Warning: Permanently added '10.128.15.193' (ECDSA) to the list of known hosts. 2019/03/28 09:01:45 fuzzer started 2019/03/28 09:01:52 dialing manager at 10.128.15.235:44512 2019/03/28 09:01:52 syscalls: 1 2019/03/28 09:01:52 code coverage: enabled 2019/03/28 09:01:52 comparison tracing: enabled 2019/03/28 09:01:52 extra coverage: support is not implemented in syzkaller 2019/03/28 09:01:52 setuid sandbox: enabled 2019/03/28 09:01:52 namespace sandbox: support is not implemented in syzkaller 2019/03/28 09:01:52 Android sandbox: support is not implemented in syzkaller 2019/03/28 09:01:52 fault injection: support is not implemented in syzkaller 2019/03/28 09:01:52 leak checking: support is not implemented in syzkaller 2019/03/28 09:01:52 net packet injection: enabled 2019/03/28 09:01:52 net device setup: support is not implemented in syzkaller 09:01:56 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) connect(r0, &(0x7f0000000080)=@in6={0x18, 0x0, 0x0, 0x3}, 0xc) r1 = shmget$private(0x0, 0x4000, 0x14, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) shmctl$IPC_RMID(r1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x3f) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f0000000140)={0x890, './file0\x00', './file0\x00'}) r4 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$WSDISPLAYIO_GMODE(r2, 0x4004574b, &(0x7f0000000240)) r5 = geteuid() setuid(r5) connect$inet(r2, &(0x7f0000000280)={0x2, 0x2}, 0xc) r6 = getgid() getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r8 = getpid() r9 = fcntl$getown(r0, 0x5) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000340)={{0xbd, r5, r6, r5, r7, 0x10, 0x2}, 0x2, 0x4, r8, r9, 0x7, 0x14, 0x80000000}) utimes(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x1, 0xfba}, {0x5, 0x7}}) r10 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) bind(r0, &(0x7f0000000440)=@in={0x2, 0x3}, 0xc) open(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0xa0) ioctl$TIOCCLRVERAUTH(r2, 0x2000741d) shmctl$IPC_STAT(r4, 0x2, &(0x7f00000004c0)=""/20) geteuid() shmat(r10, &(0x7f0000fff000/0x1000)=nil, 0x1000) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/wsmouse\x00', 0x200, 0x0) 09:01:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x402, 0x20) fcntl$getflags(r0, 0x3) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000080)=0x80) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f00000000c0)) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = syz_open_pts() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x68) close(r2) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000200)=0x5) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000280)='/dev/zero\x00', &(0x7f00000002c0)='/dev/zero\x00', &(0x7f0000000300)='/dev/zero\x00'], &(0x7f0000000480)=[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/zero\x00', &(0x7f0000000400)='/dev/zero\x00', &(0x7f0000000440)='\x00']) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f00000004c0)=0x3f) recvfrom$unix(r3, &(0x7f0000000500)=""/4096, 0x1000, 0x800, &(0x7f0000001500)=@file={0x0, './file0\x00'}, 0xa) ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000001540)={0x3, 0x5ed4}) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000001580)={0xcf0, 0x5, 0x2, 0x9bf7, "4a79bfbe4cb2cdf19eb814e4b2873b21cf21c0d0", 0x1f, 0xa4}) r5 = syz_open_pts() r6 = open(&(0x7f00000015c0)='./file0\x00', 0x801, 0x3) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000001600)=0x7) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000001640)={0x81, 0x3, 0x1, 0x6}) openat$tty(0xffffffffffffff9c, &(0x7f0000001680)='/dev/tty\x00', 0x82, 0x0) ioctl$TIOCOUTQ(r6, 0x40047473, &(0x7f00000016c0)=0x9) mkdirat(r3, &(0x7f0000001700)='./file0\x00', 0x20) pwritev(r3, &(0x7f00000019c0)=[{&(0x7f0000001740)="841966b178fa8ceb9d9b36f575fa6eb5c3", 0x11}, {&(0x7f0000001780)="0e", 0x1}, {&(0x7f00000017c0)="57a096d350f7d6da79c2d698dbb2b08f50f376e6120dd65027face3b29dd3e214cf18799e8c3bbc26065e046292bb61d308b187d5130775d7dbfdb0b493f5bfbc623cff1479359b0c642067e287e3fb94ba7e62eb2182f8dbae8c1cd87b1074961dc393b9ad4daf1c1bdde8b81a80d1f43c9a3788d5d00386e6bb97a1c045bde5affb34fef12d7e72fbf3ab097be84e8523553d0fc58f36a30e6e9baf7a1772a9a27b0ab596f8238534f13db5716d42224a28047a8808cf14b61d5c1421eb1ce2dcfc784cc", 0xc5}, {&(0x7f00000018c0)="8dfe3ae23f4a5007da8b7a1327c327abf7796c7e124cef3347766c3f3a2172f8209a2bdee97f38edf9c29e87fd6bc84b57680c7789f12149236123d8495fb7c1d48ad9fed9b813d8ad79f078782f57b1475c09649f0ebeb4d2c5a456f4302075228fdf92e68fe3462f14d8c24d52e8eb4e183d8e34f030fc6d36725161574bc367d44c0b97feb1525bd76b334783d2e15e02b5182ca085f3038adcb2a9fa6c853334cf62feb70c8f96997abf35c07e240b4cf62bee9a1d43a06110c8cd623582d7dc3dc73d450b172a9ff74b775342b088345379cb02bc88024d2503291a61ef3c5ff2e107ccf6d19393034687b14ce192fd", 0xf2}], 0x4, 0x0) ioctl$TIOCSBRK(r5, 0x2000747b) ioctl$TIOCCDTR(r6, 0x20007478) sendto(r3, &(0x7f0000001a00)="ec1c7a52bd46550772b1c21d601971c7aae07d2b4cb04cccdad513a28f41248c0953487b257971904341226c9294f74a2487ef3e8e22e9224f8995c7c790293e0b85d05e41fc2323087cd5839bb767721f633f931797e673273bf7905ff42eb7dbe9f4532ecf005883b5742719a0495d29c078ef82636d05b5c9b688c0dccd98a32be84ccf0c0f3733d55a8121c3", 0x8e, 0x4, 0x0, 0x0) r7 = dup2(r5, r6) ioctl$TIOCMBIC(r7, 0x8004746b, &(0x7f0000001ac0)) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000001b00)) 09:01:56 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000440), 0x67b6}], 0x10000000000000ff, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="62f1d9a642b7aeee14810921757ca192b757ec0605f15cb11fe4738e73b8ba9bc533238c188c5fe99fae11d62944a0702e3f58a46b55954b870a12fb4dd359b4d1b4df8d3c51778e33a0f924fe8db73ab11389b20d62966873914026bb946f86d1c58025e92d87a3e8d894e84716f155fb8c148272d50586a7cf4ff378cccc7cbe34988ed2fc2fb062cab3dbcc475765dac61cc418ee9ee3a50424df2aa55f75ed32553f48074403ffc3be336e8f62b6fc0d10d2a0", 0xffffff39}, {&(0x7f0000000140)="457ad0c7273ede9f74426c92f249a69175c2c2abf8ed218bc8efcae5af8a3f86fc99c10b3113bcd3d5ed1600ad9c1ef9564c7b237316ca0d549d16aad40f710a7645bc998bde26034087267c2a85ba7b362c2bf2b8d6bd0eb585d467c12d6aac67be5548735a93866994ab5b97f4274b3daccd8d74bf2065a199255547972ccddd4fe03d53e68b2911fe1baf834ae3be681a3f795eba450dd308b41edf2ad02ad170289272b00a967f66c3d18259deb9fdc3d0868aac16e27a570b0a63622678e629a19e8d9abe2eb6"}, {&(0x7f0000000240)="a62d12850b98161ffad18d1ee4369b4a5b4b030c500ecbe490884ead34c0550e9c9150"}, {&(0x7f0000000280)="83f46c625b8b797327ced74aae33b9880ceac61331d8b607ab38a1d7f3275cc4b5b0830acefe09e16a89405bd92bfbbfc9c14684185183933bf7fe7a985ad18299dbcdf686d5288e553a82efbe2be5d7f42b1bfb0ef79d957d47f4c08fc72c7160152fdc19a31457df6ad2be14d56d06c713f47713633aa0550687f5cd5b68d8146ad48f7da0044b511ca5da776bff"}, {&(0x7f0000000340)="5787b78bb106966588288395824b85e98403"}, {&(0x7f0000000380)="21ba113af463e6c1dd7fff7f746fa8feacaef6d58e18e4acda919e0e1342c2ee6c6cc9c2de0afe9e7052443f4548db159ee32497c34bc626f800cbe22d0aec6d0f12a7783b78998f1d9464f354855ed3c4c3"}, {&(0x7f0000000500)="d936ac4932c97248c300c0be72627033f9c32817b53f88dce92d51f99811fc5fed970b4e705401b7682d64ca891e0ea65e9bf7abb82e7d50878d32a16f3c86700c3cf6af9a96089deaf217a05753e59d5e3e5ef562c4802c6c73077dcd9e42c6f3beeea30b62bb7eb10b05ae681df52b89d542fd3887530d7b8ee580ead1b47950899830b2bf011603dc5205860490c67ccaf529e3457d9162528e1a4bffb8c4d4ceb87ab9c72821950b29c7b06a74f933fadb3ee510c8ab06d13d789ee497f46f9a12edcf38d63d83242ed2146f24403a7fa3"}, {&(0x7f0000000400)="f8a299ac56"}], 