x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10, &(0x7f0000000000), 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10, &(0x7f0000000000), 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f0000000000), 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0xffff, 0x10, &(0x7f0000000000), 0x1) connect$unix(r1, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYPTR64=&(0x7f0000002680)=ANY=[@ANYBLOB="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"/4305, @ANYRES32=r3], @ANYBLOB="71c730fc37a1e467", @ANYRESDEC=0x0, @ANYRESDEC=r4, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYRES64, @ANYRES16=r0]], 0x7) r6 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r7 = semget$private(0x0, 0x7, 0x80) semctl$GETNCNT(r7, 0x0, 0x3, &(0x7f0000000640)=""/18) semop(r7, &(0x7f0000000100)=[{0x5, 0x4000010004, 0x1000}, {0x1, 0xd59, 0x800}, {0x4, 0xffff, 0x800}, {0x4, 0x800007, 0x1000}, {0x0, 0x1ff, 0x1000}, {0x4, 0x2, 0x1800}, {0x0, 0x6, 0x1800}, {0x1, 0x3, 0x1800}], 0x8) semctl$SETALL(r7, 0x0, 0x9, &(0x7f0000000200)=[0xa, 0x3ff, 0x0, 0x5, 0x3f]) semctl$GETNCNT(r7, 0xacb8675f21c9d15b, 0x3, &(0x7f0000000140)=""/81) semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f0000000200)=""/215) r8 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vmm\x00', 0x20, 0x0) r9 = socket(0x2, 0x2, 0x0) r10 = kqueue() kevent(r10, &(0x7f0000000200)=[{{r9}, 0xffffffffffffffff, 0x23, 0x60000001}], 0x1, 0x0, 0x0, 0x0) connect$unix(r9, &(0x7f0000000680)=ANY=[@ANYBLOB="82022e2f4cad540b000000818c535ecfe8af619b0f95bcccff7e3c4af8f0040d2590bd7dc4b5ab1c6c48578bff00000000000000000000000000484636dc39c5a73834e1f586b783ba4784048328c49c16c800baa27a0af366f859d8546ce3f2283137c1d703a2a95937065b3cf0a575f18657e9d0d285ad257a1f8b8050058ab8251d14c44cd3ef3a4e1b7b48e204ffdb409806e0d013533db9aa0c5a75b7311d76337428c99835ce9d31f0db7b39a7d7ff4def25b1ea32a19d7e31052d62c209531a334535359e1c09c40c208ccf3da66d1a21644858c9f066"], 0x10) r11 = socket(0x10000000002, 0x2, 0x0) r12 = dup2(r9, r11) setsockopt$sock_int(r12, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) kevent(r10, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)) pwritev(r8, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0xfffffffffffffe9d}], 0x3cf, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r6, 0x0, 0x0) r13 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x4) writev(r13, &(0x7f00000014c0)=[{&(0x7f00000000c0)='#!/', 0x3}], 0x1) write(r13, &(0x7f0000000140)="0920120000feffffff04148027454a638a711de274fe266ce23205554752cd8439df6dfe4e0f84b94aaa41f680fa371c960a", 0x32) ioctl$VMM_IOC_TERM(r13, 0x80045604, &(0x7f0000000380)={0x2}) ioctl$VT_OPENQRY(r6, 0x40047601, &(0x7f0000000000)) pipe2(&(0x7f0000000540), 0x10000) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x80, 0x0) r14 = socket(0x18, 0x2, 0x0) setsockopt(r14, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r15 = fcntl$dupfd(r14, 0x0, r14) sendto$inet(r15, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = socket(0x18, 0x2, 0x0) setsockopt(r16, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r17 = fcntl$dupfd(r16, 0x0, r16) sendto$inet(r17, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = socket(0x18, 0x2, 0x0) setsockopt(r18, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r19 = fcntl$dupfd(r18, 0x0, r18) sendto$inet(r19, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r19, 0x41205725, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) dup2(r1, r0) 16:36:00 executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) writev(r0, &(0x7f00000014c0)=[{&(0x7f00000000c0)='#!/', 0x3}], 0x1) write(r0, &(0x7f0000000140)="0920120000feffffff04148027454a638a711de274fe266ce23205554752cd8439df6dfe4e0f84b94aaa41f680fa371c960a", 0x32) shutdown(r0, 0x2) r1 = msgget$private(0x0, 0x20000003c4) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f00000004c0)=0x7fb0) msgrcv(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000000054270930040000000"], 0xc, 0x2, 0x1000) msgrcv(0x0, &(0x7f00000007c0)={0x0, ""/227}, 0xeb, 0x1, 0x1000) r3 = kqueue() r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = getegid() r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000009c0)=0xc) kevent(r3, &(0x7f0000000100)=[{{r6}, 0xfffffffffffffff9, 0x1}], 0x8, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000000d92f87a67d790805fab37eedb5db9b4cb6a6ec554c20117c2e4b5f7a3f1c2dbc6910374426bdcf306843b34f7c027e266a4bef296a85554c457623f5c6502fe1501e442c8367ca128ed16d13c44d48af8cea73da6581d3db901c48e582d225bca8000"/121], 0x1, 0x800) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f00000006c0)) msgsnd(r1, 0x0, 0x0, 0x1800) msgget$private(0x0, 0x10120) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280), &(0x7f0000000400)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='%%\\\x00', &(0x7f0000000940)='F-\x00\xd5&\xfcQy\xe7\x15\xb0\xb3EQ\xf0g8\xee\x800O\xc6\xfa,\xff\xaf\x92)9\xd9r\xeel\x12\x10kx\x9c\x8a\x96\xa7b\xbd\x049\x88\x1c\xc1z>\x7f\x82O\xa4\xe8\x0fK`\xb7\x81\r\xee \xc0\xc3\x10pw\xdd\x85Rp\vT#J^\x90\xadN$\n\x7f\xa9\x1dz\xf8\xc57\xfaq\xbc\x96P\xd0\x00\xc10xffffffffffffffff}) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000a40)={0x0, 0x0}, 0xc) r17 = getegid() r18 = syz_open_pts() close(r18) writev(r18, &(0x7f00000006c0)=[{&(0x7f0000000c80)="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", 0x3d8}], 0x1) ioctl$TIOCSTOP(r18, 0x2000746f) write(r18, &(0x7f0000000140)="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", 0x1d8) r19 = syz_open_pts() close(r19) writev(r19, &(0x7f00000006c0)=[{&(0x7f0000000c80)="aae3e6c3f01744124ce96464f9157c521949703cb9bb69323cf41195cd335e36e74866da987feeeeb097b241e19f3fa88644a1612230c806ad34071458f62751718c2d7318d6cd8bb32a75d8ef3ec8ca53550e50cd08c580866abcb4ceb0ed52cfd0b81201f04606d61424cc74d871a596a34dd2f37f2b7b251d38efbfda4c7fe8b24d0f14b2d79c90b1b13c9fb4921666a654ab580bb2422d814f990f0923a9e0b8314040ca5a323d3462fb5fae5834f4ed101aae2ba9b10179bbb2656a180c8aaa4e46c6e41c411fc1bafd6c216a190dcd2c10529dd095afa4e118cacfd306e2e91083d6743595433c92687c388b7378b40790cf34efccae1cadd3cd8982a1ec0b1cb644521bda19dba856915988b87ea86bd4c5298a83308b09aa3640cfe6c940c4e78dd214289d0b349d057188dcde6b83283575c5ba3913dfe154af6dd2bb97d9afbdee232ffa895e161efdcdc9047d86e78f147d910e652dc840626764d9136f7cbcfe3aff3728e2a28dc2c6d11e80ed650b2c952652b9f1c7c6286a0224e48595f37358c03a1334de979c22016bcec2a630da3ae189a4a2f200b34d848197dad8e3d673ae04691e445478d9ec1749e846be2c09a5f3b696d06a2628f72e8b701b5f134115fb7e69fb06e86ddd2837ca25a65abd5c2d8eb6796c191c2b55b1e574a3a09a993ab22dccaa70d1f13ac7533b146215e0026a08bc257bfae56041c88fdd7737df748f977e70becd8b41b2d00bdce3ad8d37f6fc2315dff753b8c608fa96a395a9dafff1f84602c20f0959085dcf10272a2bca74b06212be7254feb3a47a808cb23e23fa8e8120d3e29897b9b8e21f0249bc5fd15867092778adea4077ffd326ca7a72ca27debcb481ae4a4f2837253176f449beb0d5ebf9ad19855b86e4f91a45be04fbd36705d1f047c545a8c6bc7a05f542288dd4beed948d9841da7dfe65ed0cfe7c9231c87da0da8fe8a8e1a856f918c01dedf541cba8bccf5be9370432e0b917830aa9dccbbe9b7b5e639b8b8e6733336d29d65267568f7546ded87df64e0edfcb552eff2f82d1a95c3d7f55e2c71a894b3dd5ce19b2aa6b0893056e9453156465676b7db0eed3705b77bb872938583042fde888ca57358ff897eff924cd4ef2f468447ff80520e4d75b976638454dbb18bbc81909a4f91adcded105a56a66be33f0e9ee8537265c8f82d96a4d3bcfecf6c71804c2bfedb54efd0bfdfa1c2564b562b1efc2a52119bf06a08a565755831d0067ada37dc27331dcfa4c4ece8229e7c3215ec8d7189dad90fba9b454599de65082d4d88d8820750396eaeb748e5358478aa288f2111380d0effb8f745339c6bdf4992d57b34a0ba4a61ba88e22fb63aab0bb13e929aa346716cc2b85", 0x3d8}], 0x1) ioctl$TIOCSTOP(r19, 0x2000746f) write(r19, &(0x7f0000000140)="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", 0x1d8) r20 = accept$inet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000b00)=0xc) r21 = syz_open_pts() ioctl$TIOCSETAF(r21, 0x802c7416, &(0x7f0000000000)={0x0, 0x7fff, 0xfffffffffffffff8, 0xfffffffffffffffc, "661fbef2245185a8186503182eab7fff0e091fe6"}) r22 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/wsmouse0\x00', 0x800, 0x0) sendmsg$unix(r9, &(0x7f0000000880)={&(0x7f0000000040)=@file={0x2, './file0\x00'}, 0xa, &(0x7f0000000600)=[{&(0x7f00000000c0)="cfa344af03a729ce3bf47fca2240bd287553fe2a0a4189ae913b63071d450d1f682583f787c1138facda11aac65f80f024d5d293b66e8bbb85dbc9fec41b0c22d60e81a365ed5a1ae341b69fbbd185d3c16b52729bd993fcc1f5aff977ede61d1e7217bb5e18", 0x66}, {&(0x7f0000000140)="8f1ebef11b8fd3f950834bbc2be4942fe888fdd3cd57817b52da1bd737d78379df4c33444189d6c95a687afce0c3658b80f73149ca3ab9b0979f35d6df370133127e63d87fbe2db002d250", 0x4b}, {&(0x7f0000000200)="7ddffe24e7f49c1becdc32a72f9eca766b92bf3cc566bdc58b79b3ec79d3938321773f36745c9a77258bb46008cd9af0181fec6b481f797a63fc4d4e5f7fe9b517d9b66a5767bd74f17fd73c3ef77480e6259f55249b5d582ef9e700bdb02d6ebca3168c02eb36c5f057a29f157679aa6924a52200181cb7e917eb61dfb5c9560729f0f94563965ec5fc32bb383bde0e62160c109f34ff01f5d30b06139ba76eff72c099456fe945ced5967a28ac2fccf4885e62924ebfe0079b5ea768e2bc1f7fa8198d337feb2ff53a5d5b426cb801f07568ca0865341f187e8aeb1a1809b48d0342cc769619e2cd4a91b22b0053e2", 0xf0}, {&(0x7f0000000340)="960b438dd8ab91405e2695c0d1a98123b2761a09b5ea225191a495272a19", 0x1e}, {&(0x7f0000000900)="644a5f63805fdec25b2e10c33a7d435084a2403cb799f8cabd305ba1e07ee86bbcc857597e6d4d42c2fcf63b", 0x2c}, {&(0x7f0000000480)}, {&(0x7f0000000580)="ac1b46c5a30abf81605ff999d263da78b909c971c7e0bd297c9299fb970d1f26508953efb8a141328aa5fede58d8caa1523e82b12bb29c285404c76a6f2bc23095f22ebea995c5642bab2093a6e1e0d68fc818a5ab", 0x55}], 0x7, &(0x7f0000000b80)=[@rights={0x28, 0xffff, 0x1, [r18, r19, r20, r21, r22, r15]}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, r9, r10, r11, r12]}, @cred={0x20, 0xffff, 0x0, 0x0, r16, r17}, @rights={0x20, 0xffff, 0x1, [r13, r14, r9]}, @rights={0x18, 0xffff, 0x1, [r15]}], 0xa8, 0x400}, 0x4) r23 = getuid() semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f00000005c0)={{0x6175, r16, r5, r23, r5, 0x22, 0xfffb}, 0x5, 0x401, 0x2}) r24 = msgget$private(0x0, 0x20000003c4) msgrcv(r24, &(0x7f0000001540)={0x0, ""/227}, 0xeb, 0x0, 0x1000) msgsnd(r24, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgrcv(r24, &(0x7f00000000c0)={0x0, ""/31}, 0xffffffffffffff59, 0x6, 0x1000) msgctl$IPC_RMID(r24, 0x0) msgsnd(r24, &(0x7f0000000040)={0x2, "48696a280567b1a6342fcc8ec5d56f596329414fa22f5c0ed193424179fc5bd8017a071300"}, 0x2d, 0x800) syz_emit_ethernet(0xb3, &(0x7f0000000500)="f84450cae603efefbd20c04fbb72d626196e62e1e28d203e2e66ae2c611c6d7c9b7fb806bfecbe364c959533c55a92621f1748abd75a736253c126c7108f0198d124cd11757d0e1311724f790bdb44fe6ba5c01160603c222d803772e26b5f221fbfd12d60b080e546247beebc6b205ccfe08a7ebe080201035ed18b0e4929cc6974a946fdd23bfea4a96afd614575f0401f0daf266e55c9ed7d5863cd7f492dc5641915610aa5a08cb044647a8b57db3ce406") fsync(r4) 16:36:00 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01e90821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c6bae2f5978bab41e2e7e4223392b6eb7afeac815f38db356ca9a41dad913e4a743d50fa43a67da183f17b1829b076b5d2791c65a96bdccaab00f50d4b7e53b9bd62914dabf904b31b6f07d36ac44d8d6dc8105e2f52ef8fc55c2dd40b4cc0b2e3d79ecff71eca9cce9d07060929f725e6b787ce5747318f3f4a3844dff23feafcffe19a7683c032a07f9b2ae989078714db85866d33574c91ea612084b7ab5495f94f2db7a9c33ff958a"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, 0x0, 0x0, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a443f28b1dd68f76bed7da29497fc9eeb6401000000000000007c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca0adfe4d3e32deaf2952a1859e4b5223695caaf36612bb157300378775996286af71ff18445908f078508057ca956829cc027978c271529d9ec3b921006adc1ae9897a4db6fa745f10e31ddf8f6a35cd9f8d72e66399e5b37335a756edcab2ca607b0a89e1082e5f147950303402023d2cbf25fe52495197f15316b9e10f049d2178f1bec64cbf4dc99a9436542ff019e0e6eb37ea29549284832b00fbd50b522dbccf0233bc187656bf8c9a3ed54ce1c3b23b5489acaf864e7c0e8f7614696c6971e3cdc670e9f4d5844ae72d787546080d380ee8401f869e577512e26dc979987c9aba271464eb4e3c2"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:00 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[], 0x0, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:00 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[], 