kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Thu Feb 20 18:06:01 PST 2020 OpenBSD/amd64 (ci-openbsd-multicore-1.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.51' (ECDSA) to the list of known hosts. 2020/02/20 18:06:13 fuzzer started 2020/02/20 18:06:17 dialing manager at 10.128.15.235:6637 2020/02/20 18:06:17 syscalls: 337 2020/02/20 18:06:17 code coverage: enabled 2020/02/20 18:06:17 comparison tracing: enabled 2020/02/20 18:06:17 extra coverage: support is not implemented in syzkaller 2020/02/20 18:06:17 setuid sandbox: enabled 2020/02/20 18:06:17 namespace sandbox: support is not implemented in syzkaller 2020/02/20 18:06:17 Android sandbox: support is not implemented in syzkaller 2020/02/20 18:06:17 fault injection: support is not implemented in syzkaller 2020/02/20 18:06:17 leak checking: support is not implemented in syzkaller 2020/02/20 18:06:17 net packet injection: enabled 2020/02/20 18:06:17 net device setup: support is not implemented in syzkaller 2020/02/20 18:06:17 concurrency sanitizer: support is not implemented in syzkaller 2020/02/20 18:06:17 devlink PCI setup: support is not implemented in syzkaller 18:06:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000040)={'./file0\x00', 0x0, 0x8000, 0x6, 0x1, 0x8, 0x80000001, 0xa40, 0x1, 0x2, 0x8, 0x7f}) pipe(&(0x7f00000000c0)) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty\x00', 0x200, 0x0) r2 = dup(r1) ioctl$WSMUXIO_LIST_DEVICES(r2, 0xc1045763, &(0x7f0000000140)={0x4, [{0x2, 0x8}, {0x2, 0x3}, {0x2, 0x2}, {0x3, 0x3f}, {0x1, 0x1ff}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x80000001}, {0x2, 0x10000}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0xffff}, {0x2, 0x400}, {0x2, 0x644adc42}, {0x1}, {0x3, 0x1}, {0x2, 0x5}, {0x1, 0xffff3bdb}, {0x1, 0x7}, {0x2, 0x8001}, {0x3, 0x2}, {0x1, 0x2}, {0x1, 0xd01}, {0x3, 0x8001}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x1d2}, {0x3, 0x4}, {0x3, 0x3e}]}) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) r3 = semget$private(0x0, 0x0, 0x80) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000002c0)=""/33) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r7 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x81, r5, r6, r5, r7, 0x64, 0x5}, 0x3f, 0x2, 0x1000}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0}, 0xc) getgroups(0x3, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r7]) chown(&(0x7f0000000440)='./file0\x00', r8, r9) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) r13 = getegid() getgroups(0x6, &(0x7f0000000600)=[r9, r7, r10, r11, r12, r13]) r14 = semget$private(0x0, 0x3, 0x40) semctl$SETALL(r14, 0x0, 0x9, &(0x7f0000000640)=[0x9b6, 0x29f8, 0xac4]) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x20000, 0x0) recvfrom$unix(r15, &(0x7f00000006c0)=""/137, 0x89, 0x1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x3}, 0x8) r16 = open(&(0x7f00000007c0)='./file0\x00', 0x80, 0x108) getsockopt$sock_int(r16, 0xffff, 0x1007, &(0x7f0000000800), &(0x7f0000000840)=0x4) r17 = openat$null(0xffffffffffffff9c, &(0x7f0000000880)='/dev/null\x00', 0x40, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xc) r19 = getgid() fchown(r17, r18, r19) 18:06:23 executing program 1: r0 = socket$inet6(0x18, 0x4000, 0x5) accept$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) read(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001080)='/dev/wsmouse0\x00', 0x0, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r2 = socket(0x10, 0x1, 0x6b) setsockopt(r2, 0x9, 0x74, &(0x7f0000001200)="9becdabf9d4734462f9c8ab17760f9fb16", 0x11) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001240)='/dev/wsmouse0\x00', 0x10000, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000001280)={0x101, 0x6d2, 0x9, 0x5, 0x4800000, 0x400, 0x9, 0x10, [{0x0, 0x2, 0xc96, 0x5}, {0x1f, 0xc69, 0x9, 0x40}, {0x800, 0x1, 0x21b, 0xffffff00}, {0x401, 0x2, 0xed, 0x8}, {0x6d3, 0x2400000, 0x8, 0x5}, {0x1, 0x6c, 0x3, 0xffff}, {0x9, 0x3f, 0x74d1, 0x7e7c}, {0x8, 0x1ff, 0x4, 0x1000}, {0x0, 0x2, 0x80000001, 0x20}, {0xffffffe1, 0x9, 0x3, 0x8}, {0x1, 0x0, 0xed5, 0x8e2}, {0x7, 0x1, 0x0, 0x9ce18255}, {0x111b, 0x0, 0x8, 0x8}, {0xa3, 0xffff9b71, 0x8, 0x3}, {0x401, 0x2, 0x5, 0x3}, {0x1, 0x5, 0x8, 0x3ff}]}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/zero\x00', 0x10000, 0x0) getpeername$inet(r4, &(0x7f0000001400), &(0x7f0000001440)=0xc) chflags(&(0x7f0000001480)='./file0\x00', 0x0) connect$inet(r4, &(0x7f00000014c0)={0x2, 0x3}, 0xc) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000001500)={0xffffff00, 0xfae, 0x40, 0xff0000, 0x9, 0x65, 0x0, 0x10, [{0x200, 0x4, 0x7, 0x1}, {0x101, 0x40, 0x9, 0x2}, {0x1, 0xd1a, 0x9, 0x8}, {0x9ea8, 0xfffffffa, 0x100}, {0x40, 0x80000001, 0x8, 0x200}, {0x3, 0x6, 0x36, 0x7ff}, {0x10001, 0x5, 0x5, 0x2}, {0x200, 0x4, 0x0, 0x7fff}, {0x1, 0x401, 0x3, 0xffe3273e}, {0xffffff81, 0x9, 0x4, 0x10001}, {0xf4, 0x7, 0x8}, {0x1, 0x2, 0x1, 0x5}, {0x8, 0x6, 0x8, 0x2}, {0x8, 0x5, 0x29, 0x1}, {0x10001, 0x9, 0xfffffff9, 0x8}, {0x6, 0x401, 0x7b, 0x5}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001640)='/dev/bpf\x00', 0x0, 0x0) r6 = fcntl$getown(0xffffffffffffff9c, 0x5) fcntl$setown(r5, 0x6, r6) ioctl$WSDISPLAYIO_DELFONT(r4, 0x8058574f, &(0x7f0000001680)={'./file0/file0\x00', 0x0, 0x2, 0xcf, 0x1, 0x8000, 0x8, 0x8000, 0x2, 0x1, 0x200, 0xff}) r7 = socket(0x2, 0x8000, 0x2c) getpeername$inet6(r7, &(0x7f0000001700), &(0x7f0000001740)=0xc) pipe2(&(0x7f0000001780)={0xffffffffffffffff}, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0x66, &(0x7f00000017c0)={0x1, 0x0, 0x8, 0xca9e, 0x3}, 0xc) wait4(r6, &(0x7f0000001800), 0xb, 0x0) setsockopt$inet_opts(r7, 0x0, 0x1, &(0x7f0000001840)="6016b46b50030bd8dd512e3bd43f228d1ddb2c80f1f053b1da4f04307dacaababc1400781fee5c26a409891a5544c33d0616a18ff2b28e2bfaefed11d765445244c47d3a13edb40b1f34d29a8c081cfebd361f27ff62adc081dd45aa8bc5082472eaec6c1375338fd4254972a9d055a822b9851c2fa1fb5d8ef380d9489945dbe140f84d7d8faa488eed3d6befa72eb2f8dda2e3388c7e5d068c355b4817793d767d6f826ec159a0f59c74a47ab32d96460d8bc827776025b5f722b5c30abef2", 0xc0) clock_getres(0x0, &(0x7f0000001900)) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001940)='/dev/null\x00', 0x80, 0x0) ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f0000001980)={0x1000, 0x81, 0x5, 0x5, "c0fcebd71313dec8f24100ea623e34c4d864285f", 0x5, 0x4}) r10 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0\x00', 0x1, 0x61) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) ioctl$LIOCSFD(r10, 0x80046c7f, &(0x7f0000001a80)=r11) 18:06:24 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) read(r0, &(0x7f0000000040)=""/241, 0xf1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0, 0x0) 18:06:24 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xffbffdff], [0x0, 0x0, 0x403]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r1 = syz_open_pts() close(r1) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000080)) r2 = geteuid() r3 = getgid() fchown(r1, r2, r3) r4 = socket(0x18, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCFLUSH(r5, 0x8080691a, &(0x7f0000000300)) 18:06:24 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xbffffdffffffffff], [0x0, 0x0, 0x401], [{}, {}, {0xfffc, 0x0, 0x4000001}, {}, {0x0, 0x0, 0xfffffffe}]}}) getppid() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000040)) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 18:06:24 executing program 0: ioctl$KDSETLED(0xffffffffffffff9c, 0x20004b42, &(0x7f0000000080)=0x4) r0 = socket(0x2, 0xc003, 0x2) setsockopt(r0, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wskbd0\x00', 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PCIOCREAD(r2, 0xc0207534, &(0x7f0000000040)) 18:06:24 executing program 0: msgget(0x3, 0x48) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100)='/dev/speaker\x00', 0x2, 0x0) r1 = kqueue() r2 = syz_open_pts() close(r2) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000080)) fcntl$dupfd(r1, 0x0, r2) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000080)="00000071e81d", 0x3c}], 0x1) 18:06:24 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x10a40, 0x0) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='x\x00') semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=""/239) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) getgroups(0x1, &(0x7f0000000400)=[0x0]) fchownat(r0, &(0x7f0000000300)='./file0\x00', r1, r2, 0x6) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x0) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') r3 = msgget$private(0x0, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) setuid(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) setuid(r7) r8 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r8) r9 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r9) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000440)={{0x400, r5, 0x0, r7, r2, 0x20, 0x7e41}, 0x10001, 0x4, r8, r9, 0x1, 0x6, 0x5, 0x1}) 18:06:24 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x0) r0 = kqueue() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r2, 0x0, 0x0) ioctl$KDGKBMODE(r2, 0x40044b06) kevent(r0, &(0x7f00000001c0)=[{{r1}, 0xffffffffffffffff, 0x25f12e15719981ed}], 0x4, 0x0, 0x0, 0x0) kevent(r0, &(0x7f0000000340), 0x7, &(0x7f00000003c0)=[{{r1}, 0xffffffffffffffff, 0x2}], 0xb9, 0x0) 18:06:24 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) dup2(r0, r0) ftruncate(r0, 0x0, 0x7363) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000000)) 18:06:24 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = syz_open_pts() close(r1) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000080)) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000240)=ANY=[@ANYPTR, @ANYRESOCT=r1]) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) setitimer(0x1, &(0x7f0000000100)={{0x1, 0x4a4f}, {0x6, 0xfffffffffffffffb}}, &(0x7f0000000200)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x87}, {0x48}, {0x6}]}) nanosleep(&(0x7f0000000180)={0x5cf, 0x8000}, 0x0) syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0") 18:06:24 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCSTSTAMP(0xffffffffffffff9c, 0x8008745a, &(0x7f0000000140)={0x4, 0x7}) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, {[0x0, 0x7, 0x3, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000006], [0x0, 0xfffffffffffffffd], [], [{0x6}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x4}, {0x0, 0x2, 0x20}], {0x0, 0x5dd2}, {0x0, 0xfffffffc}}}) getgid() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000019280)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x5, 0x0) getdents(r1, &(0x7f0000000100)=""/102400, 0x19000) kevent(r0, &(0x7f0000019300), 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x2, &(0x7f0000000000)="1a7b43da", 0x4) r3 = socket(0x2, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8020699d, &(0x7f0000000300)) pwritev(r4, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x7fffffff) getsockname$inet(r4, &(0x7f0000000080), 0x0) setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000040), 0x4) r5 = socket(0x2, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000019100)='/dev/zero\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r6, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r7, 0x0, 0x0) r8 = fcntl$dupfd(r4, 0x0, r5) ioctl$TIOCFLUSH(r8, 0x8020691f, &(0x7f0000000300)) 18:06:24 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1307) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x800, 0x0) 18:06:24 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000140)={0x80000000, 0x1}, 0x8) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x10031, 0x0) r3 = openat(r1, &(0x7f00000002c0)='./bus\x00', 0x10, 0x22) getpeername$inet(r3, &(0x7f0000000300), &(0x7f0000000340)=0xc) r4 = syz_open_pts() close(r4) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f0000000080)) r5 = dup2(r3, r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x20, 0x0) r7 = syz_open_pts() close(r7) ioctl$TIOCSPGRP(r7, 0x40047477, &(0x7f0000000080)) r8 = syz_open_pts() close(r8) ioctl$TIOCSPGRP(r8, 0x40047477, &(0x7f0000000080)) r9 = openat$klog(0xffffffffffffff9c, &(0x7f0000000480)='/dev/klog\x00', 0x0, 0x0) kevent(r5, &(0x7f00000003c0)=[{{r6}, 0xfffffffffffffffb, 0x66, 0xf0000020, 0x2, 0xff}, {{r3}, 0xfffffffffffffffb, 0xe6, 0x80, 0x7fffffff, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x50, 0x1, 0x8, 0x1}, {{r3}, 0xfffffffffffffffc, 0x0, 0x80, 0x7, 0x56}, {{r2}, 0xfffffffffffffffc, 0xd26705d742c61b74, 0x80, 0x5, 0x4}, {{r1}, 0xfffffffffffffffd, 0x0, 0x4, 0x7, 0xfffffffffffff800}], 0xafc, &(0x7f00000004c0)=[{{r7}, 0xfffffffffffffff8, 0x1, 0x1, 0xffffffffffffff2e, 0x40}, {{r8}, 0xffffffffffffffff, 0x20, 0x10, 0x100, 0xda22acd}, {{r3}, 0x2, 0x92, 0x2, 0x20, 0x5}, {{r9}, 0xfffffffffffffffb, 0x84, 0x8, 0x24, 0x200}], 0x20, &(0x7f0000000540)={0x80, 0x5}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x45}, {0x81}, {0x6, 0x0, 0x0, 0x7f}]}) pwrite(r0, &(0x7f0000000280)="d000"/14, 0xe, 0x0, 0x0) 18:06:25 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080)=0x3, 0x4) connect$unix(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x1) listen(r0, 0x0) 18:06:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000240)=@un=@file={0xd80f49edce43012d, './file0\x00'}, 0xa) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) setegid(r1) setgroups(0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x5}, {0x6}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000680)="355fab5a52a60008160000008d5a") chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) connect$unix(r5, &(0x7f0000000040)=@file={0x1bcfa69870ae01e4, './file0\x00'}, 0xa) 18:06:25 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x2080002002, 0x40004000000028b1) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x10) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000300)=[{{r0}, 0xfffffffffffffffe, 0xb, 0x80}], 0x4009, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x66, 0x0, 0x3ff, 0x0) r4 = kqueue() r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = msgget$private(0x0, 0xfffffffffffffffd) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x29, 0x32, 0x0, 0x0) setsockopt(r7, 0x29, 0x2a, &(0x7f0000000080)="54002393", 0x4) r8 = socket(0x2, 0x10000000000003, 0x33) connect$unix(r8, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) sendto(r8, &(0x7f0000000040)="1592", 0x2, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000140)="010029ba97d0bba1248defae40f01df6", 0x10, 0x0, 0x0, 0x0) msgsnd(r6, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYPTR64, @ANYPTR64, @ANYRESOCT=r7, @ANYRES32, @ANYRESOCT=r8, @ANYRES16, @ANYBLOB="73a8fcc309ae3f5e92190ae662ed628e225f71bb8eaa49cbed053faaac253e770edb146c6d4b761518dbeea9e25a9387bbc0022e2b3ddd5074408067b8c8828daf9e993b84db943e713ebbb4f8fe6da2185fcd964572dfb02e259f6144c8ee8a2f7a02711188b63bec741c30f3f1b3f334a4b5442d9a85"], 0x8, 0x7fc) msgctl$IPC_STAT(r6, 0x2, &(0x7f0000001e40)=""/74) msgsnd(r6, &(0x7f0000000340)={0x1, "e705ff525542042b7f55820d6be0945bb78e704713e350353cab427751806a468403cb441da4de354f143c0f9593e8a07d703069840c000fb73a5133f2719d7ecfd84bd8c0556d026f43121ec62ee73811782da3a6d399c0ccfa13c7f8faa9d99785e302f4f31678fe9467e092ce6a77d850be494d653256882ad5d6810015b8a0e86d247003db409c7180282c654dd939c92dd9d587d600d545539badef824bf057440e29ea8c1a8b47acc0220616bee228e046f4471d71a45ba7dec7316faccf544521018716b9b10659ee635984"}, 0xd7, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r5, 