0x246, 0x0) fsync(r0) 09:01:56 executing program 1: r0 = socket$inet6(0x18, 0x8001, 0x0) r1 = getpgrp() bind$inet6(r0, &(0x7f0000001080)={0x18, 0x2, 0x80, 0x400}, 0xfffffffffffffe6a) fcntl$setown(r0, 0x6, r1) listen(r0, 0x0) close(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x280, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="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", 0x1000) 09:01:56 executing program 1: mknod(&(0x7f00000013c0)='./bus\x00', 0x84002005, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10005, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000100)={'.\x00', 0x661d, 0x1ff, 0x2, 0x1, 0x200, 0x6, 0xffffffff, 0x0, 0x2, 0x6, 0x10000}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) open$dir(&(0x7f0000000200)='./bus\x00', 0x10080, 0x1) linkat(r0, &(0x7f0000000180)='./bus\x00', r0, &(0x7f00000001c0)='./bus\x00', 0x4) open(&(0x7f0000000080)='./bus\x00', 0x606, 0x0) syz_execute_func(&(0x7f0000000040)="450f0f57ad943ef0001e8f8978d24ab0478f448b42c4810d6098018d8920457d0e0f98ad00000000c4417a2ce4c4a1fa2acc0adf") 09:01:56 executing program 0: munmap(&(0x7f0000724000/0x4000)=nil, 0x4000) munmap(&(0x7f0000723000/0x1000)=nil, 0x1000) madvise(&(0x7f0000726000/0x1000)=nil, 0x1000, 0x5) madvise(&(0x7f0000723000/0x3000)=nil, 0x3000, 0x0) 09:01:57 executing program 1: mknod(&(0x7f00000013c0)='./bus\x00', 0x84002005, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10005, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000100)={'.\x00', 0x661d, 0x1ff, 0x2, 0x1, 0x200, 0x6, 0xffffffff, 0x0, 0x2, 0x6, 0x10000}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) open$dir(&(0x7f0000000200)='./bus\x00', 0x10080, 0x1) linkat(r0, &(0x7f0000000180)='./bus\x00', r0, &(0x7f00000001c0)='./bus\x00', 0x4) open(&(0x7f0000000080)='./bus\x00', 0x606, 0x0) syz_execute_func(&(0x7f0000000040)="450f0f57ad943ef0001e8f8978d24ab0478f448b42c4810d6098018d8920457d0e0f98ad00000000c4417a2ce4c4a1fa2acc0adf") 09:01:57 executing program 0: r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 09:01:57 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f00000000c0)={0x4, 0x0, {0x8, 0x3}}) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r2, 0x4, 0x80) pwritev(r2, &(0x7f00000003c0), 0x273, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)) close(r0) 09:01:57 executing program 1: r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x402, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c) linkat(r0, &(0x7f0000000040)='./bus/file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x4) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4400) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 09:01:57 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c) connect(r0, &(0x7f0000000080)=@in6={0x18, 0x0, 0x9, 0xfffffffffffffc01}, 0xc) mknod(&(0x7f0000000340)='./bus\x00', 0x3a0914c44f7b202d, 0x501) syz_open_pts() r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x13, &(0x7f0000000000), 0x0) connect(r2, &(0x7f0000000040)=@in6={0x18, 0x0, 0x3, 0x6}, 0xc) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 09:01:57 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x6, 0xfffffffffffffffd, 0x45) setsockopt(r0, 0x29, 0xa, &(0x7f0000000000)="d5ff9668", 0x4) setsockopt(r0, 0x29, 0xd, 0x0, 0x641) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x4) setsockopt(r0, 0x6, 0x6, &(0x7f0000000080)="bbc4e62e3457990271493c3a1b68752cd20377139bd014316ea09e89de13ab5d1664b7ecd3506ac9955adaa5755dd122ac94f6870c24be1379c0452c4cf014f86b649a175f2e6528794731f83cdccee19de4d5834fe462f4a6bcd269b29f", 0x5e) 09:01:57 executing program 0: r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty\x00', 0x100, 0x0) ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000040)) mlockall(0x2) mmap(&(0x7f000071c000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0, 0x0) munlockall() madvise(&(0x7f00009ed000/0x400000)=nil, 0x400000, 0x6) madvise(&(0x7f00009fd000/0x4000)=nil, 0x4000, 0x6) munmap(&(0x7f00008f5000/0x1000)=nil, 0x1000) 09:01:57 executing program 1: r0 = socket$inet(0x2, 0x4006, 0x8000000) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="8d6e89b67d1c170b833a1708000000004cc12c0b6a4f9bb0333908bbff", 0x1d) 09:01:57 executing program 1: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000003c0)="2b18be8586e7b6bd", 0x8}], 0x1, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xc1, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000080)={0x80000000, './file0\x00', './bus\x00'}) open(&(0x7f0000000040)='./bus/file0\x00', 0x80, 0x121) fsync(r1) r2 = kqueue() kevent(r2, &(0x7f00000001c0), 0x3f, &(0x7f0000000600), 0x101, 0x0) ioctl$TIOCFLUSH(r1, 0xc0106978, &(0x7f0000000800)) 09:01:57 executing program 0: r0 = socket(0x4000000800000018, 0x4000, 0x10000) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "0000ffff0040800008000005fd9600"}) getsockname(r0, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc) getsockname(r0, &(0x7f00000000c0)=@un=@file={0x0, ""/84}, &(0x7f0000000140)=0x56) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) r1 = fcntl$dupfd(r0, 0xa, r0) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000180)=0x7fffffff) login: map stack 0x2071c000-0x20b1c000 of map 0xfffffd807effe438 failed: hole in range 09:01:57 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86128) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[{{r0}, 0xffffffffffffffff, 0x1}, {{r0}, 0xfffffffffffffffe, 0x37}], 0x0, 0x0) r1 = kqueue() r2 = kqueue() kevent(r2, &(0x7f0000000200), 0x60, 0x0, 0xfffffffffffffff9, 0x0) kevent(r1, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x8000, 0x100000000, 0x7, 0x0, "eb9d237036a59b2c0dfbf7ff0d453a5cda6f7588", 0x8, 0x9}) close(r0) 09:01:57 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xfffffffffffffffe, 0xfffffffffffffffe, 0x90d2, 0x0, "d705000000000000005b00000000000000e74de4"}) r1 = getgid() setgid(r1) read(r0, &(0x7f0000000340)=""/199, 0x1e) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, "d9edfe119b9f87de879f4e79f0baff57e0d1d598"}) dup(0xffffffffffffffff) r2 = syz_open_pts() fcntl$setflags(r2, 0x2, 0xfe25a7ac46bd91aa) close(0xffffffffffffffff) 09:01:57 executing program 1: r0 = open(&(0x7f0000001ac0)='./bus\x00', 0x301, 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000080)="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", 0xfb}, {&(0x7f0000000180)="fcc4b0146b0031463cf7115e78de6a79b001e146cb916971fc0abb5b08becf01f5a663226bf1f9464cee34a6a367f018736db1aec1946e7d829200b4cb8169fede7d2d04938bc9b4a33a5514d12438d635b569d05087479464cb8e502b654992db791159b90564e9df187dbd7fff95f35ebf74aec687a7e993cf1ef5bc1a068a19b48e463f1cc46f403b7435a0708514f1b6c60d1cac2179a0fb81b071", 