0x0, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d7bc65488795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be43"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041385979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c06736304c3312a624ea751eb00000000000000000000001b00"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48b23888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b5941c0a73e352c8a1eae126a983f802c6ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e64327340628054061e1633cf86498930328ee024938dbfd952481e144f4b53eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d8588a3325e0ed919faac1521cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2088fa1a34492fdd4494c5eed6d33243441dbd3c73109338964bb4af79be0195d459fadab38ea746dbe621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f0088945c0458d2fa9464a39a36df1d942f8e17aa4266b9180318d517fa57f99b5d015dda76e182a5b693ae1ca895eff782845d60dbf5313ca82e58eeb55829f8cac66fa3f497a8593fe2c1b2d9f81deff4eddbb8b7a57072e225625d29ad961d9f7f9d14f2b765fa5b83b76eba698b1f480d0b9a5dde58eb2f2675d23"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:01 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r0, &(0x7f00000000c0)="fb", 0x1) read(r0, &(0x7f0000000500)=""/90, 0xffffff91) fcntl$setstatus(r0, 0x4, 0xc8) r2 = dup2(r1, r0) socketpair(0x2, 0x5, 0x1f, &(0x7f0000000100)={0xffffffffffffffff}) r4 = getpgrp() r5 = geteuid() r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r6, 0x0, 0x0) shmctl$IPC_SET(r6, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r8 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r10 = getgid() r11 = semget$private(0x0, 0x4, 0x50) semctl$GETZCNT(r11, 0xecd36670e3ce36b6, 0x7, &(0x7f00000004c0)=""/235) semctl$GETNCNT(r11, 0x4, 0x3, &(0x7f00000003c0)=""/237) semctl$GETZCNT(r11, 0xfffffffffffffffd, 0x7, &(0x7f00000005c0)=""/235) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000080)={{0x4, 0xffffffffffffffff, r8, r9, r10, 0x10, 0x9}, 0x8, 0x4, 0x9}) r12 = getgid() r13 = getppid() r14 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r7, r9, r12, 0x1e4, 0x8}, 0x5, 0x5, r13, r14, 0xfffffffffffffe01, 0x9, 0x7ff}) r15 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r15, 0x0, 0x0) shmctl$IPC_SET(r15, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r15, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r18 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r20 = getgid() r21 = semget$private(0x0, 0x7, 0x286) semop(r21, &(0x7f0000000000)=[{0x6, 0x4}, {0x3, 0x1, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x0, 0x1800}], 0x4) semop(r21, &(0x7f0000000100)=[{0x1, 0x3, 0x1800}, {0x0, 0x800, 0x800}, {0x1, 0x6, 0x800}, {0x1, 0x0, 0x1000}, {0x4, 0x80, 0x800}, {0x1, 0x9, 0x1800}], 0x6) semctl$SETVAL(r21, 0x0, 0x8, &(0x7f00000000c0)) r22 = socket(0x18, 0x2, 0x0) setsockopt(r22, 0x29, 0x9, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) getsockopt$SO_PEERCRED(r22, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r26 = shmget(0x3, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r26, 0x2, &(0x7f0000000100)=""/114) r27 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$BIOCSETIF(r27, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r28 = socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_int(r29, 0xffff, 0x200, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r28, 0x29, 0x68, &(0x7f0000000940)={{0x18, 0x0, 0x0, 0xfff}, {0x18, 0x0, 0x19c6c283, 0x2}, 0x100000000, [0x4, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0x1, 0x2, 0x3]}, 0x3c) fchflags(r28, 0x1) getsockopt$sock_timeval(r28, 0xffff, 0x0, &(0x7f0000000740), &(0x7f00000007c0)=0x10) r30 = fcntl$dupfd(r29, 0x0, r29) ioctl$FIONBIO(r30, 0x8004667e, &(0x7f00000006c0)=0x3) kevent(r30, &(0x7f0000000800)=[{{r30}, 0xffffffffffffffff, 0x1, 0x10, 0xffff, 0x2}, {{r29}, 0xfffffffffffffffe, 0x20, 0x80, 0x708800000000000, 0x6df}, {{r29}, 0x213c0bc5e58e66b, 0x3e, 0x100000002, 0x400, 0x9832}, {{r29}, 0xfffffffffffffffb, 0x8, 0xfffff, 0x10000000000008, 0x2}, {{r28}, 0x0, 0x20, 0x2, 0x80000002, 0x7}], 0x9, &(0x7f00000008c0)=[{{r30}, 0xffffffffffffffff, 0x8, 0x22, 0x8, 0x434a4f43}], 0x7, &(0x7f0000000900)={0x100004, 0x5b7e}) mknodat(r29, &(0x7f0000000a40)='./file0\x00', 0xc0, 0x40000000000000) openat$vmm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vmm\x00', 0x10000, 0x0) r31 = openat$null(0xffffffffffffff9c, &(0x7f0000000840)='/dev/null\x00', 0x100, 0x0) r32 = fcntl$getown(r31, 0x5) shmctl$IPC_SET(r26, 0x1, &(0x7f0000000200)={{0x3ff, r24, r25, r24, r25, 0x104, 0x5}, 0xfff, 0x9, r32, r32, 0x7d55, 0xd75, 0xfa}) lchown(&(0x7f00000003c0)='./file0/file0\x00', r24, r25) getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r25, 0x0, 0xffffffffffffffff, 0x0]) r34 = getgid() semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000140)={{0x4006, r23, r33, 0xffffffffffffffff, r34, 0x100, 0xfffffffffffeffff}, 0x400, 0x10001, 0x40}) semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000bc0)={{0x4, r16, r18, r19, r20, 0x2, 0x9}, 0x8, 0x4, 0xfffffffffffffffd}) r35 = getgid() r36 = getppid() r37 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r15, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r17, r19, r35, 0x1e4, 0x8}, 0x5, 0x5, r36, r37, 0xfffffffffffffe01, 0x9, 0x7ff}) getpgid(r36) r38 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r38, 0x0, 0x0) shmctl$IPC_SET(r38, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r38, 0x2, &(0x7f0000000040)=""/210) r39 = semget$private(0x0, 0x4, 0x1) semctl$SETVAL(r39, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r39, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r40 = socket(0x800000018, 0x1, 0x0) bind$unix(r40, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r40, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r42 = getgid() semctl$IPC_SET(r39, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, 0x0, r41, r42, 0x10, 0x9}, 0x8, 0x1, 0x9}) r43 = getppid() r44 = getgid() r45 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r45, 0x0, 0x0) shmctl$IPC_SET(r45, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r45, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r47 = getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r48, &(0x7f00000001c0)="bd4e792c30d3abe3ce769535ebb1af0d443a9f8ab68cc0fced4fba9f599ea21b0c9fe30234c8c08665ec7a68097afcfb578eaf86282168a72e5789ad6de6327990d09dc24955b446e75b6c4efe2403c7ccb09b6996c85ff6f0d7057bb5d55c244d4a8636ac99506279675795ef60cdb442d117083608591f7bdc1487", 0x7c, 0x2, &(0x7f0000000040)=@in={0x2, 0x2}, 0xc) r49 = socket(0x2, 0x2, 0x0) connect$unix(r49, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10) dup2(r49, r48) setsockopt$sock_int(r48, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) dup(r48) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$SO_PEERCRED(r50, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) accept$unix(r50, 0x0, &(0x7f00000006c0)) r51 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$BIOCSETIF(r51, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) fcntl$getown(r51, 0x5) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xfd24) r53 = getgid() r54 = semget$private(0x0, 0x4, 0x50) semctl$GETZCNT(r54, 0xecd36670e3ce36b6, 0x7, &(0x7f00000004c0)=""/235) semctl$GETNCNT(r54, 0x4, 0x3, &(0x7f00000003c0)=""/237) semctl$GETZCNT(r54, 0xfffffffffffffffd, 0x7, &(0x7f00000005c0)=""/235) semctl$IPC_SET(r54, 0x0, 0x1, &(0x7f0000000080)={{0x4, 0xffffffffffffffff, r47, r52, r53, 0x10, 0x9}, 0x8, 0x4, 0x9}) r55 = getgid() r56 = getppid() r57 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r45, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r46, r52, r55, 0x1e4, 0x8}, 0x5, 0x5, r56, r57, 0xfffffffffffffe01, 0x9, 0x7ff}) r58 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc) shmctl$IPC_SET(r38, 0x1, &(0x7f0000000080)={{0x401, r58, r59, r41, r44, 0x1be, 0x8}, 0x5, 0x5, r43, r57, 0xfffffffffffffe03, 0x9, 0x7fb}) r60 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r60, 0x0, 0x0) shmctl$IPC_SET(r60, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r60, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r62 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r64 = getgid() r65 = semget$private(0x0, 0x4, 0x50) semctl$GETZCNT(r65, 0xecd36670e3ce36b6, 0x7, &(0x7f00000004c0)=""/235) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f00000003c0)=""/237) semctl$GETZCNT(r65, 0xfffffffffffffffd, 0x7, &(0x7f00000005c0)=""/235) semctl$IPC_SET(r65, 0x0, 0x1, &(0x7f0000000080)={{0x4, 0xffffffffffffffff, r62, r63, r64, 0x10, 0x9}, 0x8, 0x4, 0x9}) r66 = getgid() r67 = getppid() r68 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r60, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r61, r63, r66, 0x1e4, 0x8}, 0x5, 0x5, r67, r68, 0xfffffffffffffe01, 0x9, 0x7ff}) r69 = syz_open_pts() ioctl$TIOCSETAF(r69, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "d730c1e77a6fc6e23c5cd188b6aea417e4e74de4"}) write(r69, &(0x7f00000003c0)="001e2a3cc447943856bc1dedb8495326c03948f3986a882d4ef4d56aec375b4697", 0x21) poll(&(0x7f0000000000)=[{r69, 0x40}], 0x1, 0xffff) r70 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000380)='/dev/speaker\x00', 0x2, 0x0) r71 = syz_open_pts() ioctl$TIOCSETAF(r71, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "d730c1e77a6fc6e23c5cd188b6aea417e4e74de4"}) write(r71, &(0x7f00000003c0)="001e2a3cc447943856bc1dedb8495326c03948f3986a882d4ef4d56aec375b4697", 0x21) poll(&(0x7f0000000000)=[{r71, 0x40}], 0x1, 0xffff) r72 = syz_open_pts() ioctl$TIOCSETAF(r72, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "d730c1e77a6fc6e23c5cd188b6aea417e4e74de4"}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000980)='/dev/bpf\x00', 0x0, 0x0) r73 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/wskbd\x00', 0x244fcee140557f5, 0x0) write(r73, &(0x7f0000000a00)="001e2a3c8447943856bc1dedb8495326c03948f3986a882d4ef4d56aec375b4697", 0x21) poll(&(0x7f0000000000)=[{r72, 0x40}], 0x1, 0xffff) sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000340)=[{&(0x7f0000000180)="6a099a58a728cc7a3d30630e64c2d3ced9afa8bdbbae9c90704afe7ef7b436a7331299ff2df010d667707062779621b882f140c80e11588249054958a5caf202c7b3b6cfcf4ac4ec22d0e1d1522fab1955b52f8acb21d45c46e28fded71287f7f9e38e8225fa0104a3e10ea5f45cea2d41fa57d50426e0728add0827342326cd6b6ae909635c5ca6788d9f1e5e", 0x8d}, {&(0x7f0000000240)="6ed81e60886d53596f9de9ad60527f904066dedb840d5e8d7ddf12f78e2e97a979b8c59a27b74b1ab5eeff668bd225b883e667067e1372c391c9b08c1bbe5f6187284e258a725e1402be6a86626120a2006a13193f32d0b239e107c0118381886292d3ed5b1afcc7e210f11857259e23b9509502b909e91da2d548bb7abacae1deaad72e0d34cf92e1a5d05e9c7c5d80ee9a231c13d2b91eaacbb9023a3965a94f084548d4da9fd48a6149c4b736dd7ec99e04dfdb5fa64fec2dcc2cde5512ee976e1ade0983a470364800adcf2270028d28292d2dcb0553506ab8a598", 0xdd}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r44, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r36, @ANYRES32=r58, @ANYRES32=r61, @ANYBLOB="000000003000000000000000ffff000001000000", @ANYRES32=r69, @ANYRES32=r70, @ANYRES32=r71, @ANYRES32=r1, @ANYRES32=r72, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="729cb99f45c078fd79a386942fe70764e15cf3bfebf777c2a84c225101a0609fbaedf84f20e952a502101ca0dd477b3c576797699c5dab71d1451ab562741948aa"], 0x70, 0x4}, 0x40c) setitimer(0x1, &(0x7f0000000000)={{0x8, 0x1}, {0x3, 0x1ff}}, &(0x7f0000000040)) execve(0x0, 0x0, 0x0) 16:36:01 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[], 0x0, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d7bc65488795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be43"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48b23888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b5941c0a73e352c8a1eae126a983f802c6ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e64327340628054061e1633cf86498930328ee024938dbfd952481e144f4b53eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d8588a3325e0ed919faac1521cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2088fa1a34492fdd4494c5eed6d33243441dbd3c73109338964bb4af79be0195d459fadab38ea746dbe621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f0088945c0458d2fa9464a39a36df1d942f8e17aa4266b9180318d517fa57f99b5d015dda76e182a5b693ae1ca895eff782845d60dbf5313ca82e58eeb55829f8cac66fa3f497a8593fe2c1b2d9f81deff4eddbb8b7a57072e225625d29ad961d9f7f9d14f2b765fa5b83b76eba698b1f480d0b9a5dde58eb2f2675d23"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:01 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:01 