0x0, 0x0) ioctl$BIOCGRTIMEOUT(r5, 0x4010426e, &(0x7f0000000000)) kevent(r4, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0) acct(&(0x7f00000000c0)='./file0\x00') kevent(r1, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffffc, 0x46, 0x0, 0x0, 0x7}], 0x100, 0x0, 0x0, 0x0) 18:06:25 executing program 0: r0 = socket(0x2, 0x3, 0x2) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r1, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) sendto$unix(r0, &(0x7f0000000080)="a1703b4019e3cbf42c610cc45cd12d0e83b4df30ec03f7d559f6b37be487c0bf913cc4c0d150376341a26eb6602e", 0x2e, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r2, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r2, 0x20005302, &(0x7f0000000140)) ioctl$KDENABIO(r2, 0x20004b3c) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r3, &(0x7f00000002c0), 0x0) r4 = dup(r3) ioctl$WSMUXIO_LIST_DEVICES(r4, 0x20005302, &(0x7f0000000140)={0x0, [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xc3ee}]}) getsockname$unix(r3, &(0x7f0000000280)=@file={0x0, ""/108}, &(0x7f0000000040)=0x6e) close(0xffffffffffffffff) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000a40)={0x7, 0x3, {0xd7, 0x1}}) r5 = socket$inet6(0x18, 0x8000, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000003c0)={0x9, &(0x7f0000000340)=[{0x7ff, 0x1, 0x5, 0x81}, {0x372, 0x9e, 0x4, 0x2}, {0x4, 0x9, 0x2, 0x6}, {0x3, 0x4, 0x6e, 0x1}, {0x8001, 0x59, 0x35}, {0x8000, 0x8, 0x24, 0x1}, {0x1, 0x1f, 0x3, 0x6}, {0xc, 0x3f, 0x2, 0x2ca5e9d1}, {0x12ed, 0x3, 0xe2, 0x8}]}) ioctl$WSDISPLAYIO_GETEMULTYPE(r5, 0xc014575e, &(0x7f0000000300)={0x5, './bus\x00'}) chmod(&(0x7f0000000000)='./bus\x00', 0x2) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x40047477, &(0x7f0000000080)) r6 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x2) preadv(r6, &(0x7f0000000980)=[{&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/233, 0xe9}, {&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/127, 0x7f}], 0x8, 0x0, 0x6000000000) ioctl$TIOCDRAIN(0xffffffffffffffff, 0x2000745e) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r7, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r7, 0x20005302, &(0x7f0000000140)={0x0, [{}, {}, {0x0, 0x7}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x1}]}) ioctl$WSDISPLAYIO_SMODE(r7, 0x8004574c, &(0x7f0000000a00)=0xa83b056b65b6e68d) r8 = dup(0xffffffffffffff9c) ioctl$KDMKTONE(r8, 0x20004b08, &(0x7f0000000100)=0x9) 18:06:25 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = syz_open_pts() close(r0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[]], 0x1) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000576000/0x3000)=nil, 0x3000, 0x5, 0x813, r2, 0x0, 0x10000000000000) ioctl$KDSETRAD(r2, 0x20004b43) r3 = socket(0x18, 0x1, 0x0) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x80000000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r3) r5 = socket(0x18, 0x2, 0x0) close(r5) socket(0x400000000018, 0x3, 0x3a) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r5, &(0x7f0000000040)="100a2956b9223776", 0x21d) 18:06:25 executing program 0: r0 = syz_open_pts() close(r0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) mmap(&(0x7f0000caf000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x0) socket(0x9, 0x4, 0x40) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x94) mlock(&(0x7f00009ed000/0x4000)=nil, 0x4000) mmap(&(0x7f0000847000/0x600000)=nil, 0x600000, 0x0, 0x1010, 0xffffffffffffffff, 0x0, 0x0) 18:06:25 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000004000000001, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x5}, {0x4}, {0x6, 0x0, 0x0, 0xffffffff}]}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10, 0x124) ioctl$WSDISPLAYIO_DELSCREEN(r1, 0x80085754, &(0x7f0000000080)={0x7fff, 0x2}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pwrite(r0, &(0x7f0000000040)="fb", 0x2c0, 0x0, 0x0) 18:06:25 executing program 0: r0 = socket(0x2, 0x3, 0x2) connect$unix(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x10) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) sendto$unix(r0, &(0x7f0000000080)="a1703b4019e3cbf42c610cc45cd12d0e83b4df30ec03f7d559f6b37be487c0bf913cc4c0d150376341a26eb6602e1dbcd901e34e09317be621", 0x39, 0x0, 0x0, 0x0) 18:06:25 executing program 0: socket(0x2, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000600)='./file0\x00', r2, 0x0) lchown(&(0x7f0000000280)='./file0\x00', r2, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', r2, r3) r4 = semget$private(0x0, 0x4, 0x1) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r4, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r5 = getgid() r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000800)=@abs={0x2, 0x0, 0x3}, 0x8) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r8 = getgid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r5, r7, r8, 0x10, 0x9}, 0x8, 0x1, 0x9}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0xffffffffffffffcd) lchown(&(0x7f0000000600)='./file0\x00', r9, 0x0) r11 = getgid() setegid(r11) r12 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000340)=0x1ff) accept$unix(r12, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r12, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r12, 0x40087468, &(0x7f00000001c0)) fchownat(r12, &(0x7f0000000080)='\x00', r13, r11, 0x6) r14 = getgid() setegid(r14) r15 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r15, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(r15, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) accept$unix(r15, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r15, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r15, 0x40087468, &(0x7f00000001c0)) fchownat(r15, &(0x7f0000000080)='\x00', r16, r14, 0x6) r17 = semget$private(0x0, 0x7, 0x287) semop(r17, &(0x7f0000000180), 0x262) semop(r17, &(0x7f0000000e80)=[{0x4, 0x4, 0xc00}, {0x4, 0x4, 0x3800}, {0x4, 0xff80, 0x1000}], 0x3) semop(r17, &(0x7f0000000580)=[{0x0, 0x3, 0x1000}], 0x2aaaaaaaaaaaae70) semctl$GETNCNT(r17, 0x2, 0x3, &(0x7f0000000000)=""/9) semctl$IPC_SET(r17, 0x0, 0x1, &(0x7f0000000240)={{0x81, 0xffffffffffffffff, r14, r13, r14, 0x1ea, 0xfffffffffffffffd}, 0x7fff, 0x7}) lchown(&(0x7f0000000280)='./file0\x00', r9, r14) lchown(&(0x7f00000001c0)='./file0\x00', r9, r10) getgroups(0x5, &(0x7f0000000100)=[r3, r8, 0x0, r10, 0x0]) chown(&(0x7f0000000040)='./file0\x00', r0, r18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r19, &(0x7f00000001c0)={0x0, 0xfffffffffffffe5f, 0x0, 0x0, &(0x7f0000000240)=""/187, 0xc7}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6) execve(0x0, 0x0, 0x0) 18:06:25 executing program 1: setrlimit(0x8, &(0x7f0000000000)={0x9, 0x93}) r0 = syz_open_pts() r1 = syz_open_pts() close(r1) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000080)) ioctl$TIOCCHKVERAUTH(r1, 0x2000741e) close(r0) r2 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)='u', 0xfe61}], 0xdf) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040), 0x1) 18:06:25 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) r1 = getpid() r2 = getpgrp() setpgid(r1, r2) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x3, &(0x7f0000000300)=[{0x84, 0x0, 0x2, 0xfffffffe}, {0x28, 0x0, 0x0, 0x10}, {0x6, 0x0, 0x1, 0xfffffff9}]}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/wsmouse0\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) r4 = syz_open_pts() close(r4) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f0000000080)) ftruncate(r4, 0x0, 0xb435) write(r3, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r3, 0x20005302, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x80, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x2, 0x2, 0x4, 0x2}, {0x80, 0xb1, 0x20, 0xb085}]}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r6, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r6, 0x20005302, &(0x7f0000000140)) sendmsg$unix(r6, &(0x7f0000000600)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000340)="d6d3f83e780cf59d898b8d382cb74e8293c506a22f48332eb7b9ee24d06767b2d33e7d9ba2d4eb2aff85a327a9c0d42aa405e1141a4ca391974855726180cd9798bdb5b9272dc50410f92e342f48c75c46227a52d3b05d496d0799280743d5cd3d19d5ed9ff36f713f79557aaabb0179e661feba53be2308beade1b3dcfeeed473bfa30dcb7aede1afee9274d9060f087518fe90b7f2d20e37ef05f488368a0ba8281c03e9439e880530c22f3dec2bed0891be76e435ddd83dd7e18c5da19f8d8fef7056e0f6e2f38da17ea396755e4ccf9e9f7b0c72afc87d4cae8056296378", 0xe0}, {&(0x7f0000000440)="5ff0248392cca6269bd093ba03c60252ea058749fafab80d7a11fc60354ec65732477efa87063e48aec9fc0ee60a7a60b43128b078f1d56e78218f90e1843be7d8088a", 0x43}, {&(0x7f00000004c0)="8153e26744ab8785551f4b429813dee5240206f1a46b8df77d3d9237e7b5cfc907516d9f80c97dcc217875b98afda27836c2ba1367058da71e58270eee044a46339a29ac7c87c057e17bc935e49f55aa790528d7105bbcf7a51fd4a76eaa04", 0x5f}, {&(0x7f0000000540)="ad78907b8e82313ab038dbb36b447b2c345d6c19a0dd5527517eeb566bc58518bb041f54bc714192c3bc11b8eaefc76ceb1dd8faf6631040ffee8b8c593249a65d0cecf7d4b2fb878a40784e9038c6f98800ce9ef6786869b22c979cdeaabc144dd621a49a03f947cfb5ef1974c20275494db7d083675b78760d5d", 0x7b}], 0x4, 0x0, 0x0, 0x4}, 0x2) ioctl$WSMOUSEIO_GETPARAMS(r5, 0x80105727, &(0x7f0000000140)={&(0x7f0000000180)=[{0x24, 0xffff8001}, {0xa4, 0x180f1282}, {0x23, 0xff}, {0x85, 0xa5a}], 0x4}) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 18:06:25 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bpf\x00', 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) msgget$private(0x0, 0x450) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x7}, {0x4c}, {0x6, 0x0, 0x0, 0x100}]}) pwrite(r0, &(0x7f0000000000)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 18:06:25 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x24}, {0x10000800002c}, {0x6, 0x0, 0x0, 0x100}]}) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r2 = socket$unix(0x1, 0x6, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8020697a, &(0x7f0000002580)) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000140)={0xa, &(0x7f0000001b80)=[{0x2, 0x0, 0x0, 0xff}, {0x8, 0x1, 0x0, 0x9}, {0x3, 0x1f, 0xfa, 0x9}, {0x8, 0x8, 0x3, 0x2b}, {0x800, 0x9e, 0x4}, {0x4, 0x40, 0x1f, 0x200}, {0x4, 0x4, 0x3, 0x80}, {0x9, 0xdb, 0x7, 0x3ff}, {0xcd, 0x7, 0x9, 0x6}, {0xba3b, 0x2, 0x8, 0x4}]}) pwrite(r1, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) r4 = dup2(r0, r1) ftruncate(r4, 0x0, 0x4) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x40, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x7, 0x0, 0x1, 0x1}, {0x2}, {0x6}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket(0x2, 0x2, 0x0) connect$unix(r7, &(0x7f0000001c00)=ANY=[@ANYBLOB="8202adfdffffffffffff2fcf49a5463f7b238bf4688a2a197a386207000000008295955984c87910bf453f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b158c965e248701201360bcd4c0a162b58fd4237b8fa4d012ae447473c238495aaee48c02f6ac41e6bf3bf554799bab80ab4cedd6b1becbd13ad30505e8f5300a49fef9d612f871f4385f04157795ea4a5c5fe659fa202361cd8cac7dbbc5b65c6593d2870b4122cd23500000000000000b66ec0f5c669ea191976bb2fad1e03781b316cb24017630331fb23bb3a52084976d34e1c29d436947f299768b16516026629002e32f470e75c93ec4f7f5e6c83b09bcb97fa5d1f50cc35740e3eaca89a8aba050559f2120ff387c0f64f790da917510500983d41ba76f5bff41e0e590b8bd5295eba5ae8d52b8686ff308d72c2f4286e086f9daecf0c0a3f93a5d68996fade9cef0100592e67b0e033c429ed29335c34f0ede0ea3cdad290d245a760911ef70a8ff72ad015c5a4a1f3797b42df9e6d315dc865db84f007a4084883add7525e0126e33aaa9f845d0369830df582bce12842db8b2161c337a7613f48b637e054454a97dee86f6f4e6d98c10eadf6a176570a6af3238e149eb3ed54b2e017cbe46e35cddecf18db151266bb671897178b832aa6a6a2511f244a878492258ee52f00ba48df76c5d3b8bfa3a14993fc7a9f01722f661679efb1c6e7becfb2eb2eb9a614bde6d303de8dd36070ffcccfd0acca0ff4fa95f62e2b7dccc9655f686766dfb6aa9ff5bb890e7517a30c7fec7ff5414a16a8e57820faefaaa891724062f7e162b2e5b80ac0f7c030385a9e6030b3d75550c568ac82b9fa226c7de08060f6892f5c94c2931e645303b4da0ae2e628beccd1a205ebca60a5a3918bfc87b6eb4d73457f93b274ba781f0e0a53e08e15d43288ffbb929a01072a61aed5999905dfec2945185601aba866467f03bf0c75af117890b6dc270d13d017b0020f0e7ca8a7056572971a202167e10953b3f3bd50fcf279fdcec904368cd2e33ce85d0652ef9b914db3e82ead6cd54c432aadcb5af4b6cfab95f10c54554e3b0ade52fece1f728dbcb10ec2af46e59f4299cf8db5089d3a1c0ae025001d28a46c5deeb22b0c20d810c129ac6a87447048384428480875e4f86c678930fb2cb7a8541e40fa22cd53953fb4bd6a3ee1270a8e730c1caf6e3d930382a14ed7b658391ea34ff14ed7b2e3d5fa987f46c75672d421a06c5f9a41857b53b010f6eb409556db5bb66083277b23f571d0b390ee05f170a08476a0cf5c6af8acdcc071cfd72d596ce0bab94688f7d59f6b91aab4d553fa253b31abb3a78bf238a53a7840a98d5de65d232cd744239063d7115ec0c8c38964fba10498e97670f2e774453322c4fe833ff56813c5f84a560d9e2fbcf9b4923d95b2b61ef4a2c3dcef67095d21e35fe7c94375eb407af5774e6a5e6699c76a36b649af269bc00b68f22589414a4b47ffd81f846fd32f66cec9848ce144e47faa041ab141e42c736c04814142055319ba7f64e291287f274667ecccadb79938224012cba1d6370e9e250f230729568e37f763395555ae3a375664fe1b6acd999439c7d76cdb7b01a313da2a7b7aa596c1160c612e2a0359fb4ac6f7d84941c3d77d3397c404cf5cf567efe47f14aaf186"], 0x10) dup2(r7, r6) setsockopt$sock_int(r6, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r8 = dup(r6) sendto$inet6(r8, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(r8, 0xc5005601, &(0x7f00000002c0)={0x10, 0x9, 0x4, 0x3, [{&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x5}, {&(0x7f0000e5e000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8c}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x201}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xffffbffffffffff8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000e48000/0x2000)=nil, 0x4}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b4e000/0x1000)=nil, 0xffffffff}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x1}, {&(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000a00000/0x600000)=nil, &(0x7f0000e18000/0x1000)=nil, 0x5b3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d9b000/0x3000)=nil, 0x100000000}, {&(0x7f0000e95000/0x3000)=nil, &(0x7f0000d93000/0x1000)=nil, 0x8}, {&(0x7f0000bad000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x9}], ['./file0\x00', '.