0x9d}, {&(0x7f0000000240)="5b2daa657ba1475c34901d9ad0d31a0a8a20d662120c2db71d11d2f1bf454dc980ef1beb170993123d73eba7e527c26cc6e62182075fcc0c0ec873cfb9525348ee7734081fe014a99290622da68c1af2ac59844207fc0057aa65e745fca703cedc83e9ec8d0ae465f4e8ae3591e0456fca0ac0a81479466ba2166786e70966cfa4d1ad7686ffa4328aac070cb7d56e0f5d8a72529486f64397fe269442deb41331f270dad7", 0xa5}, {&(0x7f0000000300)="46ead9ad273bbefdf48d149070e351f5f0c335ccd7e46b08d20010d00dac4b285f2cd97e8f795c0d12db51573ff016ac6e570456400ebdc5d3b0da8b001a7ca7af300c2d0337288fdc1a4837464c4a5b732c362e4d11578c5e883a0293840581b85677b3c0fc97d972db9e5f4af5fd1d222cb0e46f0624c4c23942546408ad0ad5446dccb500786606502d44a14e2e", 0x8f}, {&(0x7f00000003c0)="b1915c71209812d316c142128f5207d31b69c63a77171c0b3b39620e0ac9a966c5f7d37ea721346f23086925a389b8ec92c274714909474a8fcfce96cd52bd1ce070171590ab502364acb30cf1ef401550066098143666c92d37d9a8d19bd126abe8bf0747db2223d1dd2e41db01a1174fc2ed74f2a1740d9b65e4dca355a1580b834dfbd9bbc2a4a28091a1298eed0222adab425e1c09b347db62771d48331b87e23d5e7a52b476fdbd483837629ba3fea7bd31263033845e9c1f6f98fe39afe5d8ae6d3606", 0xc6}, {&(0x7f0000001580)="dcc21000ee96c940085286e78d42c8598a89db19694c47a7a3190a8e7252", 0x1e}, {&(0x7f0000000500)="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", 0x1000}], 0x7, 0x400000000000000) r1 = socket$inet6(0x18, 0x8007, 0x5) kevent(r0, &(0x7f0000001b00)=[{{r0}, 0xffffffffffffffff, 0x20, 0x20000001, 0x5, 0x64}, {{r0}, 0xfffffffffffffff8, 0xc0, 0x1, 0xfe9, 0xffff}, {{r0}, 0x0, 0x40, 0x80000000, 0x7, 0x2}, {{r0}, 0xfffffffffffffff9, 0xb0, 0x60000093, 0x7, 0x5}, {{r0}, 0xfffffffffffffffe, 0xa4, 0xf0000000, 0x0, 0x9}, {{r1}, 0xfffffffffffffffb, 0x20, 0x704cb43c28c26cb0, 0xffffffffffffff11, 0x80000001}, {{r0}, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x4}], 0x2, &(0x7f0000001a40)=[{{r0}, 0xffffffffffffffff, 0x6, 0x1, 0x80000001, 0x5}, {{r0}, 0xfffffffffffffffb, 0x0, 0x1, 0x8001, 0xc9}], 0xed4, &(0x7f0000001a80)={0x100000001, 0x80000000}) accept$inet6(r0, &(0x7f0000000040), &(0x7f0000001a00)=0xc) sendto$inet(r0, &(0x7f0000003b00)="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", 0x1000, 0x403, &(0x7f0000000000)={0x2, 0x0}, 0xc) pwritev(r0, &(0x7f0000000280), 0x1000000000000042, 0x0) writev(r0, &(0x7f0000001940)=[{&(0x7f0000000040)}, {&(0x7f00000015c0)="fb0a9cf237eb1db8e93f4ef3fe1453e958b58c09fbae0bf4f51f3f6bd2ddc62d27ad78f406dbb5421ca05db34dcfb5a051f038f6350d8c62d79095b40b590c18dc5d1f78534cbc1442e204434e005d9566a78a4277a8fd1d6ae9e4736b1e3c91a18f2775ef81fab4a33282a77e8ff1aa116a2afbe34c88ee11909a545008f52f0a2ca32c54565ed9b146f473ff3b53b9c1e80e991fbfb5f91a2f268b0e0c1cb5fd28950c98ce", 0xa6}, {&(0x7f00000004c0)="7054b7000d887c0efec966b87b26fe607d69d6fc3de1eb18e2f246595a6fc123", 0x20}, {&(0x7f0000001680)="e7289a5a9f82f3827169c1ed2cb7aaa58b71a3c3a32279fa8b5244ede4514f6c5f2d13d8163e7fcd99c9f08a321b357839cbe442c90e9f8bc4a247fd0352d6", 0x3f}, {&(0x7f00000016c0)="6f03314a55d1bd548bf4e5c74615f7f78d2e6b804da3c6220f94db11f7a49e2867f4756e989362f7208b631b41567425ea0ae1923d6a87f08b4a958ead2f7440409211946c2f268c83a63ebf728aec292f90fe6cb9a872fdde7de7f1b29e3668f95f5fdbe22c13ac8f30b415d99adf19ff0c51fe1c5397d0a142863835469c", 0x7f}, {0xffffffffffffffff}, {&(0x7f0000001740)="af785228c3e7f2", 0x7}, {&(0x7f0000001780)="c1dd87db2b1c56b0a821c083d6b94adf9a1513cb1a", 0x15}, {&(0x7f00000017c0)="7bd95d21aaedc5288d5860d961dd7edd772acefb8a6f4dd68985c96db9ecefe84e77c63222ec868f7f7fb72ea19b5f272a83948d14726d5a6d6c737767fd5f6f84ecc2901c9f916497c0396ca354f40661157a3b2b88ce97e84ac6e793c0472c3fb4665d7b1f2607b7c6", 0x6a}, {&(0x7f0000001840)="edc16ec1bb7dc4f592c4159a2444973d5a432a8189af85da66f280d296874b9c2e2df697afb11b51ee4b3b680bf752187ec39545ebe06181c3236088b0e73b9cad86a31b43456ce68db2709e3f1387458b76b5567ef2d39d265c847bfd95200cd8cfe807c8eeabd012c9276a95b950fd8af45260243379d31cec41a0a9393dd6bf7f03c40e3d06caf7636e161f72ed82b55ece58a63e2b6cbb2cb5fdd6a6b45b4198dbec758e01542d9443b77f0371448bd8612a0018e08c25c49ddf7fb5d4995d19433fad517878165f86cbd2387817b0347ee7df7caebc3afd7c66892171a0fc0af83dea3de301", 0xe8}], 0xa) 09:01:57 executing program 0: r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x8, 0x4) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x7fffff7ffffffffc, 0x0, 0x0, 0xfffffffffffffffc, "00000000e78100"}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) socketpair(0x16, 0xc003, 0x5, &(0x7f0000000040)) getsockopt$sock_timeval(r0, 0xffff, 0x1007, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket(0x800000018, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x0, 0x0, 0x100000000000000}], 0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) 09:01:57 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) r4 = dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r5 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r5, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r5, 0x4, 0x8, &(0x7f0000000940)=0x5) r6 = kqueue() r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r6, &(0x7f0000000080)=[{{r7}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r7}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r6, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc) getgid() 09:01:57 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x80002007, 0x5cc2) pipe2(&(0x7f0000000080), 0x10000) r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = dup(r0) lseek(r0, 0x0, 0x1) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)) 09:01:57 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x61c8, 0x401) chflags(&(0x7f0000000200)='./file0\x00', 0x40000) r0 = open(&(0x7f0000001280)='./file0\x00', 0x212, 0x0) msgget(0x1, 0x40) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2011, r0, 0x0, 0x0) 09:01:57 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x120) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x40) r2 = socket(0x2, 0x3, 0x1) connect$unix(r2, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000003c0)=""/215, &(0x7f0000000140)=0xd7) dup(r0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="19af3d26de8d909b3ac99afb", 0xc}, {&(0x7f00000001c0)="962e0b7f27c8e1e122dd677f43af5286dca8776e09ae829795e335df5cb10e625374421ee109c305d0b5d9045da4c2a721686f349b13ee97eaf335630d549a01dbb3c6f3c34b876962e1bc90cd3bfce98af7c8d1b843a86e31b2030da497c7a777e3c61424a0771476873935525aacb9665e146122dc8931eefaef55a88e6ba453ebb20f321985a2f86c9af3aca93e6c8d5269946677d70b3bfd0ef9f6659f413d2f1ff10ef6933c5e51e8fe0403162b3d811597dbed4339c364a56e8a1eba90f868ddd1ca132aa9f39c0c66fe822204815227bd906c1a8a6f14d58055ebc30d1269738d66e37cb46bdcab49b3e8b33f4e6efeb55d21cc1b15", 0xf9}, {&(0x7f00000002c0)="595e0526367b85720b12aa15191797135c8e0f1850e14dbdecd6bcc517561235612d7e7962948d5e9e55536b888f907bdaea82844fabdd55cfc712b8ef249b72fc0b6054c92deddf84a53e1c248f3f7ec5ff4dde1a423a3681bfd00792832e091fd2ec38eef083a8b50d1197e5216ca9ba4a6d8bde901667ba3345a21838e7a570a66e999ab5783d7d054d2ddcb8d89130a9531b8ef3a977920bb4ea949410f2aa18a1d2e1d0f0613c1ce4b540903883da8db8d4027f8b10", 