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01e90821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c6bae2f5978bab41e2e7e4223392b6eb7afeac815f38db356ca9a41dad913e4a743d50fa43a67da183f17b1829b076b5d2791c65a96bdccaab00f50d4b7e53b9bd62914dabf904b31b6f07d36ac44d8d6dc8105e2f52ef8fc55c2dd40b4cc0b2e3d79ecff71eca9cce9d07060929f725e6b787ce5747318f3f4a3844dff23feafcffe19a7683c032a07f9b2ae989078714db85866d33574c91ea612084b7ab5495f94f2db7a9c33ff958a"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48b23888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b5941c0a73e352c8a1eae126a983f802c6ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e64327340628054061e1633cf86498930328ee024938dbfd952481e144f4b53eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d8588a3325e0ed919faac1521cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2088fa1a34492fdd4494c5eed6d33243441dbd3c73109338964bb4af79be0195d459fadab38ea746dbe621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f0088945c0458d2fa9464a39a36df1d942f8e17aa4266b9180318d517fa57f99b5d015dda76e182a5b693ae1ca895eff782845d60dbf5313ca82e58eeb55829f8cac66fa3f497a8593fe2c1b2d9f81deff4eddbb8b7a57072e225625d29ad961d9f7f9d14f2b765fa5b83b76eba698b1f480d0b9a5dde58eb2f2675d23"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x7) nanosleep(&(0x7f0000001c40)={0xf0, 0x7feffffe}, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0xf8b4, 0x0, 0x10000fe, 0x0) r2 = kqueue() r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/wsmouse\x00', 0x200, 0x0) fcntl$getflags(r3, 0x25d95067f3629e9b) kevent(r2, &(0x7f0000000240), 0xffc, 0x0, 0xffffffffffffffff, 0x0) close(r1) 16:36:01 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c7307bcf141e0a8b222ad77da67ddcc153f9a29643b2fc238a4b769037059b6449c571747d4918452b8"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c06736304c3312a624ea751eb00000000000000000000001b00"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a443f28b1dd68f76bed7da29497fc9eeb6401000000000000007c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca0adfe4d3e32deaf2952a1859e4b5223695caaf36612bb157300378775996286af71ff18445908f078508057ca956829cc027978c271529d9ec3b921006adc1ae9897a4db6fa745f10e31ddf8f6a35cd9f8d72e66399e5b37335a756edcab2ca607b0a89e1082e5f147950303402023d2cbf25fe52495197f15316b9e10f049d2178f1bec64cbf4dc99a9436542ff019e0e6eb37ea29549284832b00fbd50b522dbccf0233bc187656bf8c9a3ed54ce1c3b23b5489acaf864e7c0e8f7614696c6971e3cdc670e9f4d5844ae72d787546080d380ee8401f869e577512e26dc979987c9aba271464eb4e3c2"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01e90821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c6bae2f5978bab41e2e7e4223392b6eb7afeac815f38db356ca9a41dad913e4a743d50fa43a67da183f17b1829b076b5d2791c65a96bdccaab00f50d4b7e53b9bd62914dabf904b31b6f07d36ac44d8d6dc8105e2f52ef8fc55c2dd40b4cc0b2e3d79ecff71eca9cce9d07060929f725e6b787ce5747318f3f4a3844dff23feafcffe19a7683c032a07f9b2ae989078714db85866d33574c91ea612084b7ab5495f94f2db7a9c33ff958a"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf44100000000000000"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c06736304c3312a624ea751eb00000000000000000000001b00"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a443f28b1dd68f76bed7da29497fc9eeb6401000000000000007c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca0adfe4d3e32deaf2952a1859e4b5223695caaf36612bb157300378775996286af71ff18445908f078508057ca956829cc027978c271529d9ec3b921006adc1ae9897a4db6fa745f10e31ddf8f6a35cd9f8d72e66399e5b37335a756edcab2ca607b0a89e1082e5f147950303402023d2cbf25fe52495197f15316b9e10f049d2178f1bec64cbf4dc99a9436542ff019e0e6eb37ea29549284832b00fbd50b522dbccf0233bc187656bf8c9a3ed54ce1c3b23b5489acaf864e7c0e8f7614696c6971e3cdc670e9f4d5844ae72d787546080d380ee8401f869e577512e26dc979987c9aba271464eb4e3c2"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 1: r0 = socket(0x2, 0x2, 0x0) kqueue() r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kqueue() socket(0x11, 0x3, 0x0) kqueue() kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kqueue() connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) r3 = socket(0x18, 0x1, 0x0) close(r3) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r4 = dup2(r1, r3) ioctl$WSMOUSEIO_GCALIBCOORDS(r4, 0x41205725, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$BIOCFLUSH(r2, 0x20004268) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000700000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="042f2200"], 0x50}, 0x0) 16:36:02 executing program 1: socket(0x18, 0x1, 0x0) socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() socket(0x18, 0x2, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0xe, 0x1, 0x0) kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x1, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() socket(0x18, 0x1, 0x0) kqueue() kqueue() kqueue() socket(0x18, 0x1, 0x0) kqueue() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) syz_open_pts() syz_open_pts() socket(0x18, 0x2, 0x0) syz_open_pts() r0 = socket(0x800000018, 0x1, 0x0) accept$inet6(r0, 0x0, 0x0) 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01e90821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c6bae2f5978bab41e2e7e4223392b6eb7afeac815f38db356ca9a41dad913e4a743d50fa43a67da183f17b1829b076b5d2791c65a96bdccaab00f50d4b7e53b9bd62914dabf904b31b6f07d36ac44d8d6dc8105e2f52ef8fc55c2dd40b4cc0b2e3d79ecff71eca9cce9d07060929f725e6b787ce5747318f3f4a3844dff23feafcffe19a7683c032a07f9b2ae989078714db85866d33574c91ea612084b7ab5495f94f2db7a9c33ff958a"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf44100000000000000"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d7bc65488795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be43"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48ba3888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b59416ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e643273406280540682971e1633cf86498930328ee024938dbfd952481e144f5853eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d21cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2014bd2026342588fa1a34492fdd4494c5eeb4af79be0195d459fadab35e7f6527e621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f00800"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c06736304c3312a624ea751eb00000000000000000000001b00"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a01570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b6b449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee16001ca011e36f000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492080090821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1e9dc1da57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e061406f8822de81dc8d4525504ec75f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362080023dcea1361ba312d6b31ec5ba0bb0e89b99aa941759689d37da81668be804061fb27986d8b7e13e86befa560461478ff8b53ef24ff777352c9206d8fe7f37ee44481aabb7a980499881126f8cafde9ac316a2d560d17c9d9b1c03d4c8c98921a08206c171c23947caae8ffe728eda021b67cfe62bc4bcb98552e396a2e0000000000008d64aa118faffc3ea1"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48b23888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b5941c0a73e352c8a1eae126a983f802c6ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e64327340628054061e1633cf86498930328ee024938dbfd952481e144f4b53eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d8588a3325e0ed919faac1521cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2088fa1a34492fdd4494c5eed6d33243441dbd3c73109338964bb4af79be0195d459fadab38ea746dbe621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f0088945c0458d2fa9464a39a36df1d942f8e17aa4266b9180318d517fa57f99b5d015dda76e182a5b693ae1ca895eff782845d60dbf5313ca82e58eeb55829f8cac66fa3f497a8593fe2c1b2d9f81deff4eddbb8b7a57072e225625d29ad961d9f7f9d14f2b765fa5b83b76eba698b1f480d0b9a5dde58eb2f2675d23"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a443f28b1dd68f76bed7da29497fc9eeb6401000000000000007c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca0adfe4d3e32deaf2952a1859e4b5223695caaf36612bb157300378775996286af71ff18445908f078508057ca956829cc027978c271529d9ec3b921006adc1ae9897a4db6fa745f10e31ddf8f6a35cd9f8d72e66399e5b37335a756edcab2ca607b0a89e1082e5f147950303402023d2cbf25fe52495197f15316b9e10f049d2178f1bec64cbf4dc99a9436542ff019e0e6eb37ea29549284832b00fbd50b522dbccf0233bc187656bf8c9a3ed54ce1c3b23b5489acaf864e7c0e8f7614696c6971e3cdc670e9f4d5844ae72d787546080d380ee8401f869e577512e26dc979987c9aba271464eb4e3c2"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 1: r0 = syz_open_pts() r1 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x40) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x3b2) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000080)) lseek(r1, 0x0, 0x40fff, 0x0) write(r1, &(0x7f0000000140)='W', 0x1) ftruncate(r1, 0x0, 0x30000) r3 = socket(0x2, 0x4001, 0x0) connect$unix(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x10) r4 = socket(0x2, 0x4001, 0x0) connect$unix(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000100)=0x3, 0x4) r5 = dup2(r3, r4) r6 = dup2(r2, r1) r7 = syz_open_pts() close(r7) r8 = open(&(0x7f0000000000)='./file0\x00', 0x201, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2011, r8, 0x0, 0x0) ioctl$TIOCMBIC(r8, 0x8004746b, &(0x7f0000000200)=0x2) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) fcntl$dupfd(r7, 0x0, r6) dup2(r0, r1) r9 = syz_open_pts() ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x107fffffff, "73ffff4d4d7ee400000100000000000000000010"}) getppid() r10 = getpid() r11 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyCcfg\x00', 0x920, 0x0) read(r11, &(0x7f0000000340)=""/89, 0x59) ktrace(0x0, 0x5, 0x10100, r10) r12 = semget$private(0x0, 0x2000000000000a, 0x200000000000284) semop(r12, &(0x7f0000000800)=[{0x3, 0x8, 0x1800}, {0x0, 0x80, 0x1800}, {0x3, 0x1, 0xffa}, {0x2, 0xfd, 0x800}, {0x7, 0x8}, {0xb, 0x9, 0x11800}, {0x4, 0x4, 0x800}, {0x4, 0x4, 0x800}, {0x4, 0x7fffffff, 0x1800}], 0x9) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x8008) getsockopt$sock_cred(r13, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000000c0)=0xffffffffffffffa9) lchown(&(0x7f0000000240)='./file1\x00', r14, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) r16 = socket(0x11, 0x3, 0x0) setsockopt(r16, 0x20000000000011, 0x3, &(0x7f0000000100)="0000065d", 0x2) r17 = getpgrp() fcntl$lock(r16, 0x7, &(0x7f0000000040)={0x3, 0x1, 0x101, 0x1, r17}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r19 = semget$private(0x0, 0x2, 0x400) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r22 = getgid() semop(r19, &(0x7f0000000780)=[{0x1, 0x1000, 0x1800}, {0x0, 0xfffb}, {0x2, 0xfff, 0x800}, {0x2, 0x20, 0x1800}, {0x5, 0x8, 0x1c00}, {0x0, 0x3, 0x800}], 0x6) semctl$IPC_SET(r19, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r21, r20, 0x0, r22, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) shutdown(r23, 0x0) poll(&(0x7f0000000000)=[{r23, 0x1a5}], 0x2000000000000160, 0x0) getsockopt$sock_cred(r23, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xffffffffffffff46) semctl$IPC_SET(r19, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r24, 0x0, r18, 0x0, 0x40, 0x7}, 0x7ffd, 0x1fe, 0x8}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r27 = socket(0x18, 0x2, 0x0) accept$inet6(r27, 0x0, 0x0) getsockopt$sock_cred(r27, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$SO_PEERCRED(r16, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r19, 0x0, 0x1, &(0x7f0000000840)={{0x20000007, r28, r26, 0x0, r29, 0x100010024, 0x7}, 0x9, 0x80, 0x3}) semctl$IPC_SET(r12, 0x0, 0x1, &(0x7f00000001c0)={{0x4, r14, r26, r15, 0xffffffffffffffff, 0x40, 0x4}, 0x49, 0x8, 0x5b5f}) r30 = getegid() getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) setregid(r30, r31) r32 = getegid() r33 = getegid() getgroups(0x3, &(0x7f0000000580)=[r33, r33, r25]) setregid(r32, 0x0) getgroups(0x1, &(0x7f00000002c0)=[0x0]) r35 = getegid() getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) setregid(r35, r36) setgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, r32, r31, r34, r35]) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0}, 0xc) r38 = geteuid() setreuid(0x0, r38) getgroups(0x1, &(0x7f0000000340)=[r32]) r40 = msgget(0x2, 0x40) msgctl$IPC_SET(r40, 0x1, &(0x7f00000003c0)={{0x2804, r14, r35, 