\x00', './file0\x00', './file0\x00'], './file0\x00', './file0\x00', './file0\x00', ['./file', './file', './file', './file'], 0x5}) r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat(r9, &(0x7f0000000000)='./file0\x00', r9, &(0x7f00000000c0)='./file1\x00') r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/zero\x00', 0x2, 0x0) ioctl$KDENABIO(r10, 0x20004b3c) renameat(r9, &(0x7f0000000200)='./file1/file0\x00', r9, &(0x7f00000002c0)='./file0\x00') readlinkat(r9, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) getsockname$unix(r9, &(0x7f00000025c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b20100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b9053d6c5d723381d51ed919c3a9098f1029e6335751414541cdfcbcf9b643bc1d2e7d4d17a7f03377629a697442a2a796cb3834000bae46357b82b721e065b258f2fe17e9622c336801ca1eb6411f8422d993d400637b5b0113fc77fc52661fc092721484b494cc0fc05c68ab62d5852b13b599ef4c917e02cfe3aaea0f3fe3823becd731669ded2f29a1762980dca5f4d91f1935c9d60f94085bcc48bc3711aef5730f2911b04b8583bbd3b5b0aec1c01b417ece6bbce91d1c254cb40712f2ef01e32eeb956ed9aae4d3c23ffbd4b0126baee0673289907eb5b1088836d3ee3ecaed6787448db2f7abdf4cb3c8ea8058cd2fbdefcbffdca562d97fc0ad27a60cbabf4b4dbc5f9e8bdb11937ca1767a26cf7a4d3d5980c5d3158789a2ae46f60372a05f17b52b5f21ea50950ac0ee9f2f5703acd42283998a2f3d46341e68a8fe8396a"], &(0x7f0000000100)=0x1002) setitimer(0x2, &(0x7f0000000080)={{0x8, 0x563b}, {0x8000, 0x1}}, &(0x7f00000000c0)) syz_emit_ethernet(0x61, &(0x7f0000000040)='H') 18:06:25 executing program 1: mknod(&(0x7f00000000c0)='./bus\x00', 0x2001, 0x0) r0 = open$dir(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x5) ktrace(0x0, 0x5, 0x1228, r1) syz_open_pts() 18:06:25 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0xb1}, {0x44}, {0x6}, {0x5, 0x1, 0x44, 0xd1}, {0x9, 0x6, 0x28, 0x1}]}) syz_emit_ethernet(0x28d, &(0x7f0000000340)='\x00') 18:06:25 executing program 1: r0 = socket(0x1, 0x5, 0x1) r1 = socket(0x2, 0xc003, 0x11) getpeername$unix(r0, &(0x7f0000003080)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbd6b32c99c282650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041e1209cf1f500000000000000000000000000000000fffffffe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e316000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/4097], &(0x7f0000000000)=0x1002) r2 = syz_open_pts() close(r2) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000080)) r3 = syz_open_pts() close(r3) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000080)) connect$unix(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRESDEC, @ANYRESHEX=r3], 0x3) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="025ba2030f5c038f9920ce827e0cd94897a5151f25069dcbfc0b6d36a461fbdd3a3e0c665c1a1df4a8d2bc1ac9982e26104ebb9313b646e208c65d1a8b", 0x3d}, {&(0x7f0000000b80)="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", 0xf20}], 0x2) getsockname$inet6(r0, &(0x7f0000000200), &(0x7f0000000440)=0xffffffffffffff74) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x80000000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x29, 0x800000000000009, &(0x7f0000000040), 0x0) r5 = socket(0x18, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000540)={&(0x7f0000000000)=@abs={0x1800, 0x0, 0x1}, 0x8, 0x0}, 0x0) getsockname$inet6(r5, &(0x7f0000000240), &(0x7f0000000280)=0x7e) r6 = socket(0x2, 0x2, 0x0) r7 = semget$private(0x0, 0x5, 0x400) semop(0xffffffffffffffff, &(0x7f0000000000), 0x2aaaaaaaaaaaac38) semctl$IPC_RMID(r7, 0x0, 0x0) r8 = dup(r6) setsockopt$inet_opts(r8, 0x0, 0x1, &(0x7f0000000300)="00040040000000000000c782b81048ac303d94a04a701ebc227cdf0000", 0x1d) r9 = socket(0x1e, 0x4003, 0x0) connect$inet6(r9, &(0x7f0000000100)={0x18, 0xffffffffffffffff, 0x0, 0x3}, 0xc) listen(r9, 0x0) flock(r0, 0x4) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r10 = syz_open_pts() syz_open_pts() ioctl$TIOCSETA(r10, 0x802c7414, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, 0x3ff, 0x7fffffff, "666bfede477dac00"}) r11 = semget$private(0x0, 0x7, 0x287) semop(r11, &(0x7f0000000180)=[{0x6, 0x2000000000101}, {0x2, 0x1f}], 0x2) socket(0x2, 0x1, 0x13) r12 = semget$private(0x0, 0x6, 0x89) semctl$GETNCNT(r12, 0x53292f3ac3f01e93, 0x3, &(0x7f0000000380)=""/125) semop(r11, &(0x7f00000001c0)=[{0x4, 0x8, 0x1000}, {0x0, 0x1, 0x1000}, {0x3, 0x3945, 0x2800}, {0x2, 0x0, 0x800}], 0x4) recvfrom$inet(r9, &(0x7f0000002040)=""/4096, 0x1000, 0x440, &(0x7f00000000c0)={0x2, 0x3}, 0xc) 18:06:25 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x8613a) r0 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="220e2a", 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000000c0)={0xfffffffffffffff9, 0x7}, 0x10) msgget$private(0x0, 0x100) r2 = msgget$private(0x0, 0x20) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$TIOCMSET(r3, 0x80047001, &(0x7f00000000c0)) socket$unix(0x1, 0x5, 0x0) msgrcv(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r2, &(0x7f0000001640)=ANY=[@ANYPTR64=&(0x7f0000000a40)=ANY=[]], 0x1, 0x800) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{}, 0xc4c01002e, 0x0, 0x0, 0x0, 0xc17, 0x8001}) r4 = syz_open_pts() close(r4) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f0000000080)) ioctl$TIOCDRAIN(r4, 0x2000745e) r5 = getppid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2000100000000, r5}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x2000740d) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r6, 0x0, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/wsmouse\x00', 0x800, 0x0) getsockname$unix(r6, &(0x7f0000000300)=@abs, &(0x7f0000000340)=0x8) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) r7 = openat(r1, &(0x7f0000000200)='./bus\x00', 0x20000, 0x40) ioctl$TIOCSTAT(r7, 0x20007465, &(0x7f0000000280)) semget$private(0x0, 0x7, 0x286) 18:06:25 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmm\x00', 0x80, 0x0) ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f0000000380)={0x800, 0xfe9, 0x0, {[0x9, 0x6, 0x0, 0x3, 0xf0, 0x5, 0x9b7b, 0x8, 0x4, 0x1, 0xfff, 0x55b, 0x1, 0x9, 0xfffffffffffffffb, 0x0, 0x5, 0xfd6], [0x40, 0x2, 0x80000000, 0x4, 0x10000, 0x1, 0x800, 0x7, 0x101, 0x2], [0x3, 0x0, 0x9, 0x4, 0xffffffff, 0x5, 0x8e], [0x1, 0x8001, 0x100, 0x0, 0x7, 0x5], [{0x1f, 0x8, 0x7, 0x72}, {0x7, 0x80000001, 0x4, 0xe6b}, {0x6, 0x8, 0x3, 0x700d3756}, {0x5, 0xf167, 0x8, 0xbf}, {0x3a1b, 0x1, 0x1, 0x1}, {0x400, 0x9, 0x1, 0x3}, {0x7, 0x80000001, 0x0, 0x3}, {0x7, 0x0, 0x9, 0x4}], {0x4, 0x401, 0x9, 0xc32}, {0x7ff, 0xb32, 0xffff8001, 0x1000}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2}, {0x64}, {0x28fe}]}) syz_emit_ethernet(0x1cb, &(0x7f0000000340)="b6") 18:06:25 executing program 1: r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000180)=0x5, 0x4) r1 = socket(0x2, 0x4003, 0x0) setsockopt(r1, 0x0, 0x7, &(0x7f0000000140)="01003f8a", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x2, 0xc003, 0x0) connect$unix(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10) dup2(r3, r2) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r4 = dup(r2) sendto$inet6(r4, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 18:06:25 executing program 1: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1f95d27d48731892, 0x7}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, 0x0, 0x0) 18:06:26 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xdffeffff], [0x0, 0x0, 0x403], [{}, {}, {}, {}, {}, {0x3}]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="0da753e117eac2999b9cfddd23c555af5e4b60ba19a7807271b250508d816c803f109c25c1945edcaea474b118eeac59e2342e655b1ad7985c23ac5d7143b325734cdf7c6d98920070fb3d979bf8e43dbcab22018d9e66c9fc6201da60c7fd1ac2a5d74b51ab8d1f8ab037c4537b4ab014162291bb39d4fe4fef6dd666f1868a780bfd183b6914747d76205f757483bd0f2de66fd0", 0x95}, {&(0x7f00000000c0)="4be841952b6c5ab14abd8e7af39a00e240f19d85151f1a27ed71c307e8cf2a672c3a9a7d8ed4d062acc69ee82e0bff1fe6bfeba472a130e93d0c1bf854b11f139b3b6ab28e0851818c21bebc062e02f46a4d97cface824b565d65fb8b58298", 0x5f}, {&(0x7f0000000140)="1d2d53b7cf0c181802f7fdc58ec7dacf3e1399e98245d27bb58cfcb4b8638b1a3f35c01673b6406bab4350669b4b16222948be016c6600cdd08f410c0354020c89445db03ffd68aee8d93872f101178ab9490e217c952cf21987e457398823b78a085dfb985329b599cda4f3a1fddaa2865c89d1bbde1ac128584fbe2d190f853e10c009663e4eb260017ed19c7db60cca0a89ebc4ee776d5bef7da6ee1bd65e4e2f5382dc3994cb45af3b3684451c675356a3bdf713b0c94d9f59281c2533b3030ed83d648b93e05e938bf559e07d80d6358b31ea466343382e2c86bc6cc6003c3f9aae02d1c9ffd88546a0b4a647fe90c1144b53088f", 0xf7}, {&(0x7f00000004c0)="8df560004627e21bfe6a6cc180e069e97e29ecf3d35954c40e5f372a1e594c3c29514d5a67ae5ac26042c023cf5e0121f303e72583e377d72c", 0x39}], 0x4) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) mknod(&(0x7f0000000540)='./file0\x00', 0x100, 0x6) 18:06:26 executing program 1: mmap(&(0x7f000071c000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x0) open(&(0x7f00009b7000)='./bus\x00', 0x0, 0x0) mlock(&(0x7f00009ed000/0x4000)=nil, 0x4000) mmap(&(0x7f0000847000/0x600000)=nil, 0x600000, 0x0, 0x811, 0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) mmap(&(0x7f000071f000/0x2000)=nil, 0x2000, 0x4, 0x6010, r1, 0x0, 0x27e) 18:06:26 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x0, 0xa2f}, {0x6f1a, 0x5}}, 0x0) 18:06:26 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x22) r2 = syz_open_pts() close(r2) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000080)) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r2, 0x1}) socket$inet6(0x18, 0x3, 0x80) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x3bf, 0x7fffffff, "73cc5160521f093842ad7b2183862e27b82f7b8e"}) r3 = syz_open_pts() close(r3) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000080)) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="c610e33375573c72cb1b559634c55913f85c06c5ec9977c41625f98162f59f5c4b442c54d2a4b711cbed5770c9139fe9dd646186175570e73e15bddabd38cb85b02db11aa1da8ff14e650f0a0c0b5396b47e39ff9b74cdd98ce1784760c75fdd7bb9b5a88caa3cd07dedb8742cd7d9aa61e174d1e4b1f433a0c67053aeb0ebc4c89ef1bca546ef3286dc5a8a9f9446a416412aac4f82422a47857877badd3d244aa20f0ecba84ba05829049553cfb23cfccf9475ab61a6580b1f76d9b81a1aab48540c8ba557c1ba912b2e696cbe939b8658304f2d5c28", 0xf3a5df5122b194f0}], 0x1) 18:06:26 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x80002007, 0x5dc2) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r1 = kqueue() r2 = dup(r0) ioctl$BIOCGDIRFILT(r2, 0x4004427c, &(0x7f0000000040)) kevent(r1, &(0x7f0000000140)=[{{r0}, 0xffffffffffffffff, 0x1}], 0x8001, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000000)=0x81) dup2(r0, r1) 18:06:26 executing program 1: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "b8000000000000080100"}) r0 = socket(0x20, 0x4000, 0x0) close(r0) r1 = socket(0x400000000018, 0x3, 0x0) setsockopt(r1, 0x29, 0x1a, &(0x7f0000000040), 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r2, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r2, 0x20005302, &(0x7f0000000140)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r3, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000280)="2051fc72c66742ba79de6dcbbe4095cabdd95ad4915f01bc8cc3c81e0dd512f12098a1fe08f40715fe35277bbb1d42951715fdb7ce5dba3badbd03b07129e16c41f186b77616150331e05aa655115f455100cc5ebcafd4979b7f938058208d7b82550a501e4f024302277840f6e6cf753fd950be8b1b525e9cd919c13c9ea31756e55039ac6d2b1d90d981eef0b232d3f9eae6e5a1838aeee8f3750d97e528753be6d230ad93c04a", 0xa8, 0x419, 0x0, 0x0) sendto(r2, &(0x7f0000000140)="46da744dfd545843a85aa122cd1248873db0c95066988ce7a298976a402252542a52b6a9da6d132def1f82c04067f7e1ecca13e8730acc8313fa7727d0226a3a6c3c7aae051e8b4a624391146b33d680f55dbdac757d33248cbe91c419a84b81aa7885c64d637be563324d25130a42862b9210b9654fb0377f121e2db721f11cbc1b29e71356f1720cb17029", 0x8c, 0x5, &(0x7f0000000040)=@in6={0x18, 0x0, 0x80, 0xffffffff}, 0xc) write(r1, &(0x7f0000000000)="c66fc79a40d91ebddb05a94c080d01f92ce37414", 0x14) 18:06:26 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x80002009, 0x2d94) r0 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000004680)=[{&(0x7f0000000180)="01c17c6acc36", 0x6}, {&(0x7f0000002280)='h', 0x1}], 0x2, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./bus\x00', 0x82, 0xe0) r2 = syz_open_pts() close(r2) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000080)) r3 = dup2(r2, r0) kevent(r0, &(0x7f00000000c0)=[{{0xffffffffffffff9c}, 0xfffffffffffffff9, 0x88, 0x4, 0x5, 0x6}, {{r1}, 0xfffffffffffffff8, 0x26, 0x80000000, 0x3, 0x2}], 0x8, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffc, 0x7, 0x2, 0x6, 0x6}, {{r3}, 0xfffffffffffffff8, 0x1e, 0xf0000004, 0x1, 0xffffffffffffe379}], 0x5, &(0x7f0000000140)={0x7, 0x68b}) socket$unix(0x1, 0x5, 0x0) 18:06:26 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x40000000002902) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000280)={0x10, 0x0, 0x4, 0x0, [{&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x40000000000000}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil}], ['./file\x00', './file0\x00', './file0\x00', './file0\x00'], './file0\x00', './file0/file0\x00', './file0\x00', ['./file', './file', './file', './file']}) r0 = syz_open_pts() openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140)='/dev/wskbd\x00', 0x8000, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x8, 0x0) close(r0) stat(&(0x7f0000000000)='./file\x00', &(0x7f00000000c0)) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) r1 = syz_open_pts() close(r1) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000080)) fcntl$dupfd(r0, 0x0, r1) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffff9c, 0x0, 0x95) pwritev(r2, &(0x7f0000000500), 0x100000000000011f, 0x0, 0x0) 18:06:27 executing program 1: ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x2}, {0x18, 0x0}}, 0x552) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080)='/dev/speaker\x00', 0x42, 0x0) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080)='/dev/speaker\x00', 0x42, 0x0) r5 = dup(r4) pwrite(r5, &(0x7f00000000c0)='N', 0x1, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/104, 0x68, 0x40, &(0x7f0000000240)=@abs={0x0, 0x0, 0x3}, 0x8) r6 = dup(r3) pwrite(r6, &(0x7f00000001c0)='T5', 0x2, 0x0, 0x0) ioctl$BIOCGETIF(r6, 0x4020426b, &(0x7f0000000100)=ANY=[@ANYBLOB="0000c3793b61dd1b89b1657f0000000000000000"]) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x20000000000000bf, &(0x7f0000000000)=[{0x44, 0x0, 0xfd}, {0x2d}, {0x6}]}) 18:06:27 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e0000001"], 0x1) r0 = socket(0x2, 0x8000, 0x1) connect$unix(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6351615b749840fb3ae3e65fb2b41e6c11ff5100ff8f8994bb2d6efc9dc51e31c4d48ed7a0f2e4acf73a19915a3243e752b9a891192d6dd6e298dec1e4f13b41"], 0x1) r1 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="071400000f370025ff149b33ff0f000000000000", 0x14) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffffc4, &(0x7f00000001c0), 0x1, 0x0}, 0x4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r2, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r2, 0x20005302, &(0x7f0000000140)) getsockopt(r2, 0x8, 0x80000000, &(0x7f0000000240)=""/137, &(0x7f0000000140)=0x89) socketpair(0x2, 0x8000, 0xd5, &(0x7f0000000180)) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') login: pckbd_enable: command error 18:06:27 executing program 0: r0 = socket(0x11, 0x1, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b1000503b1000000000001000701000000000000cea1fea7fef96ecfc73fd3357af96caa0416e74f376336acf00a7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282902e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657ae00000002000000000000020208a371a3f8000400000000000000d3c883b400000000000000", 0xb1, 0x0, 0x0, 0x0) 18:06:27 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa7289b75c479b86dd60451a7c00c50300000000000000000000000081000000bbfe8000000000000000000000000000aa"]) syz_emit_ethernet(0x400e, &(0x7f0000000000)="c7a895006f53dd000005ffff86dd") pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) r2 = accept(r1, &(0x7f0000000080)=@un=@abs, &(0x7f00000000c0)=0x8) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f0000000100)=r2) 18:06:27 executing program 1: r0 = socket(0x400000000018, 0x3, 0x3a) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x2}}, 0x36e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x18, 0x4003, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) dup2(r2, r1) socket(0x2, 0x5, 0x6) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r3 = dup(r1) sendto$inet6(r3, &(0x7f0000000040), 0x43000, 0x0, 0x0, 0x0) 18:06:27 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f00000001c0)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x25}, {0x30}, {0x6, 0x0, 0x0, 0x100}]}) r1 