0xb8}], 0x3) 09:01:57 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) r4 = dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r5 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r5, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r5, 0x4, 0x8, &(0x7f0000000940)=0x5) r6 = kqueue() r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r6, &(0x7f0000000080)=[{{r7}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r7}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r6, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc) getgid() 09:01:58 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) r4 = dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r5 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r5, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r5, 0x4, 0x8, &(0x7f0000000940)=0x5) r6 = kqueue() r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r6, &(0x7f0000000080)=[{{r7}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r7}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r6, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc) getgid() 09:01:58 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) r4 = dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r5 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r5, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r5, 0x4, 0x8, &(0x7f0000000940)=0x5) r6 = kqueue() r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r6, &(0x7f0000000080)=[{{r7}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r7}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r6, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc) getgid() 09:01:59 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x100) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) unveil(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='r\x00') r1 = open(&(0x7f0000000140)='./file1\x00', 0x120, 0x2) ioctl$TIOCCDTR(r0, 0x20007478) chflagsat(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0xfffffffffffffffd) ioctl$TIOCCDTR(r1, 0x20007478) 09:01:59 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) r4 = dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r5 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r5, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r5, 0x4, 0x8, &(0x7f0000000940)=0x5) r6 = kqueue() r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r6, &(0x7f0000000080)=[{{r7}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r7}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r6, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc) 09:01:59 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000280)='./bus\x00', 0x2, 0x10) renameat(r0, &(0x7f0000000200)='./bus\x00', r1, &(0x7f00000002c0)='./bus/file0\x00') mknod(&(0x7f0000000240)='./bus\x00', 0x2004, 0x800000000004515) r2 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) getppid() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x90, 0x0) ioctl$VT_RELDISP(r3, 0x20007604, &(0x7f0000000140)=0x2) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), 0xc) fcntl$getown(r2, 0x5) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000300), &(0x7f0000000340)=0xb) r4 = getpgid(0x0) unveil(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='x\x00') fcntl$setown(r2, 0x6, r4) fcntl$setown(r2, 0x6, r4) 09:01:59 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:01:59 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x80002007, 0x5cc2) r0 = open$dir(&(0x7f0000000340)='./bus\x00', 0x20000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) kevent(r1, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0x8, 0x40000020, 0x10001, 0x2fd5}, {{r0}, 0xfffffffffffffffa, 0x8, 0x81, 0x400, 0x400}, {{r0}, 0xffffffffffffffff, 0x8, 0xa1, 0x9, 0x5}], 0x9, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffff9, 0x20, 0x2, 0xd2c6, 0x2}, {{r0}, 0xfffffffffffffffc, 0x0, 0x4, 0xa, 0x2}, {{r0}, 0xffffffffffffffff, 0x20, 0x10, 0x7, 0x7}, {{r0}, 0xfffffffffffffffd, 0x1, 0xfffff, 0x8, 0x87ae}, {{r0}, 0xffffffffffffffff, 0x40, 0xf0000006, 0x7, 0xfffffffffffff800}], 0x4, &(0x7f0000000240)={0x2fb, 0xa48}) ioctl$KDGETLED(r1, 0x40044b41, &(0x7f0000000280)=0x1) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f00000002c0)={0x401, 0xffffffffffff0001, {0x6, 0x5}}) r2 = kqueue() chflagsat(r1, &(0x7f0000000000)='./bus\x00', 0x1, 0x2) kevent(r2, &(0x7f00000000c0), 0x7, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffffc, 0x1}], 0x7, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x6010, r2, 0x0, 0x2) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000000380)) 09:01:59 executing program 0: r0 = socket(0x800004014, 0x4, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{r1, 0x48}, {r1, 0x4}, {r1, 0x6}], 0x8d, 0xffffffffffffffff) recvfrom(r0, &(0x7f0000000000)=""/169, 0xa9, 0x1, &(0x7f00000000c0)=@in={0x2, 0x0}, 0xc) connect(r1, &(0x7f0000000100)=@in={0x2, 0x1}, 0xc) getsockopt(r0, 0x6, 0x0, 0x0, 0x0) 09:01:59 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) 09:02:00 executing program 0: pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wskbd\x00', 0x80, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r4, 0x4, 0x80) r5 = getppid() fcntl$setown(r0, 0x6, r5) pwritev(r0, &(0x7f00000003c0), 0x2b1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x100000000000010, r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x12, r2, 0x0, 0x0) write(r1, &(0x7f00000000c0)="1d", 0x1) close(r0) 09:02:00 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) 09:02:01 executing program 0: mknod(&(0x7f0000000380)='./bus\x00', 0x80002007, 0xffffffffffff2822) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0x8020690c, &(0x7f0000000300)) getpid() 09:02:01 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0x1b00) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyCcfg\x00', 0x40, 0x0) ioctl$WSDISPLAYIO_SETSCREEN(r0, 0x80045756, &(0x7f0000000080)=0x3f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x402000003fd, 0x0) write(r1, &(0x7f0000000400)="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", 0x1b5) execve(0x0, 0x0, 0x0) 09:02:01 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) 09:02:01 executing program 0: r0 = semget$private(0x0, 0x3, 0x200) semctl$GETPID(r0, 0x3, 0x4, &(0x7f0000000000)=""/184) r1 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000000c0)={0x2, 0xa6d3}, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/171) setsockopt$sock_timeval(r1, 0xffff, 0x1005, 0x0, 0x0) semop(r0, &(0x7f00000001c0)=[{0x3, 0xb0, 0x1000}, {0x3, 0x7, 0x1d9c4162f839beee}, {0x1, 0x3ff, 0x1000}, {0x4, 0x0, 0x800}, {0x3, 0x7, 0x800}, {0x3, 0xffffffff, 0x1000}, {0x3, 0x9, 0x1000}], 0x2aaaaaaaaaaaae48) 09:02:01 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f0000000040)) semget(0x1, 