0x0, r39, 0x0, 0xff}, 0x9, 0x9ffb, 0xffffffffffffffff, r37, 0x400, 0x1, 0xfffffffffffffffd, 0x4}) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f00000003c0)={0x0}, 0xc) fcntl$lock(r9, 0x1d, &(0x7f00000000c0)={0x2, 0x3, 0x81, 0x1, r41}) r42 = semget$private(0x0, 0x2, 0x100) semctl$GETPID(r42, 0x0, 0x4, &(0x7f0000000280)=""/154) semctl$SETVAL(r42, 0x0, 0x8, &(0x7f0000000180)) unlink(&(0x7f0000000000)='./file0\x00') 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf44100000000000000"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041385979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 1: chmod(&(0x7f0000000000)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f00000010c0)='c\x00') 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c7307bcf141e0a8b222ad77da67ddcc153f9a29643b2fc238a4b769037059b6449c571747d4918452b8"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b20800000000000000"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48ba3888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b59416ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e643273406280540682971e1633cf86498930328ee024938dbfd952481e144f5853eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d21cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2014bd2026342588fa1a34492fdd4494c5eeb4af79be0195d459fadab35e7f6527e621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f00800"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8000000001) mkdir(&(0x7f0000000000)='./file0\x00', 0x10b) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000001580)='c\x00') 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b20800000000000000"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) pwritev(r0, &(0x7f00000002c0), 0x100c, 0x0, 0x6) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b20800000000000000"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d7bc65488795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be43"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48ba3888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b59416ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e643273406280540682971e1633cf86498930328ee024938dbfd952481e144f5853eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d21cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2014bd2026342588fa1a34492fdd4494c5eeb4af79be0195d459fadab35e7f6527e621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f00800"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48b23888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b5941c0a73e352c8a1eae126a983f802c6ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e64327340628054061e1633cf86498930328ee024938dbfd952481e144f4b53eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d8588a3325e0ed919faac1521cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2088fa1a34492fdd4494c5eed6d33243441dbd3c73109338964bb4af79be0195d459fadab38ea746dbe621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f0088945c0458d2fa9464a39a36df1d942f8e17aa4266b9180318d517fa57f99b5d015dda76e182a5b693ae1ca895eff782845d60dbf5313ca82e58eeb55829f8cac66fa3f497a8593fe2c1b2d9f81deff4eddbb8b7a57072e225625d29ad961d9f7f9d14f2b765fa5b83b76eba698b1f480d0b9a5dde58eb2f2675d23"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 1: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x0, 0x8001, 0x0, 0xfffffff8, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) write(r0, &(0x7f00000005c0)="bdfa4d2582c321a8cf98048e4a8051bd24313dea8d0343d605e2d3280533ee6185c6a19e1a3fbed9d7c7f5ecd505370f55d9bb05dc03e23aa168a0237f559b7cb5e32d0ff2d4e7199679daa987423cab21c6b2748aaa78947da61d75bc9028a2b887f01309", 0x65) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x4004746a, &(0x7f0000000040)) getegid() 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041385979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 1: setrlimit(0x8, &(0x7f0000000000)={0x9, 0x93}) r0 = syz_open_pts() close(r0) syz_open_pts() kevent(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETAW(r0, 0x80047469, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, "1ffbdfa6163cb90277925f1be62c36ae61c4a648"}) write(r0, &(0x7f0000000300)="882cbcbd8638244b", 0x8) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xd, &(0x7f0000000180)="06000000", 0x4) fcntl$dupfd(r1, 0x0, r1) poll(&(0x7f0000000040)=[{r1, 0x4}], 0x1, 0x0) 16:36:02 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000080)=""/51, 0x33}], 0x4, &(0x7f0000000280)=""/198, 0xc6}, 0x800) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x40087603, &(0x7f0000000000)) close(r0) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0x0, 0x3ff, 0x15, 0x6541b6bb, "73cc510e52937b2ed218374a0c76500d3fc9c06d"}) r4 = open(&(0x7f00000003c0)='./file0\x00', 0x100, 0x100) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000400)='/dev/wskbd0\x00', 0x0, 0x0) r6 = socket(0x18, 0x1, 0x0) close(r6) connect$unix(r6, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r8 = fcntl$dupfd(r7, 0x0, r7) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0x18, 0x4000, 0x7) r10 = socket(0x18, 0x2, 0x0) setsockopt(r10, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) fcntl$dupfd(r10, 0x0, r10) r11 = socket(0x18, 0x2, 0x0) setsockopt(r11, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r12 = fcntl$dupfd(r11, 0x0, r11) sendto$inet(r12, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = socket(0x18, 0x2, 0x0) setsockopt(r13, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) fcntl$dupfd(r13, 0x0, r13) r14 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000540)='/dev/speaker\x00', 0x20000, 0x0) kevent(r4, &(0x7f0000000440)=[{{r5}, 0xffffffffffffffff, 0x40, 0xf0000000, 0x7fff, 0xbd}, {{r0}, 0xfffffffffffffffc, 0x430c318d41330934, 0x1, 0x1ff, 0xffffffffffff0001}, {{r3}, 0xfffffffffffffff8, 0x8, 0x20000000, 0xfffffffffffffffd, 0x7fff}, {{r6}, 0x7fffffffffffffff, 0x8, 0x80000009, 0x20, 0x7}, {{}, 0xffffffffffffffff, 0x11a, 0x2, 0x7, 0x80}, {{r8}, 0xfffffffffffffff9, 0x8c, 0x2, 0x9, 0xff}, {{r9}, 0xfffffffffffffffa, 0x10, 0x1, 0x7, 0x2ba4}], 0xe7, &(0x7f0000000580)=[{{r10}, 0x0, 0x2, 0x20, 0x9, 0x4}, {{r3}, 0x7ffffffffffffffc, 0x10, 0x1, 0x7, 0x1000}, {{r0}, 0x7, 0x40, 0x40, 0x400, 0xf5}, {{r12}, 0xfffffffffffffffb, 0x40, 0x1, 0x4, 0xbf2a}, {{r13}, 0xfffffffffffffffa, 0x20, 0x1, 0x8}, {{r14}, 0xfffffffffffffffd, 0xc, 0x16, 0x3, 0x6}], 0x10001, &(0x7f0000000640)={0x6, 0x120}) write(r0, &(0x7f0000000c80)="0ce49dc0de765b9c1725d394a2a57d48c146751939812de82320a679a973dfaef70caa2c9b8b3b60dc84e3dbcd18b82c7723f40adaa5a55e3b39daed35ad5a07c7212ac37882f74761e64a6df108c262079178fddd8d3ad2afb8adba15b68ea309b17f72750e355959d0a23e2fe2bd55cab69150cc06780218187b480ac391a7f4b6618c1a60b6da12757a00b0162e6ee9fed4f1f4991c66003d33a5275368d6c27a6bff4116a06d31e3a291196b8c70b11a151ebf7d21361717c33411837666d5c0ecc77a35aedfb7c9c2bf3897af68909b17866c1b898f517c20b1849eb7f61940dded805a8f002515457299ae48264034f1ad52e2e49d111f92ecb173fd50546fec8327c031a60aa23f7366207043f6b43c34a4d9667d8cc3ebef928ee8e7465cde6271fb6ae42a046b64c41760f4436816410ee693633048bb78e8bd68814e31d0586a0a9d2f829996e0fe72681b44c26aebc32f3ffbbfce746fec4a86c1ecf2bdd64e7eafaa719001608d8ca45e43591aae3090402f1af67400b0881f3d992ab9c5d9929dde08d3dfe821670db339b180e9aee637d3ad6bfc6530e64596a83951216c060ba1412e44217cd52ac5c6bad522208e395bd5571b133bb5f24257288ddb9d2ab8f7a47f8e9bfe4638f2a49a3d7fe9ee43170a7326d5d776d6ac33f1992822b78a3b57b595aac5a8ce1d74a06514af1c4c8482ff9e9d833a6981d510417592665e71c851f3358e9a1ca9b13ba145d79000e6040099211683a6ed3dae35fcce457f4ddc0c0c345f65667476c7d22019728def08a1a743991762427726026647099b9bddf7f424af106ed9ae742a286e9aaf49c7d66a22cec1416da6d9051af4988567ded2431402580ea1c2322f6ea27b8449731fd8703c2b3bf03db34b9b945780965858dc408189f0baed90e87fb9dc0f7abf8c0ba819c4051748a757284dbf355c2e4399329c3e5de0498f11eec76da60f1cadad948c70df4be53a8fd41788bb79b36fd53054d3b4e3f8c308ea5a489d98baa51857b3631ddaf92bd27adf6853b71cc6f7caa4b14bbd2d68c8b4a48e8ae89eea24b6257be922354de7a2437d556a3a08589f6a7fc117fcfe6a716b068df0ab34cd246d3285031f5fb552921288b472a5e274d32714744b727132bcab2793151051724241818dbbfd21eb26586ed0de63b5aff7741d16c9ec23dbc0d4c1ebd18debff5317329bb43d2ebb239f378f4ce2e7022a5a36b79b266ceb95c75e67e080bfc89dc46d4088310a59302b442bc29f3305e304c902e6298d07cd5be6952120cc060a7bfcc8c36fb11c8d46f05a1891f1a0c6907ce3c82539f5c18454b10374754f8a0ecccba11962cfc62d7b5ff22cd684ab1455002996f3a308aa5e1d20587f4e7575240d48433f8d8fbef4a564d7653ba1aad5acef76b65df27d5f34e4f6128cff1ad20d", 0x400) 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01e90821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c6bae2f5978bab41e2e7e4223392b6eb7afeac815f38db356ca9a41dad913e4a743d50fa43a67da183f17b1829b076b5d2791c65a96bdccaab00f50d4b7e53b9bd62914dabf904b31b6f07d36ac44d8d6dc8105e2f52ef8fc55c2dd40b4cc0b2e3d79ecff71eca9cce9d07060929f725e6b787ce5747318f3f4a3844dff23feafcffe19a7683c032a07f9b2ae989078714db85866d33574c91ea612084b7ab5495f94f2db7a9c33ff958a"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c06736304c3312a624ea751eb00000000000000000000001b00"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a01570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b6b449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee16001ca011e36f000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492080090821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1e9dc1da57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e061406f8822de81dc8d4525504ec75f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362080023dcea1361ba312d6b31ec5ba0bb0e89b99aa941759689d37da81668be804061fb27986d8b7e13e86befa560461478ff8b53ef24ff777352c9206d8fe7f37ee44481aabb7a980499881126f8cafde9ac316a2d560d17c9d9b1c03d4c8c98921a08206c171c23947caae8ffe728eda021b67cfe62bc4bcb98552e396a2e0000000000008d64aa118faffc3ea1"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:02 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01e90821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c6bae2f5978bab41e2e7e4223392b6eb7afeac815f38db356ca9a41dad913e4a743d50fa43a67da183f17b1829b076b5d2791c65a96bdccaab00f50d4b7e53b9bd62914dabf904b31b6f07d36ac44d8d6dc8105e2f52ef8fc55c2dd40b4cc0b2e3d79ecff71eca9cce9d07060929f725e6b787ce5747318f3f4a3844dff23feafcffe19a7683c032a07f9b2ae989078714db85866d33574c91ea612084b7ab5495f94f2db7a9c33ff958a"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a01570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b6b449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee16001ca011e36f000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492080090821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1e9dc1da57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e061406f8822de81dc8d4525504ec75f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362080023dcea1361ba312d6b31ec5ba0bb0e89b99aa941759689d37da81668be804061fb27986d8b7e13e86befa560461478ff8b53ef24ff777352c9206d8fe7f37ee44481aabb7a980499881126f8cafde9ac316a2d560d17c9d9b1c03d4c8c98921a08206c171c23947caae8ffe728eda021b67cfe62bc4bcb98552e396a2e0000000000008d64aa118faffc3ea1"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a443f28b1dd68f76bed7da29497fc9eeb6401000000000000007c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca0adfe4d3e32deaf2952a1859e4b5223695caaf36612bb157300378775996286af71ff18445908f078508057ca956829cc027978c271529d9ec3b921006adc1ae9897a4db6fa745f10e31ddf8f6a35cd9f8d72e66399e5b37335a756edcab2ca607b0a89e1082e5f147950303402023d2cbf25fe52495197f15316b9e10f049d2178f1bec64cbf4dc99a9436542ff019e0e6eb37ea29549284832b00fbd50b522dbccf0233bc187656bf8c9a3ed54ce1c3b23b5489acaf864e7c0e8f7614696c6971e3cdc670e9f4d5844ae72d787546080d380ee8401f869e577512e26dc979987c9aba271464eb4e3c2"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:03 executing program 1: setrlimit(0x4000000003, &(0x7f0000000080)={0x7ffc, 0x100000}) r0 = syz_open_pts() ioctl$TIOCNOTTY(r0, 0x20007471) setrlimit(0x3, &(0x7f0000000100)={0x10000, 0x100000}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BIOCGSTATS(r1, 0x4008426f, &(0x7f00000000c0)) r2 = msgget$private(0x0, 0x20000003c4) msgrcv(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x2, 0x1000) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETNCNT(r3, 0x1, 0x3, &(0x7f00000007c0)=""/228) r4 = semget$private(0x0, 0x2, 0x141) semctl$GETNCNT(r4, 0x3, 0x3, &(0x7f00000016c0)=""/147) semctl$GETVAL(r4, 0x4, 0x5, &(0x7f00000011c0)=""/202) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000140)=[0x9dd, 0x1ff]) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) fcntl$getown(r5, 0x5) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200010000000c, &(0x7f0000000040)="ebff125c00000000", 0x8) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000140)="eaff125c00000004", 0x8) dup(r6) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/vmm\x00', 0x0, 0x0) dup(0xffffffffffffffff) r8 = socket(0x18, 0x2, 0x0) setsockopt(r8, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r9 = fcntl$dupfd(r8, 0x0, r8) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x18, 0x2, 0x0) setsockopt(r10, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r11 = fcntl$dupfd(r10, 0x0, r10) sendto$inet(r11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/null\x00', 0x11586, 0x0) ioctl$VMM_IOC_READREGS(r7, 0xc2485607, &(0x7f0000001c40)) msgrcv(r2, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1, 0x3, 0x1000) pipe(&(0x7f00000001c0)) unveil(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='W\x00') msgget$private(0x0, 0x478) r12 = socket(0x11, 0x3, 0x0) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000540)='/dev/zero\x00', &(0x7f0000000580)='/dev/zero\x00', &(0x7f00000005c0)='/dev/zero\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='^\x00'], &(0x7f00000009c0)=[&(0x7f00000006c0)='tap', &(0x7f0000000700)='tap', &(0x7f0000000740)='\x00', &(0x7f0000000780)='/dev/zero\x00', &(0x7f00000008c0)='tap', &(0x7f0000000900)='W\x00', &(0x7f0000000940)='.