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000140)=0x4000000008) read(r1, &(0x7f0000000100)=""/24, 0x18) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty\x00', 0x1, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x200000000025}, {0x400000060}, {0x6}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r5 = socket(0x2, 0x1, 0x4) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse\x00', 0x200, 0x0) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x200000000025}, {0x400000060}, {0x6}]}) poll(&(0x7f0000001180)=[{r1, 0x10}, {r2, 0x20}, {r3, 0x4}, {r4, 0x8}, {r1, 0x40}, {r5, 0x4}, {0xffffffffffffffff, 0x10}, {r6, 0x20}, {r7, 0x2e}, {r1, 0x100}], 0xa, 0xff) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000001280)={'tap', 0x0}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0xffffffff, 0x2) r9 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIONBIO(r9, 0x8004667e, &(0x7f0000000140)=0x4000000008) read(r9, &(0x7f0000000100)=""/24, 0x18) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r11 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty\x00', 0x1, 0x0) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r12, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x200000000025}, {0x400000060}, {0x6}]}) ioctl$BIOCSETIF(r12, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r13 = socket(0x2, 0x1, 0x4) r14 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse\x00', 0x400a4, 0x0) r15 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r15, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x200000000025}, {0x400000060}, {0x6}]}) poll(&(0x7f0000001180)=[{r9, 0x10}, {r10, 0x20}, {r11, 0x4}, {r12, 0x8}, {r9, 0x40}, {r13, 0x4}, {0xffffffffffffffff, 0x10}, {r14, 0x20}, {r15, 0x2e}, {r9, 0x100}], 0xa, 0xff) ioctl$BIOCSDLT(r10, 0x8004427a, &(0x7f00000012c0)=0xd5000000) ioctl$TIOCSETAF(r8, 0x802c7416, &(0x7f0000000140)={0x7, 0x3, 0x1, 0x81, "87d4a721c1c356adcb666074fd47bacba4cb1aa7", 0x400, 0x1}) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 18:06:27 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x3a0914c44f7b202c, 0x1b00) r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="00000018620495f88a002b3a0000030083caf7afb9d8dcd161342e", 0x1b}], 0x278) execve(0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./bus\x00') 18:06:27 executing program 0: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r2, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0xa4) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000280)={0x3, 0x39}) write(r1, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)={0xfffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x400}]}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r4, 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) r5 = syz_open_pts() close(r5) ioctl$TIOCSPGRP(r5, 0x40047477, &(0x7f0000000080)) mmap(&(0x7f00001a1000/0x2000)=nil, 0x2000, 0x0, 0x30, r5, 0x0, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munlock(&(0x7f0000101000/0x4000)=nil, 0x4000) r6 = syz_open_pts() close(r6) ioctl$TIOCSPGRP(r6, 0x40047477, &(0x7f0000000080)) r7 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r7) fcntl$lock(r6, 0x8, &(0x7f00000002c0)={0x2, 0x1, 0x38f, 0x4, r7}) r8 = socket(0x2, 0x1, 0x0) r9 = socket(0x2, 0x3, 0x0) getppid() ioctl$BIOCFLUSH(r1, 0x20004268) r10 = fcntl$dupfd(r8, 0x0, r9) r11 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r11, 0x0, 0x0) sendto$inet6(r11, &(0x7f0000000000)="ac77c4c90b9265dba46611b7f70e61efb54258fda8165646df7fe605d1ce8ed8811c1ac2e2ca9a2e51e6589c0190e666bc1d32274ddb08d444dc1be190455f125e34", 0x42, 0x200, &(0x7f0000000080)={0x18, 0x0, 0x7ff, 0x9}, 0xc) ioctl$TIOCFLUSH(r10, 0x802069af, &(0x7f0000000300)) 18:06:27 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="4402", 0x2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000080)={0x2, 0x1}) r1 = socket(0x2, 0x400000000002, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8) 16:00:00 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xee], [0x0, 0x0, 0x482]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r0, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0x20005302, &(0x7f0000000140)) ioctl$VT_SETMODE(r0, 0x80087602, &(0x7f0000000000)={0x1, 0xb7, 0x1, 0x5, 0x1}) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) 16:00:00 executing program 1: socketpair(0x18, 0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r0, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0x20005302, &(0x7f0000000140)) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000), 0xc) 16:00:00 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="368f134ed24b10b551643a2d4f53c294bd57f4c4d02d97ea553cf5da06a2cc7b72d94dc1e090c3f939ad07fbb52d0c2a77b18427ce9d3fff5101f2dcc01adea7a04e0143b5cbd1", 0x47}, {&(0x7f00000000c0)="19f4998cc011dceb2e", 0x9}, {&(0x7f00000003c0)="e15999d9aee952b631b12c1d305efbc81d7d05f0eb244fbcfd43a87c1d93", 0x1e}], 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0, 0x2) shmget$private(0x0, 0x200000, 0x180, &(0x7f0000000000/0x200000)=nil) r1 = semget$private(0x0, 0x0, 0x40) semctl$GETPID(r1, 0x4, 0x4, &(0x7f0000000300)=""/176) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0xdd5e, 0x9, &(0x7f0000000280)=""/99, &(0x7f0000000080)=0x63) accept$inet6(r2, &(0x7f0000000240), &(0x7f00000001c0)=0xc) 16:00:00 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x5b) setreuid(0xee00, 0x0) r0 = getuid() mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = getuid() setreuid(0xee00, r1) socket(0x3f, 0x8000, 0x4) unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='W\x00') 16:00:00 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xbff7ffffffffffff], [0x0, 0x0, 0x401]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x2, 0x0) r0 = syz_open_pts() close(r0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) r1 = syz_open_pts() close(r1) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) 16:00:00 executing program 0: r0 = shmget(0x0, 0x5000, 0x524, &(0x7f0000ff9000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x2}, {0x1c}, {0x6}]}) getuid() syz_emit_ethernet(0x395, &(0x7f0000000400)="e4") 16:00:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x8) setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = semget(0x3, 0x3, 0x1) r2 = getuid() r3 = geteuid() setreuid(r2, r3) r4 = getegid() r5 = getuid() r6 = geteuid() setreuid(r5, r6) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r7, &(0x7f0000000c80)={0x1, "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"}, 0x44b, 0x800) msgctl$IPC_SET(r7, 0x1, &(0x7f00000000c0)={{0x6, r3, r4, r2, 0x0, 0x0, 0x9}, 0x7fffffff, 0x4000000003f, 0xffffffffffffffff, 0x0, 0x20000000095fe, 0x2e3, 0x8, 0x2}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r9 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r9, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r9, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r9, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/371], 0x1, 0x7fb) msgrcv(r9, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r9, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r9, &(0x7f0000000480)={0x3, "5aab059e7584be19de16d8a32e0c5d7858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229d0000d8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b9d3f3d263490ee4823aa6156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c451df0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c5f2470a3deaf000000000000"}, 0x222, 0x40000000000800) r10 = getuid() r11 = geteuid() setreuid(r10, r11) r12 = getegid() r13 = getuid() r14 = geteuid() setreuid(r13, r14) msgctl$IPC_SET(r9, 0x1, &(0x7f00000000c0)={{0x6, r11, r12, r14, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) getgroups(0x4, &(0x7f0000000300)=[r4, r8, r12, 0xffffffffffffffff]) r15 = getuid() setreuid(0xee00, r15) r16 = getuid() r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r22, &(0x7f0000000c80)={0x0, "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"}, 0x113, 0x800) msgctl$IPC_SET(r22, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r21, 0x0, 0x88, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x20000000095fe, 0x2e3, 0x138, 0x2}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r24 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r24, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r24, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r24, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/371], 0x1, 0x7fb) msgsnd(r24, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r24, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r24, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r24, &(0x7f0000000480)={0x3, "5aab059e7584be19de16d8a32e0c5d7858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229d0000d8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b9d3f3d263490ee4823aa6156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c451df0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c5f2470a3deaf000000000000"}, 0x222, 0x40000000000800) r25 = getuid() r26 = geteuid() setreuid(r25, r26) r27 = getegid() r28 = getuid() r29 = geteuid() setreuid(r28, r29) msgctl$IPC_SET(r24, 0x1, &(0x7f00000000c0)={{0x6, r26, r27, r29, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) getgroups(0x4, &(0x7f0000000300)=[r19, r23, r27, 0xffffffffffffffff]) chown(&(0x7f00000002c0)='./file0\x00', r16, r19) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000040)={{0x400, r0, r8, r15, r19, 0x82, 0x4928}, 0x5, 0x8000}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 16:00:00 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r1, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x40, 0x0) preadv(r0, &(0x7f0000000180)=[{}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/174, 0xae}], 0x7, 0x0, 0x9b) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x36, &(0x7f0000000080)=[{0x5, 0x2, 0x5}, {0x2c, 0x0, 0x0, 0xfffffffd}, {0x6, 0x20, 0x0, 0x100}]}) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r2, 0x0, 0x0) r3 = getpgrp() r4 = geteuid() r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r5, 0x0, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f00000007c0)={0x1, 0xffffff36, 0x8, 0xff, "172c6cf51f023957a67a490395ab15b1e1c9edb0", 0x1, 0x7ff}) setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000780)={r3, r4, r6}, 0xc) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r7, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r7, 0x20005302, &(0x7f0000000140)) ioctl$VMM_IOC_TERM(r7, 0x80045604, &(0x7f0000000800)={0x3ff}) 16:00:00 executing program 1: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="028800212af5ff4567bf9d309a7d2b2b"], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r0) ioctl$TIOCOUTQ(0xffffffffffffff9c, 0x40047473, &(0x7f00000005c0)=0x10) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x400000000018, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@in6={0x18, 0x2, 0xfff, 0x2}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000300)="4ea148eb7462765e6ee2a70fa5334b792598e8b29803fd4b2e832c1037c1ca4a736f51e3bca9c893e7cb89fa6cf62f1027b48f22bc39ba63842cedde2419f0de4e7c59b383943105c46098a8cf89ed49086375668bfa63654969d5fd54e16d7fc038e488a10fed305b0afcb842754eb9ef744b8eea432d73847b1b4d31c886b62befd080d75c3f185486260ca48d613f47bad3629929750dfdb9022dd08c08739e6838b5fa165878b8", 0xa9}, {&(0x7f00000003c0)="829e366a085aca07494065f391c243c5632cdd1c4a9cce3db2f3a7968c5b448e98c44e96f7522eec36bbd0259a6985081a9b6bfedd69d795b73b33b59c414b95bc520883990322df2976a128d479db65c0d250b9d19b59906c8a93b0507d105c64ad732781cf7770c4f71be0d3ae3d1496ba8862e2dec6d2013054e9203ebdec0c011def3d621a4e7dc4d49f80cd876f98b4db50ee0ce0dbb535dee7e25149789eef6230ac35ae998c74e249f77ecc4bcbf9cab20d127f2137a0cfaa42581d21f651c6ce7789981e8962e8ec57a5cc68d4b9c6a8ac51885977a3dc0e8ef7a24eb64da49ced16c22a6bc2c5a728a04051bc1d", 0xf2}, {&(0x7f00000004c0)="02cd7b9b4c09c5d9b4c9ec44fc7e9d974829d237103c86c5075ef885147c271d3f996403cbfe6ed096393f84f837ac1844d822b9502c7c1a0c4face5a73b938b7d7ba0b44a70d8948e6ef06368595914206e8030a118bf54ffbb2c4427514a09380e1027a2160fe1af3bbac6e9900bd9ab02bee43861411e75cb55c93a99833c5bd7904364e3ccbfb6bcf26d35ca95ff5b6d37467ab573e7ef063050454dee13c943fcc9c9dec0051a0a567ffef4de7491969d0c91b3ff2e97ceb23fe999b1d1f42022fc03d3512b9e8d717f1772f04af5c4182535ebfe2e6e6955e2c1", 0xdd}, {&(0x7f00000005c0)}], 0x4, &(0x7f0000000640)=[{0x70, 0x0, 0x7, "04c9ee5d3c7344933207603a7bd6c668a62cf21947ca46bf9dc88908c14910daaa67a26a53685975ffb2522faeb21ecdb17c3ed57bd0cae125409790c1c0a16ed3cd6b9b68ce84a8303f83eaebe36b080baf639be8c5af7ff86980024019f4"}], 0x70}, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r6, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r6, 0x20005302, &(0x7f0000000140)={0x0, [{0x0, 0x80d}]}) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) r8 = syz_open_pts() close(r8) ioctl$TIOCSPGRP(r8, 0x40047477, &(0x7f0000000080)) r9 = syz_open_pts() close(r9) ioctl$TIOCSPGRP(r9, 0x40047477, &(0x7f0000000080)) r10 = dup2(r8, r9) r11 = syz_open_pts() close(r11) ioctl$TIOCSPGRP(r11, 0x40047477, &(0x7f0000000080)) r12 = syz_open_pts() close(r12) ioctl$TIOCSPGRP(r12, 0x40047477, &(0x7f0000000080)) r13 = socket$inet6(0x18, 0x5, 0x33) r14 = syz_open_pts() close(r14) ioctl$TIOCSPGRP(r14, 0x40047477, &(0x7f0000000080)) r15 = syz_open_pts() close(r15) ioctl$TIOCSPGRP(r15, 0x40047477, &(0x7f0000000080)) r16 = syz_open_pts() close(r16) ioctl$TIOCSPGRP(r16, 0x40047477, &(0x7f0000000080)) r17 = syz_open_pts() close(r17) ioctl$TIOCSPGRP(r17, 0x40047477, &(0x7f0000000080)) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(r7, &(0x7f0000000700)=[{{r10}, 0xfffffffffffffff8, 0xa6, 0xf0000000, 0xffff, 0x8}, {{r11}, 0xffffffffffffffff, 0x41, 0x20, 0x5, 0x1}, {{r12}, 0xfffffffffffffffa, 0x10, 0x2, 0x1, 0x5}, {{r13}, 0xfffffffffffffffc, 0x4, 0x4, 0x4, 0x8}, {{r14}, 0xfffffffffffffffa, 0x8, 0x8, 0x5, 0x2}, {{r3}, 0xfffffffffffffffe, 0x20, 0x20}], 0x79c, &(0x7f0000000800)=[{{r15}, 0xfffffffffffffffd, 0xc8, 0x4, 0x7fffffff, 0x7fffffff}, {{r16}, 0xfffffffffffffffe, 0x0, 0x40000000, 0x4, 0x5}, {{r17}, 0xfffffffffffffffb, 0xa4, 0x1, 0x3, 0x9}, {{r0}, 0xfffffffffffffff8, 0xc1, 0x4, 0x80000001}, {{r18}, 0xfffffffffffffffb, 0x22, 0x20, 0x7, 0x8001}, {{r4}, 0xfffffffffffffff9, 0x10, 0xffffb, 0x5, 0x132b}, {{}, 0xfffffffffffffffd, 0x10, 0x2, 0x9, 0x5}], 0x4, &(0x7f0000000900)={0x9, 0x2}) write(r7, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r7, 0x20005302, &(0x7f0000000140)) connect$unix(r7, &(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8) write(r2, &(0x7f0000000040)="100a2956b9223776", 0x21d) 16:00:00 executing program 0: r0 = socket(0x20, 0xa004, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b1000513600000000000100000100000000004fecea11ea8fef96ecfc73f53357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37281c02bff62c0a11c5db2b04fbb715d2f5a872c881ff7cc53c894303b22f310b404f366339b334b822467357aea8c500000002000000000000020208a371a3f80004000000000000000100000000000000001ca3fbf1565bcb378e21a837d44062cf24138a23484166bf12cb45ea7e6f7753fe4bdba56f4fd881", 0xd9, 0x0, 0x0, 0x0) 16:00:00 executing program 0: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000080)={0x1, 0xffff, './file0\x00', 0x4, 0x0, 0x7fffffff, 0x95}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x4401) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 16:00:00 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x104) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10006) ioctl$TIOCGFLAGS(r1, 