10, r11, r10, r13, 0x0, 0x10000}, 0x8, 0x6, r9, r9, 0x101, 0x2, 0x1000, 0x7})
chown(&(0x7f00000000c0)='./file1\x00', r3, r11)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()

16:00:07 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/bev\xefrp\x1c2', 0x40, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x2d}, {0x1d}, {0x800000000000006, 0x0, 0x0, 0x40fd}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
write(0xffffffffffffff9c, &(0x7f0000000180)="3c9ebbd555feff969613ba3e1fd0", 0xe)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r106, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)

16:00:07 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dmv/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x60, 0x0, 0x4}, {0x1}, {0x6, 0x0, 0x0, 0x20000100}]})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
pwrite(r0, &(0x7f0000000280)="895e654f5c1d85047229b675851d", 0xe, 0x0, 0x0)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r106, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)

16:00:07 executing program 1:
r0 = socket(0x800000018, 0x1, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
accept$inet(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
setsockopt(r0, 0x6, 0x4, &(0x7f0000000000), 0xb1)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
r106 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r106, 0x4, 0x3, &(0x7f0000000580)=""/170)

16:00:07 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x64, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x64, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x64, 0x0, 0x0)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vmm\x00', 0x791bd61445463d8c, 0x0)
poll(&(0x7f0000000180)=[{r1, 0x4}, {r2, 0x101}, {r3, 0x2}, {0xffffffffffffffff, 0x2}, {r4, 0x4}, {r2, 0x4}, {r6, 0x80}], 0x7, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x28}, {0x7}, {0x4000000000000006}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000240)="e1c0dd6d4499e6cc36a536214e31")

16:00:07 executing program 1:
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="820201f0ffffffff"], 0x1)
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x64, 0x0, 0x0)
ftruncate(r0, 0x0, 0x71f)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x3, 0x0)
bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10)
r2 = socket(0x2, 0x10000000000003, 0x0)
socket(0x10, 0xa83e1aee3d43eb09, 0x1)
connect$unix(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e00000010000"], 0x10)
writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1)

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)
semget$private(0x0, 0x4, 0x1)

16:00:07 executing program 1:
msgget$private(0x0, 0x40d)
r0 = msgget(0x1, 0x40)
msgrcv(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x9c, 0x0, 0x1c00)
msgget(0x2, 0x200)
msgsnd(0xffffffffffffffff, &(0x7f0000000d80)={0x2, "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"}, 0x270, 0x800)
msgget$private(0x0, 0x22)
msgsnd(0x0, 0x0, 0x0, 0x0)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x29, 0xb, &(0x7f0000000040)='\fFW}', 0x4)
setsockopt(r1, 0x29, 0x80000000000000a, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x8301, 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x14, 0x0, 0x0)
write(r2, &(0x7f0000000040)="9cb2997f00f84ddfe066322e2e", 0xffffffffffffff4f)
r3 = msgget(0x1, 0x2d9d03b82d561e9b)
r4 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x64, 0x0, 0x0)
msgrcv(r3, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1, 0x1, 0x800)
utimensat(0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)={{0x4, 0x6}, {0x6cb, 0x77}}, 0x2)
msgsnd(r3, &(0x7f0000000e00)={0x2, "3b1c09bf38f6784244d8228380c2dd5c913ecac0213641828cb25d8c988ce6de84a180342a939b6640a0ae27a38803a71bbaeab7611aa751927ed5002886a8a3af58d641319e531c5356af8cc78bc22e5ee1db49964729a58a1025f894e3c7354845a30a02d40222afefa70b3ad37ee9f883d373e53be91b02a75b251aead536980ffce19df9ac8ed55207a05529ebcbf60e1f3962bc6fb188772c5e686b"}, 0xa6, 0x800)
fchmod(0xffffffffffffffff, 0x4)
msgget(0x2, 0x42)
r5 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r5, &(0x7f0000000880)=ANY=[], 0x0, 0xac544c59507989b7, 0x800)
listen(r1, 0x9)
msgsnd(r3, &(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB], @ANYBLOB="c661eaa7638bb3819ecf04ea4979c897289d251815b4a21784c75c0bf0a3b9a4ad8b9f2c6a11a879a823ad815304cc48fb44b4de0500000000000000613b086b67d84fb395c88ff9d87da5d47edffabe3912ec90085759815efb3e30d54065323ce87fde0cb5124cc2bdf94d272b4fb2f31c896d8bd209af7ece63fa236bf7ba71c16d000041d72f7a5e4e465b7386433786bde6244fb0d1fd78dfe9100aa486ffe6ece6def55fef047dcff597986b738c5b02adb7b868423d0bea65580721b455a7613d6088f0b606e442b178012604bb0fae7e93c162f82c11e0d633ea54230e4cf09af35aa2e9cc", @ANYRESDEC=r5], 0x3, 0x800)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='\xc4\x04\x00\x00\xff\x03\x00', 0x2, 0x0)
ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x35}, {0x20}, {0x6, 0x0, 0x0, 0x80000000000fe}]})
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
pwrite(r6, &(0x7f0000000180)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0)
msgrcv(r5, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0)
r7 = socket(0x6, 0x2, 0x0)
close(r7)
connect$unix(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="0000131377c5fc35d41454d5d41d29ad1a6029598146e6be1633bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e888d3382f36178b48f03600"/86], 0x1)
msgsnd(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x13a, 0x804)

16:00:07 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xfbffffffffffffff], [0x0, 0x0, 0x482]}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0)
ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000040)={0xff, './file0\x00', './file0\x00'})
r1 = socket(0x18, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300))

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
r105 = dup2(r102, 0xffffffffffffff9c)
getsockopt$SO_PEERCRED(r105, 0xffff, 0x1022, &(0x7f0000000040), 0x3)

16:00:07 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x80, 0x1}, {0x20}, {0x6, 0x0, 0x0, 0x100}]})
pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x54}, {0x60}, {0x6}]})
r2 = msgget(0x1, 0x240)
msgrcv(r2, &(0x7f0000000140)={0x0, ""/254}, 0x106, 0x0, 0x1800)
r3 = getuid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r4=>0x0}, 0xc)
r5 = getegid()
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, <r6=>0x0}, 0xff4b)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$TIOCSETVERAUTH(r7, 0xc0107002, &(0x7f0000000000)=0x280000)
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0xc)
r9 = semget$private(0x0, 0x7, 0xa0)
r10 = socket(0x18, 0x8000, 0x4)
semctl$SETVAL(r9, 0x3, 0x8, &(0x7f0000000000)=0xee65)
semop(r9, &(0x7f0000000040)=[{0x2, 0x81, 0x1800}, {0x2, 0x3, 0x1000}], 0x2)
r11 = semget$private(0x0, 0x2, 0x9)
semctl$SETALL(r9, 0x0, 0x9, &(0x7f00000001c0))
semctl$IPC_RMID(r9, 0x0, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket(0x18, 0x1, 0x0)
listen(r13, 0x0)
setsockopt(r13, 0x29, 0x1b, &(0x7f00000002c0)="00012000", 0x4)
r14 = socket(0x18, 0x1, 0x0)
listen(r14, 0x0)
setsockopt(r14, 0x2c, 0x1, &(0x7f0000000400)="08010000", 0x4)
r15 = socket(0x18, 0x1, 0x0)
listen(r15, 0x0)
r16 = socket(0x18, 0x1, 0x0)
listen(r16, 0x0)
setsockopt(r16, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r17 = socket(0x18, 0x1, 0x0)
listen(r17, 0x0)
setsockopt(r17, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r18 = socket(0x10, 0x5, 0x7)
listen(r18, 0x3)
setsockopt(r18, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x0)
r19 = socket(0x18, 0x1, 0x0)
listen(r19, 0x0)
setsockopt(r19, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r20 = socket(0x2, 0x8002, 0x0)
connect$unix(r20, &(0x7f0000000440)=ANY=[@ANYBLOB="62020207e000000120000600cbfdf223ae22417d173cb92eba606592fc9f4ea35119f59e7a53661b74703dd8cc0100000093f42355252b001bc35782be56000000003794ec477479218f8eec332af21b5e774464ec647b2d4dbbd6cde38f3a455cf347141fe25243ee68a17494ace019f57675c30e3f80ef0f519a60052862d75d0da3be00000000000007ff908a70f554ed931c025672aa77cb1718b483777403000000000000006c27f99d9b47abba4814f6332a91c4a47ce9894f7cd9f822be193bb4fa4227156659669209084b58ce5c00c03ba103"], 0x10)
write(r20, 0x0, 0x0)
sendmsg$unix(r12, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYRES64=r13, @ANYRES16, @ANYRES64=r14, @ANYBLOB="50d5ddb4a6631ab7c45afe9adf4d51bd21277b492ed741c219bec2a3a20233d23edc86bd9b1cae156082fe470c4c49a8b4583e0288bebbf51c774f4e9b5f65422ea1de513f0409c96d54bed3d518ff5ec8207d2fc16a4582002a66455cf74d5ec3a3ce9892d4897b8d3e4786ff84884f923c24fa37bdd9ad1e5dc010e78e", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r11, @ANYRES32=r20], @ANYRESHEX=r15], @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r9], @ANYBLOB="9f9de90263633126a43ed7d5c0f4e6eb854b79b5c3c29eeaf849944722a4892025a87b9e9fa7f71cb3e4e928ae3dd3bddd3d6f6167747c5dafdac9bde0ccdcbe643b0f443a2ba92249f2908fc91cc333d3be021b6c877e343bb21ebc5244e664e1de5e743f9e2e1075a6a3bb648eccee1d2aee36a551b4ac0032e413343c6406008006bf71104d1762c3fb1dd0c4dc3a41a195d00f42075ac6c5b5f389e2226d710cf7dd7638209e337c26c997f67a943df23f47e0858e0efcb689078b7ae18d147e4e34d1de33bdddc81e74e4c5b6e73b000000000000", @ANYRES16=r16, @ANYRES32=0x0, @ANYRESOCT=r17, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESHEX=r18, @ANYRES16, @ANYRESOCT=r19], @ANYBLOB="13ff4e61eef4d25d676ca6a9fd8ec995301c49807bbe6cd5e93e6b3c4d3a958aa2467b37948d176ab7568ac84338fc5537a025058a9c432635b4b721486e25ea621b646e0c387dc906488d72b7a142", @ANYRES16=0x0], 0x9, 0x0}, 0x8)
semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000100)={{0x3, r4, r5, r6, r8, 0x261}, 0x1ff, 0x3ff, 0x12})
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r21=>0x0}, 0xc)
r22 = getegid()
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, <r23=>0x0}, 0xff4b)
r24 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$TIOCSETVERAUTH(r24, 0xc0107002, &(0x7f0000000000)=0x280000)
getsockopt$sock_cred(r24, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r25=>0x0}, &(0x7f00000000c0)=0xc)
r26 = semget$private(0x0, 0x7, 0xa0)
r27 = socket(0x18, 0x8000, 0x4)
semctl$SETVAL(r26, 0x3, 0x8, &(0x7f0000000000)=0xee65)
semop(r26, &(0x7f0000000040)=[{0x2, 0x81, 0x1800}, {0x2, 0x3, 0x1000}], 0x2)
r28 = semget$private(0x0, 0x2, 0x9)
semctl$SETALL(r26, 0x0, 0x9, &(0x7f00000001c0))
semctl$IPC_RMID(r26, 0x0, 0x0)
r29 = socket$unix(0x1, 0x1, 0x0)
r30 = socket(0x18, 0x1, 0x0)
listen(r30, 0x0)
setsockopt(r30, 0x29, 0x1b, &(0x7f00000002c0)="00012000", 0x4)
r31 = socket(0x18, 0x1, 0x0)
listen(r31, 0x0)
setsockopt(r31, 0x2c, 0x1, &(0x7f0000000400)="08010000", 0x4)
r32 = socket(0x18, 0x1, 0x0)
listen(r32, 0x0)
r33 = socket(0x18, 0x1, 0x0)
listen(r33, 0x0)
setsockopt(r33, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r34 = socket(0x18, 0x1, 0x0)
listen(r34, 0x0)
setsockopt(r34, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r35 = socket(0x10, 0x5, 0x7)
listen(r35, 0x3)
setsockopt(r35, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x0)
r36 = socket(0x18, 0x1, 0x0)
listen(r36, 0x0)
setsockopt(r36, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r37 = socket(0x2, 0x8002, 0x0)
connect$unix(r37, &(0x7f0000000440)=ANY=[@ANYBLOB="62020207e000000120000600cbfdf223ae22417d173cb92eba606592fc9f4ea35119f59e7a53661b74703dd8cc0100000093f42355252b001bc35782be56000000003794ec477479218f8eec332af21b5e774464ec647b2d4dbbd6cde38f3a455cf347141fe25243ee68a17494ace019f57675c30e3f80ef0f519a60052862d75d0da3be00000000000007ff908a70f554ed931c025672aa77cb1718b483777403000000000000006c27f99d9b47abba4814f6332a91c4a47ce9894f7cd9f822be193bb4fa4227156659669209084b58ce5c00c03ba103"], 0x10)
write(r37, 0x0, 0x0)
r38 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r38, 0x0, 0x64, 0x0, 0x0)
r39 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r39, 0x0, 0x64, 0x0, 0x0)
sendmsg$unix(r29, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYRES64=r30, @ANYRES16, @ANYRES64=r31, @ANYBLOB="50d5ddb4a6631ab7c45afe9adf4d51bd21277b492ed741c219bec2a3a20233d23edc86bd9b1cae156082fe470c4c49a8b4583e0288bebbf51c774f4e9b5f65422ea1de513f0409c96d54bed3d518ff5ec8207d2fc16a4582002a66455cf74d5ec3a3ce9892d4897b8d3e4786ff84884f923c24fa37bdd9ad1e5dc010e78e", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r28, @ANYRES32=r37], @ANYRESHEX=r32], @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRESHEX=r27, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r26], @ANYBLOB="9f9de90263633126a43ed7d5c0f4e6eb854b79b5c3c29eeaf849944722a4892025a87b9e9fa7f71cb3e4e928ae3dd3bddd3d6f6167747c5dafdac9bde0ccdcbe643b0f443a2ba92249f2908fc91cc333d3be021b6c877e343bb21ebc5244e664e1de5e743f9e2e1075a6a3bb648eccee1d2aee36a551b4ac0032e413343c6406008006bf71104d1762c3fb1dd0c4dc3a41a195d00f42075ac6c5b5f389e2226d710cf7dd7638209e337c26c997f67a943df23f47e0858e0efcb689078b7ae18d147e4e34d1de33bdddc81e74e4c5b6e73b000000000000", @ANYRES16=r33, @ANYRES32=0x0, @ANYRES16=r38, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESHEX=r35, @ANYRESHEX=r39, @ANYRESOCT=r36], @ANYBLOB="13ff4e61eef4d25d676ca6a9fd8ec995301c49807bbe6cd5e93e6b3c4d3a958aa2467b37948d176ab7568ac84338fc5537a025058a9c432635b4b721486e25ea621b646e0c387dc906488d72b7a142", @ANYRES16=0x0], 0x9, 0x0}, 0x8)
semctl$IPC_SET(r28, 0x0, 0x1, &(0x7f0000000100)={{0x3, r21, r22, r23, r25, 0x261}, 0x1ff, 0x3ff, 0x12})
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r40=>0x0}, 0xc)
r41 = getegid()
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, <r42=>0x0}, 0xff4b)
r43 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$TIOCSETVERAUTH(r43, 0xc0107002, &(0x7f0000000000)=0x280000)
getsockopt$sock_cred(r43, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r44=>0x0}, &(0x7f00000000c0)=0xc)
r45 = semget$private(0x0, 0x7, 0xa0)
r46 = socket(0x18, 0x8000, 0x4)
semctl$SETVAL(r45, 0x3, 0x8, &(0x7f0000000000)=0xee65)
semop(r45, &(0x7f0000000040)=[{0x2, 0x81, 0x1800}, {0x2, 0x3, 0x1000}], 0x2)
r47 = semget$private(0x0, 0x2, 0x9)
semctl$SETALL(r45, 0x0, 0x9, &(0x7f00000001c0))
semctl$IPC_RMID(r45, 0x0, 0x0)
r48 = socket$unix(0x1, 0x1, 0x0)
r49 = socket(0x18, 0x1, 0x0)
listen(r49, 0x0)
setsockopt(r49, 0x29, 0x1b, &(0x7f00000002c0)="00012000", 0x4)
r50 = socket(0x18, 0x1, 0x0)
listen(r50, 0x0)
setsockopt(r50, 0x2c, 0x1, &(0x7f0000000400)="08010000", 0x4)
r51 = socket(0x18, 0x1, 0x0)
listen(r51, 0x0)
r52 = socket(0x18, 0x1, 0x0)
listen(r52, 0x0)
setsockopt(r52, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r53 = socket(0x18, 0x1, 0x0)
listen(r53, 0x0)
setsockopt(r53, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r54 = socket(0x10, 0x5, 0x7)
listen(r54, 0x3)
setsockopt(r54, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x0)
r55 = socket(0x18, 0x1, 0x0)
listen(r55, 0x0)
setsockopt(r55, 0x29, 0x1b, &(0x7f0000000040)="00010000", 0x4)
r56 = socket(0x2, 0x8002, 0x0)
connect$unix(r56, &(0x7f0000000440)=ANY=[@ANYBLOB="62020207e000000120000600cbfdf223ae22417d173cb92eba606592fc9f4ea35119f59e7a53661b74703dd8cc0100000093f42355252b001bc35782be56000000003794ec477479218f8eec332af21b5e774464ec647b2d4dbbd6cde38f3a455cf347141fe25243ee68a17494ace019f57675c30e3f80ef0f519a60052862d75d0da3be00000000000007ff908a70f554ed931c025672aa77cb1718b483777403000000000000006c27f99d9b47abba4814f6332a91c4a47ce9894f7cd9f822be193bb4fa4227156659669209084b58ce5c00c03ba103"], 0x10)
write(r56, 0x0, 0x0)
sendmsg$unix(r48, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYRES64=r49, @ANYRES16, @ANYRES64=r50, @ANYBLOB="50d5ddb4a6631ab7c45afe9adf4d51bd21277b492ed741c219bec2a3a20233d23edc86bd9b1cae156082fe470c4c49a8b4583e0288bebbf51c774f4e9b5f65422ea1de513f0409c96d54bed3d518ff5ec8207d2fc16a4582002a66455cf74d5ec3a3ce9892d4897b8d3e4786ff84884f923c24fa37bdd9ad1e5dc010e78e", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r47, @ANYRES32=r56], @ANYRESHEX=r51], @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRESHEX=r46, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r45], @ANYBLOB="9f9de90263633126a43ed7d5c0f4e6eb854b79b5c3c29eeaf849944722a4892025a87b9e9fa7f71cb3e4e928ae3dd3bddd3d6f6167747c5dafdac9bde0ccdcbe643b0f443a2ba92249f2908fc91cc333d3be021b6c877e343bb21ebc5244e664e1de5e743f9e2e1075a6a3bb648eccee1d2aee36a551b4ac0032e413343c6406008006bf71104d1762c3fb1dd0c4dc3a41a195d00f42075ac6c5b5f389e2226d710cf7dd7638209e337c26c997f67a943df23f47e0858e0efcb689078b7ae18d147e4e34d1de33bdddc81e74e4c5b6e73b000000000000", @ANYRES16=r52, @ANYRES32=0x0, @ANYRESOCT=r53, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESHEX=r54, @ANYRES16, @ANYRESOCT=r55], @ANYBLOB="13ff4e61eef4d25d676ca6a9fd8ec995301c49807bbe6cd5e93e6b3c4d3a958aa2467b37948d176ab7568ac84338fc5537a025058a9c432635b4b721486e25ea621b646e0c387dc906488d72b7a142", @ANYRES16=0x0], 0x9, 0x0}, 0x8)
semctl$IPC_SET(r47, 0x0, 0x1, &(0x7f0000000100)={{0x3, r40, r41, r42, r44, 0x261}, 0x1ff, 0x3ff, 0x12})
r57 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r58 = kqueue()
kevent(r58, &(0x7f0000000040)=[{{r57}, 0xfffffffffffffffe, 0x11}], 0x8, 0x0, 0x981, 0x0)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f00000001c0)={<r59=>0x0}, 0xc)
r60 = socket$inet6(0x18, 0x3, 0x0)
r61 = getpgrp()
fcntl$setown(r60, 0x6, r61)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0xc9, r3, r8, r21, r41, 0x0, 0x9}, 0x5, 0xe78, r59, r61, 0x10000, 0x7, 0xc145, 0x2})
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3, 0x8, 0x36, 0x7fffffff}, {0x81, 0x4, 0x8, 0x8}, {0x87f, 0x4, 0x6, 0x9}]})
ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000100)=0x6)