+\x00', &(0x7f0000000980)='/dev/zero\x00']) sendto$unix(r12, &(0x7f0000000000)="b100050490000000000008000600ca900f0e08fecea11ea8fef968f3c73fd3357afdeb2c0900852e126336acf00b7804be781e4991f7addf5f882b2b7be1aa7923ed00f4c8b2ca3ebbc259699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb77008f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000000200a371a3f80000feffffffffffff010000000000000000", 0xb1, 0x0, 0x0, 0x0) r13 = msgget$private(0x0, 0x348) msgsnd(r13, &(0x7f0000000a00)={0x3}, 0x8, 0x0) 16:36:03 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a01570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b6b449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee16001ca011e36f000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492080090821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1e9dc1da57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e061406f8822de81dc8d4525504ec75f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362080023dcea1361ba312d6b31ec5ba0bb0e89b99aa941759689d37da81668be804061fb27986d8b7e13e86befa560461478ff8b53ef24ff777352c9206d8fe7f37ee44481aabb7a980499881126f8cafde9ac316a2d560d17c9d9b1c03d4c8c98921a08206c171c23947caae8ffe728eda021b67cfe62bc4bcb98552e396a2e0000000000008d64aa118faffc3ea1"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:03 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c7307bcf141e0a8b222ad77da67ddcc153f9a29643b2fc238a4b769037059b6449c571747d4918452b8"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041385979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:03 executing program 1: r0 = shmget(0x2, 0x3000, 0x245, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) 16:36:03 executing program 1: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="82022e2f669e86657d891dfe6466d830007eac352055b2acfa045caba9b3de424089d0bc92292a7897af8e25461faa091e501cccab6674a4c226c24b1690d34ab3b55f788e7479f196307f"], 0x10) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000080)=0x3, 0x3e6) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0xa) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) preadv(r3, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/159, 0x9f}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x7, 0x0, 0x0) r5 = socket(0x10000000002, 0x2, 0x0) r6 = dup2(r2, r5) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) ioctl$VMM_IOC_CREATE(r4, 0xc5005601, &(0x7f0000001500)={0x10, 0x2, 0x4, 0x7, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9}, {&(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x5fe}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7}, {&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7000000000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x3}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x80000000}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x80}, {&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x4f}, {&(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x4}], ['./file1\x00', './file0\x00', './file0\x00', './file0\x00'], './file0\x00', './file0\x00', './file0\x00', ['./file', './file', './file', './file'], 0x1}) 16:36:03 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:03 executing program 1: r0 = semget(0x3, 0x3, 0x451) semop(r0, &(0x7f0000000000)=[{0x2, 0x8}, {0x1, 0x6, 0x1800}, {0x1, 0x196, 0x1000}, {0xe, 0x2, 0x1000}, {0x3, 0x6, 0x800}, {0x0, 0x401, 0x1000}, {0x0, 0x3, 0x2000}, {0x1, 0x79, 0x1000}, {0x2, 0x1}], 0x9) r1 = semget$private(0x0, 0x0, 0x2) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) getgroups(0x5, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r5 = geteuid() r6 = getegid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000000c0)={{0xffff, r3, r4, r5, r6, 0x2a, 0x9}, 0xfffffffffffffffe, 0x80000000, 0x8}) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x0) ioctl$VMM_IOC_READREGS(r7, 0xc2485607, &(0x7f0000000200)) semctl$GETPID(r0, 0x0, 0x4, &(0x7f0000000480)=""/217) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) ioctl$VMM_IOC_TERM(r9, 0x80045604, &(0x7f00000005c0)={0x400}) ioctl$WSDISPLAYIO_GVIDEO(r8, 0x40045744, &(0x7f0000000600)) r10 = syz_open_pts() ioctl$TIOCSFLAGS(r10, 0x8004745c, &(0x7f0000000640)=0x3) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r11, 0x81205724, &(0x7f00000006c0)={0x73, 0x200, 0xbc, 0x6, 0x4, 0xffffffff, 0x3f, 0x10, [{0x6, 0x6, 0x1, 0x5}, {0x8, 0x80, 0x1, 0x6}, {0x100, 0x4, 0x8000, 0x7fff}, {0x2f, 0x2c, 0x2, 0x8}, {0xfffffffc, 0x118f, 0xe7, 0xf3a5}, {0x80000001, 0x5, 0x3, 0x80000000}, {0x8, 0x249, 0x7, 0x6}, {0x80000000, 0xfffffff9, 0x3, 0x40}, {0x8, 0x7, 0x1, 0x1}, {0x2, 0xffffffff, 0xfff, 0x100}, {0x8f6, 0xf6, 0xfffffffd, 0x4916}, {0x200, 0x4, 0x20, 0x2}, {0x4, 0x3, 0x92d, 0x85}, {0x7f, 0x2, 0x4, 0x2}, {0x2, 0x7ff, 0x3f}, {0x0, 0x0, 0x2, 0x424}]}) getpgid(r2) openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x8, 0x0) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840)='/dev/bpf\x00', 0x80, 0x0) ioctl$BIOCGDIRFILT(r12, 0x4004427c, &(0x7f0000000880)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000008c0)="cb55b36d83efe9f8c954df5c6cec414d43cfe0f9278be09596d0536b4ea364c1dda955c8c6447c9aa8a3ec739fcb93f51c1b16dddda77f1317acfa39e84c4870f83a63c01fa8750557798b3b373ef7fdc10613a950553b69d87602a3fddbb422ee3c3229f964afd5ba8ea7a408a27fbf42192fecb16850fe7a9490570f40d38e9e", 0x81) r13 = accept$inet6(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0xc) connect$inet6(r13, &(0x7f0000000a00)={0x18, 0x3, 0x3f, 0x5}, 0xc) r14 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000a40)) getsockopt$SO_PEERCRED(r14, 0xffff, 0x1022, &(0x7f0000000a80), 0xc) readlinkat(r7, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=""/46, 0x2e) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0x68, &(0x7f0000000b40)={{0x18, 0x0, 0x10001, 0x9}, {0x18, 0x2, 0x5, 0x80000001}, 0x0, [0x80000001, 0x7, 0xc, 0x4000, 0x5, 0x7fff, 0x0, 0xffff8000]}, 0x3c) 16:36:03 executing program 1: r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/\x00\x00\x00\x00use0\x00', 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) fcntl$dupfd(r2, 0x0, r2) listen(r2, 0x9) r3 = dup2(r0, r1) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000600)='r\x00') openat(r3, &(0x7f0000000180)='./file0\x00', 0x10000, 0x0) 16:36:03 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c7307bcf141e0a8b222ad77da67ddcc153f9a29643b2fc238a4b769037059b6449c571747d4918452b8"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a01570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b6b449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee16001ca011e36f000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492080090821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1e9dc1da57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e061406f8822de81dc8d4525504ec75f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362080023dcea1361ba312d6b31ec5ba0bb0e89b99aa941759689d37da81668be804061fb27986d8b7e13e86befa560461478ff8b53ef24ff777352c9206d8fe7f37ee44481aabb7a980499881126f8cafde9ac316a2d560d17c9d9b1c03d4c8c98921a08206c171c23947caae8ffe728eda021b67cfe62bc4bcb98552e396a2e0000000000008d64aa118faffc3ea1"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000000000030753a5e69488f0fd908f479d367c9ec56609a76806ae8fcc87cffd563402b5024abb6bab6a2c48b23888e2c878a3a55143d211714efe88b1be734e511c6f5de88ea88d526acfa400f1b5941c0a73e352c8a1eae126a983f802c6ea5e01748948d39c8e64a722a9770cc38c2b32a3c82058c14b42ca62f16de59cd06709411d8da21004810eb1b757653b542dab13e3e77bcae89951e64327340628054061e1633cf86498930328ee024938dbfd952481e144f4b53eb9561ae58c97a89025153dacb4041ad4c9b57b5fb3d8588a3325e0ed919faac1521cbf792cc228a4fc248419d3e6d0000000045e1a31bf9106521eb82f5f3fb44ba2c2088fa1a34492fdd4494c5eed6d33243441dbd3c73109338964bb4af79be0195d459fadab38ea746dbe621387dc46add182114760700000000000000ab325a2e9cc64f3489955634cd7f0bc96b4a4ea36da14c9d1d2f6b569712c56c6c08a8004d7d555a7826b6f661b37e34fd77534b596eae28dbe08cabaff8694a970190269fa73da23e658ee391ab702486c88473a54216670ceb4ddfe9f9598a1e2bf6d04b8edae25612d4f5e4145670f0088945c0458d2fa9464a39a36df1d942f8e17aa4266b9180318d517fa57f99b5d015dda76e182a5b693ae1ca895eff782845d60dbf5313ca82e58eeb55829f8cac66fa3f497a8593fe2c1b2d9f81deff4eddbb8b7a57072e225625d29ad961d9f7f9d14f2b765fa5b83b76eba698b1f480d0b9a5dde58eb2f2675d23"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/101, 0x65}], 0x1, 0x0, 0xffffffffffffff23}, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = semget$private(0x0, 0x7, 0x1b0) semctl$GETNCNT(r1, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r1, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r1, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r1, &(0x7f0000000240)=[{0x2, 0x200, 0x1800}, {0x1, 0x4, 0x800}, {0x1, 0xedd, 0x1800}, {0x4, 0x6160, 0xc00}, {0x2, 0x801, 0x1000}], 0x5) semctl$GETVAL(r1, 0xbb87cc766ce26ea, 0x5, &(0x7f0000000640)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0), 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), 0xc) r2 = socket(0x18, 0x400000002, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000180)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f0000000780)=""/131, 0x83}, {&(0x7f00000003c0)=""/162, 0xa2}], 0x100000000000031c) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) r4 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r4, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f0000000140)=0x1) semop(r4, &(0x7f0000000400)=[{0x0, 0x100000001, 0x1000}, {0x0, 0x7fffffff, 0x1000}], 0x1) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0x2f6) r6 = getgid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, 0x0, r5, r6, 0x10, 0x9}, 0x8, 0x20000001, 0x9}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r7, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f0000000780)=""/131, 0x83}, {&(0x7f00000003c0)=""/162, 0xa2}], 0x100000000000031c) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) semctl$GETNCNT(0x0, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(0x0, 0x2, 0x8, &(0x7f0000000140)=0x1) 16:36:03 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c7307bcf141e0a8b222ad77da67ddcc153f9a29643b2fc238a4b769037059b6449c571747d4918452b8"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:03 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/301], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041385979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a443f28b1dd68f76bed7da29497fc9eeb6401000000000000007c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca0adfe4d3e32deaf2952a1859e4b5223695caaf36612bb157300378775996286af71ff18445908f078508057ca956829cc027978c271529d9ec3b921006adc1ae9897a4db6fa745f10e31ddf8f6a35cd9f8d72e66399e5b37335a756edcab2ca607b0a89e1082e5f147950303402023d2cbf25fe52495197f15316b9e10f049d2178f1bec64cbf4dc99a9436542ff019e0e6eb37ea29549284832b00fbd50b522dbccf0233bc187656bf8c9a3ed54ce1c3b23b5489acaf864e7c0e8f7614696c6971e3cdc670e9f4d5844ae72d787546080d380ee8401f869e577512e26dc979987c9aba271464eb4e3c2"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:03 