0x4004745d, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x90) fchmodat(r3, &(0x7f0000000180)='./file0\x00', 0x2, 0x4) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x200, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) readlinkat(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/145, 0x91) 16:00:00 executing program 1: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="82"], 0x1) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x6, 0x3, 0x9) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x80000000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r1) r3 = socket(0x18, 0x2, 0x0) close(r3) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r4, 0x0, 0x0) mknodat(r4, &(0x7f0000000080)='./file0\x00', 0x80, 0x6) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, &(0x7f0000000040)="100a2956b9223776", 0x21d) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r5, 0x0, 0x0) getsockname(r5, &(0x7f00000001c0)=@un=@file={0x0, ""/108}, &(0x7f0000000100)=0x6e) 16:00:00 executing program 0: r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000180)=0x4b) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0, 0x0) mprotect(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r3, 0x0, 0x0) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000080)={0x80000, 0x8}, 0x8) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r4, &(0x7f00000002c0), 0x0) kqueue() ioctl$WSMUXIO_LIST_DEVICES(r4, 0x20005302, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000000)={'./file0\x00', 0x777, 0xffffffff, 0x5, 0x1, 0x8, 0x5, 0x4, 0x1, 0x1, 0x9, 0x4}) r5 = syz_open_pts() close(r5) ioctl$TIOCSPGRP(r5, 0x40047477, &(0x7f0000000080)) fchmod(r5, 0x10) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$TIOCGETA(0xffffffffffffff9c, 0x402c7413, &(0x7f0000000100)) 16:00:00 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x3080002000, 0x40004000000028ac) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80000000001, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="000000186204018b002b3a0000030083ca4fb4af0a405027e3e481106a0cc5579771368074868765e1d48c0f871ac08986d38fbd4827823ad900c5d1e33b088311cc626b791253ff99e6ca1bad5a8b8c1a79d2c024676a", 0x57}], 0x1) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/wsmouse0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001280)=""/130, 0x82}], 0x4) 16:00:00 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000006], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dd], [0x0, 0x0, 0x0, 0x2]}}) ioctl$WSDISPLAYIO_GETSCREENTYPE(0xffffffffffffffff, 0xc028575d, &(0x7f00000000c0)={0x9, 0xfffff84b, './file0\x00', 0x40, 0x5e41ec78, 0x6, 0xff}) r2 = syz_open_pts() mmap(&(0x7f00007c7000/0x1000)=nil, 0x1000, 0x1, 0x7012, r1, 0x0, 0x10000) fcntl$lock(r2, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x100000000}) flock(r2, 0x2) fcntl$lock(r2, 0x10000000000009, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x20002fffffffd}) dup(r2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket(0x2, 0x3, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TIOCFLUSH(r6, 0x8020691f, &(0x7f0000000300)) pmap_unwire: wiring for pmap 0xfffffd807efff2b8 va 0x20ffb000 didn't change! pmap_unwire: wiring for pmap 0xfffffd807efff2b8 va 0x20ffc000 didn't change! 16:00:00 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x5b) setreuid(0xee00, 0x0) r0 = getuid() mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) setuid(0xffffffffffffffff) r1 = getuid() setreuid(0xee00, r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r2, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r2, 0x20005302, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}) r3 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r3) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r5 = shmget$private(0x0, 0x3000, 0x404, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r5, 0x0, 0x0) shmctl$IPC_SET(r5, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r7 = getgid() r8 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000600)='./file0\x00', r10, 0x0) r12 = getgid() setegid(r12) r13 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r13, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000340)=0x1ff) accept$unix(r13, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r13, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r13, 0x40087468, &(0x7f00000001c0)) fchownat(r13, &(0x7f0000000080)='\x00', r14, r12, 0x6) r15 = getgid() setegid(r15) r16 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r16, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(r16, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) accept$unix(r16, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r16, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r16, 0x40087468, &(0x7f00000001c0)) fchownat(r16, &(0x7f0000000080)='\x00', r17, r15, 0x6) r18 = semget$private(0x0, 0x7, 0x287) semop(r18, &(0x7f0000000180)=[{0x6, 0x2000000000101}, {0x2, 0x1f}], 0x2) semop(r18, &(0x7f0000000140)=[{0x3, 0x7, 0x1000}, {0x2, 0x2, 0x800}, {0x1, 0x8}, {0x0, 0xe490000000000000, 0x1800}, {0x3, 0x400, 0x1c00}], 0x5) semop(r18, &(0x7f0000000580)=[{0x0, 0x3, 0x1000}], 0x2aaaaaaaaaaaae70) semctl$GETNCNT(r18, 0x2, 0x3, &(0x7f0000000000)=""/9) semctl$IPC_SET(r18, 0x0, 0x1, &(0x7f0000000240)={{0x81, 0xffffffffffffffff, r15, r14, r15, 0x1ea, 0xfffffffffffffffd}, 0x7fff, 0x7}) lchown(&(0x7f0000000280)='./file0\x00', r10, r15) lchown(&(0x7f00000001c0)='./file0\x00', r10, r11) r19 = getppid() r20 = geteuid() r21 = getegid() chown(&(0x7f0000000a40)='.\x00', r20, r21) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000080)={{0x6, r10, r6, r20, r7, 0x1e6, 0x8}, 0x4005, 0x9, r19, r8, 0xfffffffffffffe01, 0x7fff, 0x7ff}) r22 = socket(0x20, 0x3, 0xf7) r23 = syz_open_pts() close(r23) ioctl$TIOCSPGRP(r23, 0x40047477, &(0x7f0000000080)) r24 = syz_open_pts() close(r24) ioctl$TIOCSPGRP(r24, 0x40047477, &(0x7f0000000080)) r25 = syz_open_pts() close(r25) ioctl$TIOCSPGRP(r25, 0x40047477, &(0x7f0000000080)) r26 = syz_open_pts() close(r26) ioctl$TIOCSPGRP(r26, 0x40047477, &(0x7f0000000080)) r27 = syz_open_pts() close(r27) ioctl$TIOCSPGRP(r27, 0x40047477, &(0x7f0000000080)) r28 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000380)=0xc) r29 = syz_open_pts() close(r29) ioctl$TIOCSPGRP(r29, 0x40047477, &(0x7f0000000080)) r30 = syz_open_pts() close(r30) ioctl$TIOCSPGRP(r30, 0x40047477, &(0x7f0000000080)) r31 = syz_open_pts() close(r31) ioctl$TIOCSPGRP(r31, 0x40047477, &(0x7f0000000080)) r32 = kqueue() pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x10004) r34 = open(&(0x7f0000000400)='./file0\x00', 0x20, 0x41) sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000280)=[{&(0x7f0000000140)="0cf09d4907f37f6136bdda697aa4d78e209282ab96a6d756ab9644ffdc4307e142d6aafad9e571d01712ad9d3178a7fbde2c2849875aef52810cb5c2a9ca7bcc6f5cc8ea289de6ac58c92353ed1cea87d53bce70ee77d66a11e09c074d3530079df9c978425e7372b107680f170f3c88", 0x70}, {&(0x7f00000001c0)="e363755420da25ce0916d102bc06cec9c8e60b474cc592948970a01c", 0x1c}, {&(0x7f0000000200)="85d60dca6c85e8171280", 0xa}, {&(0x7f0000000240)="e45386ab41f74ac22d5602d783e05236f2f88a403ba00b340c22d7972f", 0x1d}], 0x4, &(0x7f0000000440)=[@cred={0x20, 0xffff, 0x0, r3, r4, r6}, @rights={0x20, 0xffff, 0x1, [r22, r23, r24]}, @rights={0x30, 0xffff, 0x1, [r25, r26, r27, r28, r29, 0xffffffffffffff9c, r30]}, @rights={0x20, 0xffff, 0x1, [r31, r32, r33, r34]}], 0x90, 0xa}, 0x4) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)='x\x00') 16:00:00 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0xd0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x60491b75656ea04c, 0x0) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x200, 0x110) linkat(r0, &(0x7f00000001c0)='./file0/file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x4) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2d53b6584dddbb69) ioctl$TIOCOUTQ(0xffffffffffffff9c, 0x40047473, &(0x7f0000000080)=0x5) chdir(&(0x7f0000000280)='./file0/file0\x00') setuid(0xee01) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x10004) ioctl$TIOCSETVERAUTH(r2, 0x8004741c, &(0x7f0000000340)=0xffffff01) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='r\x00') execve(0x0, &(0x7f0000000180)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='r\x00') 16:00:00 executing program 1: r0 = socket(0x400000000018, 0x3, 0x3a) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0xc) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r2, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r2, 0x20005302, &(0x7f0000000140)) ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f00000001c0)={0x2, 0x4}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x3}}, 0x27d) r3 = msgget$private(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/78}, 0x56, 0x1, 0x1000) msgsnd(r3, &(0x7f0000000080)={0x1, "7ae64b03241a37a3ae2911df526e712a6dbdeb414e66c9507f9a6fec607b8c7508598133aef7a809f0c095c6577fdf6a830015ca34bed08eb2f41ce6ac508e350d62b129fce9b0aa8669494745dfc2845fa35af22012ea420c14ae73cb2230b10e9d481917d8f0"}, 0x6f, 0x800) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000100), 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140), 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xffffff80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r5) getgroups(0x1, &(0x7f0000000180)=[r5]) 16:00:00 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x64}, {0xfff6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000280)="d057080000005f593b2146d3a25a") r1 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r1) fcntl$setown(r0, 0x6, r1) 16:00:01 executing program 0: kqueue() close(0xffffffffffffffff) r0 = socket(0x2, 0xc003, 0x2) setsockopt(r0, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4) r1 = kqueue() r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) execve(0x0, &(0x7f0000000180)=[&(0x7f0000000100)=',.\x00'], 0x0) pipe(&(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x0}, 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty\x00', 0x8, 0x0) ioctl$TIOCCDTR(r4, 0x20007478) rmdir(&(0x7f0000000100)='./bus\x00') r5 = open(&(0x7f00000000c0)='./bus\x00', 0x5, 0x0) write(r5, &(0x7f0000000040)="670dc3", 0x3) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r6, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r6, 0x20005302, &(0x7f0000000140)) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r7, 0x0, 0x0) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0x284) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r13 = fcntl$getown(r9, 0x5) r14 = shmget$private(0x0, 0x2000, 0x310, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r14, 0x1, &(0x7f0000000540)={{0x240000000, r11, r12, r11, r12, 0x20, 0x2}, 0xffffffff00000000, 0x7fff, r10, r13, 0x41d, 0x5, 0x5}) fchownat(r6, &(0x7f00000001c0)='./file0\x00', r8, r12, 0x6) 16:00:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x2, 0xc003, 0x0) connect$unix(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x10) socket(0x0, 0x8000, 0x4a) dup2(r1, r0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000000)=0x43cbc, 0x4) r2 = dup(r0) shutdown(0xffffffffffffffff, 0x0) r3 = socket(0x2, 0xc003, 0x0) setsockopt(r3, 0x0, 0x23, &(0x7f0000000000), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 16:00:01 executing program 1: ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "1700"}) pledge(&(0x7f0000000000)='tap', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000040)=""/27) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCFLUSH(r2, 0xc028698a, &(0x7f0000000000)) 16:00:01 executing program 0: r0 = syz_open_pts() flock(r0, 0x3) fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x100000000}) close(r0) socket(0x18, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) r3 = syz_open_pts() close(r3) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000080)) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1, 0x4813, r3, 0x0, 0x1c5515cf) write(r2, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r2, 0x20005302, &(0x7f0000000140)) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000080)={0x7, 0x40000000000000}, 0x10) openat(r1, &(0x7f0000000000)='./file0\x00', 0x200, 0x40) 16:00:01 executing program 1: r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080)='/dev/speaker\x00', 0x42, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="1dc0aba50272bfba387ad878eafa9f43bdcaffe770a37949dcc0e4933ffd1dbde9a1e119d4942bdbad47c85423a2a9c6423437", 0x33}], 0x1) execve(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) r2 = accept(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) r3 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) setuid(r5) r6 = shmget$private(0x0, 0x3000, 0x404, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r6, 0x0, 0x0) shmctl$IPC_SET(r6, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r8 = getgid() r9 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000600)='./file0\x00', r11, 0x0) r13 = getgid() setegid(r13) r14 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r14, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000340)=0x1ff) accept$unix(r14, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r14, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r14, 0x40087468, &(0x7f00000001c0)) fchownat(r14, &(0x7f0000000080)='\x00', r15, r13, 0x6) r16 = getgid() setegid(r16) r17 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r17, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(r17, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) accept$unix(r17, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r17, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r17, 0x40087468, &(0x7f00000001c0)) fchownat(r17, &(0x7f0000000080)='\x00', r18, r16, 0x6) r19 = semget$private(0x0, 0x7, 0x287) semop(r19, &(0x7f0000000180)=[{0x6, 0x2000000000101}, {0x2, 0x1f}], 0x2) semop(r19, &(0x7f0000000140)=[{0x3, 0x7, 0x1000}, {0x2, 0x2, 0x800}, {0x1, 0x8}, {0x0, 0xe490000000000000, 0x1800}, {0x3, 0x400, 0x1c00}], 0x5) semop(r19, &(0x7f0000000580)=[{0x0, 0x3, 0x1000}], 0x2aaaaaaaaaaaae70) semctl$GETNCNT(r19, 0x2, 0x3, &(0x7f0000000000)=""/9) semctl$IPC_SET(r19, 0x0, 0x1, &(0x7f0000000240)={{0x81, 0xffffffffffffffff, r16, r15, r16, 0x1ea, 0xfffffffffffffffd}, 0x7fff, 0x7}) lchown(&(0x7f0000000280)='./file0\x00', r11, r16) lchown(&(0x7f00000001c0)='./file0\x00', r11, r12) r20 = getppid() r21 = geteuid() r22 = getegid() chown(&(0x7f0000000a40)='.