16:00:07 executing program 1:
mknod(&(0x7f0000000180)='./file0\x00', 0x61c8, 0x202)
mknod(&(0x7f0000000240)='./bus\x00', 0x210d, 0x202)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00')
r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0xd1)
lstat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280))
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffff9c, 0x29, 0x69, &(0x7f00000001c0)={{0x18, 0x1, 0x1, 0x4}, {0x18, 0x3, 0x8, 0x8}, 0x7, [0x1, 0x5, 0x1ff, 0x6, 0x20, 0x0, 0x7, 0x83ec]}, 0x3c)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fcntl$dupfd(r1, 0x0, r1)
renameat(r1, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000100)='./file0/../file0\x00')

16:00:07 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)
dup2(r102, 0xffffffffffffff9c)

16:00:07 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x9, 0x0, 0x9, 0xffffffffffffffff, 0xfffffffffffffdff], [0x0, 0x0, 0x401], [{0x0, 0x0, 0x0, 0x8}], {}, {0xfff7}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = semget(0x3, 0x3, 0x4)
r3 = geteuid()
r4 = getuid()
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
poll(&(0x7f0000000000)=[{r5, 0xd}], 0x1, 0x0)
ioctl$WSDISPLAYIO_DELFONT(r5, 0x8058574f, &(0x7f0000000180)={'./file0\x00', 0x3ff, 0x6, 0x3, 0x0, 0x0, 0x6, 0x101, 0x3, 0x0, 0x8, 0x5})
getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r6=>0x0}, 0xc)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000040)={{0x3145, r3, 0x0, r4, r6, 0x0, 0x2}, 0x201, 0x1})
ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300))
semget$private(0x0, 0x3, 0x80)
r7 = kqueue()
r8 = kqueue()
kevent(r7, &(0x7f0000000040)=[{{r8}, 0xffffffffffffffff, 0x1}], 0x3, 0x0, 0x0, 0x0)
r9 = fcntl$dupfd(r7, 0xa, 0xffffffffffffffff)
r10 = msgget$private(0x0, 0xfffffffffffffffd)
msgsnd(r10, &(0x7f0000000440)=ANY=[], 0x0, 0x0)
msgsnd(r10, &(0x7f0000000040)=ANY=[], 0x0, 0x1000)
r11 = syz_open_pts()
close(r11)
ioctl$TIOCSETA(r11, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r11, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r12, 0xffff, 0x1022, &(0x7f0000000040)={<r13=>0x0, <r14=>0x0, <r15=>0x0}, 0xc)
fchown(r11, 0x0, r15)
r16 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r15, r15, r15, r15, <r17=>r15, r15, r15, r15])
msgctl$IPC_SET(r16, 0x1, &(0x7f0000000380)={{0x401, r14, r15, r14, r17, 0x0, 0x10000}, 0x8, 0x6, r13, r13, 0x101, 0x2, 0x1000, 0x7})
r18 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r18, 0x0, 0x64, 0x0, 0x0)
r19 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r19, 0x0, 0x64, 0x0, 0x0)
r20 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r20, 0x0, 0x64, 0x0, 0x0)
r21 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r21, 0x0, 0x64, 0x0, 0x0)
r22 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r22, 0x0, 0x64, 0x0, 0x0)
r23 = syz_open_pts()
close(r23)
ioctl$TIOCSETA(r23, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r23, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r24, 0xffff, 0x1022, &(0x7f0000000040)={<r25=>0x0, <r26=>0x0, <r27=>0x0}, 0xc)
fchown(r23, 0x0, r27)
r28 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r27, r27, r27, r27, <r29=>r27, r27, r27, r27])
msgctl$IPC_SET(r28, 0x1, &(0x7f0000000380)={{0x401, r26, r27, r26, r29, 0x0, 0x10000}, 0x8, 0x6, r25, r25, 0x101, 0x2, 0x1000, 0x7})
r30 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r30, 0x0, 0x64, 0x0, 0x0)
msgrcv(r28, &(0x7f0000000640)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="29ea", @ANYRES64=r3, @ANYBLOB="29be93ad56110b7890b35f9bf40179c343dbfbef"], @ANYPTR64], 0x3, 0x1, 0x800)
msgrcv(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="78a4150180000002090000009604d062dbecf06a3cd220f8fb99bf8ec8790a0aa209efdae3eb9bd04cb49f4e91ecd104bd7d01bf762b2b513778c3a3ec2705be72f4ca3a5c4dd4f560a12c15c40c635087ba56f056b06fa7cb4065bf53db5efca66808ab3cd4106db67829f00e80be5c733b20596c5ad45fb0465b087dd835516a932f0eef44f5f1bdb17fd55f555cc9f8645113683b8eb9e1d9f9abed45c6b1aad199a3d458b284929e98e7edf5c0ffc350650291b492fa37063985c965"], 0xffffff64, 0x1, 0x0)
r31 = geteuid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000008c0)={<r32=>0xffffffffffffffff})
sendmsg(r32, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x0)
getsockopt$SO_PEERCRED(r32, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r33=>0x0}, 0xc)
getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f0000000140)={<r34=>0x0, <r35=>0x0}, 0xc)
r36 = getppid()
r37 = socket$unix(0x1, 0x2, 0x0)
r38 = syz_open_pts()
fcntl$lock(r38, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffa, 0x2000100000005})
r39 = syz_open_pts()
fcntl$lock(r39, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffa, 0x2000100000005})
sendmsg$unix(r37, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX=r38, @ANYBLOB="e7f6bf5c77971c79e0a789c16a0772f8ce5846833e66c238c804e9a2a8233c97a4322337c525f1e54dea3c688894f6863a62d21ff7d819b5ea78201201d40f217a08a7cf84bd7edbb0219ed2a62138", @ANYRES32, @ANYRES16=r34, @ANYBLOB="20a0bd56c417dcb00383a5bff70ec13daa009b562753dfb7e68f79c1b3e4b85c7a24f1dade537ce732c1855a471cf027c1cc761e82726f647adf2a8d9e77d62c5571f9fe93dd2ba741f0c6353f63d5ae59c3e1110fec0ffeabbb7ab54eeb599e1f02953808735c4db2d0d47183327fdf24842af0f05c15cc3fe4548bdea489d5f954729f9272d6575b1bf3c530e9ef84ce8b874d6280ac8ed5371ab40f418af338089e5b5c52c7264ac483060b03eb4305a20ac6f1e6316a03f4d64bd9cb038d4115fe08b3e7d9c07097e6", @ANYRESHEX=r39, @ANYRES16]], 0x1, &(0x7f0000000040), 0x0, 0xfffffffffffffffe, 0x0, 0x2}, 0x80d)
r40 = fcntl$getown(r37, 0x5)
msgctl$IPC_SET(r10, 0x1, &(0x7f0000000980)={{0x2, r31, r33, r35, r33, 0x46, 0xffffffff00000001}, 0x102, 0xc07, r36, r40, 0xa5, 0x5, 0x100000000, 0x2})
r41 = kqueue()
r42 = kqueue()
kevent(r41, &(0x7f0000000040)=[{{r42}, 0xffffffffffffffff, 0x1}], 0x3, 0x0, 0x0, 0x0)
r43 = fcntl$dupfd(r41, 0xa, 0xffffffffffffffff)
r44 = msgget$private(0x0, 0xfffffffffffffffd)
msgsnd(r44, &(0x7f0000000440)=ANY=[], 0x0, 0x0)
msgsnd(r44, &(0x7f0000000040)=ANY=[], 0x0, 0x1000)
msgrcv(r44, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000ffffff7f5315419be0f948fb383500"/194], 0xfffffffffffffe9f, 0x1, 0x1000)
msgsnd(r44, &(0x7f0000001640)=ANY=[@ANYPTR64=&(0x7f0000000a40)=ANY=[]], 0x1, 0x800)
msgrcv(r44, &(0x7f0000000700)=ANY=[@ANYBLOB="78a4150180000002090000009604d062dbecf06a3cd220f8fb99bf8ec8790a0aa209efdae3eb9bd04cb49f4e91ecd104bd7d9abf762b2b513778c3a3ec2705be72f4ca3a5c4dd4f560a12c15c40c635087ba56f056b06fa7cb4065bf53db5efca66808ab3cd4106db67829f00e80be5c733b20596c5ad45fb0465b087dd835516a932f0eef44f5f1bdb17fd55f555cc9f8645113683b8eb9e1d9f9abed45c6b1aad199a3d458b284929e98e7edf5c0ffc350650291b492fa37063985c965"], 0xffffff64, 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000008c0)={<r45=>0xffffffffffffffff})
sendmsg(r45, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x0)
getsockopt$SO_PEERCRED(r45, 0xffff, 0x1022, &(0x7f0000000000), 0xc)
getsockopt$SO_PEERCRED(r43, 0xffff, 0x1022, &(0x7f0000000140), 0xc)
getppid()
r46 = socket$unix(0x1, 0x2, 0x0)
r47 = socket(0x2, 0x2, 0x0)
connect$unix(r47, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10)
r48 = socket(0x10000000002, 0x2, 0x0)
dup2(r47, r48)
sendmsg$unix(r46, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES64=r47], 0x1, &(0x7f0000000600)=[{&(0x7f00000002c0)="a62bd6ed1b93da9c25b26650f3f5854a74a167aa82cfdcc5ddd843c4a7b47683c28f5dfa2ef79b2a9965a884b41cf81f3acf27f9207525b7e34dfa", 0x3b}, {&(0x7f00000007c0)="5cebfbef617c262b3d6d9fc178ce8fce4cc596488721b8ea7ee1382728bda2eb923b69ed5cebcd674e0377326e3affa9191088160ff46a722374cdce116e5d0db6723920c3d7d170316da70d5a56d8be7326cc5c0f3cdd6c8e9593195f7f8d0316408c9057cbb7c78cfcbe5fc2c44ec7dae777f81a11fa9e1db9c915f5e400fd0a27acc27eaf3e728e9268d0fcf4cec16a2d003b2ac752bdf72f6902127641d606e3cd6cd3b742115ef1440a3a056f1e959b1bc03a9cd9d7634754659761ae74480c8835d03c0e2404db960998d494bc7e3c7da7238c3c509854", 0xda}, {&(0x7f0000000c80)="3ffb31ca4e0974b469f9579d9dff6b09b49ec2312916ae5bb19a20f515aa2143685db65592cd903dbdf1e27bfcc9e9737faca98b8b5fff33f575b9d41cdf300c83b22b1dffbb92bf238f3b63729516ad9916236a23abc16709910f4fdb09f37c743062c697ea168d27b9e836d807dcecba54b56be00ec183731bf07a757a6e44040bdf2ad94dd6c6a9db68e0ec4b185ee831a93ccce65c50524cea1816d7a11606ec4ce37591a86cc3924421d2000da619ee8855fefe18dfcb609bce8580aa17bafcd247b4b070128c1e731bfeb59b872de213be35cba7978f599340da7f605ee0886bcebe9673409a677faa0d7c6e2b264bd6e1c113c214e07f", 0xfa}, {&(0x7f0000000300)="65b6653e7c35197739a724cae9ba99c1df3f0125788746929210170bf265c65c4db7c34c0f3afcfffbb7d9a82dafb8d351fc0f0be58a2b323b4c58a48b78fcc25ec5418f2ee4e431b736ed4f894f55f9cf45810078387692a1233d41f36b", 0xfffffffffffffdf7}], 0x4, 0xfffffffffffffffe, 0x0, 0x2}, 0x1)
fcntl$getown(r46, 0x5)
msgget$private(0x0, 0x0)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210)

16:00:08 executing program 1:
r0 = socket(0x1e, 0x3, 0x0)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'})
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
fcntl$setstatus(r2, 0x4, 0x80)
open(&(0x7f0000000080)='./file0\x00', 0x10, 0x110)
pwritev(r2, &(0x7f00000003c0), 0x273, 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000140))
close(r0)

16:00:08 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0)
ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000040)={0x20, 0x2, 0x8})
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86135)
r1 = open(&(0x7f0000000080)='./bus\x00', 0xc02, 0x0)
write(r1, &(0x7f0000000140)="220e22", 0x3)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{}, 0x4000010000004, 0x4})
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)

16:00:08 executing program 1:
r0 = socket(0x2, 0x8001, 0x0)
setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040)={0x8, 0x800}, 0x8)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x64, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x64, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x64, 0x0, 0x0)
r6 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x64, 0x0, 0x0)
r7 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x64, 0x0, 0x0)
r8 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x64, 0x0, 0x0)
r9 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r9, 0x0, 0x64, 0x0, 0x0)
r10 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r10, 0x0, 0x64, 0x0, 0x0)
connect$unix(r0, &(0x7f0000003740)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000001180)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r0], @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYPTR, @ANYBLOB="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", @ANYRESHEX=r1, @ANYPTR64, @ANYRESHEX=r2], @ANYBLOB="3f06fa76b059da8b7a0bbc68d5f33ec5e5d69775a93ec602c7154ba90f91683ac35eaa8142c24a16f07abfcf40e44a4d82dddf58ccbaa472388ef48caf6cabeb63381695d8a78ed56f203b44a44ae8adef3ebc93d0a957cdc4992c22950358f8c06086f6d687946d278f4a22e98cefffe1dd8e11504e1dca394d15f6ae6cd7e11011732aacacbbe11c72238f0cfda9ebeb9155ba68eea500bdc3a1505a285b72f637ed229acc89bcb421641b26c6a20e4b0ca4aa96208afd72b972f0fb9e15708a3f1e4c58c157b325b1797207e9511b75a881fce6c9425256f0f519acabf0baf1ff4c6f32", @ANYPTR, @ANYBLOB="abc8dcd8d60ca4fc1153114a81b2d87aefa13e8bb936c93326c0ffebb6d9d66ed530f2b58e50ddec738a50c5262d827c2542d33c8213b9765d881e23a9bfec16996efd3eb9bcfb19a450e3f3618aa731cfaabce011be986d8e025f4999e734a089c55e1f7f6a19b7101bf87a69ce9dda2b4f0a5bc93b01affa"], @ANYRESOCT, @ANYPTR=&(0x7f0000001580)=ANY=[], @ANYRESHEX, @ANYPTR64=&(0x7f0000002640)=ANY=[@ANYRESOCT=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC=r7, @ANYPTR=&(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYPTR64], @ANYRES16=r10]], 0x6)
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000080)=0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r11 = socket(0x2, 0x1, 0x0)
bind(r11, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10)
r12 = dup(r11)
listen(r12, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10)
close(r0)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r92, &(0x7f0000001000/0x2000)=nil, 0x1000)