0x0, 0x4) r1 = socket(0x18, 0x1, 0x0) socket(0x16, 0x5, 0x80) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x29, 0xc, &(0x7f0000000240), 0x0) r2 = dup2(r1, r1) ioctl$KDSETRAD(r2, 0x20004b43) 09:02:01 executing program 0: kqueue() socket$inet(0x2, 0x8003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="c200f91e02b6078aa89d00c239492219d3"], 0x9}, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x3, 0x4}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x128}, 0x0) 09:02:02 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:02 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0x0, 0xff, 0x0, 0xfffffffffffffffd, "3cbae506251a0000009300"}) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000200)) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f00000000c0)) ioctl$TIOCSTART(r0, 0x2000746e) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10083, 0x3) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000100)=0x2) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000140)={0x0, 0x9, 0x1000, 0x2b, "182b4941b6d11869f6971c24be86ff89407b6c7b", 0x2, 0x4}) 09:02:02 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:02 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:02 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:03 executing program 0: mknod(&(0x7f00000000c0)='./bus\x00', 0x80002005, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x80, 0x2) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) poll(&(0x7f00000003c0)=[{r0, 0x1f}], 0x1, 0x0) 09:02:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:03 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) kevent(r0, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffc, 0x4, 0x80, 0x549d, 0x2}, {{r0}, 0xfffffffffffffffb, 0x8, 0x0, 0x6, 0x5}, {{r0}, 0xfffffffffffffffd, 0x80, 0x20000000, 0x2}, {{r0}, 0xfffffffffffffffb, 0x48, 0xf0000042, 0x2, 0x8cd}, {{r0}, 0xfffffffffffffffe, 0x0, 0x1, 0x80000000, 0xff}], 0x6, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff8, 0x0, 0x80, 0x10001, 0xe9e}, {{r0}, 0xffffffffffffffff, 0x4, 0xf0000000, 0x6, 0x101}, {{r0}, 0xffffffffffffffff, 0x80, 0x12, 0x80000000, 0x4}, {{r0}, 0xfffffffffffffffc, 0x80, 0x11, 0x80000000, 0x3}, {{r0}, 0xffffffffffffffff, 0x0, 0x84, 0x5, 0x9}, {{r0}, 0xffffffffffffffff, 0x43, 0x1, 0xff, 0x2}, {{r0}, 0xfffffffffffffff9, 0x80, 0x4, 0xffffffffffffaa7b, 0x4a27}], 0x8001, &(0x7f00000002c0)={0x1, 0x7}) unlink(&(0x7f0000000040)='./bus\x00') ioctl$WSMUXIO_ADD_DEVICE(r0, 0x8004667c, &(0x7f0000000080)={0x100003, 0x81}) utimensat(r0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={{0x40, 0x7}, {0x7fffffff, 0xfffffffffffffffd}}, 0x0) 09:02:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r1, 0x800000000ffff, 0x40, &(0x7f0000000000)="e26ae40f", 0x4) listen(r0, 0x9) 09:02:03 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) getgroups(0x7, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r0) setgroups(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') setuid(0xee01) select(0x40, &(0x7f0000000100)={0x2, 0x200, 0xff, 0x0, 0x5, 0x7, 0x5, 0xfffffffffffff800}, &(0x7f0000000240)={0x80000000, 0x101, 0x9, 0xfffffffffffffffd, 0x7, 0x6, 0xbf, 0x4}, &(0x7f0000000280)={0x5, 0x1, 0x9, 0x401, 0x100000000, 0x4, 0x9853, 0x7}, &(0x7f00000002c0)={0x100000001, 0x7f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f0000000200)='./bus\x00', 0x40, 0x4) renameat(r1, &(0x7f00000000c0)='.\x00', 0xffffffffffffffff, 0x0) semctl$GETNCNT(0x0, 0x0, 0x3, &(0x7f0000000000)=""/191) 09:02:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:03 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x2, 0xd59) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f0000000040)) ioctl$TIOCSETVERAUTH(r0, 0xc00c7006, &(0x7f0000000000)) 09:02:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:03 executing program 0: mknod(&(0x7f00000000c0)='./bus\x00', 0x2050, 0x4800) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x20007461) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) mknodat(r0, &(0x7f0000000000)='./bus\x00', 0x2112, 0x80000001) 09:02:03 executing program 0: r0 = getegid() getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) setregid(r0, r1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) readlinkat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/225, 0xe1) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) mknod(&(0x7f0000000280)='./file0\x00', 0x2101, 0x8) fcntl$getflags(r3, 0x1) getuid() r5 = semget(0x0, 0x2, 0x8) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f00000002c0)=""/222) semctl$SETALL(r5, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0xfff, 0x6]) r6 = open(&(0x7f0000000400)='./file0\x00', 0x10, 0xc4) ioctl$TIOCCDTR(r6, 0x20007478) ioctl$TIOCMSET(r3, 0x8004746d, &(0x7f0000000440)=0x1f) r7 = accept(r3, &(0x7f0000000480)=@in6, &(0x7f00000004c0)=0xc) semget(0x0, 0x4, 0x4) recvfrom(r7, &(0x7f0000000500), 0x0, 0x800, &(0x7f0000000540)=@in={0x2, 0x0}, 0xc) lseek(r7, 0x0, 0x3) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000580)=""/219) semctl$GETVAL(r5, 0x6, 0x5, &(0x7f0000000680)=""/105) semget$private(0x0, 0x7, 0x100) getgroups(0x3, &(0x7f0000000700)=[r2, r4, r4]) ioctl$TIOCSPGRP(r6, 0x40047477, &(0x7f0000000740)) semget$private(0x0, 0x3, 0x80) mkdirat(r6, &(0x7f0000000780)='./file0\x00', 0x20) 09:02:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() kevent(r5, &(0x7f0000000080)=[{{}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:03 executing program 0: mknod(&(0x7f0000000080)='./file0\x00', 0x2000000006002, 0x411) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:02:03 executing program 0: r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x3f, &(0x7f0000000100)="2c16954c", 0x4) socketpair(0x10, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$getown(r0, 0x5) r3 = geteuid() getgroups(0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="00002e2f66696c6530003dfa162500f33a21f847463f0cab1f18ea22def9e66a558d957598f5a14c8debf58b1b7637c7d17c53cf16882cc5a1b53d541f7ff1d302f67801d2b0d291b25c6e7431cf588b02545f7fcc85d17d4c22a65e1e69bec763093d237fb79bc0af9b1af998ca0a84b1eba737c57990a28dc10fd204c0260455862e758a4801244ba5026b62a9aff2046fb7dc9b642c0ad87230324f6d99ec06000000923ba645ef970b87c1c51af4518dc38342d3"], 0xa, &(0x7f0000001600)=[{&(0x7f0000000140)="1bd3597c3d778e75af8c9da30141a381e020b8369945e5a79eeba55ae21ad58380a7256e0d9151454402246e7f511228be20699195c77b5915e57ad37403b5aee822ce9a348b4553527cb7e43c6332ac4d7dbf19de745d417aa18200e16521652b77c8ad8584b2079e0ae89bcb7551762d89267b687bfb06d3a17c21d08ca6499727ba27c7bff81577f579", 0x8b}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="050e8344688d2d7f2614e002cc46fef7340426b59f68d114ddec64ffbdcff68d736b435efb5c67f3b36eed9c2f90abe8d768d5f42a0aa5a63f468352e14a4c091f01dbdfc61820b53a41d0c4eae7b0da72a54c442d196080d0e700c954187b3fcf7db22a20a181746bda59fc3567283530a7023d62d4eaa005d1df2658e64c8455aa78d220bb4a95a846e34edc45a9fc395ca9b2d934b253ca20e5f242e51950bf62474f32840c0da144b2e32561c478b864b1bc6efc67ad1cb9f7b3e40f08643bc45469731f35a8", 