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/301], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe942f7ce2212c09c110ff00f45709d664539e1e381f0900000000000000328dca5d39656da02489672db6d19f37405111e97aa998473f0e8d1e8f3b32b9973000000000d6c2df99a9d60031c125810bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814a576b24813ddfa8130a04b4ad6d8791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129bf4ef7a13fd4c"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a01570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b6b449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee16001ca011e36f000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492080090821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1e9dc1da57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e061406f8822de81dc8d4525504ec75f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362080023dcea1361ba312d6b31ec5ba0bb0e89b99aa941759689d37da81668be804061fb27986d8b7e13e86befa560461478ff8b53ef24ff777352c9206d8fe7f37ee44481aabb7a980499881126f8cafde9ac316a2d560d17c9d9b1c03d4c8c98921a08206c171c23947caae8ffe728eda021b67cfe62bc4bcb98552e396a2e0000000000008d64aa118faffc3ea1"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:04 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) fcntl$dupfd(r0, 0x0, r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000180)="1e004b18", 0x52) fcntl$dupfd(r1, 0x0, r1) getpeername(r1, &(0x7f0000000540)=@in, &(0x7f0000000580)=0xc) accept$unix(r0, &(0x7f0000000480)=@file={0x0, ""/108}, &(0x7f0000000500)=0x6e) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) r4 = dup2(r3, r2) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) wait4(r5, &(0x7f0000000640), 0x1, &(0x7f0000000680)) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 16:36:04 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="000000000000000000009d86c84b8db61dd5000000000023443eb8df875b84f37a6072000000000000007c0c000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000b3493bdf58309ffafd5ec3d5c07f8be2d6efab1a208c72d404f944ca7ea9c3b9b045e8e8dbee7e793079d98a1606f6043e3563a0e85e58d013ca5d24815d7839d37cc42adb641a1b9eb318579cfe1278ce0bdd033976b7ee338d7a31ce614745ae1ea318a76aef3550c601b25a4e9f32fc67764fb68cc52b7fa2040000003a7093776d61b9af2201001794dc604c2961db34af324e83590065c861e3ea1a1a3222ebd77c914e8e992b159c9d625fda6a28b77b59e1c7217ea86f0b7dc818b5502395f38ce9355ecd0d4ff6feedc06c0bdd8aa19a826f0ca37ac301a88c05536557b0fd8246f9e9a2bcc063119adbbd95ec459ba326cd75328db3f184e271cde299a90b95d63edb7e0258dd6b02be27d9761b4e5edcef0ffce52ea9d5527b36dec0b201576753d6c661a9282ae17b70e939c821c6f8f4cffe9b318c8bb2744fa207d2e6451c048e99c3256d7cd89a92b1c0161159ba45a50d42aea6da5be88be8f450ce4ccd91318c03621f40d110e86ce53abf3c6aa36770720d6caa2ac1a66993e52fd38e5185030e1e62e0abc3657edea0774a6438a1d6c7c12449c94e6429b52d1d98ab7b787b063276abb5ed1acfcbb3beb080d5b0910adb2b40d791976bef6f5429faf427609e028522d0d57b0ddcfef5dccb7cdb08e1436c7f93c6cd8438644330a01fd0ebe1163e53fb0d7ca848939f0c9ab7c57e308ded7fcd0d8331968c9090b8a495e27d98ab48"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/301], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041385979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:04 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = fcntl$getown(r3, 0x5) ioctl$BIOCFLUSH(r3, 0x20004268) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x3ff, r0, r1, r0, r1, 0x104, 0x5}, 0xfff, 0x9, r4, r4, 0x7d55, 0xd75, 0xfa}) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/98) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000206, 0x0) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000140)='#!', 0x2}], 0x1) fchmod(r5, 0xe3) r6 = semget$private(0x0, 0x3, 0x80) semop(r6, &(0x7f0000000040)=[{0x0, 0xfff, 0x1800}], 0x1) semctl$SETVAL(r6, 0x0, 0x8, &(0x7f0000000000)=0x200) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 16:36:04 executing program 1: syz_open_pts() r0 = socket(0x18, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)="9b954443badfc2c42f783342ab66dbd8168f905e8c591fb47d1338533aa2fbf97edcd3c79eb35c6b7bb89eb2cb400dbc5c63e9b8bf69a2d7ea17d9c845d507858ea3c4583c7950e08337188f204a8eb5c7e63a1d8cc7a1c5aa3010eea2d1105a8dd7d208cd912f865a9989ad145b6fc28ca07f", 0x73, 0x400, &(0x7f0000000000)={0x2, 0x2}, 0xc) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000100)="060000006fb211e9f0cbbc698bc0e857260d8ae859439eaeb05cfd11486763be505bc50e50e780e06781a34b052e6c59c3051600389040e9dbfb", 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000180)="06000000", 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet(r3, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000040)={0x1, 0x7fff}) 16:36:04 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d117c2e9547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a01e90821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f40af81b1c992b76d6c971287731ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81668be437c6bae2f5978bab41e2e7e4223392b6eb7afeac815f38db356ca9a41dad913e4a743d50fa43a67da183f17b1829b076b5d2791c65a96bdccaab00f50d4b7e53b9bd62914dabf904b31b6f07d36ac44d8d6dc8105e2f52ef8fc55c2dd40b4cc0b2e3d79ecff71eca9cce9d07060929f725e6b787ce5747318f3f4a3844dff23feafcffe19a7683c032a07f9b2ae989078714db85866d33574c91ea612084b7ab5495f94f2db7a9c33ff958a"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/303], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) 16:36:04 executing program 1: mlock(&(0x7f0000001000/0x2000)=nil, 0x800000) execve(&(0x7f0000001880)='./file0\x00', &(0x7f0000001980)=[&(0x7f0000001e00)='&#@,@\\{(/[\x00\x8e\xf9\xe4\xdc\x86\x8fKw\x92\xf4`1\x19v~\xa4\x94}%\x16\x8d\x8d\xe5Up\x04\x00\xa3\xd1\xa6\x94\x80\x17\xf0qW\xb2\xdc\xe50)}\x03\xd9\x14\x9a\xc97\xfd\x00\xbf\x8cD\x13\xee\xd0\xa1\xc7\xb73$=\x16\xb5`\r\x8e\xbfES\xfcC\x17\xd8]n%\xb5\xbf\x06\xed\x1aF\x82\xd9\xf3,\xd8\x8d\xb5\xb8\x8d\xa1C\xc8\x96\xc8\xce\x83H\xe6\xc3\xc6\xec\xc6\xc9\r#F\xfa\xb5\'\\\xaa`jHr!\x8f,\x1bb\xbb\xef\xd5\xf1\\\x00\x00\x00\x00\x00\x00\x00\xb0%\'\x13\xd8\x110\xcce\xbb\x96\xe0\\\x82\xae\xbb\xd2N\n\xeb\xb7\xd0]a]\xcf\x96\x17\n\xa1j\x80\xea\x12\x05\xc22\x01\xbe&[\n\xffqM#\xd0/_?\x95P\rr\x8e\xb0\xb9\xd4\x9b\xd3\xcf\x11\x83\x05>\xc1\x14C\x92\x8c\xac\f,\xda\x8dQ>\x802\'\x8a\xd8\xb9\xbb\x9f\xee\x03&%fe\xb1\x7f&\xdd61b\x85\x16\xc1\xbb\x02=1\x05\t\x10\xa0(P\x8ew\x1f\xe8\x1b\xf5\xf3\xec\xa3\xb6\xa9\x81\xfa\x15\xac\xb6\x99P\xc7Ro\xe5\x8c\xdd\xb8\xed\xcf\xee\xb97m\xadG\x01g~\xf4\x808\xd6\xa7\xd3\xf4%<3t\xff\xcd\xe2\xf5\x85a\x16Yu<\xc1\x94_\x89\x11\x84\xe3D\xd9\x12\xa2\r\aB\xba\xde\x1c8B\xcb\xee\xb8#\xab\xea\xafm2\xf1\xb6\xc1\xd3\xec,\xba\xcdEo\f\x8b\xfa\x04\'\xb8\xbdOe\x82l>\xc2n>{\xcf\x1de&\xe5\x11\xf7\x1b\x84&\x91\"\x9d\x8b\x840\xd9\xe8\xee3', &(0x7f0000001dc0)='\x00', &(0x7f0000001940)='@:\x00'], &(0x7f0000001b40)=[&(0x7f00000019c0)='\x02\x16\xd7', &(0x7f0000001a00)='[(\x00', &(0x7f0000001ac0)='\x00', &(0x7f0000001fc0)='{\\)/\xf6:\x00']) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10202, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="04", 0x1}], 0x1, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8080, 0x80) close(0xffffffffffffffff) r2 = dup(0xffffffffffffffff) semget$private(0x0, 0x1, 0x2) syz_open_pts() ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000001780)={'./file0\x00', 0x2, 0x8, 0x2, 0x1, 0x100000000005, 0x4, 0x7, 0x1, 0x0, 0x7f, 0x4}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, "855c55000267a7230000001a0000000000000040", 0x7aa}) getsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000001800), &(0x7f0000001840)=0x10) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x1, 0xfffffffffffff11d}, {0x61a, 0x100000001}}) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f00000001c0)=0xff80000000000000) readv(0xffffffffffffffff, 0x0, 0x519e9ff5a54d8863) syz_open_pts() ioctl$TIOCCDTR(r2, 0x20007478) ioctl$KDGKBMODE(r2, 0x40044b06) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x8) pwritev(r1, &(0x7f0000001a80)=[{&(0x7f0000001a40)="e22490d295b0d1f6218db0ffb7bf3db1cbb73dead0c09938159787bfd2bd385be3", 0x21}], 0x1, 0x0, 0x0) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000001b80), 0xc) r4 = syz_open_pts() ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f00000000c0)={0x0, 0x0, 0x90d6, 0x0, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) write(r4, &(0x7f0000000180)='X', 0x1) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000040)=0x6) readv(r4, &(0x7f00000016c0), 0x10000283) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000002000/0x3000)=nil, 0x3000) mlock(&(0x7f0000002000/0x3000)=nil, 0x3000) r5 = kqueue() r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x10, r6, 0x0, 0x0) 16:36:04 executing program 0: r0 = syz_open_pts() socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e2727a545f88e66e30838b1cb298a300775ea953de4029f76becedee22d7f5fd59b07d3b6333e372e3c76c8cfe5b8365fb2ab1c8fa1bdc8b355888022a087f", 0x3f, 0x41f, &(0x7f0000000140)={0x18, 0x1, 0x40000f8, 0xa9}, 0xc) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x80047470, &(0x7f0000001440)={0x6, 0x101, 0x0, 0x0, "760f0000000000006ae971739ea78b7ec000", 0xfffffffe, 0x6}) r4 = semget$private(0x0, 0x4, 0xa3) semop(r4, &(0x7f0000000480)=[{0x0, 0xffff}], 0x1) semctl$GETVAL(r4, 0x6, 0x5, &(0x7f0000000280)=""/153) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000400)=0x5) semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000540)=0x8) semctl$SETVAL(r4, 0x2, 0x8, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x612, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)="eb65683096b1ea0a3bbb892fdf4d") poll(&(0x7f0000000140)=[{r5, 0x185}], 0x1, 0x0) pwrite(r5, &(0x7f0000001580)="9b5fb3bab2ab13e8f7ff63eb485a0a1dad625f776eff3be38c275d6ff673dec52a5b7afd7450de55c502c1745c9816a49b5532729e15b221d40f41bd20b046190e572ea1484f0d542536a6e13d46b4ac02b961e4e8d56f7549e2a495a9ad314ee3006c7b49e05812e2f314b0a41d25c514d9994d12a9256ef75329c4858e2c484aa861dc9c36de9ed3", 0xfffffffffffffddb, 0x0, 0xfffffffffffffffe) r7 = shmget$private(0x0, 0x4000, 0x2c0, &(0x7f0000005000/0x4000)=nil) r8 = getuid() r9 = geteuid() setreuid(r8, r9) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x4a8c9a00b1d1647c) r11 = getuid() r12 = geteuid() setreuid(r11, r12) r13 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r14 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r14, &(0x7f00000003c0), 0x273, 0x0, 0x0) r15 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) pwritev(r15, &(0x7f00000003c0), 0x273, 0x0, 0x0) msgsnd(r13, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r15], 0x2, 0x800) msgsnd(r13, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r13, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r16 = socket(0x18, 0x8001, 0x0) setsockopt$sock_int(r16, 0xffff, 0x1021, &(0x7f0000000000), 0x1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=r8, @ANYRES64=r16, @ANYRES64], 0x3, 0x1800) msgrcv(r13, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a363f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca"], 0x1, 0x800) msgsnd(r13, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r17 = getuid() r18 = geteuid() setreuid(r17, r18) r19 = getegid() r20 = getuid() r21 = geteuid() setreuid(r20, r21) r22 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r22, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r22, 0x2, 0x8, &(0x7f0000000140)=0x1) semctl$GETVAL(r22, 0x4, 0x5, &(0x7f0000000800)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r25 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xc) r26 = syz_open_pts() ioctl$TIOCSBRK(r26, 0x2000747b) fcntl$getown(r26, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r26, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r26, 0x20007471) r29 = accept$inet6(r28, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r29, 0xffff, 0x1009, &(0x7f0000000240)=0x6, 0x4) r30 = getuid() getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r26, r30, r31) r32 = syz_open_pts() ioctl$TIOCSBRK(r32, 