16:00:08 executing program 1:
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x20000182, &(0x7f00000002c0)})
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x400000002, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000040)={0x0, 0x0, {0x5d, 0x1}})
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"})
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCCONS(r3, 0x20004276, 0x0)
ioctl$TIOCMSET(r3, 0x40044266, &(0x7f0000000000))
ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f0000000080)=0xfffffffb)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(r1)
socket(0x400000000018, 0x3, 0x3a)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r1, &(0x7f0000000140)="ad1af05de2f4ef18", 0x1000)

16:00:08 executing program 1:
r0 = socket(0x1e, 0x3, 0x0)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'})
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
fcntl$setstatus(r2, 0x4, 0x80)
pwritev(r2, &(0x7f00000003c0), 0x273, 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000140))
close(r0)
r3 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/150, 0x96}, {&(0x7f0000000400)=""/118, 0x76}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/68, 0x44}], 0x9, 0x0, 0x100000000)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r93=>0x0}, 0xc)
r94 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r94, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r94, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r94, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r95 = getgid()
r96 = socket(0x800000018, 0x1, 0x0)
bind$unix(r96, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r96, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r97=>0x0}, 0xfffffffffffffcfa)
r98 = getgid()
semctl$IPC_SET(r94, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r95, r97, r98, 0x10, 0x9}, 0x8, 0x1, 0x9})
r99 = getgid()
r100 = getppid()
r101 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r102=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r103=>0x0, <r104=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r103, r104)
chown(&(0x7f0000000200)='./file0/file0\x00', r103, r104)
lchown(&(0x7f0000000780)='./file0\x00', r103, r104)
lchown(&(0x7f00000001c0)='./file0\x00', r103, r104)
shmctl$IPC_SET(r92, 0x1, &(0x7f0000000080)={{0x6, r103, r93, r97, r99, 0x1e6, 0x8}, 0x5, 0x5, r100, r101, 0xfffffffffffffe01, 0x9, 0x7ff})

16:00:08 executing program 1:
pipe(&(0x7f0000000200))
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3c6)
lseek(r0, 0x0, 0x820000000002, 0x0)
getdents(r0, &(0x7f0000000080)=""/37, 0xfe37)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x22)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x1b3)
fchflags(r3, 0x10001)
getdents(r2, &(0x7f00000000c0)=""/217, 0xd9)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r98=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r98, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r99=>0x0, <r100=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r99, r100)
chown(&(0x7f0000000200)='./file0/file0\x00', r99, r100)
lchown(&(0x7f0000000780)='./file0\x00', r99, r100)
lchown(&(0x7f00000001c0)='./file0\x00', r99, r100)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r98=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r98, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r99=>0x0, <r100=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r99, r100)
chown(&(0x7f0000000200)='./file0/file0\x00', r99, r100)
lchown(&(0x7f0000000780)='./file0\x00', r99, r100)

16:00:08 executing program 1:
r0 = socket(0x1, 0x3, 0x2)
sendto$unix(r0, &(0x7f0000000240)="b100050400000000000008000101000000800000cea1fea7fef96ecfc73fd3357ae26caa04f391d6be6336acf00b7804be781e4991f7cadf9a912b297be1aa5b23ed00f4b7b2ca3ebbc257699a1f132e23acbdd602000d7d026ba8af63ff37282902e4fdedb96f27872babfbb770c1f5a872c881ff7cc53c8943310b404f36a00f90a2921a006ee01bc43eaea8c500001502000000000000020208a371a3f8000400000000000000010000000000000000000200ba35a7a6b24b7305ec0f2492189ed4b7cd0272255c9cdc48f652d7d2bfdfcc912e59e9fd5e6aaff16b0aea32e23f478bf6cec659899610a3e1be145ef99ea431aaf42ad0555aa4578a2f9d341c82914a7f536c3db7b43020c6280e6fc5a0d0e683551dac6e821f2dac1b8a1daf0b6259b93ebc91fb321e026aa994d3654a0ff679d51a60bdd8273ea7e97548df271b2fc4bebd52d88e0b4ec291d9ab6f3146e78263cbba1e8c1777e292454619ac5a63101e5eccc8d633fad4580a066bbbd2e55b", 0xb1, 0x818, 0x0, 0x100a2)
socket(0x6, 0x1, 0x2)

16:00:08 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x28}, {0x24}, {0x840000006, 0x0, 0x0, 0x7cf}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
clock_getres(0x3, &(0x7f00000001c0))
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000280)=0xc)
r4 = syz_open_pts()
close(r4)
ioctl$TIOCSETA(r4, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r4, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000040)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, 0xc)
fchown(r4, 0x0, r8)
r9 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r8, r8, r8, r8, <r10=>r8, r8, r8, r8])
msgctl$IPC_SET(r9, 0x1, &(0x7f0000000380)={{0x401, r7, r8, r7, r10, 0x0, 0x10000}, 0x8, 0x6, r6, r6, 0x101, 0x2, 0x1000, 0x7})
r11 = getegid()
getgroups(0x3, &(0x7f00000002c0)=[r3, r8, r11])
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
ioctl$BIOCFLUSH(r2, 0x20004268)
pwrite(r0, &(0x7f0000000100)="b1e91bee8fad27050cdaeb0413b0", 0xe, 0x0, 0x0)
ioctl$TIOCGTSTAMP(0xffffffffffffff9c, 0x4010745b, &(0x7f0000000180))
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x28090, 0x0)

16:00:08 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x6c}, {0x5}, {0x40000004006}]})
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)=@un=@file={0x1, './file0/file0\x00'}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="a4eaa142f887878cb855f8b2d92503a23fbd10f659761a4222e5dd5dcb65e4d36ceb54c9f371d3d0c168fe3ce12d48e0e591144fc3b07d8627dd8b4d97f80441c7fb62cba255e95ffc192c4d1c0632a68db546fe68f9f83791807ed42311fbaf5ed2043a609eb11fb118b677e8b8146d915209f4c4ccadc81f1fdf9aba957eddb82e37e81c60debb4452e157a3bffe671cc2f3417eb6e8549a34195219d51211e57a37acefb6952d96934660d82c164856cf16f9", 0xb4}], 0x1, &(0x7f0000000400)=[{0x110, 0xffff, 0x1, "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"}, {0x30, 0xffff, 0x4, "1e8255d86e82190fd9fdabd0ac602e3c9043d5b0c38edd3f5a"}, {0x50, 0x1, 0x1510, "88bde2a983ef851368d5387c6eb83afa55546d0dcc2e4eaf16d772e86b846f25607f8d7eb9fe6de7b99defbd6ed057122d0155afce6bacebfd0f19f6371fcd07"}, {0x98, 0x1, 0x3, "05d784d9ff226bbff61966e75cadc3802c6527edbc05069d16c90f0b05e66b25e5ce11204492d4bec8ab6cf8cb3010c5f7ee30cc8860088f674a6aad433fb9649eefea59e52eefaf88e770d85480272861f03743be8b0b89f1ff6d32ee1aa13238134d51a95bb8d7b945874f26ba828729a7e6a00bd5a595be26dbdab06c1fabb6c41dd3e834"}, {0xa0, 0xffff, 0x5, "5fec47681968afff8a12517981a6b2e13da23573281798ec922ce2b9c8c00df7d595b608674edba77611c01ae52830d849c1e8681c69539aa25ce030de3ca9966bccc2ce9067109eab3c24c5dab74b68bb4095012a0f675d0516c7f813ff1f3f2f0795ff24b5b874f3fe130eaf13a756434d420bb8558bef2dfe8830fe514f66f03d8bb66a002d0b5b8fffb07a"}], 0x2c8}, 0x8)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000280)={0x7, &(0x7f0000000000)=[{0x101, 0x80, 0x20, 0x80000000}, {0x9, 0x7, 0x81, 0x1}, {0x0, 0xc, 0x1, 0x400}, {0x2, 0x3, 0x1, 0x20}, {0xff52, 0x8, 0x2, 0x4}, {0x7, 0x7, 0x7, 0x5}, {0x8000, 0x0, 0x5, 0x1}]})
syz_emit_ethernet(0xe, &(0x7f0000000080)="010c777cf7c7e52c32db472b74ed")
r3 = socket(0x2, 0xc003, 0x2)
connect$unix(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="8202adfdffffffffffffff653000463f7b238bf46854d78a2a197a386207000000008295955984c87910bf453f68c11700287ead4bcb777fa69dfceac2a84c6abca24896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58fd4237b8fa4d012ae447473c238495aaee48c02f6ac41e6bf3bf554799b9b813ad30505e705300a49fef9d612f871f4385f04157795ea4a5c5fe659fa202361cd8caf8b2ca81911fc9c9f006ab89c7dbbc5b65b6593d2870b4122cd2350000000000000000000000000000000000a034b9443ac0062f41c1416ec02530dc78fbe84db73ce9bcbe33db04363be6f3e61cd859a5b15078f671f1f653c862465da23fe4cc2ad4bde398cd38d5a9be4c27c5a772b5b6063a5b0478e49016c58adb783e404bf9360394ce49f2718f6fc82ab95ce192f9ffffff1dab5b"], 0x10)
write(r3, &(0x7f00000008c0)="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", 0xe)
r4 = msgget(0x0, 0x2d0)
msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/214)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r98=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r98, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r99=>0x0, <r100=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r99, r100)
chown(&(0x7f0000000200)='./file0/file0\x00', r99, r100)

16:00:08 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x7fffffff], [0x0, 0x0, 0xffffffff], [{}, {}, {}, {0x0, 0x8000}], {}, {0x0, 0x3}}})
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmm\x00', 0x1, 0x0)
ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000040)={0x7, 0x800, 0x101})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20400, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x3, 0xcc, 0x4, 0x4}, {0x400, 0x0, 0x1, 0xc9}, {0xfffb, 0x9, 0x5, 0x7}, {0x6, 0x64, 0x1, 0xfffffffa}, {0xad4, 0x9, 0x81, 0x9}, {0x7fff, 0x2, 0x80, 0x5}, {0x66, 0x7, 0x9, 0x4}]})
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000000c0)=0x8000)
r2 = socket(0x18, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300))

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r98=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r98, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r99=>0x0, <r100=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r99, r100)

16:00:08 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x4000000001, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x28}, {0x6, 0x0, 0x0, 0x100}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
pwrite(r0, &(0x7f0000000040)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})

16:00:08 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x462, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x5c}, {0x15}, {0x4000006, 0x0, 0x0, 0x100}]})
pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
sendto$unix(r2, &(0x7f00000002c0)="3913e2124fcc67c1e5e3634a2de060e7f5d6c60de6d34c4db19779d347c2b22579c5a596886201f9abfd4138e75db204bd44a75b460c07ef0e81b8e1d1ba881972a15fe97ca1635d92cd4f0ebec8671f49113df9f47ee72e6ba44f40d8b52cd6b488b64d2580ce2ec7abf91b23af18375c8a9869fdbbf45187c89211e1547012852d8701fd13fb646a5230b1501f2cc45f678210f7fde23636c20a7b75528536a7d0031ce2b8060b470aeeae761def0f92e865a117540c3b42199aaa169fe5d5efbce6ba982d8048a2d2264636f524b1ed979e07a196a9ac0b0a2cd5a34941", 0xdf, 0x8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa)

16:00:08 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0x1f0], [0x0, 0x0, 0x2f6b6091]}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
socket(0x31, 0x3, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300))

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r98=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r98, 0xffff, 0x1022, &(0x7f00000003c0), 0xc)

16:00:08 executing program 1:
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x400000000018, 0x3, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f00000000c0)={{0x18, 0xffffffffffffffff, 0x20}, {0x18, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x0, [0x0, 0x4a30, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x21a)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
r2 = socket(0x18, 0x400000002, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}})
r3 = socket(0x18, 0x2, 0x0)
getsockname$unix(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000004c8eae294dc53bfc007b0ac3c80400000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000000000000000000000000f0000000000000000e3ffffffffffffff0000000000018000"], &(0x7f0000000040)=0x6e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(r2)
r4 = socket(0x400000000018, 0x3, 0x0)
setsockopt(r2, 0x6, 0x2c, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r2, 0x0, 0x0)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)

16:00:08 executing program 1:
mkdir(&(0x7f0000000280)='./file0\x00', 0x1)
chown(&(0x7f0000000340)='./file0\x00', 0x0, 0xffffffffffffffff)
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, <r0=>0xffffffffffffffff])
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r0)
setgroups(0x0, 0x0)
setuid(0xee01)
r1 = socket(0x2, 0x3, 0x0)
r2 = msgget(0x2, 0x224)
open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x14}, {0x80}, {0x88fe}]})
r4 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x64, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x64, 0x0, 0x0)
r6 = fcntl$dupfd(r4, 0x1e, r5)
ioctl$TIOCCONS(r6, 0x20004276, 0x0)
ioctl$TIOCMSET(r6, 0x4008426f, &(0x7f0000000000))
msgrcv(r2, &(0x7f0000000400)=ANY=[@ANYRESHEX=r6], 0x1, 0x0, 0x1000)
r7 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCFLUSH(r7, 0x80206979, &(0x7f0000000300))
r8 = openat(r7, &(0x7f0000000040)='./file0\x00', 0x28119, 0x4683dce6b38cecf0)
writev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="9d8c55", 0x3}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000000c0)="ec82e11d", 0x4}, {&(0x7f0000000100)="38def8ec469017c221a0dcb3584e70d7d9f74650c10b94b10b2113dd48eb26289ef8631fc2955fbb01950ceffa7018f64b3b5c5cebea51576d2024e44d2fea202836dfc55c6be70fc76983e82861335afff2ac6b8f7775b065433be229dab7bbfd132c94892226090482d4e77a5a43f674da", 0x72}], 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
bind(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="00abe038fa5e206268000000000000000000"], 0xa)
setsockopt$sock_int(r10, 0xffff, 0x1001, &(0x7f0000000000), 0x4)
dup2(r10, r9)
listen(r10, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = dup2(r12, r11)
connect$unix(r13, &(0x7f0000000380)=ANY=[], 0x0)
unveil(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='c\x00')
r14 = semget$private(0x0, 0x4, 0x4)
semctl$GETNCNT(r14, 0x3, 0x3, &(0x7f0000000040)=""/41)

16:00:08 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2c}, {0x20}, {0x6}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
syz_emit_ethernet(0x49b, &(0x7f0000000000))
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000000)={<r3=>0x0}, 0xc)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
r4 = syz_open_pts()
close(r4)
ioctl$TIOCSETA(r4, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r4, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000040)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, 0xc)
fchown(r4, 0x0, r8)
r9 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r8, r8, r8, r8, <r10=>r8, r8, r8, r8])
ioctl$TIOCGETD(r5, 0x4004741a, &(0x7f00000001c0))
msgctl$IPC_SET(r9, 0x1, &(0x7f0000000380)={{0x401, r7, r8, r7, r10, 0x0, 0x10000}, 0x8, 0x6, r6, r6, 0x101, 0x2, 0x1000, 0x7})
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r11=>0x0}, 0xc)
setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={r3, r7, r11}, 0xc)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)

16:00:08 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000040)={0x2411, 0xac, 0x8001, 0x2, 0x9, 0x2, 0x3ff, 0x10, [{0x8, 0x8, 0x6, 0x9}, {0x5, 0x7ff, 0x6, 0x2}, {0x3, 0x2, 0x7f}, {0x6, 0x65b1, 0x80000000, 0x7fffffff}, {0xc0b, 0x9, 0x0, 0x5}, {0x2, 0x8, 0x8001, 0x80000001}, {0x4, 0x1, 0x2, 0x3f}, {0x1, 0x40, 0x2, 0x6}, {0xc21, 0x8, 0xfffffffb, 0x5}, {0x8, 0x4, 0x3, 0x6}, {0xdc, 0x8, 0x1, 0xfff}, {0xfd92, 0x2, 0x9, 0x3}, {0xf3c9, 0x101, 0x0, 0xff}, {0x1, 0x3ff, 0x8000, 0x1ff}, {0x1, 0x10000, 0xf79, 0x101}, {0x4, 0x3, 0xcd6c, 0x36c}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$getown(0xffffffffffffffff, 0x5)
fcntl$lock(r1, 0x0, &(0x7f00000001c0)={0x1, 0x2, 0x3ff, 0x81, r2})
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x104)
ioctl$BIOCSRSIG(r3, 0x80044272, &(0x7f0000000240)=0x2f)
open(&(0x7f0000000280)='./file1\x00', 0x10000, 0x20)
getgroups(0x2, &(0x7f00000002c0)=[0x0, <r4=>0xffffffffffffffff])
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000340)=0xc)
r6 = getegid()
getgroups(0xa, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, <r7=>0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff])
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, <r8=>0x0}, 0xc)
getgroups(0x5, &(0x7f0000000400)=[r4, r5, r6, r7, r8])
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000440)={0x148, 0x1, 0x3, 0xec65, 0x4}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendto$unix(r9, &(0x7f00000004c0)="d6d073e3f5e041c65e28c1acb7c7cd6b65c6534e71f58715325cca4b6e40f440a34d50e8f3778af60a2310cb5fb20207ee80cf42b5c395b7f64f9364e6f981b0e58390e66d85d7ecb353575787b7d3f37fe4b395463b0cef6b9c6bc19568a66090fc0d368b39793f", 0x68, 0xd, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000540)="dbc484b4854b593d1accac0c43dad51ce6c5020d1505d13d5cf9d7a66549404b7ff1e1f9ce393b69cd3f5e3cf7c739a6468b155eb1592b86e8dd097ad1a0a84962319f5a5e4a26f46c11a7d8fd814862", 0x50, 0x1, &(0x7f00000005c0)=@un=@abs={0x1, 0x0, 0x0}, 0x8)
execve(&(0x7f0000000600)='./file0\x00', &(0x7f00000008c0)=[&(0x7f0000000640)='/dev/null\x00', &(0x7f0000000680)='\\\"\x00', &(0x7f00000006c0)='/dev/null\x00', &(0x7f0000000700)='/dev/null\x00', &(0x7f0000000740)='{\x00', &(0x7f0000000780)='/dev/null\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='/dev/null\x00', &(0x7f0000000840)='/dev/null\x00', &(0x7f0000000880)='/dev/null\x00'], &(0x7f0000000b80)=[&(0x7f0000000940)='/dev/null\x00', &(0x7f0000000980)='$\x00', &(0x7f00000009c0)='./#%]\x00', &(0x7f0000000a00)='^\x00', &(0x7f0000000a40)='(\x00', &(0x7f0000000a80)='/dev/null\x00', &(0x7f0000000ac0)='/dev/null\x00', &(0x7f0000000b00)='/dev/null\x00', &(0x7f0000000b40)='\x00'])
r11 = socket$unix(0x1, 0x2, 0x0)
accept(r11, &(0x7f0000000c00)=@in6, &(0x7f0000000c40)=0xc)
setsockopt(r10, 0xfffffff7, 0x9, &(0x7f0000000c80)="ebf7148d1c4a995f0db0a14da3767757640db0af8b9d78e0c5b3dc834d308b2dd0a8a1411d409cbfc0a4384d4aa9096898c84d60ff5067b36e2fe9038d87ed22a2d5c3bc4bf8b1731ddbca3706a0aa0d33cc455d5e981dd291b9ceb99c36c18c89aaf723de91f9cbe504d4bff351c53fc345c2033048b1640140efb0f386bd64f17c6c00b954d4b551082713e2", 0x8d)
syz_extract_tcp_res$synack(&(0x7f0000000d40), 0x1, 0x0)
r12 = socket$inet(0x2, 0x5, 0x6)
getpeername(r12, &(0x7f0000000d80)=@in, &(0x7f0000000dc0)=0xc)
pipe2(&(0x7f0000000e00)={<r13=>0xffffffffffffffff}, 0x4)
ioctl$KDENABIO(r13, 0x20004b3c)
pipe2(&(0x7f0000000e40)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x8000)
ioctl$SPKRTONE(r14, 0x80085301, &(0x7f0000000e80)={0x2, 0x7})
pipe2(&(0x7f0000000ec0)={<r15=>0xffffffffffffffff}, 0x4)
fcntl$getflags(r15, 0x3)