0xc8}, {&(0x7f0000001380)="b102a5350f2a73ea20084c060744c7d4dac81fd74383fca15184fed6052e074c03be381520d919026786716778a1fa7a4a926c29cbec064eadbb51b422223ae426429344813502ef587f3ceacb32b96ef8221c2e022410fc019eb36b0d1cf6d8547414849604f914b61c6c6b3f7af69cfe2f5d3fd19eb044a35faca24ad6633000ead4fcc24a3faf0d35c3a9c528ff62", 0x90}, {&(0x7f0000001440)="e709b01fdd5f713cc427f9b5a09004a93ac5f61ba2bf1a5770ea65c137b2c64cbf404cdb121fa7a61edc7561a913f1c5bfce20ea79a97ccc744f0310840d0f702416bd9b756f05e9d0", 0x49}, {&(0x7f0000000080)="9e7644975c824e3f217f1ca1d9be4b3f3cc80afe37b4f34a3dc0ca26c34de1a0488f4842687324", 0x27}, {&(0x7f00000014c0)="65ba0489f2a224e0b07f966371d4fb9c716034bf2ca374fc203e5356f3365ab9ed0883bc4056fb9683cdc7a8fa62aaedbb31dd2d73a2a9856c34ba5cf72378d655726028361f79ad9a075db8db80acf1f071bc0adcf8", 0x56}, {&(0x7f0000001540)="2bf1342e0607037e5950c538cebf140c858405675640f2a2c482853d512d42724e0d927b5dc85f3685148b946a5ffa7c8e9c02d1cd84189b6242d0da08022f7699401b0dd7d47dc74250a2135eb55d5ffb37ad30397a9e1b814b2458525e6643713596a922d03d294d4d5e23f9b38b5d3dcedecffbc93fc29d81af90d4d56ef4bf4b96bc", 0x84}], 0x8, &(0x7f0000001680)=[@cred={0x20, 0xffff, 0x0, r2, r3, r4}, @rights={0x30, 0xffff, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0xffff, 0x1, [r0, r0, r0, r0]}], 0x70, 0x5}, 0x5) r5 = socket(0x18, 0x1, 0x0) close(r5) r6 = fcntl$dupfd(r0, 0x0, r5) setsockopt(r5, 0x9, 0x5, &(0x7f0000001800)="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", 0x1000) ioctl$TIOCEXCL(r6, 0x2000740d) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "000000000000000100002000"}) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) write(0xffffffffffffffff, 0x0, 0xffffff63) sendto(r0, &(0x7f0000000240)="78020026973a0c45", 0x8, 0x0, 0x0, 0x0) 09:02:03 executing program 0: mlockall(0x2) r0 = kqueue() r1 = fcntl$getown(r0, 0x5) mknod(&(0x7f0000000000)='./bus\x00', 0x10000000002000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x8004667c, &(0x7f0000000080)={0xc6000000}) r3 = getpid() setpgid(r1, r3) fcntl$dupfd(r0, 0xa, r0) ioctl$TIOCCBRK(r2, 0x2000747a) r4 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r4, 0x0, 0x0) 09:02:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() kevent(r5, &(0x7f0000000080)=[{{}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/23, 0x17, 0x843, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) 09:02:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() kevent(r5, &(0x7f0000000080)=[{{}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: read(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94) getsockopt(0xffffffffffffffff, 0x100000000000002, 0x1000000000000001, 0x0, 0x0) r0 = getuid() getegid() r1 = getgid() chown(&(0x7f00000000c0)='./file0\x00', r0, r1) 09:02:04 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x4000007000, 0x6) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffffff, 0x80085761, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0xc1045763, &(0x7f0000000100)) 09:02:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x1) r1 = getpgrp() r2 = geteuid() r3 = getegid() sendmsg$unix(r0, &(0x7f0000001380)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001240)=[{&(0x7f00000000c0)="b2774a14bc53709c6808934906b70c3c10909e5623fe01f17f591522881a7718ff9c9284f513ad616d73150e6c1f3959affdf96b4f", 0x35}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="79c33437dc3c1fd6e33f3e3cbb8154b4cb4e9ce9f9fd4363c7ddcf3866f126", 0x1f}, {&(0x7f0000001140)="bab91837d23267c6a8877c72851ee4b38c69946b9ce67f0ae81a64dc90d095c6664b4b5fe3", 0x25}, {&(0x7f0000001180)="2beea9aa2a0e0fdb4a521b73d67a8135de2c53d6c198f73d1d055148b2ef4ef8196d2f8ba004d56e32af939ff3f15219339c1da28ee71080cf709f134b357c000fabe11cdb1de81f4ca1acd1a6c9107183ff84d2d933da554b1eb21e17c445e66e4867c149d262a10554eec57fe6bd8aa1d53a6618a2c1227ee4167c6280bff8d1bf9f3d095b43f2", 0x88}], 0x5, &(0x7f00000012c0)=[@rights={0x30, 0xffff, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0xffff, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0xffff, 0x0, r1, r2, r3}, @rights={0x20, 0xffff, 0x1, [r0, r0, r0, r0]}], 0xa0, 0x404}, 0x400) sendmsg$unix(r0, &(0x7f0000002380)={&(0x7f0000000040)=ANY=[@ANYBLOB="00169c273405464566ba"], 0xa, 0x0}, 0x0) 09:02:04 executing program 0: minherit(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x800000) munlock(&(0x7f0000001000/0x4000)=nil, 0x4000) 09:02:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: r0 = kqueue() r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa0, 0x2) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000200)) r2 = syz_open_pts() kevent(r0, &(0x7f0000000040)=[{{r2}, 0xffffffffffffffff, 0x1}], 0x8001, 0x0, 0x0, 0x0) r3 = syz_open_pts() r4 = syz_open_pts() kevent(r0, &(0x7f00000000c0)=[{{r3}, 0xfffffffffffffffc, 0x4, 0x2, 0x2}, {{r0}, 0xffffffffffffffff, 0x81, 0x80, 0x8, 0x400}, {{r4}, 0xfffffffffffffffe, 0x50, 0x40000002, 0x7, 0x3}, {{r2}, 0xfffffffffffffffe, 0x40, 0x2, 0x6, 0x6}], 0x5, &(0x7f0000000140)=[{{r0}, 0xffffffffffffffff, 0x8, 0x1, 0xcec, 0x9}, {{r2}, 0x0, 0x0, 0x4, 0xfd}], 0x8, &(0x7f0000000180)={0x0, 0x9}) syz_open_pts() syz_open_pts() syz_open_pts() openat$tty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty\x00', 0x0, 0x0) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "85495500020000000000001167f5bfa60200"}) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc, "b08d1dbd961018d3a50a2c21d8e500", 0x4}) 09:02:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: socket$unix(0x1, 0x7, 0x0) r0 = socket(0x800000018, 0x1, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0xffffffff80000000, 0x0, 0x20000ff, 0x0, "14edb45900000000e8ff00702d7d6fdcb51d8b00"}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "b04d00f3ff0a631a00"}) r1 = socket(0x18, 0x1, 0x0) dup2(r0, r1) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0xfffffffffffffd2b) 09:02:04 executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x2003, 0x1700) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) socketpair(0x7, 0x4007, 0x80, &(0x7f0000000000)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000080)=@file={0x0, ""/108}, &(0x7f0000000100)=0x6e) 09:02:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000100)=0x2, 0x4) bind$inet(r0, &(0x7f0000000000), 0xc) 09:02:04 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x20) r1 = socket$inet(0x2, 0xc001, 0x0) getsockopt$inet_opts(r1, 0x0, 0x2000000000025, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f00000000c0)={{0x18, 0x1, 0x2000000000000000, 0xfffffffffffffffc}, {0x18, 0x0, 0x7, 0x7fffffff}, 0x7f, [0x7fffffff, 0x2, 0x7ff, 0x6, 0x8, 0x81]}, 0x3c) setsockopt(r1, 0x8, 0xb25e, &(0x7f0000000080)="d455a0d4afa94fe4aec31ce1128789ad12717e017508", 0x16) r2 = dup2(r1, r1) fsync(r2) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) 09:02:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: r0 = getgid() getgroups(0x5, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 