0x2000747b) fcntl$getown(r32, 0x5) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x400010005) ioctl$TIOCNOTTY(r32, 0x20007471) r34 = accept$inet6(r33, 0x0, &(0x7f0000001680)) setsockopt$inet6_MRT6_ADD_MIF(r34, 0x29, 0x66, &(0x7f0000000380)={0x325, 0x10000000000001, 0x1000000749, 0x9986, 0x8001}, 0xc) setsockopt$sock_int(r34, 0xffff, 0x20, &(0x7f0000000240)=0x6, 0x4) r35 = getuid() getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) fchown(r32, r35, r36) r37 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r38 = getegid() shmctl$IPC_SET(r37, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, r38, 0x48}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setgroups(0x199, &(0x7f0000002140)=[r24, r38]) semctl$IPC_SET(r22, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r36, r23, r25, 0x10, 0x9}, 0x80b, 0x0, 0x9}) msgctl$IPC_SET(r13, 0x1, &(0x7f00000000c0)={{0x6, r18, r19, r23, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r39 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r39, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r39, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r39, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) r40 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r40, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c06736304c3312a624ea751eb00000000000000000000001b00"/303], 0x1, 0x1, 0x1000) msgsnd(r40, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) r41 = kqueue() kevent(r41, 0x0, 0x0, 0x0, 0x9, 0x0) r42 = syz_open_pts() fcntl$lock(r42, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r42, 0x2) fcntl$lock(r42, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) r43 = syz_open_pts() fcntl$lock(r43, 0x9, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x100000000}) flock(r43, 0x2) fcntl$lock(r43, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x200000005}) msgsnd(r40, &(0x7f0000002340)=ANY=[@ANYRES32=r21, @ANYBLOB="6e63018ef0c38dadd7215d8df1341dda4fb4b6c09d30d13e4d3e640d2167a3bdae77a2a5db9d44984f516e724676ef79e675f422bbac8d", @ANYPTR=&(0x7f00000010c0)=ANY=[], @ANYBLOB="ad94ff8b6a3a225638422f8f1d", @ANYRESHEX=r27, @ANYRESHEX], 0x6, 0x0) msgrcv(r39, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r44 = msgget(0x3, 0x14) msgsnd(r44, &(0x7f00000013c0)=ANY=[@ANYRESDEC], 0x1, 0x800) msgsnd(r39, &(0x7f0000001900)=ANY=[@ANYBLOB="feffffffffffffff5aab057858899bbc616aeade23aa38f2116404967d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fc3b6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deafb2"], 0xd5, 0x40000000000800) r45 = getuid() r46 = geteuid() setreuid(r45, r46) r47 = getegid() r48 = getuid() r49 = geteuid() setreuid(r48, r49) getgroups(0x4, &(0x7f0000001f40)=[r38, 0x0, r24, r19]) msgctl$IPC_SET(r39, 0x1, &(0x7f00000000c0)={{0x6, r46, r50, r49, 0x0, 0x80, 0x9}, 0x3, 0x3c, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/410], 0x156, 0x800) msgrcv(0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r51 = msgget$private(0x0, 0xc5) msgrcv(r51, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x800) msgsnd(r51, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgsnd(0x0, &(0x7f00000012c0)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9a49f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2bbc26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd6, 0x800) r52 = getuid() r53 = geteuid() setreuid(r52, r53) r54 = getegid() r55 = getuid() r56 = geteuid() setreuid(r55, r56) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6, r53, r54, r56, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) r57 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r57, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x800) r58 = msgget$private(0x0, 0x20000003c4) msgrcv(r58, &(0x7f0000000440)={0x0, ""/4}, 0xfffffffffffffefb, 0x2, 0x1000) msgrcv(r58, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/235], 0xfffffffffffffcc9, 0x1, 0x1000) msgsnd(r58, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000486929414fa22f5c0ed193424179fc5bf7017a071300"], 0x2d, 0x800) msgctl$IPC_RMID(r58, 0x0) msgsnd(r58, &(0x7f0000000040)=ANY=[], 0x0, 0x800) msgsnd(r57, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r57, &(0x7f0000000c00)=ANY=[@ANYPTR64], 0x1, 0x2000000, 0x1004) msgsnd(r57, &(0x7f0000002180)=ANY=[], 0x0, 0x800) msgrcv(r57, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r57, &(0x7f0000001100)=ANY=[@ANYBLOB="021d000000006250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194da9ae9347a443f28b1dd68f76bed7da29497fc9eeb64769bc8c81612e8c27c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca87bc23035271819d524dff4572f3fe0000000000000000"], 0x1, 0x800) msgsnd(r57, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r59 = getuid() r60 = geteuid() setreuid(r59, r60) r61 = getuid() r62 = geteuid() setreuid(r61, r62) r63 = semget$private(0x0, 0x4, 0x1b2) r64 = semget$private(0x0, 0x3, 0x80) semop(r64, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) r65 = semget$private(0x0, 0x3, 0x80) semop(r65, &(0x7f0000000180)=[{0x1, 0x7, 0x800}, {0x6, 0x2, 0x1800}, {0x2, 0xb09, 0x800}, {0x3, 0x60, 0x1800}, {0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x3ff, 0x1800}, {0x3, 0x2, 0x1800}, {0x3, 0x8, 0x800}, {0x2, 0x6cd, 0x800}], 0xa) semctl$GETNCNT(r65, 0x4, 0x3, &(0x7f0000001480)=""/193) semctl$SETVAL(r63, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r63, 0x4, 0x5, &(0x7f0000000800)=""/210) r66 = semget(0x0, 0x2, 0x89cbf838dd1acb6b) semop(r66, &(0x7f0000000500), 0x2aaaad03) r67 = getgid() r68 = getegid() semctl$IPC_SET(r63, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r67, 0x0, r68, 0x10, 0x1000}, 0x8, 0x1, 0x9}) msgctl$IPC_SET(r57, 0x1, &(0x7f0000001240)={{0x9, r60, r68, r62, 0x0, 0x40}, 0x6, 0x3b, 0xffffffffffffffff, 0x0, 0x95fe, 0x8, 0x5f, 0x10000001}) r69 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r69, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r70, &(0x7f0000000080)=""/101, 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r71, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r71, &(0x7f0000000340), 0x10000014c) write(r71, &(0x7f0000000040), 0xfeea) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r72, &(0x7f0000001340)=[{&(0x7f0000000040)='y', 0x1}], 0x1) write(r72, &(0x7f0000000340), 0x10000014c) write(r72, &(0x7f0000000040), 0xfeea) r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf800000000000000000000000000000000000000000000000000000000020000009aeab5beef00010027001c00000000000000000000000000000000000000000006000000000000000000000000a86cf441000000000000007306000000000000000000000000000000000000000000000000000000b25d8ad62856dec8dbdb05fd2d6c5da5d9aacf0688258af5c5f7a1c1215526d997cadc5720f1b208000000000000003248985c5c89117daa00fbcea2481795dc129c8b73dfd45409d0a1598b48c680e0f62c43576c06736304c3312a624ea751eb00000000000000000000001b00"/305], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r73, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgsnd(r73, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESDEC=r70, @ANYRESDEC, @ANYRESOCT, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT=r71, @ANYRES64=r72, @ANYPTR64, @ANYPTR64=&(0x7f0000002300)=ANY=[@ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="cb753c19d0aee1bfc743c8f6bf383314916647cf78237ba889c0e3d89a74fff5688cec6968614bed6ffd4f5aa1ba2a0f95bdbda571e1e933dda3b727e9bb8d48e5a08e6e5660f62f6d616dc2284f0038082b9bb124ae633c69e83c089e1dbd5f8f56b2afd6b602aecbf7363251435a47fcd2c583e5cede382c473d6d922f0561ba8332ccc545ab10f9c5da358c9d3eb6cf1c49699becfc940e76a13c7dec3931c4471c47a641a44ca7b8b8926849dd352dcc5e75a86b430baf48dcf9d52383057919b9a71d7db4e68e301dfad505c6ec1c4e9ebbb570ec05d1bac325f6edb28502d742c543e12cb01c162d46b9d7783b70bc"]], @ANYRES16, @ANYRESDEC=r13, @ANYRES16=r61, @ANYRES64=0x0], @ANYBLOB="677d5fac1ce02739da3b0b2abe94f0d8547519ba0d7cdbad31363982e9ba58061fc5f656e9bd7c7a680e25247be367e394f76615deb9f9d14b336f4814372fd1cd68095cfaf02c6d2436e43c580008d4399e8d8aa08c49697aeb8636f8ec3cfbac9054ed7b3fb0", @ANYPTR64=&(0x7f0000001640)=ANY=[]]], 0x1, 0x0) msgsnd(r69, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb) msgrcv(r69, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x2000000, 0x1004) msgsnd(r69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x156, 0x800) msgrcv(r69, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) msgsnd(r69, &(0x7f0000001f80)=ANY=[@ANYBLOB="021d000000000000ddfc630b84486250b099aa9b7272c428de41622b1194de0d71142803ee38913bdb4a0a883144c9b6e1ee7e9f87b517cdd4d9a00d71af5c8e4702a1a4d46bf36ffdf6a4fba253c93fcdd7139884be680003c28c598a778194e09ae9347a443f28b1dd68f76bed7da29497fc9eeb6401000000000000007c0079d0cf40b9c8b754daeb2982d28606050dc516a0af1461584bca0adfe4d3e32deaf2952a1859e4b5223695caaf36612bb157300378775996286af71ff18445908f078508057ca956829cc027978c271529d9ec3b921006adc1ae9897a4db6fa745f10e31ddf8f6a35cd9f8d72e66399e5b37335a756edcab2ca607b0a89e1082e5f147950303402023d2cbf25fe52495197f15316b9e10f049d2178f1bec64cbf4dc99a9436542ff019e0e6eb37ea29549284832b00fbd50b522dbccf0233bc187656bf8c9a3ed54ce1c3b23b5489acaf864e7c0e8f7614696c6971e3cdc670e9f4d5844ae72d787546080d380ee8401f869e577512e26dc979987c9aba271464eb4e3c2"], 0x1, 0x800) msgsnd(r69, &(0x7f0000001a00)={0xfffffffffffffffe, "5aab057858899bbc616aeade23aa38f255f2dedc7d9349f609673a9f745b6b5aae9e1e53d2b8d941319c6b5d3b16ea71c4229dd62ed8e7497cf22f1cc439ea2b26fcb5355b5b24eab6423706ebfa25245e804c95574b8a60f3154e10dfa023a26156b2bd8b46afd62f2b01573c376fabb6713c8c3fcbb5c96075498e63bb2e19117fec0866378de0a48ccf0a87d3c43bdf0c36b08f9d3d6039ebea381e7fca35ed7142c2f0d2e5f9ce77c1ecc017c46c50c8e10a93dcd069cb4d4575ddd417bd2c8bca85e911ec5f2470a3deaf"}, 0xd5, 0x40000000000800) r74 = getuid() r75 = geteuid() setreuid(r74, r75) r76 = getegid() getuid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) r78 = syz_open_pts() ioctl$TIOCSETA(r78, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfff7fffffffffffc, 0x3c6a, "9375b01a93b45136fdf0f0e1787fd11e3b4ba8dd"}) r79 = semget$private(0x0, 0x2, 0x200) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r78, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r82 = getgid() semop(r79, &(0x7f0000000380)=[{0x4, 0x4}, {0x0, 0x5, 0x1000}, {0x363848eaace71445, 0x8, 0x1000}, {0x3, 0x2, 0x1000}, {0x4, 0xffffffff, 0x1000}, {0x3, 0x7, 0x1800}, {0x3, 0x8, 0xa62479465016c877}, {0x3, 0x2, 0x800}, {0x3, 0x5, 0x1c00}], 0x9) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r81, r80, 0x0, r82, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r83, 0x0) poll(&(0x7f0000000000)=[{r83, 0x1a5}], 0x1, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000440)=0xfffffffffffffcbf) r85 = getgid() getgroups(0x3fffff22, &(0x7f00000001c0)=[0xffffffffffffffff]) r87 = getgid() setregid(r86, r87) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) semctl$IPC_SET(r79, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r84, r88, r77, r85, 0x198, 0x8}, 0x8001, 0x200, 0x9}) r89 = getuid() setreuid(r84, r89) getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001640), 0xc) getpgrp() r90 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r90, 0x0, r90) r91 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r93 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r93, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r93, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r93, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r93, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r94 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r96 = getgid() semctl$IPC_SET(r93, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r94, r95, r96, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r90, 0xffff, 0x1022, &(0x7f0000000200)={r91, r92, r96}, 0xc) r97 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r97, 0x0, r97) r98 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r100 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r100, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r100, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r100, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r100, &(0x7f00000010c0)=[{0x4, 0x4, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x92a, 0x1800}, {0x2, 0x7f, 0x800}, {0x2, 0x400, 0x9931412c4d963d6a}, {0x4, 0x7, 0x1000}, {0x1, 0x4, 0x3800}], 0x7) r101 