16:00:08 executing program 1:
r0 = syz_open_pts()
nanosleep(&(0x7f0000000080)={0x68, 0x7fefffff}, 0x0)
kqueue()
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCCONS(r3, 0x20004276, 0x0)
ioctl$TIOCMSET(r3, 0x40044266, &(0x7f0000000000))
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x9, 0xffffffff, 0xd2, 0x4, "3c28dbe654ef7b294f08fd5b69a25a870f82a03e", 0x0, 0x5})
r4 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCCONS(r4, 0x20004276, 0x0)
ioctl$TIOCMSET(r4, 0x40044266, &(0x7f0000000000))
kevent(r4, &(0x7f0000000000), 0xf8b1, 0x0, 0x10000fb, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0)
write(r0, &(0x7f00000001c0)='z', 0x1)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()

16:00:08 executing program 1:
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1b00)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x400000003fd, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="d548c2e2ae1413709af06255f23b8839f6ba372f3aa3fbc20536f3930b6de9ab6e8d9efc4d509e2d2cea51e1dcc75d49c51f7b6f673c0d039c6d8cbc96b48807271d88221cfe0df81e7c55351e677cd44a968fe6c0cf83ab3ad05af7510e365c72d9dc02b62e320f62bd6e2e2e", 0xffffff4a}], 0x1, 0x0, 0x2)
r1 = geteuid()
r2 = getegid()
lchown(&(0x7f0000000040)='./bus\x00', r1, r2)
execve(0x0, 0x0, 0x0)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()

16:00:08 executing program 1:
ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc5005601, &(0x7f0000000180)={0x10, 0x0, 0x4, 0x0, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000004000/0x3000)=nil}, {&(0x7f0000002000/0x2000)=nil, &(0x7f00003b2000/0x4000)=nil}, {&(0x7f0000010000/0x1000)=nil, &(0x7f0000011000/0x2000)=nil}, {&(0x7f0000009000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f00002d9000/0x6000)=nil, &(0x7f0000006000/0x1000)=nil}, {&(0x7f0000009000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil}, {&(0x7f000000d000/0x2000)=nil, &(0x7f000000c000/0x1000)=nil}, {&(0x7f000000f000/0x3000)=nil, &(0x7f0000005000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil}, {&(0x7f000000f000/0x4000)=nil, &(0x7f000079b000/0x1000)=nil}, {&(0x7f0000012000/0x4000)=nil, &(0x7f0000419000/0x1000)=nil}, {&(0x7f000000d000/0x1000)=nil, &(0x7f0000345000/0x2000)=nil}, {&(0x7f000023b000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil}, {&(0x7f000000f000/0x3000)=nil, &(0x7f0000011000/0x4000)=nil}, {&(0x7f0000014000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xffffffffffffbffe}], ['./file1\x00', './file0/file0\x00', './file0\x00', './file1\x00'], './file0\x00', './file0/file0\x00', './file0\x00', ['./file', './file', './file', './file']})
shmget(0x2, 0x13000, 0x0, &(0x7f0000043000/0x13000)=nil)
semop(0x0, &(0x7f0000000300)=[{}, {}, {0x0, 0x0, 0x1800}], 0x3)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000000)='./file0/file0\x00', 0x80, 0x4)
r0 = socket(0x18, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCFLUSH(r1, 0xc1206922, &(0x7f0000000300))

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r94 = getgid()
r95 = socket(0x800000018, 0x1, 0x0)
bind$unix(r95, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r96=>0x0}, 0xfffffffffffffcfa)
r97 = getgid()
semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r96, r97, 0x10, 0x9}, 0x8, 0x1, 0x9})

16:00:08 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x30, 0x2}, {0x2, 0xfd, 0x0, 0x5}, {0x6}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'t\xea\x1f', 0x0})
syz_emit_ethernet(0xe, &(0x7f00000003c0)="b658b389a88f5e3dea4908399ea8")

16:00:08 executing program 1:
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x7ffffffc, "73cc5160527b0100e534840c76f3000700"})
writev(r0, &(0x7f0000000780)=[{&(0x7f0000001140)="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", 0x6ec}], 0x1)
fchmod(r1, 0x8)

16:00:08 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r94 = socket(0x800000018, 0x1, 0x0)
bind$unix(r94, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r94, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()

16:00:09 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000140), 0xc)
ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000180)=0xfffffffa)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x80, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0xc62f9ba, &(0x7f0000000100)=[{0xfffa, 0x3, 0xc, 0x6}, {0x0, 0x7f, 0x6, 0x8001}, {0xfff, 0x9, 0x9, 0x4}, {0x200, 0x1e, 0xf2, 0x4}, {0x4, 0x1, 0xb8, 0x9}, {0xfff7, 0x1, 0x7c, 0x5}, {0x20, 0x8, 0x3, 0x5}]})
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x100, 0x0)
fcntl$dupfd(r2, 0xa, r1)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TIOCCONS(r4, 0x20004276, 0x0)
ioctl$TIOCMSET(r4, 0x40044266, &(0x7f0000000000))
ioctl$TIOCSTART(r4, 0x2000746e)
syz_emit_ethernet(0xe, &(0x7f00000000c0)="b75d03dd00ef43f7f7c855bb7042")

16:00:09 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r94 = socket(0x800000018, 0x1, 0x0)
bind$unix(r94, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r94, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)

16:00:09 executing program 1:
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "000000000000000100002000"})
select(0xfffffffffffffc7a, &(0x7f0000000040)={0x1ff, 0x6, 0x0, 0x3}, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0xff5f, 0x0}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = accept(r1, &(0x7f0000000080)=@in, &(0x7f0000000100)=0xc)
sendto(r2, &(0x7f0000000140)="2f4d8e876b939936bee39438457bf47379ef8973d912d2b0401c24e75283f98c84ca246fc3f018d1dadaf83639809cb7707cb18db55556ae92d4b01d52cb3b730d5d4161a85dc8ca56c8c504e04f0dad858449be7a560d7a98cdb37097a97c7d4ce43798e39c5813923d15fcc28b4ed8790b7350811ad3af537fdee09757de493fdc3ee25e6180cb3e2500cc6c70cb59b0562ab7db1bc39a1c60c62af14ca56a1261be0a909b85acf905ea36f2bf3a3d5e235f2c303a7b81a32e9f82a9c4f483a98f7e1d0465980273932101f0f679a1df81821680aba0ac767d4961cd0ea8a53c34a73299dc", 0xe6, 0xfa58a47f4ed24801, &(0x7f0000000240)=@in6={0x18, 0x2, 0x9, 0x7cd2}, 0xc)

16:00:09 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6418214c], [0x0, 0x0, 0x0, 0x9, 0xfdffeffffffff7ff], [0x0, 0x0, 0x5]}})
pledge(&(0x7f0000000140)='tap', &(0x7f0000000180)='#$\x00')
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300))
r2 = socket$inet(0x2, 0x1, 0x0)
getpeername(r1, &(0x7f00000000c0)=@in, &(0x7f0000000100)=0xc)
setsockopt$inet_opts(r2, 0x0, 0x64, 0x0, 0x0)
pread(r2, &(0x7f0000000000)="4ee173fe9f3f09bf523a899b6f2c08f6af01e2940a87f980c11a81c5f963ed402177de8bb01b03b31af1f04318c899cf3bfec9e3829e51e97d7b3d97e6a5d27e274f9b0781ee59c9363bc4c58fd53fc286c91dee8cfc4de306b18c74a3be89ac906e40e71440b2840736c61d37214cda34580d0f53754170b3d3acf4c050f667761b757c870b70d11fca24648c885406ab589d491034c793d314146b666848413ff26e462dd351fdcfc595fb77448e3565", 0xb1, 0x0, 0x8954)

16:00:09 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r94 = socket(0x800000018, 0x1, 0x0)
bind$unix(r94, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)

16:00:09 executing program 1:
setrlimit(0x0, 0x0)
setrlimit(0x3, &(0x7f0000000040)={0xb578, 0x100000})

16:00:09 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
socket(0x800000018, 0x1, 0x0)

16:00:09 executing program 1:
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0xac33b03003ff81d6)
r2 = syz_open_pts()
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="ec", 0x1}], 0x1)
dup2(r1, r2)
close(r0)
fcntl$dupfd(r0, 0x0, r1)
setrlimit(0x8, &(0x7f0000000300))
execve(0x0, 0x0, 0x0)

16:00:09 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0)
pipe(&(0x7f00000000c0))
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000001c0)={'./file0\x00', 0x3ff, 0x10000, 0x1800, 0x0, 0x40, 0x2, 0x80, 0x1, 0x0, 0x4, 0x80000000})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x105)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCCONS(r3, 0x20004276, 0x0)
ioctl$TIOCMSET(r3, 0x40044266, &(0x7f0000000000))
ioctl$BIOCGDIRFILT(r3, 0x4004427c, &(0x7f0000000140))
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x60}, {0x5}, {0x7ffffffe}]})
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TIOCCONS(r5, 0x20004276, 0x0)
ioctl$TIOCMSET(r5, 0x40044266, &(0x7f0000000000))
ioctl$VMM_IOC_READREGS(r5, 0xc2485607, &(0x7f0000000240))
ioctl$TIOCCHKVERAUTH(r3, 0x2000741e)
r6 = openat$pci(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/pci\x00', 0x1, 0x0)
pread(r2, &(0x7f0000000500)="a56c184988f8ed7f8b8f7f1f95bbeb9327f47ea9c73cfb8ecfa1fc5df6f93c7af104339897678618f2d5f36d90622f92036f22267c43bf2fdc5619963d788b177ff2820ca6309b55d9b12b9c313fed51b4109539d41d6272a2f771a297f998703aa0aa3224c623413ea43a61104ea2b337d9ebb23f3fc3f85f459751874566cec19d00aaed26c1d3f494b63362d16a2c82b01c05d7f7e944a205210e538971988e85e2cd6d5a0ac45a43f52a48ca57bd8514e560ef2ba2e29910018bf7f74aa12609976dc5c63a277aa5e858", 0xcc, 0x0, 0x6)
close(r6)
syz_emit_ethernet(0x61, &(0x7f0000000000)="b6")
chroot(&(0x7f0000000600)='./file0\x00')
r7 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000640), 0xc)

16:00:09 executing program 1:
socketpair(0x1c, 0x4, 0x44, &(0x7f0000000000))
pipe(&(0x7f0000000040))
socket(0x40000000011, 0x3, 0x0)
nanosleep(&(0x7f0000000040)={0x8, 0x3}, 0x0)
r0 = kqueue()
kevent(r0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0)
kevent(r0, &(0x7f0000000000), 0x34, 0x0, 0xc68, 0x0)

16:00:09 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()

16:00:09 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)

16:00:09 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)

16:00:10 executing program 1:
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x100000041, 0x60f9, 0x99, "d9ad0f4ef126d1ab3d180dd051f133273edd70ef"})
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x64, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TIOCCONS(r4, 0x20004276, 0x0)
ioctl$TIOCMSET(r4, 0x40044266, &(0x7f0000000000))
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TIOCCONS(r6, 0x20004276, 0x0)
ioctl$TIOCMSET(r6, 0x40044266, &(0x7f0000000000))
r7 = accept$unix(r6, &(0x7f0000000400)=@abs, &(0x7f0000000440)=0x8)
write(r7, &(0x7f00000002c0)="91c25c3a6c51984b20540d693c2c1b969ffc80a4b091819a35c15a8424c240d70bfd212b625e9da4f61c16ef968297bb05b9b51cf5ae90be7f81017445c1ada172fb8ae1f2a7db1000c0986f7298ff7fe5b8a2a4d497600b62366a2cf745c686602fb5abc215e145888be735062b", 0xfffffffffffffe8f)
open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r8 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vmm\x00', 0x1, 0x0)
r9 = fcntl$dupfd(r3, 0xf, r8)
ioctl$TIOCCONS(r9, 0x20004276, 0x0)
ioctl$TIOCMSET(r9, 0x40044266, &(0x7f0000000000))
r10 = semget(0x3, 0x5, 0x1)
r11 = geteuid()
r12 = syz_open_pts()
close(r12)
ioctl$TIOCSETA(r12, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r12, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240))
r13 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r13, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r13, 0xffff, 0x1022, &(0x7f0000000040)={<r14=>0x0, <r15=>0x0, <r16=>0x0}, 0xc)
fchown(r12, 0x0, r16)
r17 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r16, r16, r16, r16, <r18=>r16, r16, r16, r16])
msgctl$IPC_SET(r17, 0x1, &(0x7f0000000380)={{0x401, r15, r16, r15, r18, 0x0, 0x10000}, 0x8, 0x6, r14, r14, 0x101, 0x2, 0x1000, 0x7})
r19 = getuid()
r20 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r20, 0x0, 0x64, 0x0, 0x0)
getsockopt$sock_cred(r20, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000100)=0xc)
semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000180)={{0x20, r11, r16, r19, r21, 0x169, 0x5}, 0x2, 0x18a700000000, 0x101})
ioctl$TIOCSPGRP(r9, 0x40047477, &(0x7f0000000000))

16:00:10 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r93 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000800)=""/170)

16:00:10 executing program 1:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc)
r1 = socket$inet(0x2, 0x3, 0x0)
r2 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x64, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0xfd53)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x153, 0x0}, 0x840)
setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000080)=0xcba, 0x4)

16:00:10 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
semget$private(0x0, 0x4, 0x1)

16:00:10 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x1, 0x0, 0x9, 0xefffffffffffffff], [0x0, 0x0, 0x401]}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x9e)
ioctl$VT_OPENQRY(r1, 0x40047601, &(0x7f0000000040))
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300))
socket(0x10, 0x4000, 0x81)

16:00:10 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)

16:00:10 executing program 1:
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0x69)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff})
r1 = semget$private(0x0, 0x6, 0x227)
r2 = socket$inet(0x2, 0x3, 0x102)
getsockname$inet(r2, 0x0, &(0x7f0000000240))
r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400, 0x60)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
ioctl$BIOCGRTIMEOUT(r3, 0x4010426e, &(0x7f0000000400))
semctl$GETNCNT(r1, 0x3, 0x3, &(0x7f00000000c0)=""/8)
ioctl$TIOCNOTTY(r0, 0x20007471)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
ioctl$TIOCSETA(r4, 0xc2d04220, &(0x7f0000000000)={0x0, 0x0, 0x40040000, 0x2000, "04713de0af28a2813d8209b8d9f39321849e3c99"})
ioctl$KDSETMODE(r4, 0x20004b0a, &(0x7f0000000300)=0x1)
syz_extract_tcp_res$synack(&(0x7f0000000380), 0x1, 0x0)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/wsmouse0\x00', 0x10, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)
semop(r1, &(0x7f0000000040)=[{0x1, 0x8, 0xac95d12287ad2dca}, {0x3, 0x2, 0x8000800}], 0x2)
semop(r1, &(0x7f0000000080)=[{0x3, 0x8, 0x1800}, {0x2, 0x6d, 0x1000}, {0x0, 0x800, 0x800}], 0x3)
fchdir(r2)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffb, 0x0)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r5 = open$dir(&(0x7f0000000440)='./file0\x00', 0x1, 0x0)
r6 = open$dir(&(0x7f0000001940)='./file0\x00', 0x8000, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)
ioctl$TIOCCONS(r3, 0x80047462, &(0x7f00000003c0)=0x2f54)
dup2(r5, r6)
r7 = semget$private(0x0, 0x4, 0x10)
semop(r7, &(0x7f0000000740)=[{0x2, 0x4ba6, 0x1800}, {0x0, 0x3, 0x1000}, {0x2, 0x4, 0x800}, {0x0, 0xffffffffffffffff, 0xc31b3780bccc3428}, {0x3, 0x1}, {0xa35432a02fc9178e, 0x8000, 0x1000}, {0x0, 0xfff, 0x800}], 0x7)
r8 = semget$private(0x0, 0x4, 0x645)
semop(r8, &(0x7f00000002c0), 0x2aaaaaaaaaaaab62)
semctl$GETALL(r7, 0x0, 0x6, &(0x7f0000000380)=""/156)
semop(r7, &(0x7f00000002c0)=[{0xe5ffe31050d12c34, 0xfe01, 0x1c00}, {0x0, 0x9ef, 0x800}, {0x0, 0x7ff, 0x3000}], 0x3)
ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000100)={'./bus\x00', 0x10000, 0xffffffff, 0x2c, 0x1, 0x5, 0x7fff, 0x1ff, 0x2, 0xe69c6a6ca0147c3e, 0x8003, 0x800000000000008})
openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8, 0x20)