\x00', r21, r22) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000080)={{0x6, r11, r7, r21, r8, 0x1e6, 0x8}, 0x4005, 0x9, r20, r9, 0xfffffffffffffe01, 0x7fff, 0x7ff}) r23 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) setsockopt$inet6_MRT6_ADD_MIF(r23, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r26 = fcntl$getown(r23, 0x5) r27 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000005c0)={0x0}, 0xc) shmctl$IPC_SET(r27, 0x1, &(0x7f0000000540)={{0x240000000, r24, r25, r24, r25, 0x1, 0x2}, 0xffffffff00000000, 0x4, r28, r26, 0x41d, 0x5, 0x5}) r29 = getuid() setreuid(r29, 0xffffffffffffffff) r30 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r30, 0xffff, 0x1023, 0x0, 0x0) getsockopt$sock_cred(r30, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000640)=0xc) r32 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r33, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x170}, 0x402) getsockopt$SO_PEERCRED(r33, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r35 = fcntl$getown(0xffffffffffffff9c, 0x5) r36 = getppid() getpgid(r36) r37 = msgget$private(0x0, 0x20000003c4) msgrcv(r37, &(0x7f0000000440)=ANY=[@ANYBLOB="bc001b9f"], 0xc, 0x2, 0x1000) msgsnd(r37, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000000000000d92f87a67d790805fabdeb194bc4d3f27cb6ec554c20117c2e4b5f7a3f1c2dbc6910374426bdcf306843b34f7c027e266a4bef296a85554c457623f5c6502fe1501e442c8367ca128ed16d13c44d48af8ce2cb64731badc01f0ca8000"/115], 0x1, 0x0) msgsnd(r37, 0x0, 0x0, 0x1800) msgsnd(r37, &(0x7f0000000f00)=ANY=[@ANYBLOB="010000000000000048696a280567b1a6342fcc8ec5d56f596329414fa22f5c0ed193424179fc7838ed1880ec98dda3b1f7b0aa695bd8017a0713001b080b5a33b013115035c478dfb0db5d374f0464c8f4468afa1b4f38812b4c90a02f4a339eb2ab26df0bc0149eb9c983da6d08000000000000005f7fd0cbac6480fb4b1d3e0308079e1900d90ab7456e72578ec9dc0fb7b40c506e70ce9f384e53a14f8d865cd209f870aa6eb9165597ac8bd39febd3231d79694e2edd843af4283c2aebe8e4462dc504cde26ca7426e9cbae14dd7f22103d91449cd6ddc46786413ffc03e366a215314c501f602bc690d3fe33a2f458f34d4ea8243d4"], 0x2d, 0x800) msgctl$IPC_SET(r37, 0x1, &(0x7f0000000980)={{0x1, r32, r34, r31, 0x0, 0x142, 0x9f9}, 0x8001, 0x1, r35, r36, 0xa5, 0x1, 0x4e2c, 0x6}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, r25, r29, 0x0, 0x12, 0x80000000}, 0xd, 0xaf, r26, r35, 0x0, 0x94, 0xffff}) getgroups(0x3, &(0x7f00000002c0)=[0x0, r8, r25]) sendmsg$unix(r2, &(0x7f0000001700)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000001600)=[{&(0x7f0000000100)="12f6e6c569ce5ddcbdb4abdf7e1e3f6063bf7f05513604f5c7093e6e4a8ed995e8fd447941d0644b6990cd1b46c23ac1c19c3ad143fa603c54d6e6313ea37f86740e26c80b61e2e20b4d22f10d38b1eaff2b3237d1", 0x55}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000180)="5ff9c200f1739ba86202", 0xa}, {&(0x7f00000001c0)="083972f86cd2ff49ec096738c0be8645aa774b9f877d377527fab8e2d860c63f3514e415b33417ee416312c3837c450ba4bd6ee89ec287c1cd74422343eb28f59f3d0f3fe08e5b9da2237e1bb82a0e310ba93daf8d91456977b1b46edb45839dd61a3049", 0x64}, {&(0x7f0000000280)="af211341db6ea01bebca4b60069da37fb31d404c2f11eb35b7fb6c0fa4381dec4f9a4bfa0a8e0073762052a2c12cc61b2e1a3ef67aed0da78f474c25ddfec1dc8acd3cf033aaf5f64cbc8ff2bbe878642c340bb2b1211edc1fab72261ebfdd08958d874f9910903cbdfc5113559f664756608778f0c29b0d796ab6cf631052864030a86fe98fe0301449734f894ad1491e7540f7d99f2017e5ce7c0fbea49557ebdd28f84e7f7e6b088fd0face0d59893b288f2f844cb784cc4f135fc69eb85d00bdeab9a3f41936b13124abf64f11af98717682cce4d5a53876bbba15ccaae8e3cdc57173ac9f513515474e9dde998601f808", 0xf3}, {&(0x7f0000000380)="3dad5cb5472a4a2d550b560965fd49f45d5a52799c5d3f5ed051", 0x1a}, {0x0}, {&(0x7f0000001400)="c9bbcdf87a5ab9f7373354d205c77d3790c49bb23411a0d7cd71fb15d04e47d6b5c886f94d2b56805ff180cc49ec4bfe3866320aa9fcfbd55324c7b1a96ef038b98ad92d7a25c01570b86a77edacba6201d42194584357b74a006ae1f7bc2c46af4765a107fc39819a7e4f241ee657a1bcd9c352df8a4bd6ec39010a0c059248e96a1cde05bb966eb900a24ba4873c645811fc68bb679793da030496ef8fcba7c386bc0ae7be110312a59d3e5972c4651e926bcb5853cc91030dd224af9a82991aa38cc5adf3e02540c4df6236e6f8e9db34acf8ec801bb4d8cc9b5b7e752774aaa204596e883fbb70dde3730b5f41573ea0", 0xf2}, {&(0x7f0000001500)="01e6b1c864cb3251c247d6a9bb9c8f665db1107376bf93f3b573736e0fc671b5e84257b9bef5224647eac022b8b93bf044508166280e9e384e6aff00c4f991a28bdbe311a45bf87efd5b2644bb030924d945615646d3e8c5eb495ed8d576a379db2c5db9ef6c87b83adbcc4e368c1c0068e88fd53750052cf2c7bb4723bd86f4a9bd6548b5ac6a63146045ae64680a9f04674998c9c3ce46fd383c3de0b7d96ef8767fe61e2cd65657385e823530a7dbe2855771e299921d3e28db380043b85cfa13b16959fbfec6d16386012b0cd58227b6dce4", 0xd4}], 0x9, &(0x7f00000016c0)=[@cred={0x20, 0xffff, 0x0, r3, r5, r8}], 0x20, 0x8}, 0x400) 16:00:01 executing program 1: ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000", 0x3}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, 0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000180)=0x6) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xfffffffc, 0x2, 0x0, 0x0, "010000000000000000ffffff7f00", 0x101, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x400000000018, 0x3, 0x3a) open(&(0x7f0000000080)='./file0\x00', 0x8, 0x10) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r5, 0x0, 0x0) ioctl$WSMOUSEIO_GTYPE(r5, 0x40045720, &(0x7f00000001c0)) ioctl$FIONBIO(0xffffffffffffff9c, 0x8004667e, &(0x7f0000000200)=0xffffffff) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x0, 0x4, 0x6}, {0x18, 0x1, 0x4, 0xac}, 0x2, [0x6, 0x6, 0x0, 0xaf, 0xa37, 0x3, 0x227, 0x1]}, 0x3c) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000240)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, &(0x7f0000000040)="100e2956b9223776", 0x8) 16:00:01 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x7d, 0x0, 0x4}, {0x15}, {0x6, 0x0, 0x0, 0x101}]}) pwrite(r0, &(0x7f0000000180)="f781ea80e21bb6f576c45af84a28", 0xe, 0x0, 0x0) 16:00:01 executing program 0: minherit(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20004000, 0x200000]}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r1, 0x0, 0x0) 16:00:01 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xb1}, {0x64}, {0x6}]}) syz_emit_ethernet(0x5, &(0x7f00000001c0)="26495b55a658d024cd62a548e0945ec2107104a5faa417d5af62646be2e78270f615056f7e9a2280527e0b04c09316883ea47cac3a102fc3c719ac303ad9bfb4925bea2adc3bbbbc11bf86e333eda6a2e859354d4ef750b457d76ebb7363ff57d57752a2b0d6e8c56bc4c6451262bdad20ca77f93e6df098c76a51ebda466e3fa07193cb651670a21b4e945629c196e67baefff993b9a74e6100be943c3847ac48b540eb3c7d4564cb09fbf83f4cad063375d37f3f874b6b8ee9fe00200020000000008895a02b7dc5f19fae37df1217ca1d2a26499c37094fa1661e696f") ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000180)={0x4, &(0x7f00000000c0)=[{0xf431, 0x0, 0x5, 0x3}, {0x7ff, 0xd5, 0xe1, 0x80000001}, {0x1, 0x5, 0x2, 0x7fffffff}, {0x9, 0x7, 0x4, 0x5}]}) 16:00:02 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x2001, 0x86134) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000180)={{0x18, 0x2}, {0x18, 0x2, 0x0, 0x190000}, 0x8, [0x1]}, 0xfffffffffffffe2e) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x5, 0x0) write(r0, &(0x7f0000000040)="670dc3", 0x3) r1 = msgget$private(0x0, 0xfffffffffffffffd) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x29, 0x32, 0x0, 0x0) setsockopt(r2, 0x29, 0x2a, &(0x7f0000000080)="54002393", 0x4) r3 = socket(0x2, 0x10000000000003, 0x33) connect$unix(r3, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) sendto(r3, &(0x7f0000000040)="1592", 0x2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000140)="010029ba97d0bba1248defae40f01df6", 0x10, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYPTR64, @ANYPTR64, @ANYRESOCT=r2, @ANYRES32, @ANYRESOCT=r3, @ANYRES16, @ANYBLOB="73a8fcc309ae3f5e92190ae662ed628e225f71bb8eaa49cb871d6c65df2e5d762d40ed053faaac253e770edb146c6d4b76151888e2cf067dbbb261fe6834361f57dbeea9e25a9387bbc0022e2b3ddd5074408067b8c8828daf9e993b84db943e713ebbb4f8fe6da2185fcd964572dfb02e259f6144c8ee8a2fe302711188b63bec"], 0x8, 0x7fc) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000001e40)=""/74) msgrcv(r1, &(0x7f0000000080)={0x0, ""/48}, 0x38, 0x2, 0x1000) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 16:00:02 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r1, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f0000000340)=r1) syz_emit_ethernet(0x192, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) r2 = syz_open_pts() close(r2) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000080)) ftruncate(r2, 0x0, 0x2) 16:00:02 executing program 0: mlock(&(0x7f0000003000/0x4000)=nil, 0x4000) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x10202, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x0) fcntl$dupfd(r1, 0x0, r1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = socket(0x2, 0x3, 0x0) r3 = syz_open_pts() close(r3) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000080)) r4 = syz_open_pts() close(r4) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f0000000080)) r5 = fcntl$dupfd(0xffffffffffffffff, 0xa, r4) fcntl$dupfd(r2, 0x0, r5) fcntl$dupfd(r1, 0x0, r2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0, 0x800000000000000) r6 = socket(0x2, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6(0x18, 0x1, 0xf7) pwritev(r8, &(0x7f0000000000), 0x0, 0x0, 0x6) ioctl$TIOCFLUSH(r7, 0x8040691a, &(0x7f0000000300)) connect(r7, &(0x7f0000000040)=@in={0x2, 0x1}, 0xc) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6) munlock(&(0x7f0000000000/0xa000)=nil, 0xa000) 16:00:02 executing program 0: getpid() mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) r2 = syz_open_pts() close(r2) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000080)) sendmsg$unix(r1, &(0x7f0000001400)={&(0x7f0000000000)=@file={0x1, './bus\x00'}, 0x8, &(0x7f0000001380)=[{&(0x7f0000001140)="0780bb140e2ba6cf0e974d6bc8c039c0cecc123f27cc4272b0afe3f7e8258989bacb96807e66496316f06ea8eb784b8f6b6daf2e0aec72d089f5ee44958fc0059da3fa430b01d6ab4608c13b8d0536ebc41ead8b8e21c45ee485a434f05f1fa360b0a68f24e62d61f4c54e8fdd70bd24b0b659a18298041f573af0964675fe5528e531f943942df356f3d8b634f7", 0x8e}, {&(0x7f0000001200)="a498173c8f0798aefc4511474581de6b10ab72de274110d34e723126e8d124e1ab5892744eac5711581f50963e750868307e545fa44ef51ada6daa2ebd07f690877e57b8518850d45c8b3b7851e086c75d5b34b8b4e9899b8b9b665bda1b26958e76cb651fd53b129da9a051f7dfc0ecd618869707d6e404878eb113bf2377d15b237a8d036e48935eb291482c5cb3e87d42b479b228e9560ede46a268a5a0035203fd2cff4d44e4bedd971f7dd998b15e74f23bdd2c68ed40511fb298751c5d6ac92fc0f87fe25713264e4fbcded05ce8923b4cc783c9c50847adca3cc504ecb9dab60a", 0xe4}, {&(0x7f00000000c0)="df37902714ad67896f9ef83ce5d9b0e05d449d53bf2cea1098dd805d3a71e94ceb943b21b6c0bffbef12", 0x2a}, {&(0x7f0000001300)="a16847a4107f5a3eef56d2860c4b51d998f33a0998836a06350645712584a739a46f882f43f25f76cad936344414b3ce9283fe1340af771d0809ab862b6a6f6a18d83f204f7941d1ae993798df0523d7412876cd3884426f47756f5c2fe0fd72c6bdaf26c8bdf2963158e164168ed6dd797b2a82cb24814d", 0x78}], 0x4, &(0x7f00000013c0)=[@rights={0x18, 0xffff, 0x1, [r2]}], 0x18, 0x3}, 0x40d) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000) 16:00:02 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x58dd526613957ed9, 0x0) r0 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8, 0x80) kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffffc, 0x9284eaa0731f5f4f, 0xf0000026}], 0x0, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0) kevent(r2, &(0x7f0000000140), 0x9, 0x0, 0x80, 0x0) 16:00:02 executing program 0: sync() getrusage(0x1, 0xffffffffffffffff) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty\x00', 0x200, 0x0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000040)) socketpair(0x2, 0x4000, 0x83, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000080)) r1 = msgget$private(0x0, 0xffffffffffffffdb) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x3, 0x1000) socket$inet6(0x18, 0x8001, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000180)="d16b5e5641eb8be31fc76c896b7e0f43edb0aeaf0a94bf86ffbc81f24a6fdadca3c344c8235c9862f0d19e05e9825079eee2e10b6511cbcdf54175540744e68b01ab474af598", 0x46}, {&(0x7f0000000200)="9504934c7d0a8a85f518b4619220b57c91cd9fc2ac4493103ba614e112d5cad0cfede4990cf92d6d43d472a5e1bf3dc17126c7a6ecdc0144ef0298d2e078cdfd21cdb19798e98d071d5891d92ef190d467f1358db47ac80a8a85cc1ca88f08ce9fe2ca3b9f2f73b376bd3f1723ddb4da9098097b89d404f3d327f1bdd94ed78f4a4a859f17e779eea1f56b39fcde4cf13bea960aafe40b9b7c6f31aef92008f48cf54876191a86e53c818d3d866ba4e75777297d3b99dae19db1f03f613b3c14a9c2b09b", 0xc4}, {&(0x7f0000000380)="3b352090e0d75ec8bfda5ff4bf61daea281043c730473f75fc1f4cd9f8192f69620ef8add3c6a0853aabf1f5cb9ec0272236bc30ae16a193da3ea4173d3312b91993f3777f74db4b162e84049959b83c3dbabaa52de9437b9f1f8090b17e22fa8f9f2e02ddb2c99370f60b3cb633d5b9", 0x70}, {&(0x7f0000000400)="304fc49ac68a45a5b4c9a9ae7c5fcf154d113c6a23bdc592aae44d881f7541ca8a18e2ce2e36d9edba0d0c6a8075337d8193cbc35c31b9ebe02f73c250a65c825178010615213f8c6308ed6abb7b0dfcf0e896daaa66f1d50495bda13cd42b78d7b05a0a44da26f8495be6262a4f3c340711c432e0fcae", 0x77}, {&(0x7f0000000480)="3f94fe7ebdd37c72d3a8165fc420a167f3877a239b701fbe8ee8d6b959226a637d3b7cd9fb9134c6debfcf051855a1ce69bfc2d4a14f8ec42821f440580601da6c1d516887418ef85974dca9a6b104d183df1ce423dc658e835d917fa3dd0d5d9f7ae42577e934630b57fa1382b8ef83a89da5ecec69c439ec6f42382012cbff8b5bc5bdd367515f7515b9640efcf4be06acc39b6a7adc411a919008ff9aadf9af34af28a71a0ae69d0c2fb8c258df27efd70d158df52c1c38984bbf0378b06652a07abb1b475f946896932b1f9e84ed29a130937acf2732383fc88648073250e4eeaeaa7ea5ced16064d8", 0xeb}, {&(0x7f0000000580)="6c9d7e4aa9592dbc5105a2eadeabcb5c85fed5af30b5d40950b0a1cc0080de790de41bb348743cfdeaa04f8883a6f7cd9b2a3cf77a4d4a8c2ef80d65772003dfc2824af7291ece67cb30a52bb00aefae6050b2755b3e43d3fd87e431158136a17d1af4f2038de9147f1564fd5c3420d02f3f6b5dc0ba95131bc7c9c0723b415378bd4a0fb61a4507ca0cc2d416d4737778515d92c5b62fb39a0c79626c6284fa0ae5", 0xa2}], 0x6, 0x0, 0x0) execve(0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000c5647a122df247a7732e000000db1fae2e77dfb0c0263ac371f5000000b90000000000000000"], 0x21, 0x1000) 16:00:02 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000006]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x800, 0x1, 0x0, 0x400}, {0x4, 0x9, 0xff, 0x1}, {0x401, 0x40, 0x0, 0x200}, {0x20, 0x1, 0x1, 0x6}, {0x2d79, 0x17, 0x1, 0x5}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x2, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r3, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r3, 0x20005302, &(0x7f0000000140)) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCFLUSH(r4, 0x8020691f, &(0x7f0000000300)) 16:00:03 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x2ff, 0x0, "f01d00200b0f000005000000ac39080500cad800"}) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r3, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r3, 0x20005302, &(0x7f0000000140)) ioctl$VT_GETSTATE(r2, 0x40067664, &(0x7f0000000080)) writev(r1, &(0x7f0000000480)=[{&(0x7f00000006c0)="855b2bfd64a46df26ab8f45afee2e80d9007e1cc0edf9cfd0b94f5a2ef55dd6516258a8a7bf13c6bc15b1886821dad253115286527361fc10d2bb294adc3aa67fb64c98954f5002192d8bbc6e89639b70619c6cae428360c962144c9a02c73ee543528a559399d72698f0df79a3c3bce57301257ae4092237e47bda81d135cbcf86a2e4f898257779c8905b119f43d8511b4f0d61c7360e3f231847fa7276019e1cf", 0xa2}], 0x1) 16:00:03 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2c}, {0x16}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0xf7, &(0x7f0000000340)) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080)='/dev/diskmap\x00', 0x0, 0x0) 16:00:03 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x30}, {0x7ffffffe}]}) syz_emit_ethernet(0x1000, &(0x7f0000000200)="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") clock_gettime(0x4, &(0x7f0000000080)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x8000) ioctl$WSDISPLAYIO_DELSCREEN(r1, 0x80085754, &(0x7f0000000180)={0x4}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0x2d0, &(0x7f00000001c0)="0c516d3f70e19318ca9bc32c1b26") 16:00:03 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x400004002c5, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = accept$unix(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x6e) accept$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8) r4 = geteuid() getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fchownat(r2, &(0x7f0000000180)='./file0\x00', r4, r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/210, 