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r103 = getgid() semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r101, r102, r103, 0x10, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r97, 0xffff, 0x1022, &(0x7f0000000200)={r98, r99, r103}, 0xc) wait4(r98, &(0x7f00000022c0), 0x6, &(0x7f0000002200)) r104 = getppid() wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r105 = getgid() r106 = semget$private(0x0, 0x4, 0xc1) semop(r106, &(0x7f0000000240)=[{0x1, 0x2, 0x1000}, {0x0, 0x1000, 0x1000}, {0x1, 0x1, 0x800}, {0x1, 0x10, 0x1000}], 0x4) r107 = getuid() seteuid(r107) r108 = geteuid() r109 = socket(0x18, 0x3, 0x0) connect$unix(r109, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt$sock_linger(r109, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_PEERCRED(r109, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r111 = getgid() chown(&(0x7f0000000180)='./file0\x00', r110, r111) semctl$IPC_SET(r106, 0x0, 0x1, &(0x7f0000000680)={{0x4, r107, r105, r108, r111, 0x100, 0x3}, 0x3f, 0x49, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r113 = getuid() setreuid(r112, r113) msgctl$IPC_SET(r69, 0x1, &(0x7f00000011c0)={{0x4, r75, r76, r112, r105, 0x148, 0x6}, 0x3, 0x40, r104, 0x0, 0x5, 0x6, 0x9, 0x4000000000005}) r114 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r115 = getegid() shmctl$IPC_SET(r114, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r115}}) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, r19, r47, r54, 0x0, r76, r115]) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r117 = kqueue() r118 = syz_open_pts() close(r118) ioctl$TIOCSETAW(r118, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r118, &(0x7f0000000500)=[{0x0}], 0x1) poll(&(0x7f0000000100)=[{r118, 0x4}], 0x1, 0x10001) poll(&(0x7f0000000080)=[{r118, 0x46}], 0x1, 0x0) r119 = fcntl$dupfd(r117, 0x2, r118) close(r119) r120 = getpgrp() r121 = getgid() getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000480), 0xc) getsockopt$SO_PEERCRED(r119, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$PCIOCGETROM(r119, 0xc0107005, &(0x7f00000006c0)={{}, 0x0, 0x0}) setsockopt$sock_cred(r119, 0xffff, 0x1022, &(0x7f0000000700)={r120, r122, r121}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000740)={{0x0, r122, r10, r11, r47, 0x1, 0x82}, 0x400, 0x5, r116, 0x0, 0x3, 0x10010, 0x2}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x0, 0x80000, 0x9641601, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) r123 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyCcfg\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_SBURNER(r123, 0x800c5751, &(0x7f0000000e80)={0xacbe, 0x5, 0x8}) write(r3, &(0x7f0000000080)='$', 0x1) witness: lock order reversal: 1st 0xfffffd807f0048b8 vmmaplk (&map->lock) 2nd 0xfffffd8064fcef78 inode (&ip->i_lock) lock order "&ip->i_lock"(rrwlock) -> "&map->lock"(rwlock) first seen at: #0 witness_checkorder+0x69c #1 rw_enter+0xd4 #2 vm_map_lock_ln+0x10d #3 uvm_map+0x2da #4 km_alloc+0x18b #5 pool_multi_alloc_ni+0xd0 #6 pool_p_alloc+0x74 #7 pool_do_get+0x10f #8 pool_get+0xeb #9 ufsdirhash_build+0x3ea #10 ufs_lookup+0x2a1 #11 VOP_LOOKUP+0x5b #12 vfs_lookup+0x7a6 #13 namei+0x63c #14 start_init+0xc9 #15 proc_trampoline+0x1c lock order "&map->lock"(rwlock) -> "&ip->i_lock"(rrwlock) first seen at: #0 witness_checkorder+0x69c #1 rw_enter+0xd4 #2 rrw_enter+0x88 #3 VOP_LOCK+0xf9 #4 vn_lock+0x81 #5 uvn_io+0x2c8 #6 uvn_get+0x226 #7 uvm_fault+0x11cc #8 uvm_fault_wire+0x70 #9 uvm_map_pageable_wire+0x2dd #10 sys_mlock+0x185 #11 syscall+0x4a4 #12 Xsyscall+0x128 Stopped at db_enter+0x18: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x18 witness_checkorder(fffffd8064fcef78,9,0) at witness_checkorder+0x1009 rw_enter(fffffd8064fcef68,81) at rw_enter+0xd4 rrw_enter(fffffd8064fcef68,81) at rrw_enter+0x88 VOP_LOCK(fffffd80630f2758,81) at VOP_LOCK+0xf9 vn_lock(fffffd80630f2758,81) at vn_lock+0x81 uvn_io(fffffd8062cdb5b8,ffff800024fcb7e8,1,2,0) at uvn_io+0x2c8 uvn_get(fffffd8062cdb5b8,0,ffff800024fcba40,ffff800024fcb9d4,0,1) at uvn_get+0x226 uvm_fault(fffffd807f0048a0,20002000,2,1) at uvm_fault+0x11cc uvm_fault_wire(fffffd807f0048a0,20002000,20003000,1) at uvm_fault_wire+0x70 uvm_map_pageable_wire(fffffd807f0048a0,fffffd806736c700,fffffd80678bb748,ffff800022f90000,0,0) at uvm_map_pageable_wire+0x2dd sys_mlock(ffff800020aa1180,ffff800024fcbc38,ffff800024fcbc80) at sys_mlock+0x185 syscall(ffff800024fcbd00) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x286281f0570, count: -14 ddb{0}> show registers rdi 0x3 rsi 0x3ffff acpi_pdirpa+0x2be67 rbp 0xffff800024fcb460 rbx 0x3 rdx 0x40000 acpi_pdirpa+0x2be68 rcx 0xffff800022f90000 rax 0xffff800000a4d8c0 r8 0xffffffff81b6af72 witness_checkorder+0xfe2 r9 0x5 r10 0x3 r11 0x3e071ef9e52f4507 r12 0xfffffd800297b100 r13 0 r14 0xffffffff825e93a0 w_lodata+0x42630 r15 0xffffffff825fbd50 w_lodata+0x54fe0 rip 0xffffffff819657f8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800024fcb450 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.1) pid=151087 stat=onproc flags process=10 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800020aa18e8,0xffffffff82659068 process=0xffff800020a9bc50 user=0xffff800024fc6000, vmspace=0xfffffd807f0048a0 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 72579 327333 13434 32767 2 0x10 syz-executor.0 72579 155239 13434 32767 3 0x4000090 fsleep syz-executor.0 45220 516576 15160 32767 7 0x10 syz-executor.1 45220 208139 15160 32767 3 0x4000090 ttyout syz-executor.1 *45220 151087 15160 32767 7 0x4000010 syz-executor.1 15160 125427 51193 32767 3 0x90 nanosleep syz-executor.1 51193 201706 6911 0 3 0x82 wait syz-executor.1 19165 131797 0 0 3 0x14200 bored sosplice 13434 249480 41922 32767 3 0x90 nanosleep syz-executor.0 41922 60853 6911 0 3 0x82 wait syz-executor.0 6911 168091 48641 0 3 0x82 thrsleep syz-fuzzer 6911 285956 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 227002 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 38989 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 78076 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 210286 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 324195 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 270070 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 129298 48641 0 3 0x4000082 thrsleep syz-fuzzer 6911 221355 48641 0 3 0x4000082 kqread syz-fuzzer 48641 460584 53680 0 3 0x10008a pause ksh 53680 438739 2080 0 3 0x92 select sshd 49964 228358 1 0 3 0x100083 ttyin getty 2080 85984 1 0 3 0x80 select sshd 96889 439295 67548 73 3 0x100090 kqread syslogd 67548 148328 1 0 3 0x100082 netio syslogd 19980 222786 1 77 3 0x100090 poll dhclient 82892 198641 1 0 3 0x80 poll dhclient 28988 16311 0 0 2 0x14200 zerothread 72542 105277 0 0 3 0x14200 aiodoned aiodoned 79439 192937 0 0 3 0x14200 syncer update 99046 340202 0 0 3 0x14200 cleaner cleaner 98914 79266 0 0 3 0x14200 reaper reaper 72383 495450 0 0 3 0x14200 pgdaemon pagedaemon 48732 368535 0 0 3 0x14200 bored crynlk 34388 124512 0 0 3 0x14200 bored crypto 69576 167737 0 0 3 0x14200 bored viomb 96605 167901 0 0 3 0x40014200 acpi0 acpi0 7083 309103 0 0 3 0x40014200 idle1 255 448297 0 0 3 0x14200 bored softnet 8760 37114 0 0 3 0x14200 bored systqmp 68306 12732 0 0 3 0x14200 bored systq 70878 448123 0 0 3 0x40014200 bored softclock 90792 397314 0 0 3 0x40014200 idle0 71079 336030 0 0 3 0x14200 bored smr 1 381090 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 45220 (syz-executor.1) thread 0xffff800020aa1180 (151087) shared rwlock vmmaplk r = 0 (0xfffffd807f0048b8) #0 witness_lock+0x52e #1 rw_enter+0x453 #2 vm_map_lock_ln+0x10d #3 uvm_map_pageable+0x11d #4 sys_mlock+0x185 #5 syscall+0x4a4 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82657328) #0 witness_lock+0x52e #1 syscall+0x400 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9498 6343K 6343K 78643K 10781 0 pcb 13 10K 12K 78643K 15 0 rtable 109 3K 3K 78643K 2232 0 ifaddr 39 10K 10K 78643K 378 0 counters 39 33K 33K 78643K 39 0 ioctlops 0 0K 2K 78643K 144 0 iov 0 0K 64K 78643K 4158 0 mount 1 1K 1K 78643K 1 0 vnodes 1215 76K 76K 78643K 2380 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 36 0 VM map 2 1K 1K 78643K 2 0 sem 12 1K 1K 78643K 19074 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1810 197K 290K 78643K 12817 0 file desc 8 25K 33K 78643K 4675 0 sigio 0 0K 0K 78643K 68 0 proc 48 50K 83K 78643K 2574 0 subproc 34 2K 2K 78643K 850 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 1K 78643K 1689 0 in_multi 33 2K 2K 78643K 662 0 ether_multi 1 0K 0K 78643K 15 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 174 768K 768K 78643K 174 0 exec 0 0K 1K 78643K 1057 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 144 33K 33K 78643K 14511 0 UVM aobj 130 4K 4K 78643K 130 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 165 0 NDP 5 0K 0K 78643K 153 0 temp 106 3034K 3107K 78643K 18282 0 kqueue 0 0K 0K 78643K 62 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 107 0 99 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 373 0 371 1 0 1 1 0 8 0 rtentry 112 530 0 484 2 0 2 2 0 8 0 unpcb 120 12095 0 12083 7 6 1 2 0 8 0 syncache 264 25 0 25 11 11 0 1 0 8 0 sackhl 24 10 0 10 6 6 0 1 0 8 0 tcpqe 32 33 0 33 9 9 0 1 0 8 0 tcpcb 544 4201 0 4196 35 26 9 11 0 8 8 ipq 40 28 0 28 10 10 0 1 0 8 0 ipqe 40 860 0 860 10 10 0 1 0 8 0 inpcb 280 8753 0 8743 37 28 9 9 0 8 8 ip6q 72 3 0 3 3 3 0 1 0 8 0 ip6af 40 8 0 8 3 3 0 1 0 8 0 nd6 48 100 0 96 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2393 0 2177 14 0 14 14 0 8 0 art_table 32 2394 0 2177 2 0 2 2 0 8 0 art_node 16 529 0 487 1 0 1 1 0 8 0 sysvmsgpl 40 161 0 156 1 0 1 1 0 8 0 semapl 112 19070 0 19060 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 7978 0 6574 46 0 46 46 0 8 0 ffsino 272 7978 0 6574 94 0 94 94 0 8 0 nchpl 144 15178 0 13570 60 0 60 60 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 69063 0 69063 1 0 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 40344 0 40344 26 23 3 4 0 8 3 plimitpl 152 2268 0 2259 1 0 1 1 0 8 0 sigapl 432 4702 0 4686 3 1 2 3 0 8 0 futexpl 56 392584 0 392583 1 0 1 1 0 8 0 knotepl 112 1167 0 1148 4 3 1 2 0 8 0 kqueuepl 104 2993 0 2991 12 8 4 4 0 8 3 pipepl 160 17004 0 16985 9 7 2 2 0 8 1 fdescpl 488 4703 0 4686 3 0 3 3 0 8 0 filepl 152 52171 0 52065 51 39 12 14 0 8 7 lockfpl 104 4224 0 4223 1 0 1 1 0 8 0 lockfspl 48 2046 0 2045 1 0 1 1 0 8 0 sessionpl 112 65 0 55 1 0 1 1 0 8 0 pgrppl 48 123 0 113 1 0 1 1 0 8 0 ucredpl 96 21661 0 21652 1 0 1 1 0 8 0 zombiepl 144 4686 0 4686 1 0 1 1 0 8 1 processpl 904 4720 0 4686 4 0 4 4 0 8 0 procpl 632 11534 0 11488 8 3 5 5 0 8 0 srpgc 64 96 0 96 18 17 1 1 0 8 1 sosppl 128 78 0 78 16 15 1 1 0 8 1 sockpl 384 23133 0 23111 62 51 11 14 0 8 8 mcl64k 65536 27 0 0 3 0 3 3 0 8 0 mcl16k 16384 25 0 0 4 1 3 3 0 8 0 mcl12k 12288 22 0 0 2 0 2 2 0 8 0 mcl9k 9216 14 0 0 1 0 1 1 0 8 0 mcl8k 8192 29 0 0 3 0 3 3 0 8 0 mcl4k 4096 17 0 0 3 0 3 3 0 8 0 mcl2k2 2112 11 0 0 1 0 1 1 0 8 0 mcl2k 2048 171 0 0 18 3 15 18 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 605 0 0 21 0 21 21 0 8 0 bufpl 280 12893 0 5827 506 0 506 506 0 8 0 anonpl 16 546914 0 529365 176 100 76 81 0 125 5 amapchunkpl 152 29792 0 29529 38 27 11 13 0 158 0 amappl16 192 18987 0 18115 147 99 48 56 0 8 4 amappl15 184 873 0 869 1 0 1 1 0 8 0 amappl14 176 2553 0 2544 1 0 1 1 0 8 0 amappl13 168 265 0 265 6 6 0 1 0 8 0 amappl12 160 180 0 180 7 7 0 1 0 8 0 amappl11 152 339 0 328 1 0 1 1 0 8 0 amappl10 144 185 0 184 1 0 1 1 0 8 0 amappl9 136 1544 0 1539 1 0 1 1 0 8 0 amappl8 128 1006 0 951 2 0 2 2 0 8 0 amappl7 120 538 0 522 1 0 1 1 0 8 0 amappl6 112 227 0 216 1 0 1 1 0 8 0 amappl5 104 4391 0 4380 1 0 1 1 0 8 0 amappl4 96 4911 0 4881 1 0 1 1 0 8 0 amappl3 88 560 0 551 1 0 1 1 0 8 0 amappl2 80 34059 0 33982 3 1 2 3 0 8 0 amappl1 72 129300 0 128832 24 14 10 20 0 8 0 amappl 80 12588 0 12540 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 129 0 0 3 0 3 3 0 8 0 uaddrrnd 24 4703 0 4686 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4703 0 4686 1 0 1 1 0 8 0 vmmpekpl 168 64278 0 64250 2 0 2 2 0 8 0 vmmpepl 168 632638 0 630382 228 104 124 128 0 357 25 vmsppl 368 4702 0 4686 2 0 2 2 0 8 0 pdppl 4096 9413 0 9372 6 0 6 6 0 8 0 pvpl 32 1469719 0 1448300 382 194 188 193 0 265 15 pmappl 232 4702 0 4686 4 3 1 2 0 8 0 extentpl 40 50 0 32 1 0 1 1 0 8 0 phpool 112 215 0 32 6 0 6 6 0 8 0