16:00:10 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r92, 0x2, &(0x7f0000000040)=""/210)

16:00:10 executing program 1:
select(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0, 0x0, &(0x7f0000000080)={0x20})
getuid()
execve(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x64, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@in, 0xc, &(0x7f0000000440)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/239, 0xef}], 0x4, &(0x7f0000000480)=""/174, 0xae}, 0x840)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0)
ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000040))

16:00:10 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)
shmctl$IPC_SET(r92, 0x1, 0xffffffffffffffff)

16:00:10 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
r92 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r92, 0x0, 0x0)

16:00:10 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)

16:00:11 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x80}, {0x61}, {0x88fe}]})
syz_emit_ethernet(0xe, &(0x7f0000000200)="7a708d75c63c5ae792ec5039e4d0")
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/131, 0x83)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r68, &(0x7f0000001000/0x2000)=nil, 0x1000)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r69=>0x0}, 0xc)
r70 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r70, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r70, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r70, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r71 = getgid()
r72 = socket(0x800000018, 0x1, 0x0)
bind$unix(r72, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r72, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r73=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r74=>0xffffffffffffffff}, 0x14)
r75 = semget$private(0x0, 0x4, 0x2)
semop(r75, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r74, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r76=>0x0}, 0xc)
r77 = getegid()
r78 = getuid()
r79 = getegid()
semctl$IPC_SET(r75, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r76, r77, r78, r79, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r71, r73, r77, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
r80 = getgid()
r81 = getppid()
r82 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r83=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r83, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r84=>0x0, <r85=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r84, r85)
chown(&(0x7f0000000200)='./file0/file0\x00', r84, r85)
lchown(&(0x7f0000000780)='./file0\x00', r84, r85)
lchown(&(0x7f00000001c0)='./file0\x00', r84, r85)
r86 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r86, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r86, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r87=>0x0, <r88=>0x0}, &(0x7f0000001840)=0xb)
r89 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r90 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r90, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r91 = fcntl$getown(r90, 0x5)
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000200)={{0x3ff, r87, r88, r87, r88, 0x104, 0x5}, 0xfff, 0x9, r91, r91, 0x7d55, 0xd75, 0xfa})
shmctl$IPC_SET(r89, 0x1, &(0x7f0000000080)={{0x6, r84, r69, r73, r80, 0x1e6, 0x8}, 0x5, 0x5, r81, r82, 0xfffffffffffffe01, 0x9, 0x7ff})

16:00:11 executing program 1:
r0 = kqueue()
r1 = kqueue()
r2 = msgget$private(0x0, 0x8)
msgsnd(r2, &(0x7f00000002c0)=ANY=[], 0x0, 0x2000800)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x90)
r4 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000280), &(0x7f0000000300)=0xc)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x10004)
ioctl$VMM_IOC_WRITEREGS(r5, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0xfffffffffffffffd]}})
r6 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x64, 0x0, 0x0)
r7 = dup2(r4, r6)
ioctl$BIOCSETF(r7, 0x80104267, &(0x7f00000001c0)={0x0, &(0x7f0000000080)})
r8 = syz_open_pts()
r9 = dup(r8)
r10 = syz_open_pts()
ioctl$TIOCSETA(r10, 0x802c7414, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, "85495500020000000000001167f5bfa600"})
r11 = socket(0x2, 0x2, 0x0)
connect$unix(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e2f66696c653000fb31a299ca042e37f7b1ad6b3e910c411d6c6aa98d8851fa8a0f45ca76011b873ce0fbd6a900000041cbc3cf740e8a70530000000000002452000000000000010000000098490d077aaf9544666aa81d54b9f85142108e989d7e3b3bb2c0459f6ab0a6da6040"], 0x10)
sendmsg$unix(r11, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@rights={0x14, 0x7}, @cred={0xaa0014ac}], 0x18}, 0x0)
r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0)
ioctl$BIOCSETIF(r12, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETWF(r12, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f00000004c0)=[{0x34, 0x0, 0x0, 0x1711}, {0x1028, 0x0, 0x2, 0x1e6e}, {0x6, 0x0, 0x0, 0x100}]})
pwrite(r12, &(0x7f0000000040)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0)
r13 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in, &(0x7f0000000580)=0xc)
poll(&(0x7f00000005c0)=[{r9, 0x4}, {}, {r1, 0x2}, {r13, 0x5b}], 0x4, 0x0)
r14 = accept$unix(r11, &(0x7f0000001200)=@abs, &(0x7f0000001240)=0x8)
kevent(r0, &(0x7f0000000140), 0x7, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffff9, 0x6, 0x40, 0x5, 0x3}, {{r1}, 0xfffffffffffffffd, 0x20, 0x0, 0xfffffffffffffc00, 0x8000}, {{r3}, 0xffffffffffffffff, 0x20, 0x8, 0x0, 0x7}, {{r14}, 0xfffffffffffffff9, 0xc, 0x2, 0x0, 0x5}, {{r10}, 0xfffffffffffffffe, 0x84, 0x2, 0x4, 0x2}], 0x2, &(0x7f0000000e00)={0x8, 0x5})
poll(&(0x7f0000000080), 0x0, 0x6)
r15 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
r16 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0)
ioctl$BIOCSETIF(r16, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETWF(r16, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0x1711}, {0x28}, {0x6, 0x0, 0x0, 0x100}]})
pwrite(r16, &(0x7f0000000040)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0)
msgsnd(r2, &(0x7f0000000680)=ANY=[@ANYRES16=r16], 0x1, 0x800)
getegid()
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r17=>0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r17)
setgroups(0x0, 0x0)
setuid(0xee01)
shmat(r15, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
msgsnd(r2, &(0x7f0000001080)=ANY=[], 0x0, 0x0)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r82, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r83=>0x0, <r84=>0x0}, &(0x7f0000001840)=0xb)
r85 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r86 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r86, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r87 = fcntl$getown(r86, 0x5)
shmctl$IPC_SET(r85, 0x1, &(0x7f0000000200)={{0x3ff, r83, r84, r83, r84, 0x104, 0x5}, 0xfff, 0x9, r87, r87, 0x7d55, 0xd75, 0xfa})

16:00:11 executing program 1:
r0 = semget$private(0x0, 0x6, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = socket(0x18, 0x3, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000600)={<r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f0000000480)={0x0, 0xfffffffffffffe28, 0x0, 0xfffffe5c, 0x0, 0xfffffffffffffd59}, 0x0)
getsockopt(r1, 0xfffb, 0x7fffffff, 0x0, 0x0)
r5 = fcntl$dupfd(r1, 0xa, r1)
dup(r1)
ioctl$TIOCSFLAGS(r5, 0x8004745c, &(0x7f00000003c0)=0xfffffffffffffffe)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000400), 0x9f)
semop(r0, &(0x7f00000002c0)=[{0x8, 0x8, 0x1000000}, {0x4, 0xfffffffffffffffd, 0x1800}, {0x2000000003, 0xfe, 0x1800}], 0x3)
link(&(0x7f0000000280)='./bus\x00', &(0x7f0000000500)='./bus\x00')
mknod(&(0x7f0000000340)='./bus\x00', 0x8000800080002002, 0x80000003)
r6 = semget$private(0x0, 0x3, 0x10)
semop(r0, &(0x7f0000000000)=[{0x2, 0x719, 0x1800}, {0x4, 0x8001, 0x17fe}], 0x2)
flock(r1, 0x8)
r7 = open(&(0x7f0000000100)='./bus\x00', 0x80, 0x100)
r8 = kqueue()
kevent(r8, &(0x7f0000000080), 0x5, 0x0, 0x65ab, &(0x7f0000001340))
r9 = kqueue()
kevent(r9, &(0x7f0000000080), 0x5, 0x0, 0x65ab, &(0x7f0000001340))
dup2(r8, r9)
pipe(&(0x7f00000004c0))
r10 = open(&(0x7f0000000000)='./bus\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r10, 0x80085761, &(0x7f0000000140)={0x1})
ioctl$WSDISPLAYIO_LSFONT(r5, 0xc058574e, &(0x7f0000000780))
ioctl$TIOCMSET(r7, 0x8004746d, &(0x7f0000000200)=0x200ffffffbf)
getsockname$inet6(r1, &(0x7f0000000a00), &(0x7f0000000140)=0xc)
ioctl$TIOCGETD(0xffffffffffffffff, 0x4004741a, &(0x7f0000000380))
ioctl$TIOCGETA(r7, 0x402c7413, &(0x7f00000001c0))
socket$inet(0x2, 0x4db3e35c97f87d34, 0x2)
dup(r7)
rmdir(&(0x7f0000000080)='./bus\x00')
semop(r0, &(0x7f0000000240)=[{0x1, 0x6, 0x800}, {0x0, 0x40, 0x1800}, {0x0, 0x3, 0x7fc}, {0x3, 0x7, 0x1000}, {0x3, 0x68, 0x1000}, {0x3, 0xfffffffffffffffc, 0x1800}, {0x1, 0xfffffffffffffff8, 0x1000}, {0x2, 0xad, 0x1000}], 0x8)
semop(r6, &(0x7f0000000180)=[{0x2, 0x0, 0x1800}, {0x4, 0x4}, {0x4, 0x3484937a, 0x800}], 0x3)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000b80)=[{&(0x7f0000000a80)="1b68be7470a45e4d13f25de9d02d0030dc4e990e4103f79293569112383477a80900000000000000f52aae73fe0fbdabaee35ae97d56a478b55157203ab77ce6b77e42143d2f5809aa7c4e73d031608fa689b4c5bf2e9fbb9de782769e40337d79c86af519a35d506ba5c90606e310527f4e88b1469015300c3e456eda483ab4a0ba406a103eec5e34afd76e82b8a0eb1c54534eb2cb3c08037b4295d3e183a9c784bf1e2d7af4cb886b03fc229a9427af5141e2599197976589a749bf5d91b5756465c4c10b6aed277ed84edc36e419c995d829a0f34f", 0xd7}], 0x1, 0x0, 0x0, 0x4}, 0x3ff)
accept$inet(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000300)=0xc)
mknodat(r5, &(0x7f0000000440)='./bus\x00', 0x40, 0xb28)
socketpair(0x2, 0x2, 0x9, &(0x7f0000000040))
r11 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r11, 0x0, 0x200000000000c, &(0x7f00000002c0)="eaff000000000000", 0x8)
setsockopt$inet_opts(r11, 0x0, 0x200000000000c, &(0x7f0000000080)="eaff125c00000000", 0x8)
setsockopt$inet_opts(r11, 0x0, 0x200000000000d, &(0x7f00000000c0)="eaff12ff7f000001", 0x8)
r12 = dup2(r11, 0xffffffffffffffff)
semop(r0, &(0x7f0000000240), 0x6)
ioctl$TIOCGFLAGS(r12, 0x4004745d, &(0x7f00000006c0))

16:00:11 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x84}, {0x4d}, {0x6}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000140)="c4d46c0a81d12e00d77e4dbeb6d4")

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r82, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000001840)=0xb)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r83 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r83, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
fcntl$getown(r83, 0x5)

16:00:11 executing program 1:
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0)
r1 = kqueue()
kqueue()
kevent(r1, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffc, 0xffffffffffffffff}], 0x7ff, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000400)=[{{}, 0x0, 0x2b}], 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000001700)='./file0\x00', 0x400000002, 0x0)
pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r82, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000001840)=0xb)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
r83 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)
ioctl$BIOCSETIF(r83, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})

16:00:11 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0)
lseek(r0, 0x0, 0x0, 0x4)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x100, 0x0)
ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f00000000c0))
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x44}, {0x30}, {0x800000000000006, 0x0, 0x0, 0xda4}]})
pwrite(r0, &(0x7f0000000280)="d000"/14, 0xe, 0x0, 0x0)

16:00:11 executing program 1:
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/\x00\x00\x00\x00use0\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0xa72aea0712ea0959)
chflags(&(0x7f00000001c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2d53b6584dddbb69)
chdir(&(0x7f0000000280)='./file0/file0\x00')
setuid(0xee01)
unveil(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000100)='\x00P')
r1 = shmget$private(0x0, 0x3000, 0x819, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r1, 0x0, 0x0)
shmctl$IPC_SET(r1, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/210)
r2 = getuid()
getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, <r3=>0xffffffffffffffff])
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, <r4=>0x0}, &(0x7f00000002c0)=0xc)
r5 = getegid()
r6 = syz_open_pts()
close(r6)
ioctl$TIOCSETA(r6, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r6, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, 0xc)
fchown(r6, 0x0, r10)
r11 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r10, r10, r10, r10, <r12=>r10, r10, r10, r10])
msgctl$IPC_SET(r11, 0x1, &(0x7f0000000380)={{0x401, r9, r10, r9, r12, 0x0, 0x10000}, 0x8, 0x6, r8, r8, 0x101, 0x2, 0x1000, 0x7})
r13 = syz_open_pts()
close(r13)
ioctl$TIOCSETA(r13, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r13, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r14, 0xffff, 0x1022, &(0x7f0000000040)={<r15=>0x0, <r16=>0x0, <r17=>0x0}, 0xc)
fchown(r13, 0x0, r17)
r18 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r17, r17, r17, r17, <r19=>r17, r17, r17, r17])
msgctl$IPC_SET(r18, 0x1, &(0x7f0000000380)={{0x401, r16, r17, r16, r19, 0x0, 0x10000}, 0x8, 0x6, r15, r15, 0x101, 0x2, 0x1000, 0x7})
r20 = getpgid(r15)
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x4, r2, r3, r4, r5, 0x0, 0x2}, 0x2e9, 0x8000, r8, r20, 0x0, 0x8001, 0xff})
symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file1\x00')
fchdir(r0)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='rc')

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r82, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000001840)=0xb)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8, 0x0)

16:00:11 executing program 1:
r0 = socket(0x2, 0x4003, 0x0)
write(0xffffffffffffff9c, &(0x7f0000000700)="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", 0x1000)
setsockopt(r0, 0x0, 0x7, &(0x7f0000000140)="01003f8a", 0x4)
r1 = socket(0x2, 0x3, 0x0)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$TIOCCONS(r4, 0x20004276, 0x0)
ioctl$TIOCMSET(r4, 0x40044266, &(0x7f0000000000))
connect$unix(r4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1)
setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000040)=0x2, 0x4)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10)
writev(r1, &(0x7f0000000000)=[{0x0}], 0x1)
recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0)
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$TIOCCONS(r7, 0x20004276, 0x0)
ioctl$TIOCMSET(r7, 0x40044266, &(0x7f0000000000))
ioctl$TIOCFLUSH(r7, 0x80047410, &(0x7f00000006c0)=0x10000)
acct(&(0x7f0000000100)='./file0\x00')
r8 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TIOCCONS(r8, 0x20004276, 0x0)
r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$TIOCCONS(r10, 0x20004276, 0x0)
ioctl$TIOCMSET(r10, 0x40044266, &(0x7f0000000000))
ioctl$TIOCMSET(r10, 0x40044266, &(0x7f0000000000))
ioctl$BIOCGDIRFILT(r8, 0x4004427c, &(0x7f0000000080))

16:00:11 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005})
msgsnd(0xffffffffffffffff, &(0x7f0000000080)={0x2, "43c4f3d3824cd70132b8b1b849891c1a4a148da2d29e3cec51eae140759889da7081529d9698134f2778ea1a077706d592896caa0aa539875c54fe99af0ab5993fb2dd4da8e19fce912cf7122937bba169b8740c360c15a1194ba4888f94a6d2e9d0ec3c6dfd193dabedee9dd430d0959cc746e7bc59b7bde65d3681998bf034512c5377f9aeb4eb0825387c2e073b"}, 0x97, 0x800)