0xd2}, 0x0) sendmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff00000100000008cd7fdf03000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7], 0x28}, 0x0) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) lchown(&(0x7f0000000000)='./file0\x00', r4, r8) r9 = syz_open_pts() close(r9) ioctl$TIOCSPGRP(r9, 0x40047477, &(0x7f0000000080)) pwrite(r9, &(0x7f0000000340)="6ed062ab288b5c402af3b61f9bb028133d5dae312dcb63bb4cfc74a572d239dd35eaebc50d557ba24109573fcc9098a52cd12541f4166672abf8213aae7bf33b891483bb41ef08f0a2c3a68c2a58a3df43758ddcece171075259750ede13ed93a6892fe94e238463937b146e8dbf624918665304efad868a879839dac219c7723adaa979d0fb8ac7926562eebc6c37", 0x8f, 0x0, 0x8001) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='#', 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x2011, r0, 0x0, 0x0) r10 = semget$private(0x0, 0x7, 0x286) getuid() semop(r10, &(0x7f0000000000)=[{0x6, 0x4}, {0x3, 0x1, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x0, 0x1800}], 0x4) r11 = semget$private(0x0, 0x2, 0x66f) semop(r11, &(0x7f0000000100)=[{0x1, 0x3, 0x1000}, {0x2, 0x0, 0x1000}, {0x0, 0x6, 0x800}, {0x1, 0x0, 0x800}, {0x4, 0x80, 0x800}, {0x4, 0x2, 0x1800}], 0x6) semctl$SETVAL(r10, 0x0, 0x8, &(0x7f00000000c0)) semop(r10, &(0x7f0000000300)=[{0x0, 0x8, 0x1000}, {0x4, 0x7}, {0x4, 0x101, 0x800}, {0x1, 0x80}, {0x0, 0x4, 0x800}, {0x2, 0x100}, {0x0, 0x6}], 0x7) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) readv(r0, &(0x7f0000000000), 0x100000000000021b) r12 = syz_open_pts() ioctl$TIOCSETA(r12, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x7fffffff, "73f3267eafcce5081a6f09000000000000f200"}) 16:00:03 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x4) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x611, 0x0) pwritev(r0, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x2, 0x11, r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) pread(r1, &(0x7f00000000c0)="a60e9be3716b5826c0d31b5da18f2fd9e2b778c6f85877b93f09000000ce644f6a097c0a638eee579b6d7510cc87f6a7693520cd0e33fdb01a873a3cbca5ab9253927bc34e195237c6a53aa40cd440fa88dbf73b34dab7205dbf0c9f9cfcfd38b444514557", 0xff56, 0x0, 0xfffffff7fffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0, 0x0) 16:00:03 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = syz_open_pts() close(r0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x6, 0x40, 0xfffffffd, 0x0, "bbc5d0f334ffb73b8cbb000000004fbc00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) close(r3) socket(0x400000000018, 0x3, 0x3a) r4 = semget$private(0x0, 0x4, 0x1) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r4, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r5 = getgid() r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000800)=@abs={0x2, 0x0, 0x3}, 0x8) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r8 = getgid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r5, r7, r8, 0x10, 0x9}, 0x8, 0x1, 0x9}) semctl$GETVAL(r4, 0x4, 0x5, &(0x7f0000000180)=""/150) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0xe) write(r3, &(0x7f0000000040)="100a2956b9223776", 0x21d) 16:00:03 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "000000000000000100002000"}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x3d, &(0x7f0000000000)="06000000", 0x4) r1 = socket(0x18, 0x1, 0x0) close(r1) fcntl$dupfd(r0, 0x0, r1) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8) sendmsg(r1, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="10000000290000003300000000000400"], 0x10}, 0x0) 16:00:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x462, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x1c}, {0x14}, {0x4000006, 0x0, 0x0, 0x100}]}) pwrite(r1, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) r2 = open$dir(&(0x7f0000000280)='./file1\x00', 0x40000400000002c2, 0x0) ftruncate(r2, 0x0, 0x69a88df4) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/37, 0xfffffde0}], 0x1000000000000159, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() close(r4) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f0000000080)) r5 = syz_open_pts() close(r5) ioctl$TIOCSPGRP(r5, 0x40047477, &(0x7f0000000080)) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000340)={0x2, 0x0, 0x9, 0x4, "80629cbb7eab86b1a2ba5cfa3499c55fa0b44852", 0x8, 0x401}) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000300)) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000080)) read(r3, &(0x7f0000000180)=""/139, 0x8b) writev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)='q', 0x1}], 0x1) ftruncate(r0, 0x0, 0x20000a) 16:00:03 executing program 1: mlock(&(0x7f0000ff7000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_pts() close(r0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) fcntl$getflags(r0, 0x3cd49530a3844b00) ioctl$SPKRTUNE(0xffffffffffffffff, 0x20005302, &(0x7f0000000000)={0x384b, 0x2}) 16:00:03 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x80002000, 0x881) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x402, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) setuid(r2) r3 = getgid() chown(&(0x7f0000000140)='./bus\x00', r2, r3) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f00000000c0)) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 16:00:03 executing program 1: openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000005, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x30}, {0x25}, {0x6, 0x0, 0x0, 0x7ff}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r0, &(0x7f0000000180)="3c9ebb8a65237a19000000000000", 0xe) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=""/127, &(0x7f0000000280)=0x7f) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000005, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2d}, {0x25}, {0x6, 0x0, 0x0, 0x124}]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x2, 0x0) ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f00000001c0)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r1, &(0x7f0000000180)="3c9ebb8a65237a19000000000000", 0xe) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000005, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x30}, {0x25}, {0x6, 0x0, 0x0, 0x7ff}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r3, &(0x7f0000000180)="3c9ebb8a65237a19000000000000", 0xe) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r4, &(0x7f0000000180)="3c9ebb8a65237a19000000000000", 0xe) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000005, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x30}, {0x25}, {0x6, 0x0, 0x0, 0x7ff}]}) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r5, &(0x7f0000000180)="3c9ebb8a65237a19000000000000", 0xe) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000005, 0x0) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x30}, {0x25}, {0x6, 0x0, 0x0, 0x7ff}]}) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r6, &(0x7f0000000180)="3c9ebb8a65237a19000000000000", 0xe) ioctl$BIOCPROMISC(r1, 0x20004269) r7 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) unlinkat(r7, &(0x7f0000000080)='./file0\x00', 0x8) mkdirat(r7, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCNXCL(r7, 0x2000740e) clock_settime(0x4, &(0x7f00000002c0)={0x7, 0x1}) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000040)=0xb3b) 16:00:03 executing program 0: setreuid(0xee00, 0x0) r0 = getuid() r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8260, 0x112) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fchown(r1, 0x0, r3) setreuid(0xee00, r0) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00') 16:00:03 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20004ab68973e30049f8000000000000000000ff7f0000000000000600fcbacfba7bd9e5714f0000b8df"], 0x38}, 0x0) r0 = socket(0x18, 0x4003, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:00:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$wskbd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8202adfdffffffffffff2fcf49a5463f7b238bf4688a2a197a386207000000008295955984c87910bf453768c11700287ead4bcb777fa69dfceac2a84e924ed70a266abca64896bc5e57c6388bbd2ad88b2951b158c965e248701201360bcd4c0a162b58fd4237b8fa4d012ae447473c238495aaee48c02f6ac41e6bf3bf554799bab80ab4cedd6b1becbd13ad30505e8f5300a49fef9d612f871f4385f04140795ea4a5c5fe659fa202361cd8cac7dbbc5b65c6593d2870b4122cd23500000000000000b66ec0f5c669ea191976bb2fad1e03781b316cb24017630331ff23bb3a52084976d34e1c29d436947f299768b16516026629002e32f470e75c93ec4f7f5e6c83b09bcb974b891f50cc35740e3eaca89a8aba050559f2120ff387c0f64f790da917510500983d41ba76f5bff41e0e590b8bd5295eba5ae8d52b8686ff308d72c2f4286e086f9daecf0c0a3f93a5d68996fade9cef0100752e67b0e033c429ed29335c34f0ede0ea3cdad290d245a760911ef70a8ff72ad015c5a4a1f3797b42df9e6d315dc865db84f007a4084883add7525e0126e33aaa9f845d0369830df582bce12842db8b2161c337a7613f48b6373af701a3f76939a1e054454a97dee86f6f4e6d98c10eadf6a176570a6af3238e149eb3ed54b2e017cbe46e35cddecf18db151266bb671897178b832aa6a6a2511f244a878492258ee52f00ba48df76c5d3b8bfa3a14993fc7a9f01722f661679efb1c6e7becfb2eb2eb9a614bde6d303de8dd36070ffcccfd0acca0ff4fa95f62e2b7dccc9655f686766dfb6aa9ff5bb890e7517a30c7fec7ff5414a16a8e57820faefaaa891724062f7e162b2e5b80ac0f7c030385a9e6030b3d75550c568ac82b9fa226c7de08060f6892f5c94c2931e645303b4da0ae2e628beccd1a205ebca60a5a3918bfc87b6eb4d73447f93b274ba781f0e0a53e08e15d43288ffbb929a05072a61aed5999905dfec2945185601aba866467f03bf0c75af117890b6dc270d13d017b00e7ca8a7056572971a202167e10953b3f3bd50fcf279fdcec904368cd2e33ce85d0652ef9b914db3e82ead6cd54c432aadcb5af4b6cfab95f10c54554e3b0ade52fece1f728dbcb10ec2af46e59f4299cf8db5089d3a1c0ae025001d28a46c5deeb22b0c20d810c129ac6a87447048384428480875e4f86c678930fb2cb7a8541e40fa22cd53953fb4bd6a3ee1270a8e730c1caf6e3d930382a14ed7b658391ea34ff14ed7b2e3d5fa987f46c75672d421a06c5f9a41857b53b010f6eb409556db5bb66083277b23f571d0b390ee05f170a08476acdcc071cfd72d596ce0bab94688f7d59f6b91aab4d553fa253b31abb3a78bf238a53a7840a98d5de65d232cd744239063d7115ec0c8c38964fba10498e97670f2e774453322c4fe833ff84a560d9e2fbcf9b4923d95b2b61ef4a2c3dcef67095d21e35fe7c94375eb407af5774e6a5e6699c76a36b649af269bc00b68f22589414a4b47ffd81f846fd32f66cec9848ce144e47faa041ab141e42c736c04814142055319ba7f64e291287f274667ecccadb79938224012cba1d6370e9e250f230729568e37f763395555ae3a375664fe1b6acd999439c7d76cdb7b01a313da2a7b7aa596c1160c612e2a0359fb4ac6f7d84941c3d77d3397c404cf5cf500000000001a12fc0f807f88c5ea04b5851d829e1b9fe6272554e5407a3c8f6799fc6700000000220a6c57a60a1f7df2b388e3a40d0d9337a979c4712bcb137e229e935ab7f10000"], 0x10) dup2(r2, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r3 = dup(r0) r4 = syz_open_pts() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)) flock(r4, 0x0) ioctl$TIOCSBRK(0xffffffffffffff9c, 0x2000747b) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = openat$vmm(0xffffffffffffff9c, 0x0, 0x4a81d0f98973da66, 0x0) flock(0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x101) socketpair$unix(0x1, 0x1, 0x0, 0x0) setregid(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r6 = syz_open_pts() close(r6) ioctl$TIOCSPGRP(r6, 0x40047477, &(0x7f0000000080)) r7 = syz_open_pts() close(r7) ioctl$TIOCSPGRP(r7, 0x40047477, &(0x7f0000000080)) r8 = syz_open_pts() close(r8) ioctl$TIOCSPGRP(r8, 0x40047477, &(0x7f0000000080)) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x800, 0x0) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r10, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r10, 0x20005302, &(0x7f0000000140)) r11 = openat(r10, &(0x7f0000000140)='./file1\x00', 0x20000, 0xb8) kevent(r3, &(0x7f00000001c0)=[{{r6}, 0xfffffffffffffff9, 0x1, 0x20, 0x9, 0x6}, {{r5}, 0xfffffffffffffff8, 0x48, 0x2, 0x63498c8}, {{r7}, 0xfffffffffffffffc, 0x2, 0x20, 0x0, 0x7f}, {{r8}, 0x0, 0x109, 0x1, 0x7fffffff, 0x1}, {{r9}, 0xfffffffffffffffa, 0x0, 0x2, 0x8, 0x2}, {{r1}, 0x907df58a003ae0be, 0x1, 0x1, 0x10000, 0x400}], 0x0, &(0x7f0000000280)=[{{r11}, 0xfffffffffffffffd, 0x23, 0x1, 0x80000001, 0xffff}], 0x9f6, &(0x7f00000002c0)={0x40, 0x400000000000000}) fchown(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x10000000000009, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 16:00:03 executing program 0: select(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x200000040000, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r1, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)={0x0, [{}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x3}, {}, {}, {}, {}, {}, {0x1}, {}, {0x2}]}) setsockopt(r0, 0x29, 0xc, &(0x7f0000000100)="eb0000bfff", 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) close(r3) socket(0x18, 0x3, 0x1) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, &(0x7f0000000040)="100a2956b9223776", 0x21d) 16:00:03 executing program 1: select(0x0, 0x0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyCcfg\x00', 0xa162021a215c726c, 0x0) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f00000001c0)) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080)='/dev/klog\x00', 0x100, 0x0) ioctl$LIOCSFD(r5, 0x80046c7f, &(0x7f0000000100)=r4) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, &(0x7f0000000040)="100a2956b9223776", 0x21d) 16:00:04 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x800080002002, 0x6b9) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r1 = kqueue() kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[{{r0}, 0xffffffffffffffff, 0x1}], 0x0, 0x0) kevent(r1, &(0x7f0000000200), 0x66, 0x0, 0x81, 0x0) nanosleep(&(0x7f00000000c0)={0x9, 0x7}, &(0x7f0000000140)) open$dir(&(0x7f0000000000)='./bus\x00', 0x280, 0x102) kevent(r1, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0x8, 0x10, 0xfffffffffffffffd}], 0x64, 0x0, 0x85, 0x0) 16:00:04 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0x1de0], [0x0, 0x0, 0x1000000403]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) 16:00:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r1) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) r3 = getgid() setegid(r3) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r4, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000340)=0x1ff) accept$unix(r4, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r4, 0x40087468, &(0x7f00000001c0)) fchownat(r4, &(0x7f0000000080)='\x00', r5, r3, 0x6) r6 = shmget$private(0x0, 0x3000, 0x404, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r6, 0x0, 0x0) shmctl$IPC_SET(r6, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r8 = getgid() r9 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000600)='./file0\x00', r11, 0x0) r13 = getgid() setegid(r13) r14 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r14, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000340)=0x1ff) accept$unix(r14, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r14, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r14, 0x40087468, &(0x7f00000001c0)) fchownat(r14, &(0x7f0000000080)='\x00', r15, r13, 0x6) r16 = getgid() setegid(r16) r17 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r17, 0x20007465, &(0x7f0000000500)) getsockopt$sock_cred(r17, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) accept$unix(r17, 0x0, &(0x7f00000000c0)) ioctl$FIONBIO(r17, 0x8004667e, &(0x7f00000003c0)=0x800) ioctl$TIOCGWINSZ(r17, 0x40087468, &(0x7f00000001c0)) fchownat(r17, &(0x7f0000000080)='\x00', r18, r16, 0x6) r19 = semget$private(0x0, 0x7, 0x287) semop(r19, &(0x7f0000000180)=[{0x6, 0x2000000000101}, {0x2, 0x1f}], 0x2) semop(r19, &(0x7f0000000140)=[{0x3, 0x7, 0x1000}, {0x2, 0x2, 0x800}, {0x1, 0x8}, {0x0, 0xe490000000000000, 0x1800}, {0x3, 0x400, 0x1c00}], 0x5) semop(r19, &(0x7f0000000580)=[{0x0, 0x3, 0x1000}], 0x2aaaaaaaaaaaae70) semctl$GETNCNT(r19, 0x2, 0x3, &(0x7f0000000000)=""/9) semctl$IPC_SET(r19, 0x0, 0x1, &(0x7f0000000240)={{0x81, 0xffffffffffffffff, r16, r15, r16, 0x1ea, 0xfffffffffffffffd}, 0x7fff, 0x7}) lchown(&(0x7f0000000280)='./file0\x00', r11, r16) lchown(&(0x7f00000001c0)='./file0\x00', r11, r12) r20 = getppid() r21 = geteuid() r22 = getegid() chown(&(0x7f0000000a40)='.