09:02:04 executing program 0: r0 = msgget$private(0x0, 0x0) chflags(&(0x7f0000001080)='./file0\x00', 0x1) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) pipe(&(0x7f0000001000)={0xffffffffffffffff}) mlock(&(0x7f0000ff4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff2000/0xd000)=nil, 0xd000) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000001040)=0x1) 09:02:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:04 executing program 0: symlink(&(0x7f00000001c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xb, &(0x7f0000000000)="d5ff9668", 0x4) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x2, &(0x7f0000000280)=@in6={0x18, 0x1, 0x65, 0xbb}, 0xc) setsockopt(r0, 0x29, 0x800000000000009, &(0x7f0000000080)="292918d7", 0x4) sendto$inet6(r0, &(0x7f00000000c0)="adcc727e7e024aae31843d24b9be82b30b6c875ecf5f065a0fd44fe826711b023592b8d8efd9bb55c3eac785ef886097bc16f58f0c12898bb7aaf779c18f902eede009b7e7569924e025325467837632db61f379b423546dae1503435f0fd79c627200c53a1bed1f251b51772eb635a466f99c3876a997de3b437b654fcf3f6296f21871e6466cafeedcce6045d1cb9396403af6ecfeb2cd8554b6a0bf570a8bf1c66b9338d6eb6f0c9ce91843a2dd9d5eb0018723bb1a98fff7f748ce21d501d3bd0e7ea4ddbaea741b44a3", 0xcc, 0x2, &(0x7f0000000040)={0x18, 0x3, 0x6, 0x2}, 0xc) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1, 0x200000025, &(0x7f0000000000)="b5fff649", 0xfeda) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: chmod(&(0x7f0000000040)='./file0\x00', 0x3b) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000004abc9d0deb521ecd01aa00000000ffff00fd000000"], 0x19}, 0x0) 09:02:05 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000003c0)="2b18be8586e7b6bd06646c0717dc7a27446dd5062438e3958ff31e85426980a960038450fa41cf0af899176b3fb365a899ded1cdfc3aa233ceab36f7d2e9a9c3150043ff836fe94efa162c9c0188067ca163d1152aaafa7f4136c19c26a2d1e9df0f4049381f921f1a505336c3f73b9e712ab933e8e6879e6e6a9178382a385f9abdb3b00db75f9e", 0x88}], 0x1, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) r1 = kqueue() open(&(0x7f0000000040)='./bus\x00', 0x2, 0x10) kevent(r1, &(0x7f0000000240), 0x3f, &(0x7f0000000600), 0x101, 0x0) ioctl$TIOCFLUSH(r0, 0xc0106978, &(0x7f0000000800)) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x6) write(r1, &(0x7f0000335000), 0xfcb7) writev(r1, &(0x7f00000046c0)=[{&(0x7f00000036c0)="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", 0x34a}], 0x1) r2 = open(&(0x7f0000000000)='.\x00', 0x20, 0x102) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000080)=""/184, 0x2c3}, {&(0x7f0000001140)=""/248, 0x761a39b6fbe7afcb}], 0xff) r3 = getpid() fcntl$setown(r1, 0x6, r3) readv(r0, &(0x7f0000119ff0)=[{&(0x7f000061e000)=""/4096, 0xfc74}], 0x3d) fcntl$setstatus(r1, 0x4, 0x8) pipe2(&(0x7f00000012c0), 0x10004) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/4096, 0xffffff99}], 0x1) r4 = open$dir(&(0x7f0000001300)='./file0\x00', 0x80, 0x4) readlinkat(r4, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)=""/37, 0x25) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: r0 = syz_open_pts() unlink(&(0x7f00000000c0)='./file0\x00') ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x90d2, 0x0, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) write(r0, &(0x7f0000000180)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd5e41789632dfc94ff334a5619515a4c8ab06198824b3da025bbd47b3bf579456fc7d4096e8c8b6b87cb2d72b8bcdb9ad8a4f5f728193ef16ab93f12fc4d5f16b136a5d00d1628b53a", 0xfe31) write(r0, &(0x7f00000002c0)="9085", 0x2) r1 = syz_open_pts() close(r0) dup(r1) ioctl$TIOCEXCL(r0, 0x2000740d) r2 = syz_open_pts() poll(&(0x7f0000000000)=[{r2, 0x129}], 0x1, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x9, 0xffffffffffffbffe, "854955882e0261ce4e66378e5dea9c11fe4dbfa6"}) poll(&(0x7f0000000200)=[{r2, 0x4c}], 0x1, 0x0) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "b8000000000000080100"}) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x8, 0x4) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1f, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) link(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='.\x00') setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x7b3, 0x4}, 0x10) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 09:02:05 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x20, 0x80004503) open$dir(&(0x7f0000000040)='./bus\x00', 0x2, 0x80000000000000) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) fcntl$getown(r0, 0x5) semop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(0x0, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x3a0914c44f7b202c, 0x501) r0 = syz_open_pts() setuid(0xee01) r1 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000000)) r2 = open$dir(&(0x7f0000000080)='./bus\x00', 0x8020, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) sendto(r3, &(0x7f0000000180)="5f030782c97932c1c1c4f2bee04513547736f0ade2a227419d0448f4b5a0730369e53c6679ae361eabe83394ffc0b3662d61f95375f6bbc0e5253f331407e409080007f31023b5e51ce8a537409efeeeabaa89cf0c37f3acf5b4069c270c6237baaee18b2293fb52d1e1eb7044f547295db67d4f171b708a2678d87ddf9e746613d80bc915751d36583f1476d6d58194ef063d9eeec38b37c2916de57d62e7d4342d1a8212ef6102c596dc7fe965e5c6e91042c52af7f8506d6144fd33f0cfeefec6b08e526584abcdcee25736bd38007d202131a06afb62951ed3", 0xdb, 0x2, 0x0, 0x0) utimensat(r2, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x5, 0x7}, {0x2, 0x5}}, 0x0) ioctl$TIOCEXCL(r1, 0x2000740d) socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x8008, 0x0) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) fcntl$getown(r0, 0x5) semop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(0x0, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: r0 = socket(0x11, 0x3, 0x0) r1 = dup2(r0, r0) ioctl$KDMKTONE(r1, 0x20004b08, &(0x7f00000000c0)=0x6) sendto$unix(r0, &(0x7f0000000000)="04000503", 0x4, 0x400000, 0x0, 0x0) 09:02:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880)='/dev/zero\x00', 0x400, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSTART(r1, 0x2000746e) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000f80)='./bus\x00', 0x102, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/tty\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000300)=0x7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r4 = openat(r2, &(0x7f0000000400)='./file0\x00', 0x400, 0xa) ioctl$TIOCMBIC(r4, 0x8004746b, &(0x7f0000000440)=0x9) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)="90c3fe67eb586898600425f2f573e0d1ac83c18d65c8e22066c0d389fe894a974c8d45aaf9d2e7ae9fed58938ea6ac68a0b0632688ca0fab3647175abf22fea120c9b3bb77ca60c128295bf234505356095dbf9e50a4a5079723b57fed8ef0a251b91e67e1f5d347d5b668a390a25beea3962e7c10b8d9f53f5c82b5eacc26757d14f2fa6be9a2cbb2cfacc5e906dfd1e3208364bbc454327b6a1522c332ea628b8cb672e9e7247818f970e017c7cb9303e6b505059f34d3fb9df3993b7535fa269859e24b2802782224d7d5c13c21d4", 0xd0}], 0x1, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r3, 0x0, 0x0) ioctl$TIOCFLUSH(r2, 