16:00:11 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x2, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x45}, {0x3}, {0x6}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000d00)="40c551571115b12ff78d5aee258c")
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x166)
connect$unix(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="cff06ff01f0658c2aa0100d12d10dc2b5b15a03c9d1531a36233c3ab75774f54ff43093c1eb9aeefddd0c2568ae4165b03a5ce1f2384b1978c1f96892eacfe70e9bdaf324a3fdf9ce51b233deea578979aea735d72"], 0xa)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r82, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000001840)=0xb)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:11 executing program 1:
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/wsmouse0\x00', 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000140)=[{0x23}], 0x1})
r1 = socket$inet(0x2, 0x3, 0x0)
r2 = semget$private(0x0, 0x4, 0x10)
semop(r2, &(0x7f0000000740)=[{0x2, 0x4ba6, 0x1800}, {0x0, 0x3, 0x1000}, {0x2, 0x4, 0x800}, {0x0, 0xffffffffffffffff, 0xc31b3780bccc3428}, {0x3, 0x1}, {0xa35432a02fc9178e, 0x8000, 0x1000}, {0x0, 0xfff, 0x800}], 0x7)
r3 = semget$private(0x0, 0x0, 0x488)
semop(r3, &(0x7f0000000300), 0x2aaaaaaaaaaaad0d)
semctl$GETALL(r2, 0x0, 0x6, &(0x7f0000000380)=""/156)
semctl$GETPID(r2, 0x1, 0x4, &(0x7f0000000240)=""/5)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000000)=""/159, 0x9f, 0x800, &(0x7f00000000c0)={0x2, 0x2}, 0xc)
r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty\x00', 0x2, 0x0)
ioctl$TIOCOUTQ(r4, 0x40047473, &(0x7f0000000200)=0x694)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r82, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
getsockopt$sock_cred(r82, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:11 executing program 1:
stat(&(0x7f00000000c0)='\x00', &(0x7f0000000140))
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x48}, {0x20000004d}, {0x4006}]})
syz_emit_ethernet(0x35c, &(0x7f0000000000)="b6")

16:00:11 executing program 1:
r0 = syz_open_pts()
fcntl$setstatus(r0, 0x4, 0xc0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffc, 0x0, "85495500020000000000001167f5bfa600"})
syz_open_pts()
poll(&(0x7f0000000040)=[{r0, 0x21}], 0x1, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "f145a1eead8f8e373832454da4f1734cf8f499ea"})
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
r2 = syz_open_pts()
close(r2)
ioctl$TIOCSETA(r2, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0, <r6=>0x0}, 0xc)
fchown(r2, 0x0, r6)
r7 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r6, r6, r6, r6, <r8=>r6, r6, r6, r6])
msgctl$IPC_SET(r7, 0x1, &(0x7f0000000380)={{0x401, r5, r6, r5, r8, 0x0, 0x10000}, 0x8, 0x6, r4, r4, 0x101, 0x2, 0x1000, 0x7})
r9 = syz_open_pts()
close(r9)
ioctl$TIOCSETA(r9, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r9, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f0000000040)={<r11=>0x0, <r12=>0x0, <r13=>0x0}, 0xc)
fchown(r9, 0x0, r13)
r14 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r13, r13, r13, r13, <r15=>r13, r13, r13, r13])
msgctl$IPC_SET(r14, 0x1, &(0x7f0000000380)={{0x401, r12, r13, r12, r15, 0x0, 0x10000}, 0x8, 0x6, r11, r11, 0x101, 0x2, 0x1000, 0x7})
r16 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r16, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r16, 0xffff, 0x1022, &(0x7f0000000100), 0xc)
r17 = getgid()
r18 = syz_open_pts()
close(r18)
ioctl$TIOCSETA(r18, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r18, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r19=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r19, 0xffff, 0x1022, &(0x7f0000000040)={<r20=>0x0, <r21=>0x0, <r22=>0x0}, 0xc)
fchown(r18, 0x0, r22)
r23 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r22, r22, r22, r22, <r24=>r22, r22, r22, r22])
msgctl$IPC_SET(r23, 0x1, &(0x7f0000000380)={{0x401, r21, r22, r21, r24, 0x0, 0x10000}, 0x8, 0x6, r20, r20, 0x101, 0x2, 0x1000, 0x7})
r25 = syz_open_pts()
close(r25)
ioctl$TIOCSETA(r25, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r25, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r26=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r26, 0xffff, 0x1022, &(0x7f0000000040)={<r27=>0x0, <r28=>0x0, <r29=>0x0}, 0xc)
fchown(r25, 0x0, r29)
r30 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r29, r29, r29, r29, <r31=>r29, r29, r29, r29])
msgctl$IPC_SET(r30, 0x1, &(0x7f0000000380)={{0x401, r28, r29, r28, r31, 0x0, 0x10000}, 0x8, 0x6, r27, r27, 0x101, 0x2, 0x1000, 0x7})
r32 = syz_open_pts()
close(r32)
ioctl$TIOCSETA(r32, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r32, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r33, 0xffff, 0x1022, &(0x7f0000000040)={<r34=>0x0, <r35=>0x0, <r36=>0x0}, 0xc)
fchown(r32, 0x0, r36)
r37 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r36, r36, r36, r36, <r38=>r36, r36, r36, r36])
msgctl$IPC_SET(r37, 0x1, &(0x7f0000000380)={{0x401, r35, r36, r35, r38, 0x0, 0x10000}, 0x8, 0x6, r34, r34, 0x101, 0x2, 0x1000, 0x7})
getgroups(0x6, &(0x7f0000000180)=[0xffffffffffffffff, r29, r36, 0xffffffffffffffff, 0x0, <r39=>0xffffffffffffffff])
r40 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r40, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r40, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, <r41=>0x0}, 0xc)
r42 = getgid()
getgroups(0x9, &(0x7f0000000200)=[r1, r6, r13, r42, 0x0, r17, r22, r39, r41])

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
setsockopt$sock_int(r82, 0xffff, 0x10000000001002, &(0x7f0000000200), 0x66)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
r82 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r82, 0xffff, 0x1004, &(0x7f0000000180)=0x7, 0x4)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
socket$inet(0x2, 0x2, 0x0)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:11 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCPROMISC(r0, 0x20004269)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x7f8, &(0x7f0000000140)=[{0x40}, {0x48}, {0x4006}]})
syz_emit_ethernet(0xe, &(0x7f0000000000)="09001fc92479ff2b783f6e8a9c81")

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
lchown(&(0x7f00000001c0)='./file0\x00', r80, r81)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:11 executing program 1:
mknod(&(0x7f0000000000)='./bus\x00', 0x80002005, 0x42ff)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
fcntl$dupfd(r0, 0xa, r1)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fcntl$dupfd(r2, 0x0, r2)
openat(r2, &(0x7f0000000040)='./bus\x00', 0x8, 0x1a2)
r3 = socket$inet(0x2, 0x3, 0x6)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x40)
sendmsg(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="02bcfdc02c7820f63cf09304efcac791eaf07a8366b197b999895cd33e51fbdad49aad5384d6b028cbc382a4e739fefa0867742531700d6766cce031b33cfd232e2cccb5c55fa2b6241a27b0a1a20f8b8eb39d02ed61ee8d481bc7659befeb1b68d1c28312b96512f26ec3498e9fc36f8f2aa52a39f19b9d3f3ebe210b05eb5f5f3e78c877", 0x85}], 0x1, &(0x7f0000000340)=[{0x100, 0x1, 0x5, "a632601f961cab74ea03e1df6685c77dce1183125f5a93aaf5f04e33708ee0810d5cdb4a8cbc15ff3cd5482f54f2f21b687be5cfed60fa69aa965cc4a66c0b578d2a631e10943d736cc8d65812cda37a5405db00a08ced7d5f189360f575a9eee34cb57b5166d548ff07b9bdc6c3d86e1a9d5e602e40c7fe9a37fc16160755f52f14503a9f831d643b0be864eab9f8ff45d9ac9e3a6d886aa4dde0d48a28eb25af604869302dd717213ecfa495433171ce7d51dc9e6c5ace528e64866e817734dc8397442fb22187c3d27c8025772e23dcbbad4bdd7a1cebb73bf57bdfd94f134b74a71451f832b80cb19df913"}, {0xd8, 0x1, 0xfffffffb, "099db0a736ba098ae0c46bc03b35f800cc8377ce37a014b6a66f6d81b7e5cc2aaaa56b79b818c0b403bdc6c7cd4c4cfe8645009729f766333afd5d6432b6bf040f73d528bea72a831981f792d846acb7d9f2adad4cf08a8daa421208db03d2085b37bc1a06d1177df2bc058375a8054e89796067a634a638d5491d120dc37cc7a564d722756f33038ed3f6427993cccb2fed33a353b914640b1082c8a57259f355d10870474cb43aa6ebfc28f0d98d8d10ac9e2c94ba4c9ee33c28c1912034700811911f30c00a"}, {0x10, 0x1, 0x7}, {0x100, 0x1, 0xfdf, "111bc8c24648b7611f9d5f225ee39713a6478b794677b9aee9c09ef87dc579c4f63bb099d7f70e6efbeaae803dc3647b49a83b50eca45ae836579589ca62f25913287d251addc32ec753a95dce6f452ee8f110405a64d380927786d0802ddf3fbbc1cfd3a05a998791d964374effcff6fdc3307edb131e0768fbe1f8af49e7b1f59583bc02ac98de30c00a62a9248778bd0c3d1623a0cd4ee68f76ce65dd0953fa3ed7acd1f587b6b395b094a9cf23c3b89cee942b14678b9b7f73a3e3a274fd77628bb1da105e10a28f6f2f925ce3e6c5bb2c2a1a3debc7093f82ec9db4de56eca6a30d93a23ea930ea99b87a28"}, {0x40, 0x1, 0x8, "24bf6e97a840b4c143cccc671f12ede9b24883d74e94828a291d032cacff40b6a6f949fe5dcb6b01b884285f036e62"}, {0x20, 0x1, 0xfff, "552e1b297f3c793b8b1fa9"}, {0xf0, 0xffff, 0x1674, "b87c84791ce6a4fd4a910ce60b8301f43a498c30e523e68b2034b3e6cb061f9b21795f984b6c5fc9e706ee0f10e0a51b34627c97009a73d7b5951da9e72d66a234e442e87d790c51f3a2c04e85a02e8b198ff1b1226277b6ce3b608252a3563e9cb12908da403f6ed6c85bbaf0b0f315c6608e27d22c711653d23feaa41c76067b294f2bd6691038fdca9aecbae5a1770a962feb42fc784631ec5569bac545056245ba2de065060ab4c848777e7907abc63ea42d0e984ee444c7160cbdf7b5b0103c0d80f031ff6fbad82651f5c3ca4b7dc1ed75dffa267473"}, {0x70, 0xffff, 0x1, "f911652354f4beba00c39a73cb9949e00d99f7c62a85ee254b8e73f33b78e253b2031ee11659b3f04fc16269fe3ede6a9695e4a8ea4501f22b836ba65fd7d15c3378719d2d03dae29da76aff9d609a3d56d3fb0536c1f574ea"}], 0x4a8}, 0x4)
recvfrom(r3, &(0x7f0000000180)=""/251, 0xfb, 0x0, &(0x7f0000000080)=@in={0x2, 0x0}, 0xc)

16:00:11 executing program 1:
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}})
r0 = socket(0x18, 0x1, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
msgget(0x0, 0x4c0)
close(r0)
r1 = socket(0x18, 0x3, 0x8)
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x800000000029, 0x28, &(0x7f0000000080)="d5ff9668", 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0x18, 0x3, 0x2}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000100)="c96f50ed9355e7411496568cea03ab4c2971daa8e68615255062db44c1592612e596a9cbadc5474a9c920eecf87f139be6fe3a3cf93094aae26c98b56cb712d8003b7efb0d2e0db17be9015dcafd2d7af8ab52b28b319a9853853985e27ce3da7f19e9c9e164f25ca860a7b3300b2440b15fc1bdbadf7e9226cd8d459fb572b6f73367eaea5d53edf300b214855bc61e0e8e1e490bfd0a9c7c2da3977fcf850029469ca398443ab792c06894b4991155e986b89924cd6a032b43d215b7a0d0a19b65b93fe7b0732848fe2b238ade513351eb74b163344b818cfdccab9e4bfdaa", 0xe0}, {&(0x7f0000000200)="430cef5670ad8aa05a3cb4f7e9b93b9ddb0ca3223846888fa3fd8abec306ce8987f918749550cb143c512873fbe7b87e61cd39711ca4912d57275ddb60e2461ac1d54c284a0a924b58beceab1ab4a5e42e6bdc5161da8d44314f6f35e2d647818de04f6e305c0c7472f5ac26e9a15cf56fac0044d4120911d3893c13804d3796f7ce023716c2a2b010eef2b5e1a41a06a4ae82dcfdf2d84ce9b0a852552c", 0x9e}, {&(0x7f00000002c0)="8300e4e0d8e1fb6daba6c0277f3faae564f208192b982ec1add43f0ae6249adb41c0ad1bd88aad94c87f3e40d94f9891676290b8798035488eda0d854e9e01152c1a3f593a843ce47adaf5c55f56667dda5a7c0c71290cc41a5109d622773703245770c463e0b0cfc98062575dbde860a676ee944e1820363fe49f", 0x7b}, {&(0x7f0000000340)="662146b203fa0aa3bb07149bb7c29de86b30f1f8b5d5308d21e738565f35f05ba378212f1c50b582576d9212bd5770609a1b3d8d7d2d7148e85b535cf5dad1842e875c69d94cbf9767e764f3425085913a7b665426daac4df03d1c0a8cef59f14989c59441586a6896fbd735893df227df7c7de42887789de7726a14049a774de5b36af6cd789001c54468c44439546742c1ab17aac74c71966725be7ec062fe3bb71472a484022df6f8beda", 0xac}, {&(0x7f0000000400)="38d6260ddc5900a0120f8f10ab59be59c31879f65abe391820346654b31bbee40f5bbcf4aaad6627c8cadb9aed91ecf8c64151da2d48700c233e9120e06f176540c042002ff3edf106772f9f4f808c9dfa6180a4e02e8054b7acd5cf513989c3a3468beeb0b62f3eddb872a7e53c5328572853e16520fed45bb0acc68a8ab021650d07ac6cb0a94e812ef6b990bd8af00fa3a70a94fd2ab711a324104b46ae156e603a2b7fa11fd44e3a657223b6481e0e193494dbe9", 0xb6}], 0x5, &(0x7f0000000540)=[{0x68, 0xffff, 0x2, "17c236b0e6ea97c0bd59b2966b830de8b5c9a62e321ac4f6a540152eb9405b7c518fbb57a705d43315b49ea61a80d6f522111a4807d3c0e38c134ba71f1c586ee7b85846b68e13018034d15b9c704d30a52844"}, {0x70, 0x1, 0xffff, "68c7fcd258b1116509e40fa60947c5ad8bdfbcd98b8547223676815a14112ca3aca644e34674093be4eb6660eb563cff1c0202ae4acb779f9a40aede8f5adb368bc9e23598a70189ff3bafdcd68827c5b872a52e0af1b47bc1334d9caa9ba9"}, {0x10, 0xffff, 0x3ff}], 0xe8}, 0x400)
write(r1, 0x0, 0x0)

16:00:11 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
lchown(&(0x7f0000000780)='./file0\x00', r80, r81)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:11 executing program 1:
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x800, 0x122)
ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0xfcfc96ac7f7875ae, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0, 0x0)
nanosleep(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f0000000100)="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", 0x801, 0x0, 0x0, 0x0)
poll(&(0x7f0000000940)=[{r1, 0x1a5}], 0x1, 0x0)
recvmsg(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
chown(&(0x7f0000000200)='./file0/file0\x00', r80, r81)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x86138)
kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0x0, 0x0, 0x2, 0x0, 0x2000110000000000}], 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)="510fc3a0", 0x4)
chdir(&(0x7f00000000c0)='./bus\x00')
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)

16:00:12 executing program 1:
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
read(r0, &(0x7f0000000500)=""/90, 0xffffff91)
fcntl$setstatus(r0, 0x4, 0xc8)
r2 = getpgid(0x0)
fcntl$setown(r0, 0x6, r2)
dup2(r1, r0)
execve(0x0, 0x0, 0x0)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyCcfg\x00', 0x10000, 0x0)
ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f00000000c0)={'./file0\x00', 0x80000000, 0xffffff79, 0x0, 0x1, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0xd7ae, 0x7})

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r80=>0x0, <r81=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r80, r81)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="3f338e"], 0x1)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}})
r0 = socket(0x18, 0x1, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
close(r0)
r1 = socket(0x18, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r1, &(0x7f0000000100)="8c65", 0x6d2)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r79=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r79, 0xffff, 0x1022, &(0x7f00000003c0), 0xc)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETA(r0, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, 0xc)
fchown(r0, 0x0, r5)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000080)={0xa0, 0x1, 0x4, 0x6270, 0xfa}, 0xc)
r6 = msgget$private(0x0, 0x300)
ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f00000000c0)=0x5)
getgroups(0x8, &(0x7f0000000340)=[r5, r5, r5, r5, <r7=>r5, r5, r5, r5])
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000380)={{0x401, r4, r5, r4, r7, 0x0, 0x10000}, 0x8, 0x6, r3, r3, 0x101, 0x2, 0x1000, 0x7})
r8 = syz_open_pts()
close(r8)
ioctl$TIOCSETA(r8, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r8, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f0000000040)={<r10=>0x0, <r11=>0x0, <r12=>0x0}, 0xc)
fchown(r8, 0x0, r12)
r13 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r12, r12, r12, r12, <r14=>r12, r12, r12, r12])
msgctl$IPC_SET(r13, 0x1, &(0x7f0000000380)={{0x401, r11, r12, r11, r14, 0x0, 0x10000}, 0x8, 0x6, r10, r10, 0x101, 0x2, 0x1000, 0x7})
setreuid(r4, r11)
r15 = socket(0x11, 0x3, 0x0)
sendto$unix(r15, &(0x7f0000000000)="0500050460", 0x5, 0x0, 0x0, 0x0)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
fcntl$getown(0xffffffffffffffff, 0x5)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000080)={0x6, 0x80})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x61}, {0xc, 0x0, 0x0, 0x8000}, {0x10000000000006, 0x0, 0x0, 0x7cb}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TIOCCONS(r4, 0x20004276, 0x0)
ioctl$TIOCMSET(r4, 0x40044266, &(0x7f0000000000))
ioctl$BIOCGSTATS(r4, 0x4008426f, &(0x7f00000000c0))
pwrite(r0, &(0x7f0000000100)="b1e95f0413a90000000000000000", 0xe, 0x0, 0x0)