\x00', r21, r22) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000080)={{0x6, r11, r7, r21, r8, 0x1e6, 0x8}, 0x4005, 0x9, r20, r9, 0xfffffffffffffe01, 0x7fff, 0x7ff}) r23 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) setsockopt$inet6_MRT6_ADD_MIF(r23, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r26 = fcntl$getown(r23, 0x5) r27 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000005c0)={0x0}, 0xc) shmctl$IPC_SET(r27, 0x1, &(0x7f0000000540)={{0x240000000, r24, r25, r24, r25, 0x1, 0x2}, 0xffffffff00000000, 0x4, r28, r26, 0x41d, 0x5, 0x5}) r29 = getuid() setreuid(r29, 0xffffffffffffffff) r30 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r30, 0xffff, 0x1023, 0x0, 0x0) getsockopt$sock_cred(r30, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000640)=0xc) r32 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r33, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="e0004a184907e51c4d1a0197a682a4fe6600ff7f00007c906b60848a9dadb1517769f4b5b2c849a47107836d49203e1f48a368be8c6464ed53a98b69f36af45c9edcb10bb8851147769db38017cf1b04755d408c03834b7689b7b130bcc4607fbf11497a54080e56ed044d2868622a6c9a8a08a886916c5f9bb1a23d11e4e944fb1455deb7a586fb9da83dee8222d6b728264b5a28d6b0f5a45dceab7eba4033e90a0bd323e33a25ec2e7e5a53b8a11d9c4ec71a25f0dfcbeb61b2e4eb1458dd33a576d813878459e55186f6c90c657388af2f3854ff7f536d8235b4bd7b270f291a4ffde25e1ce547e943b3d257d4f28f487eec53896c339000000000000000ffff0000080000006c2838e9fe7f51442f07396d7910fffe388ff614567198fa9e12922b6c68516290e722245f1bbade62c8893d78524e237199d15856896291085e5301673fb50357bcf1c61ed373b41075387eedc824524765f23d2f2db32acbc66b190c4f9b1e6bac9b0000000000"], 0x170}, 0x402) getsockopt$SO_PEERCRED(r33, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r35 = fcntl$getown(0xffffffffffffff9c, 0x5) r36 = getppid() getpgid(r36) r37 = msgget$private(0x0, 0x20000003c4) msgrcv(r37, &(0x7f0000000440)=ANY=[@ANYBLOB="bc001b9f"], 0xc, 0x2, 0x1000) msgsnd(r37, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000000000000d92f87a67eb90805fabdeb194bc4f3f27cb6ec554c20117c2e4b5f7a3f1c20000001800000a87f306843ba4bef29680bcfba5065af3f56502fe1501e442c8367ca109ed16d13c44367a52e2d48af8ce2cb64731badc01ffff00000000000000000000f000"], 0x1, 0x0) msgsnd(r37, 0x0, 0x0, 0x1800) msgsnd(r37, &(0x7f0000000f00)=ANY=[@ANYBLOB="010000000000000048696a280567b1a6342fcc8ec5d56f596329414fa22f5c0ed193424179fc7838ed1880ec98dda3b1f7b0aa695bd8017a0713001b080b5a33b013115035c478dfb0db5d374f0464c8f4468afa1b4f38812b4c90a02f4a339eb2ab26df0bc0149eb9c983da6d08000000000000005f7fd0cbac6480fb4b1d3e0308079e1900d90ab7456e72578ec9dc0fb7b40c506e70ce9f384e53a14f8d865cd209f870aa6eb9165597ac8bd39febd3231d79694e2edd843af4283c2aebe8e4462dc504cde26ca7426e9cbae14dd7f22103d91449cd6ddc46786413ffc03e366a215314c501f602bc690d3fe33a2f458f34d4ea8243d4"], 0x2d, 0x800) msgctl$IPC_SET(r37, 0x1, &(0x7f0000000980)={{0x1, r32, r34, r31, 0x0, 0x142, 0x9f9}, 0x8001, 0x1, r35, r36, 0xa5, 0x1, 0x4e2c, 0x6}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, r25, r29, 0x0, 0x12, 0x80000000}, 0xd, 0xaf, r26, r35, 0x0, 0x94, 0xffff}) getgroups(0x3, &(0x7f00000002c0)=[0x0, r8, r25]) getgroups(0x6, &(0x7f0000000080)=[r3, r8, 0x0, 0x0, 0x0, 0x0]) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={r1, r2, r38}, 0xc) mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) open(&(0x7f0000000100)='./bus\x00', 0x400000003fd, 0x0) 16:00:04 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000180)='./bus\x00', 0x2, 0x0) ioctl$TIOCFLUSH(r0, 0x8020690c, &(0x7f0000000300)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8, 0x0) r2 = syz_open_pts() close(r2) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000080)) fcntl$dupfd(r1, 0x0, r2) 16:00:05 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2080002002, 0x40004000000228aa) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="000000186a56010000003c00fead000000000060d5706c851f000000000000004e341d89df00000000000000", 0x2c}], 0x1) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) write(r1, &(0x7f00000002c0), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)) truncate(&(0x7f0000000300)='./bus\x00', 0x0, 0xfffffffffffffffa) connect$inet(r1, &(0x7f0000000100)={0x2, 0x3}, 0xc) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r2, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./bus\x00', r2, &(0x7f00000002c0)='./file0\x00') 16:00:05 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x200000000028}, {0x400000060}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) r2 = socket(0x2, 0xc003, 0x0) connect$unix(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x10) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000080)=0x100000001, 0x4) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) connect$unix(r2, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f0000000040)='./file0\x00', 0x10, 0x1ce) r3 = semget(0xffffffffffffffff, 0x6, 0x400) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000200)=0x8) semop(r3, &(0x7f0000000080)=[{0x4, 0x0, 0x1800}, {0x3, 0x401, 0x1800}], 0x2) r4 = semget$private(0x0, 0x1, 0x128) semop(r4, &(0x7f0000000740)=[{0x9, 0x5}, {0x2, 0x1000, 0x1000}, {0x0, 0x5, 0x800}, {0x1, 0xecc8}, {0x2, 0x2}], 0x5) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000140)='#!', 0x2}], 0x1) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vmm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000400)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1ef99ed8731797db40aed477bebe2473ac9c72a59964df5a6019f015b5a3599c2b99205646137f7d986caa48bece56bc7498de80619673ee8e52ecab5df1ec458be71e60550890f6ed1a1220275ce35e7a", @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=r8], 0x69}, 0x0) fcntl$dupfd(r6, 0xa, r8) ioctl$TIOCCDTR(r5, 0x20007478) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x108, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/4096, 0x1000}, 0x0) r9 = semget$private(0x0, 0x4, 0x408) semop(r9, &(0x7f00000003c0)=[{0x8, 0x8, 0x1000000}, {0x2, 0xfffffffffffffffd, 0x1800}, {0x0, 0x100, 0x7fc}], 0x3) semop(r9, &(0x7f0000001180), 0x1e316d81a01eac7d) semctl$SETALL(r9, 0x0, 0x9, &(0x7f00000000c0)=[0x83, 0x10001, 0xd]) semctl$SETALL(r9, 0x0, 0x9, &(0x7f0000000180)=[0xfffffffffffffff8, 0x81, 0x7fffffff, 0x6b12, 0x8, 0x1f, 0x9]) semop(r9, &(0x7f0000000240)=[{0x0, 0x6, 0x1000}, {0x0, 0x40, 0x1800}, {0x0, 0x3, 0x7fc}, {0x3, 0x7, 0x1000}, {0x3, 0x68, 0x1000}, {0x3, 0xfffffffffffffffc, 0x1000}, {0x1, 0xfffffffffffffff8, 0x1000}, {0x2, 0xad, 0x1000}], 0x8) semctl$GETZCNT(r9, 0x1, 0x7, &(0x7f0000000680)=""/178) panic: receive 1: so 0xfffffd806f6f2000, so_type 3, sb_cc 4434 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 373361 78784 0 0 0x1 1 syz-executor.0 *427523 44761 0 0 0 0K dhclient db_enter() at db_enter+0x18 panic(ffffffff821dec66) at panic+0x15c soreceive(fffffd806f6f2000,0,ffff800020abd248,0,0,ffff800020abd154) at soreceive+0x16ec soo_read(fffffd806fc83000,ffff800020abd248,0) at soo_read+0x53 dofilereadv(ffff800020a7c4e8,6,ffff800020abd248,0,ffff800020abd330) at dofilereadv+0x1a1 sys_read(ffff800020a7c4e8,ffff800020abd2e0,ffff800020abd330) at sys_read+0x83 syscall(ffff800020abd3b0) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffcf2e0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic receive 1: so 0xfffffd806f6f2000, so_type 3, sb_cc 4434 ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff821dec66) at panic+0x15c soreceive(fffffd806f6f2000,0,ffff800020abd248,0,0,ffff800020abd154) at soreceive+0x16ec soo_read(fffffd806fc83000,ffff800020abd248,0) at soo_read+0x53 dofilereadv(ffff800020a7c4e8,6,ffff800020abd248,0,ffff800020abd330) at dofilereadv+0x1a1 sys_read(ffff800020a7c4e8,ffff800020abd2e0,ffff800020abd330) at sys_read+0x83 syscall(ffff800020abd3b0) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffcf2e0, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800020abcf90 rbx 0xffff800020abd040 rdx 0xffff800020a7c4e8 rcx 0 rax 0 r8 0xffffffff8151a22f kprintf+0x16f r9 0x1 r10 0x25 r11 0xff68df4d2c0afafc r12 0x3000000008 r13 0xffff800020abcfa0 r14 0x100 r15 0x1 rip 0xffffffff8106a8b8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020abcf80 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (dhclient) pid=427523 stat=onproc flags process=0 proc=0 pri=24, usrpri=51, nice=20 forw=0xffffffffffffffff, list=0xffff800020a7d5f8,0xffff800020a7c018 process=0xffff800020a90b50 user=0xffff800020ab8000, vmspace=0xfffffd807f000000 estcpu=1, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 78784 373361 84635 0 7 0x1 syz-executor.0 78784 352627 84635 0 2 0x4000000 syz-executor.0 19590 133567 0 0 3 0x14200 bored sosplice 45004 435073 65950 0 3 0x82 nanosleep syz-executor.1 84635 242646 65950 0 2 0x482 syz-executor.0 65950 402768 95757 0 3 0x82 kqread syz-fuzzer 65950 378314 95757 0 3 0x4000082 nanosleep syz-fuzzer 65950 474326 95757 0 3 0x4000082 thrsleep syz-fuzzer 65950 332025 95757 0 3 0x4000082 thrsleep syz-fuzzer 65950 48307 95757 0 3 0x4000082 thrsleep syz-fuzzer 65950 407415 95757 0 3 0x4000082 thrsleep syz-fuzzer 65950 280323 95757 0 3 0x4000082 thrsleep syz-fuzzer 65950 455791 95757 0 3 0x4000082 thrsleep syz-fuzzer 65950 142965 95757 0 3 0x4000082 thrsleep syz-fuzzer 65950 93244 95757 0 3 0x4000082 thrsleep syz-fuzzer 95757 362826 78764 0 3 0x10008a pause ksh 78764 489874 99084 0 3 0x92 select sshd 75069 385082 1 0 3 0x100083 ttyin getty 99084 9979 1 0 3 0x80 select sshd 81142 433649 83687 74 3 0x100092 bpf pflogd 83687 125641 1 0 3 0x80 netio pflogd 62212 504399 48233 73 3 0x100090 kqread syslogd 48233 359046 1 0 3 0x100082 netio syslogd 18970 146763 1 77 3 0x100090 poll dhclient *44761 427523 1 0 7 0 dhclient 17060 184379 0 0 2 0x14200 zerothread 86469 166621 0 0 3 0x14200 aiodoned aiodoned 52148 93467 0 0 3 0x14200 syncer update 78916 125419 0 0 3 0x14200 cleaner cleaner 40792 189827 0 0 3 0x14200 reaper reaper 29600 278543 0 0 3 0x14200 pgdaemon pagedaemon 48760 23682 0 0 3 0x14200 bored crynlk 54004 375695 0 0 3 0x14200 bored crypto 46451 10562 0 0 3 0x40014200 acpi0 acpi0 50489 424310 0 0 3 0x40014200 idle1 43567 344573 0 0 3 0x14200 bored softnet 76891 164007 0 0 3 0x14200 bored systqmp 78026 359397 0 0 2 0x14200 systq 2212 273604 0 0 3 0x40014200 bored softclock 50738 157605 0 0 3 0x40014200 idle0 67912 150504 0 0 3 0x14200 bored smr 1 470587 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 44761 (dhclient) thread 0xffff800020a7c4e8 (427523) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8262d5b0) #0 witness_lock+0x52e #1 solock+0x66 #2 soreceive+0x114 #3 soo_read+0x53 #4 dofilereadv+0x1a1 #5 sys_read+0x83 #6 syscall+0x4a4 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9506 6538K 7309K 78643K 10920 0 pcb 13 8K 8K 78643K 55 0 rtable 93 2K 3K 78643K 270 0 ifaddr 59 12K 12K 78643K 87 0 counters 45 34K 34K 78643K 51 0 ioctlops 0 0K 4K 78643K 1478 0 iov 0 0K 12K 78643K 21 0 mount 1 1K 1K 78643K 1 0 vnodes 1230 77K 77K 78643K 1327 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 12 1K 1K 78643K 21 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 5 13K 25K 78643K 143 0 sigio 0 0K 0K 78643K 2 0 proc 63 63K 95K 78643K 466 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 18 0 in_multi 36 2K 2K 78643K 75 0 ether_multi 1 0K 0K 78643K 9 0 mrt 0 0K 0K 78643K 6 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 61 281K 281K 78643K 61 0 exec 0 0K 1K 78643K 221 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 117 38K 54K 78643K 1423 0 UVM aobj 16 2K 2K 78643K 16 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 29 0 NDP 9 0K 0K 78643K 20 0 temp 110 3023K 3087K 78643K 2523 0 kqueue 3 4K 14K 78643K 18 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 21 0 19 1 0 1 1 0 8 0 rtentry 112 64 0 26 2 0 2 2 0 8 0 unpcb 120 126 0 116 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 579 0 579 1 1 0 1 0 8 0 tcpcb 544 60 0 56 1 0 1 1 0 8 0 inpcb 280 224 0 217 2 0 2 2 0 8 1 rttmr 72 2 0 2 1 0 1 1 0 8 1 nd6 48 11 0 9 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 pffrag 232 5 0 5 1 0 1 1 0 482 1 pffrnode 88 5 0 5 1 0 1 1 0 8 1 pffrent 40 225 0 225 1 0 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 28 0 2 1 0 1 1 0 8 0 pfstkey 112 28 0 2 1 0 1 1 0 8 0 pfstate 328 28 0 2 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 299 0 142 13 0 13 13 0 8 2 art_table 32 300 0 142 2 0 2 2 0 8 0 art_node 16 63 0 27 1 0 1 1 0 8 0 sysvmsgpl 40 49 0 14 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 19 0 9 1 0 1 1 0 8 0 shmpl 112 14 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1605 0 198 46 0 46 46 0 8 0 ffsino 272 1605 0 198 94 0 94 94 0 8 0 nchpl 144 2044 0 435 61 0 61 61 0 8 0 uvmvnodes 72 1727 0 0 32 0 32 32 0 8 0 vnodes 208 1727 0 0 91 0 91 91 0 8 0 namei 1024 5808 0 5808 1 0 1 1 0 8 1 percpumem 16 36 0 3 1 0 1 1 0 8 0 vcpupl 1984 1 0 0 1 0 1 1 0 8 0 vmpool 560 1 0 0 1 0 1 1 0 8 0 scxspl 192 5864 0 5864 8 1 7 7 0 8 7 plimitpl 152 21 0 13 1 0 1 1 0 8 0 sigapl 432 342 0 327 3 1 2 3 0 8 0 futexpl 56 2910 0 2910 1 0 1 1 0 8 1 knotepl 112 74 0 55 1 0 1 1 0 8 0 kqueuepl 144 32 0 30 1 0 1 1 0 8 0 pipelkpl 48 110 0 100 1 0 1 1 0 8 0 pipepl 120 220 0 201 1 0 1 1 0 8 0 fdescpl 496 343 0 327 3 0 3 3 0 8 0 filepl 152 2403 0 2302 5 0 5 5 0 8 1 lockfpl 104 47 0 46 1 0 1 1 0 8 0 lockfspl 48 17 0 16 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 20 0 9 1 0 1 1 0 8 0 ucredpl 96 386 0 377 1 0 1 1 0 8 0 zombiepl 144 327 0 326 1 0 1 1 0 8 0 processpl 960 359 0 326 5 0 5 5 0 8 0 procpl 624 649 0 606 4 0 4 4 0 8 0 sosppl 128 3 0 3 1 1 0 1 0 8 0 sockpl 400 373 0 354 4 0 4 4 0 8 2 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 172 0 0 21 0 21 21 0 8 0 mtagpl 80 23 0 0 1 0 1 1 0 8 0 mbufpl 256 426 0 0 26 0 26 26 0 8 0 bufpl 280 4197 0 176 288 0 288 288 0 8 0 anonpl 16 46112 0 29678 68 1 67 67 0 124 0 amapchunkpl 152 2165 0 2027 20 0 20 20 0 158 13 amappl16 192 1472 0 580 45 0 45 45 0 8 0 amappl15 184 1 0 1 1 1 0 1 0 8 0 amappl14 176 58 0 55 2 1 1 1 0 8 0 amappl13 168 80 0 78 1 0 1 1 0 8 0 amappl12 160 10 0 5 1 0 1 1 0 8 0 amappl11 152 72 0 54 1 0 1 1 0 8 0 amappl10 144 33 0 23 1 0 1 1 0 8 0 amappl9 136 389 0 386 1 0 1 1 0 8 0 amappl8 128 322 0 296 1 0 1 1 0 8 0 amappl7 120 121 0 108 1 0 1 1 0 8 0 amappl6 112 29 0 24 1 0 1 1 0 8 0 amappl5 104 243 0 226 1 0 1 1 0 8 0 amappl4 96 557 0 527 1 0 1 1 0 8 0 amappl3 88 107 0 102 1 0 1 1 0 8 0 amappl2 80 1812 0 1741 3 1 2 3 0 8 0 amappl1 72 17693 0 17256 25 15 10 20 0 8 0 amappl 80 902 0 857 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 15 0 0 1 0 1 1 0 8 0 uaddrrnd 24 344 0 327 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 344 0 327 1 0 1 1 0 8 0 vmmpekpl 168 6755 0 6715 2 0 2 2 0 8 0 vmmpepl 168 48820 0 46781 117 8 109 112 0 357 15 vmsppl 368 343 0 327 2 0 2 2 0 8 0 pdppl 4096 695 0 655 6 0 6 6 0 8 0 pvpl 32 157344 0 137779 163 0 163 163 0 265 3 pmappl 232 343 0 327 2 0 2 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 184 0 3 6 0 6 6 0 8 0