16:00:12 executing program 1:
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x40004004000028a7)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000100))
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TIOCCONS(r4, 0x20004276, 0x0)
ioctl$TIOCMSET(r4, 0x40044266, &(0x7f0000000000))
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0}, 0xc)
getpid()
ioctl$TIOCFLUSH(r4, 0x80047410, &(0x7f0000000200)=0x3)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffb, 0x11, 0x1, 0xfffffffffffffc01, 0x9}], 0x10000, &(0x7f0000000180)=[{{r2}, 0xfffffffffffffff8, 0x7, 0x20000000, 0x97d4, 0x4}], 0x10000005, &(0x7f00000001c0)={0x7e, 0xfffffffffffffffb})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="000000186004008b00002327000000000000000000050000003f0000000000000300000001002300b5000059", 0x2c}], 0x1)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x28}, {0xc}, {0x6}]})
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0xc014575e, &(0x7f0000000180)={0x0, './file0\x00'})
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000)='/dev/speaker\x00', 0x0, 0x0)
ioctl$SPKRTONE(r3, 0x80085301, &(0x7f0000000080))
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
syz_emit_ethernet(0x50, &(0x7f0000000340)='\b')

16:00:12 executing program 1:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x181}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_pts()
close(r1)
ioctl$TIOCSETA(r1, 0x80047466, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"})
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, 0xc)
fchown(r1, 0x0, r5)
r6 = msgget$private(0x0, 0x300)
getgroups(0x8, &(0x7f0000000340)=[r5, r5, r5, r5, <r7=>r5, r5, r5, r5])
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000380)={{0x401, r4, r5, r4, r7, 0x0, 0x10000}, 0x8, 0x6, r3, r3, 0x101, 0x2, 0x1000, 0x7})
r8 = getgid()
r9 = dup(0xffffffffffffff9c)
ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f0000000100)={0xffc00000, 0x5, 0x20, 0x4, "89cf2a307fbcfbeeeefec266d2de28707285fad2", 0x7c, 0x80})
fchown(r0, r4, r8)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
rmdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
getgid()
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCCONS(r1, 0x20004276, 0x0)
ioctl$TIOCMSET(r1, 0x40044266, &(0x7f0000000000))
ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000280)=0x8001)
open$dir(&(0x7f0000000000)='./bus\x00', 0x20, 0x80)
utimensat(r0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)={{0x5, 0x10000}, {0xfffffffffffff37e, 0x2}}, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f00000002c0))
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x5dd9)
open(&(0x7f0000000200)='./file0\x00', 0x611, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x5, 0x0, 0x6, 0x7}]})
r3 = getpid()
ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r3)
r4 = socket(0x11, 0x4003, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000140)=@in6, 0xc, 0x0, 0x0, 0x0}, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x15)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r70 = getgid()
r71 = socket(0x800000018, 0x1, 0x0)
bind$unix(r71, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r72=>0x0}, 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r73=>0xffffffffffffffff}, 0x14)
r74 = semget$private(0x0, 0x4, 0x2)
semop(r74, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r73, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r75=>0x0}, 0xc)
r76 = getegid()
r77 = getuid()
r78 = getegid()
semctl$IPC_SET(r74, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r75, r76, r77, r78, 0x14, 0x6}, 0x5, 0x9, 0x101})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r70, r72, r76, 0x1f1, 0x9}, 0x8, 0x1, 0x9})
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r71=>0xffffffffffffffff}, 0x14)
r72 = semget$private(0x0, 0x4, 0x2)
semop(r72, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r73=>0x0}, 0xc)
r74 = getegid()
r75 = getuid()
r76 = getegid()
semctl$IPC_SET(r72, 0x0, 0x1, &(0x7f0000000340)={{0xbbfd, r73, r74, r75, r76, 0x14, 0x6}, 0x5, 0x9, 0x101})
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffffff, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x5ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001})
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x400000002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="02", 0x1)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}})
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(r1)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r1, &(0x7f0000000140)="ad18f05de2f4ef18", 0x70)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r71=>0xffffffffffffffff}, 0x14)
r72 = semget$private(0x0, 0x4, 0x2)
semop(r72, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f0000000400), 0xc)
getegid()
getuid()
getegid()
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
getpeername$unix(r2, &(0x7f0000000180)=@file={0x0, ""/108}, &(0x7f0000000040)=0x6e)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x7}, {0x74}, {0x6}]})
syz_emit_ethernet(0xe, &(0x7f0000000140)="03670000ce83802bd9a55b03144e")

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r71=>0xffffffffffffffff}, 0x14)
r72 = semget$private(0x0, 0x4, 0x2)
semop(r72, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f0000000400), 0xc)
getegid()
getuid()
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, "01000000000000001982a27b0b472db000"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x18, 0x1, 0x0)
r0 = socket$inet(0x2, 0x3, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x6)
ioctl$TIOCSCTTY(r1, 0x20007461)
setsockopt$inet_opts(r0, 0x0, 0x64, 0x0, 0x0)
setsockopt(r0, 0x29, 0x400c, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

16:00:12 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x13)
read(r0, &(0x7f0000001740)=""/4096, 0x1000)
preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0)
fcntl$setstatus(r3, 0x4, 0x80)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/90, 0x5a}], 0x1)
pwritev(r3, &(0x7f00000003c0), 0x273, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x64, 0x0, 0x0)
r5 = socket(0x0, 0x4000, 0x3f)
r6 = dup(0xffffffffffffff9c)
setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000240)="02db494d42ffe9226e8ca53f5f9b76dfec84d636233103c23ecd85598ca86db051ee9a443cca9ca51ab4c2866e530bd58478d91bf3068130d0faef4dbcded5712fbed6f82608f274150fe8f356cc55eeb2ef8eda7f1a069273565f46d5fc810e8f06e1ea92579c4f34003d034d8b776f5534d6942ee1c2f0b61a2b9a2ad9246e3c01d1faea01ca7f971313c16822fd44fa85881d4ea31a276513bbb73b7f97f3181487fe9d3532687185094c0d8bc17c553688c84fe447f62da3594ef84ca2f43b6121f96500c34d656da995e4123415b2b67b770bb53939ed75083718d69fdf46", 0xe1)
fcntl$dupfd(r4, 0xa, r5)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0, 0x0)
pipe(&(0x7f0000000200))
pipe(&(0x7f0000000080))
write(r1, &(0x7f0000000100)='w', 0x1)
close(r1)
execve(0x0, 0x0, 0x0)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r71=>0xffffffffffffffff}, 0x14)
r72 = semget$private(0x0, 0x4, 0x2)
semop(r72, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f0000000400), 0xc)
getegid()
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
r0 = socket(0x400000000018, 0x3, 0x3a)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000080), 0xc)
ioctl$TIOCCONS(r2, 0x20004276, 0x0)
ioctl$TIOCMSET(r2, 0x40044266, &(0x7f0000000000))
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000400)={0x3f, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0xe5)

16:00:12 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280)={<r71=>0xffffffffffffffff}, 0x14)
r72 = semget$private(0x0, 0x4, 0x2)
semop(r72, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
getsockopt$SO_PEERCRED(r71, 0xffff, 0x1022, &(0x7f0000000400), 0xc)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:12 executing program 1:
mknod(&(0x7f0000000080)='./bus\x00', 0x80002005, 0x2d94)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000000)=""/88, 0x58}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000780)=""/88, 0x58}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000540)=""/167, 0xfcf5}], 0xa, 0x0, 0x0)
fcntl$getown(r0, 0x5)

16:00:13 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280), 0x14)
r71 = semget$private(0x0, 0x4, 0x2)
semop(r71, &(0x7f00000003c0)=[{0x1, 0x5cd, 0x1000}, {0x0, 0x81, 0x1800}], 0x2)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:13 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xfefbffffffffffff], [0x0, 0x0, 0x481]}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCCONS(r1, 0x20004276, 0x0)
ioctl$TIOCMSET(r1, 0x40044266, &(0x7f0000000000))
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300))

16:00:13 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280), 0x14)
semget$private(0x0, 0x4, 0x2)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:13 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
pipe2(&(0x7f0000000280), 0x14)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:13 executing program 1:
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffb, 0x0, "68d19de7f43f0db1cb2fd71bc1c36f1cc6822bc6"})
r0 = kqueue()
kevent(r0, &(0x7f0000000000), 0xfff, 0x0, 0x2, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = dup(r1)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x80000000, 0x6, 0x1, 0xb964ceb, "b5f98fbecf25f9f24d257b2f5ab1da44409b3f34", 0xf2c, 0x8})
r3 = kqueue()
r4 = kqueue()
kevent(r3, &(0x7f0000000000), 0x4, 0x0, 0x10000, 0x0)
kevent(r4, &(0x7f0000000040), 0x4, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0)
close(r0)

16:00:13 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0xb, 0x2, 0xffffffffffffbfff], [0x0, 0x4, 0x401], [{}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x3f}, {}, {0x0, 0xfffffffc}], {0x0, 0x0, 0x400000}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300))

16:00:13 executing program 1:
mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x108613a)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)="220e22", 0x3)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{}, 0x2000000000004, 0x318})
readlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=""/124, 0x7c)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)

16:00:13 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
getgid()
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:13 executing program 1:
mmap(&(0x7f0000719000/0x4000)=nil, 0x4000, 0x3, 0x5012, 0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f000071c000/0x4000)=nil, 0x4000)
msgget(0x2, 0x9)
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmm\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40)
ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000080)={0x10000, '.\x00'})
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCCONS(r3, 0x20004276, 0x0)
ioctl$TIOCMSET(r3, 0x40044266, &(0x7f0000000000))
ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000140))
ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x200000000, 0x20000000, 0x80000000], [0x0, 0x100000], [], [], [{}, {0x0, 0x0, 0x0, 0x2}]}})


vm_impl_init_vmx: uvm_share failed (22)

failed to init arch-specific features for vm 0x0xffff80002064a218
16:00:13 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r70, 0xffff, 0x1022, &(0x7f00000008c0), 0xfffffffffffffcfa)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:13 executing program 1:
r0 = socket(0x40000000011, 0x3, 0x0)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/wskbd0\x00', 0x10, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r1}, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xc}], 0x0, 0x0, 0x8000000, 0x0)
r2 = kqueue()
kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffffe, 0x1, 0x40000003}, {{}, 0xfffffffffffffff9, 0x11, 0x0, 0x4000000000}], 0x0, 0x0)
kevent(r2, &(0x7f0000000000), 0x34, 0x0, 0x80000000000c68, 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TIOCCONS(r4, 0x20004276, 0x0)
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TIOCCONS(r6, 0x20004276, 0x0)
ioctl$TIOCMSET(r6, 0x40044266, &(0x7f0000000000))
ioctl$TIOCMSET(r6, 0x40044266, &(0x7f00000000c0)=0xfffffff8)
ioctl$WSDISPLAYIO_DELSCREEN(0xffffffffffffff9c, 0x80085754, &(0x7f0000000080)={0x9, 0x3})
openat(r4, &(0x7f0000000000)='./file0\x00', 0x20000, 0x20)
r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyCcfg\x00', 0x80, 0x0)
ioctl$VT_SETMODE(r7, 0x80087602, &(0x7f0000000040)={0x1, 0x1d, 0x2, 0x8001, 0x401})


vm_impl_init_vmx: uvm_share failed (22)

failed to init arch-specific features for vm 0x0xffff80002064a218
16:00:14 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
r70 = socket(0x800000018, 0x1, 0x0)
bind$unix(r70, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)


pckbd_enable: command error
16:00:14 executing program 0:
r0 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r0, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r1 = getgid()
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r3=>0x0}, 0xfffffffffffffcfa)
r4 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r4, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, <r5=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0])
setegid(r5)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000340)='./file0\x00', 0x107)
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0)
setuid(0xee01)
syz_open_pts()
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r6, 0x0, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r7, 0x0, 0x0)
shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r8=>0x0}, 0xc)
r9 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r10 = getgid()
r11 = socket(0x800000018, 0x1, 0x0)
bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r12=>0x0}, 0xfffffffffffffcfa)
r13 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9})
r14 = getgid()
r15 = getppid()
r16 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r17=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r18=>0x0, <r19=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r18, r19)
chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19)
lchown(&(0x7f0000000780)='./file0\x00', r18, r19)
lchown(&(0x7f00000001c0)='./file0\x00', r18, r19)
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r7, &(0x7f0000001000/0x2000)=nil, 0x1000)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil)
r20 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r20, 0x0, 0x0)
shmctl$IPC_SET(r20, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r20, 0x2, &(0x7f0000000040)=""/210)
r21 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r21, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$SETVAL(r21, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r21, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r22 = getgid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r23=>0x0}, 0xc)
r24 = getgid()
r25 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0)
write(r25, &(0x7f0000000040)="670dc3", 0x3)
write(r25, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18)
pwritev(r25, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0)
r26 = msgget$private(0x0, 0x402)
r27 = geteuid()
setreuid(r27, r27)
r28 = getegid()
r29 = geteuid()
setreuid(r29, r29)
getsockopt$sock_cred(r25, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000000100)=0xc)
r31 = msgget$private(0x0, 0x0)
fcntl$getown(r2, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r32=>0x0}, &(0x7f0000000300)=0xc)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = accept$inet6(r33, &(0x7f0000000800), &(0x7f00000008c0)=0xfffffffffffffd52)
r35 = fcntl$dupfd(r33, 0x0, r34)
getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r36=>0x0}, 0x6a14a19ca22b4388)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r37=>0x0}, &(0x7f0000000480)=0x2fb)
r38 = fcntl$getown(r34, 0x5)
r39 = open(&(0x7f0000000400)='./file0\x00', 0x20000000000051, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085761, &(0x7f0000000140)={0x3, 0x1000000000000002})
ioctl$WSMUXIO_ADD_DEVICE(r39, 0x80085762, &(0x7f0000000100)={0x3, 0x5})
r40 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x81, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r40, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{}, {0x26}], 0x2})
ioctl$VMM_IOC_TERM(r39, 0x80045604, &(0x7f0000000280)={0x6})
fcntl$getflags(r40, 0x1)
dup2(r40, r39)
r41 = fcntl$getown(r40, 0x5)
r42 = getgid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r36, r32, r37, r42, 0x10, 0x7fff}, 0x6, 0x2, r41, r38, 0x7f, 0x100000001, 0x20000000b1f3})
r43 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0)
r44 = getppid()
fcntl$setown(r43, 0x6, r44)
r45 = getpgid(r44)
msgctl$IPC_SET(r31, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r45, 0x0, 0x0, 0x0, 0x80a5})
r46 = msgget$private(0x0, 0x0)
r47 = getpgid(0x0)
msgctl$IPC_SET(r46, 0x1, &(0x7f0000003f80)={{}, 0x0, 0x0, r47, 0x0, 0x0, 0x0, 0x80a5})
msgctl$IPC_SET(r26, 0x1, &(0x7f0000000140)={{0x1000, r27, r28, r29, r30, 0xa8, 0x6}, 0x8, 0x2, r45, r47, 0x0, 0xffffffff00000000, 0x4})
semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000080)={{0x5, r29, r22, r23, r24, 0x10, 0x9}, 0x8, 0x1, 0x9})
getgid()
getppid()
r48 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080)={<r49=>0xffffffffffffffff}, 0x0)
getsockopt$SO_PEERCRED(r49, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r50=>0x0, <r51=>0x0}, 0xc)
lchown(&(0x7f00000004c0)='./file0\x00', r50, r51)
chown(&(0x7f0000000200)='./file0/file0\x00', r50, r51)
lchown(&(0x7f0000000780)='./file0\x00', r50, r51)
lchown(&(0x7f00000001c0)='./file0\x00', r50, r51)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r52=>0x0}, &(0x7f0000000940)=0xc)
shmctl$IPC_SET(r20, 0x1, &(0x7f0000000080)={{0x6, r52, 0x0, r23, r51, 0x1c4, 0x8}, 0x5, 0x5, r15, r48, 0xfffffffffffffe01, 0x9, 0x7ff})
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r53 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r53, 0x0, 0x0)
shmctl$IPC_SET(r53, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r53, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r54=>0x0}, 0xc)
r55 = semget$private(0x0, 0x2, 0x8)
semctl$GETNCNT(r55, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r55, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r55, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
r56 = getgid()
r57 = socket(0x800000018, 0x1, 0x0)
socketpair(0x1, 0x5, 0x3f, &(0x7f0000000d00)={0xffffffffffffffff, <r58=>0xffffffffffffffff})
bind$unix(r58, &(0x7f0000000b80)=@file={0x0, './bus\x00'}, 0x8)
getsockopt$SO_PEERCRED(r57, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, <r59=>0x0}, 0x5d)
r60 = getgid()
semctl$IPC_SET(r55, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r56, r59, r60, 0x10, 0x9}, 0x8, 0x1, 0x9})
r61 = getgid()
r62 = getppid()
r63 = fcntl$getown(0xffffffffffffffff, 0x5)
pipe2(&(0x7f0000000080), 0x0)
socket$inet6(0x18, 0x1, 0x1)
r64 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r64, 0x0, 0x64, 0x0, 0x0)
r65 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r65, 0x0, 0x64, 0x0, 0x0)
getsockopt$SO_PEERCRED(r65, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r66=>0x0, <r67=>0x0}, 0xfe5b)
lchown(&(0x7f0000000540)='./bus\x00', r66, r67)
chown(&(0x7f0000000200)='./file0/file0\x00', r66, r67)
lchown(&(0x7f0000000780)='./file0\x00', r66, r67)
lchown(&(0x7f00000001c0)='./file0\x00', r66, r67)
shmctl$IPC_SET(r53, 0x1, &(0x7f0000000080)={{0x6, r66, r54, r59, r61, 0x1e6, 0x8}, 0x5, 0x5, r62, r63, 0xfffffffffffffe01, 0x9, 0x7ff})
shmat(r53, &(0x7f0000001000/0x2000)=nil, 0x1000)
r68 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
semctl$IPC_RMID(r68, 0x0, 0x0)
shmctl$IPC_SET(r68, 0x1, 0xffffffffffffffff)
shmctl$IPC_STAT(r68, 0x2, &(0x7f0000000040)=""/210)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
r69 = semget$private(0x0, 0x4, 0x1)
semctl$GETNCNT(r69, 0x4, 0x3, &(0x7f0000000800)=""/170)
semctl$SETVAL(r69, 0x0, 0x8, &(0x7f0000000200)=0x4000000072)
semop(r69, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
getgid()
socket(0x800000018, 0x1, 0x0)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

16:00:15 executing program 1:
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x0, 0x0, 0x100000001, 0x550f, "2ea86ecce46adcd569ef64e16eb59560b6cfd711"})
msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010018e65f5880137e3d10b400d300080000fdbc09e4"], 0x1, 0x0)
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x1)
write(r0, &(0x7f0000000080)="2078f7b69541d6d97099188e90cd9c8e765f9ba2c14c0333177edf6d0f3295f5a5e8b04efdd700"/53, 0x241c5379a0e79b8e)
ftruncate(r0, 0x0, 0x0)


pckbd_enable: command error

panic: pr_find_pagehead: mbufpl: incorrect page

Stopped at      db_enter+0x18:  addq    $0x8,%rsp

    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND

db_enter() at db_enter+0x18

panic(ffffffff821ac204) at panic+0x15c

pool_do_put(ffffffff82575d60,fffffd8062000000) at pool_do_put+0x36a

pool_put(ffffffff82575d60,fffffd8062000000) at pool_put+0x4b

m_free(fffffd8062000000) at m_free+0x119

ml_purge(ffff80001e422978) at ml_purge+0x50

ifq_purge(ffff8000009e6a78) at ifq_purge+0x97

tapclose(5d01,7,2000,ffff800020638ee8) at tapclose+0xed

spec_close(ffff80001e422a90) at spec_close+0x311

VOP_CLOSE(fffffd806a376dd0,7,fffffd806c3c6cc0,ffff800020638ee8) at VOP_CLOSE+0xc0

vn_closefile(fffffd80697f6bb8,ffff800020638ee8) at vn_closefile+0xd3

fdrop(fffffd80697f6bb8,ffff800020638ee8) at fdrop+0xc2

closef(fffffd80697f6bb8,ffff800020638ee8) at closef+0x118

fdfree(ffff800020638ee8) at fdfree+0x100

end trace frame: 0xffff80001e422ce0, count: 0

https://www.openbsd.org/ddb.html describes the minimum info required in bug

reports.  Insufficient info makes it difficult to find and fix bugs.

ddb> 

ddb> set $lines = 0

ddb> set $maxwidth = 0

ddb> show panic

pr_find_pagehead: mbufpl: incorrect page

ddb> trace

db_enter() at db_enter+0x18

panic(ffffffff821ac204) at panic+0x15c

pool_do_put(ffffffff82575d60,fffffd8062000000) at pool_do_put+0x36a

pool_put(ffffffff82575d60,fffffd8062000000) at pool_put+0x4b

m_free(fffffd8062000000) at m_free+0x119

ml_purge(ffff80001e422978) at ml_purge+0x50

ifq_purge(ffff8000009e6a78) at ifq_purge+0x97

tapclose(5d01,7,2000,ffff800020638ee8) at tapclose+0xed

spec_close(ffff80001e422a90) at spec_close+0x311

VOP_CLOSE(fffffd806a376dd0,7,fffffd806c3c6cc0,ffff800020638ee8) at VOP_CLOSE+0xc0

vn_closefile(fffffd80697f6bb8,ffff800020638ee8) at vn_closefile+0xd3

fdrop(fffffd80697f6bb8,ffff800020638ee8) at fdrop+0xc2

closef(fffffd80697f6bb8,ffff800020638ee8) at closef+0x118

fdfree(ffff800020638ee8) at fdfree+0x100

exit1(ffff800020638ee8,0,19,1) at exit1+0x334

postsig(ffff800020638ee8,19) at postsig+0x4a8

userret(ffff800020638ee8) at userret+0x159

syscall(ffff80001e422f10) at syscall+0x42e

Xsyscall() at Xsyscall+0x128

end of kernel

end trace frame: 0x7f7ffffddcb0, count: -19

ddb> show registers

rdi                                0

rsi                              0x1

rbp               0xffff80001e422720

rbx               0xffff80001e4227d0

rdx                              0x2

rcx                                0

rax                                0

r8                0xffff80001e4226e0

r9                               0x1

r10                                0

r11               0x985b44aa1441e8cc

r12                     0x3000000008

r13               0xffff80001e422730

r14                            0x100

r15                              0x1

rip               0xffffffff82063a78    db_enter+0x18

cs                               0x8

rflags                         0x246

rsp               0xffff80001e422710

ss                              0x10

db_enter+0x18:  addq    $0x8,%rsp

ddb> show proc

PROC (syz-executor.1) pid=156618 stat=onproc

    flags process=a<EXEC,EXITING> proc=2000<WEXIT>

    pri=17, usrpri=75, nice=20

    forw=0xffffffffffffffff, list=0xffff8000206389f8,0xffff800020639b50

    process=0xffff8000ffff7118 user=0xffff80001e41d000, vmspace=0xfffffd806bc11110

    estcpu=36, cpticks=1, pctcpu=0.0

    user=0, sys=1, intr=0

ddb> ps

   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND

  3830  191296  10238      0  2        0x10                syz-executor.0

  3830  384190  10238      0  2   0x4000010                syz-executor.0

 10238  374930  50873      0  3        0x82  nanosleep     syz-executor.0

 78348  495311      1      0  3    0x100083  ttyin         getty

 90191  189522      0      0  3     0x14200  bored         sosplice

 50873  479434  46579      0  3        0x82  thrsleep      syz-fuzzer

 50873  226727  46579      0  3   0x4000082  nanosleep     syz-fuzzer

 50873  463196  46579      0  3   0x4000082  thrsleep      syz-fuzzer

 50873  505939  46579      0  3   0x4000082  thrsleep      syz-fuzzer

 50873  166590  46579      0  3   0x4000082  thrsleep      syz-fuzzer

 50873  285897  46579      0  2   0x4000082                syz-fuzzer

 50873  456999  46579      0  3   0x4000082  thrsleep      syz-fuzzer

 50873  448443  46579      0  3   0x4000082  thrsleep      syz-fuzzer

 46579  263340  80813      0  3    0x10008a  pause         ksh

 80813  520446  18923      0  3        0x92  select        sshd

 18923  511909      1      0  3        0x80  select        sshd

 43078  239449  48158     73  3    0x100090  kqread        syslogd

 48158  236196      1      0  3    0x100082  netio         syslogd

 86567  470930      1     77  3    0x100090  poll          dhclient

 58771   54013      1      0  3        0x80  poll          dhclient

 40442   47164      0      0  2     0x14200                zerothread

 31081  187363      0      0  3     0x14200  aiodoned      aiodoned

 87256  125925      0      0  3     0x14200  syncer        update

 80266  311828      0      0  3     0x14200  cleaner       cleaner

 65725  140009      0      0  3     0x14200  reaper        reaper

  7684  465475      0      0  3     0x14200  pgdaemon      pagedaemon

 97183  441135      0      0  3     0x14200  bored         crynlk

 60347  502134      0      0  3     0x14200  bored         crypto

  2471  196237      0      0  3  0x40014200  acpi0         acpi0

 69714   33471      0      0  2     0x14200                softnet

 31739  309676      0      0  3     0x14200  bored         systqmp

 93780   52514      0      0  3     0x14200  bored         systq

  9630  245034      0      0  3  0x40014200  bored         softclock

 38356   83922      0      0  3  0x40014200                idle0

 14494  431171      0      0  3     0x14200  bored         smr

     1  222056      0      0  3        0x82  wait          init

     0       0     -1      0  3     0x10200  scheduler     swapper

ddb> show all locks

No such command

ddb> show malloc

           Type InUse  MemUse  HighUse   Limit  Requests Type Lim

         devbuf  9564   7033K    7675K  78643K     13729        0

            pcb    13     11K      12K  78643K       303        0

         rtable   109      8K       8K  78643K       840        0

         ifaddr   106     18K      19K  78643K       333        0

       counters    19     16K      16K  78643K        19        0

       ioctlops     0      0K       2K  78643K       104        0

            iov     0      0K      32K  78643K       423        0

          mount     1      1K       1K  78643K         1        0

         vnodes  1221     77K      77K  78643K      2356        0

      UFS quota     1     32K      32K  78643K         1        0

      UFS mount     5     36K      36K  78643K         5        0

            shm     2      1K       5K  78643K       129        0

         VM map     2      0K       0K  78643K         2        0

            sem    12      0K       1K  78643K      1116        0

        dirhash    12      2K       2K  78643K        12        0

           ACPI  1794    195K     288K  78643K     12646        0

      file desc     5     13K      25K  78643K      1386        0

          sigio     0      0K       0K  78643K        22        0

           proc    48     38K      63K  78643K       799        0

        subproc    23      1K       2K  78643K       153        0

    NFS srvsock     1      0K       0K  78643K         1        0

     NFS daemon     1     16K      16K  78643K         1        0

    ip_moptions     0      0K       0K  78643K       106        0

       in_multi    81      4K       4K  78643K       225        0

    ether_multi     1      0K       0K  78643K        11        0

            mrt     0      0K       0K  78643K        11        0

    ISOFS mount     1     32K      32K  78643K         1        0

  MSDOSFS mount     1     16K      16K  78643K         1        0

           ttys   132    583K     583K  78643K       132        0

           exec     0      0K       1K  78643K       453        0

        pagedep     1      8K       8K  78643K         1        0

       inodedep     1     32K      32K  78643K         1        0

         newblk     1      0K       0K  78643K         1        0

        VM swap     7     26K      26K  78643K         7        0

       UVM amap   155    185K     186K  78643K      4350        0

       UVM aobj   130      7K       7K  78643K       136        0

        memdesc     1      4K       4K  78643K         1        0

    crypto data     1      1K       1K  78643K         1        0

    ip6_options     0      0K       0K  78643K       255        0

            NDP    19      0K       0K  78643K        80        0

           temp   162   3031K    3671K  78643K     39262        0

         kqueue     0      0K       0K  78643K        29        0

      SYN cache     2     16K      16K  78643K         2        0

ddb> show all pools

Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle

arp         64       25    0       18     1     0     1     1     0     8    0

rtpcb       80      111    0      109     1     0     1     1     0     8    0

rtentry    112      164    0      124     2     0     2     2     0     8    0

unpcb      120      810    0      800     1     0     1     1     0     8    0

syncache   264        8    0        8     2     2     0     1     0     8    0

sackhl      24        4    0        4     2     2     0     1     0     8    0

tcpqe       32      275    0      275     2     2     0     1     0     8    0

tcpcb      544     1355    0     1350    17    14     3    12     0     8    2

ipq         40        6    0        6     3     3     0     1     0     8    0

ipqe        40      185    0      185     3     3     0     1     0     8    0

inpcb      280     3639    0     3629    15    10     5     9     0     8    3

rttmr       72        3    0        3     3     2     1     1     0     8    1

nd6         48       26    0       24     2     1     1     1     0     8    0

pkpcb       40       13    0       13     4     3     1     1     0     8    1

swfcl       56        2    0        0     1     0     1     1     0     8    0

ppxss      1128      23    0       23     5     4     1     1     0     8    1

art_heap8  4096       4    0        0     4     0     4     4     0     8    0

art_heap4  256      911    0      715    23    10    13    17     0     8    0

art_table   32      915    0      715     3     0     3     3     0     8    0

art_node    16      163    0      126     1     0     1     1     0     8    0

sysvmsgpl   40       12    0        6     1     0     1     1     0     8    0

semupl     112        3    0        3     1     1     0     1     0     8    0

semapl     112     1114    0     1104     1     0     1     1     0     8    0

shmpl      112      134    0        6     4     0     4     4     0     8    0

dirhash    1024      17    0        0     3     0     3     3     0     8    0

dino1pl    128     3630    0     2230    46     0    46    46     0     8    0

ffsino     240     3631    0     2230    83     0    83    83     0     8    0

nchpl      144     6458    0     4854    60     0    60    60     0     8    0

uvmvnodes   72     4518    0        0    83     0    83    83     0     8    0

vnodes     208     4518    0        0   238     0   238   238     0     8    0

namei      1024   24450    0    24449     1     0     1     1     0     8    0

vcpupl     1984      24    0        0     3     0     3     3     0     8    0

vmpool     528       30    0        6     2     0     2     2     0     8    0

scsiplug    64        3    0        3     2     2     0     1     0     8    0

scxspl     192    18430    0    18430     1     0     1     1     0     8    1

plimitpl   152      128    0      121     1     0     1     1     0     8    0

sigapl     432     1537    0     1524     2     0     2     2     0     8    0

futexpl     56    64798    0    64798     1     0     1     1     0     8    1

knotepl    112      440    0      421     3     2     1     2     0     8    0

kqueuepl   104      604    0      602     4     3     1     4     0     8    0

pipepl     128     2912    0     2894     4     2     2     2     0     8    1

fdescpl    424     1538    0     1524     2     0     2     2     0     8    0

filepl     120    18070    0    17984    14     9     5    11     0     8    1

lockfpl    104      378    0      377     1     0     1     1     0     8    0

lockfspl    48      122    0      121     1     0     1     1     0     8    0

sessionpl  112       25    0       15     1     0     1     1     0     8    0

pgrppl      48       49    0       39     1     0     1     1     0     8    0

ucredpl     96     3183    0     3175     1     0     1     1     0     8    0

zombiepl   144     1525    0     1524     1     0     1     1     0     8    0

processpl  872     1553    0     1524     4     0     4     4     0     8    0

procpl     632     3242    0     3205     4     0     4     4     0     8    0

sosppl     128       17    0       17     4     3     1     1     0     8    1

sockpl     384     4874    0     4854    21    13     8    14     0     8    5

mcl64k     65536    388    0      388    33    32     1    33     0     8    1

mcl16k     16384     56    0       56     7     6     1     1     0     8    1

mcl12k     12288     84    0       84     4     3     1     1     0     8    1

mcl9k      9216      38    0       38     5     4     1     1     0     8    1

mcl8k      8192      52    0       52     3     2     1     1     0     8    1

mcl4k      4096     164    0      164     1     0     1     1     0     8    1

mcl2k2     2112      14    0       14     4     3     1     1     0     8    1

mcl2k      2048   72490    0    72443    18    10     8    16     0     8    1

mtagpl      80       83    0       65     2     1     1     1     0     8    0

mbufpl     256   127651    0   127539    46    34    12    27     0     8    0

bufpl      280    10112    0     3928   443     0   443   443     0     8    0

anonpl      16   206570    0   185742   121    36    85   100     0   107    1

amapchunkpl 152    8201    0     8041    19    11     8    12     0   158    0

amappl16   192     9303    0     8140    98    38    60    70     0     8    1

amappl15   184       73    0       69     1     0     1     1     0     8    0

amappl14   176      163    0      160     1     0     1     1     0     8    0

amappl13   168        8    0        8     1     1     0     1     0     8    0

amappl12   160      243    0      240     3     2     1     1     0     8    0

amappl11   152      349    0      337     1     0     1     1     0     8    0

amappl10   144      639    0      633     1     0     1     1     0     8    0

amappl9    136      710    0      706     1     0     1     1     0     8    0

amappl8    128      270    0      226     2     0     2     2     0     8    0

amappl7    120      733    0      721     1     0     1     1     0     8    0

amappl6    112      313    0      304     1     0     1     1     0     8    0

amappl5    104      477    0      465     1     0     1     1     0     8    0

amappl4     96     1821    0     1792     1     0     1     1     0     8    0

amappl3     88      315    0      306     1     0     1     1     0     8    0

amappl2     80    11076    0    11002     3     1     2     3     0     8    0

amappl1     72    37289    0    36870    27    18     9    20     0     8    0

amappl      80     3598    0     3545     2     0     2     2     0    84    0

dma4096    4096       1    0        1     1     1     0     1     0     8    0

dma256     256        6    0        6     1     1     0     1     0     8    0

dma128     128      253    0      253     1     1     0     1     0     8    0

dma64       64        6    0        6     1     1     0     1     0     8    0

dma32       32        7    0        7     1     1     0     1     0     8    0

dma16       16       18    0       17     1     0     1     1     0     8    0

aobjpl      64      135    0        6     3     0     3     3     0     8    0

uaddrrnd    24     1568    0     1530     1     0     1     1     0     8    0

uaddrbest   32        2    0        0     1     0     1     1     0     8    0

uaddr       24     1568    0     1530     1     0     1     1     0     8    0

vmmpekpl   168    17127    0    17094     2     0     2     2     0     8    0

vmmpepl    168   194059    0   191675   187    49   138   151     0   357   27

vmsppl     272     1567    0     1530     4     1     3     3     0     8    0

pdppl      4096    3142    0     3084    10     2     8     8     0     8    0

pvpl        32   504453    0   481587   246    55   191   220     0   265    4

pmappl     200     1567    0     1530     3     0     3     3     0     8    1

extentpl    40       46    0       29     1     0     1     1     0     8    0

phpool     112      255    0      113     6     0     6     6     0     8    0