0x8020697a, &(0x7f00000000c0)) pipe2(&(0x7f0000000340), 0x4) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x10) renameat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r6 = msgget$private(0x0, 0x0) linkat(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x4) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x3}, 0x8) pipe2(&(0x7f0000000080), 0x10000) msgsnd(r6, &(0x7f0000000e80)={0x2, "18c082b64d321c3bc2fd28e4f3e8ef297e62b83131ecdf6f9c4cbf37c2d52b0b97d74450d3d5d8096f0bae7a165153f068696590ebff6c87035d07648ba71519969257e6b48717b98fd944f7106a328832ca4076e499139f46412003183332a3d10bdd0023dae52bc4abb9988db58f40d4d47ab86552769369e11d3ab178a979c4826a1063ce4c25611a19bff0eb24b422d508e578f9bafcfbd7181de27443be16cce092198711000a14124faf8da487fe8d37aca08dc3d3b4ea42f4139835e16cf0148922f3e63afce5767b76656bfe9321638207adaf66fd30b1d042"}, 0xe5, 0x800) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) fcntl$getown(r0, 0x5) semop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(0x0, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000240)=@un=@file={0xd80f49edce43012d, './file0\x00'}, 0xa) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) getgroups(0x7, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) setgroups(0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r1) setuid(0xee01) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000001480)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) 09:02:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:05 executing program 0: r0 = dup(0xffffffffffffff9c) mkdirat(r0, &(0x7f0000000940)='./file0/file0\x00', 0x10) readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/128, 0x80}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f0000000b00)=""/37, 0x25}, {&(0x7f0000000b40)=""/80, 0x50}], 0x5) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMBIS(r1, 0x8004746c, &(0x7f00000003c0)=0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) execve(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000500)=[&(0x7f0000000340)=',\'}\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='/dev/zero\x00', &(0x7f00000004c0)='/dev/zero\x00'], &(0x7f0000000600)=[&(0x7f0000000540)='/dev/zero\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\xf1\x00']) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00') ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000000880)={'./file1\x00', 0x8, 0x5, 0x40, 0x1, 0xffffffff00000000, 0x3, 0x4, 0x3, 0x3, 0x5, 0x1}) mknod(&(0x7f0000000c80)='./file1\x00', 0xe030, 0x7) mknod(&(0x7f00000006c0)='./file0/file0\x00', 0x2020, 0xe9ba) mkdir(&(0x7f0000000140)='./file0\x00', 0x10) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') getpeername$unix(r1, &(0x7f0000000f80)=@file={0x0, ""/4096}, &(0x7f0000000680)=0x1002) pipe(&(0x7f0000000d00)) r4 = msgget$private(0x0, 0x0) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f00000000c0)={'./file0/file0\x00', 0x9, 0x5881c5a2, 0x7fe, 0x0, 0x7, 0x80000001, 0x8, 0x2, 0x2, 0x0, 0x4}) open(&(0x7f0000000900)='./file0/file0\x00', 0x2, 0x20) ioctl$VT_WAITACTIVE(r2, 0x20007606, &(0x7f0000000640)=0x7) linkat(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file1\x00', 0x4) msgsnd(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xe5, 0x800) ioctl$WSKBDIO_SETMODE(r3, 0x80045713, &(0x7f0000000c40)=0x1) ioctl$VT_OPENQRY(r1, 0x40047601, &(0x7f0000000700)) getdents(r2, &(0x7f0000000d40)=""/125, 0x7d) 09:02:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:06 executing program 0: unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='x\x00') r0 = socket(0x18, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x16, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) chmod(&(0x7f00000000c0)='./file0\x00', 0x72) 09:02:06 executing program 0: r0 = socket(0x1000000000011, 0x40000000000003, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b100051305000200000000b1ffff12004938050000000000000038f53e8551f30ce390500e08fecea11ea8fef96e4f9679d5c4c2a73764aebdbe781e4d8f6aef9187a869a4d3722c91f75073a1ebe2a4cbba982fd825582fe2aa7923ed00f4c8b2ca3ebbc259699a1f132e27acb5267564c27d026ba8af63ff37282934e4fd89040fd3872babfbb770c1f5a850c881ff7cc51e894303b298a85ff3faa8d9211830e0f2f0c9f69ec7ab3a34c29000000000", 0xb1, 0x0, 0x0, 0x0) socket(0x7, 0x4005, 0x4e) 09:02:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:06 executing program 0: mknod(&(0x7f0000000240)='./file0\x00', 0x100002000, 0x28ae) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = kqueue() kevent(r2, &(0x7f0000000280)=[{{r0}, 0xffffffffffffffff, 0x91}, {{r0}, 0xfffffffffffffffe, 0x1}], 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f0000000000)) dup2(r1, r0) r3 = fcntl$getown(r0, 0x5) fcntl$lock(r2, 0x0, &(0x7f0000000040)={0x2, 0x1, 0x1ff, 0x9, r3}) 09:02:06 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffff0a, 0x0, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="3007c0c093ed11c1062c6b76328f9735873a402ba4ee0c7a947f442d447e8135b97f8b5ff86018a1194f090e87354fcabe756b79cf30f0ac033cca0aa1b40293c3807ad44144aff983a7b111f0a748614999abccdb3189cfb38f83ff90c2452c60af2b51ad", 0x65}], 0x1) write(r0, &(0x7f0000000200), 0xfe72) r1 = syz_open_pts() close(r0) dup(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0x5, 0xffffffffffffffd9, "855c000267a7230004001a000000000000004000"}) ftruncate(r1, 0x69cf84b9) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/45, 0x13}], 0x1) 09:02:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 09:02:06 executing program 0: msgget$private(0x0, 0x2) msgget(0x2, 0x610) r0 = semget$private(0x0, 0x1, 0xd4) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) socketpair(0x22, 0x8000, 0x9, &(0x7f0000000180)) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) r4 = getgid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x9, r1, r2, r3, r4, 0x0, 0xfffffffffffffff9}, 0x7f, 0x2, 0xffffffff}) 09:02:06 executing program 0: r0 = open(&(0x7f0000000600)='./file0/file0\x00', 0x400, 0x40000004) r1 = semget$private(0x0, 0x0, 0x40000006) semop(r1, &(0x7f0000000440)=[{0x4, 0x400, 0x800}], 0x1) ioctl$TIOCSCTTY(r0, 0x20007461) r2 = semget$private(0x0, 0x8, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f00000002c0)=0x2) semget(0x2, 0x3, 0x0) mknodat(r0, &(0x7f0000000380)='./file0/file0\x00', 0xed754effb7ef2411, 0x1) r3 = geteuid() getgroups(0x1, &(0x7f0000000540)=[0xffffffffffffffff]) fchownat(r0, &(0x7f0000000500)='./file0/file0\x00', r3, r4, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000300)={0xf7, 0x1, 0x7072, 0x3, 0x7fff}, 0xc) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000040)=[0x1, 0x0, 0x14, 0x1, 0x70bd, 0x1ff]) semop(r2, &(0x7f0000000280)=[{0x4, 0x4, 0x800}, {0x2, 0x99, 0x1800}, {0x0, 0x100, 0x1800}, {0x3, 0x6, 0x1000}, {0x3, 0xfefffffffffffffe, 0x1000}, {0x2, 0x3, 0x800}, {0x1, 0xe77b, 0x1000}], 0x7) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000080)=0x2, 0x4) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000480)=""/122) semop(r2, &(0x7f00000005c0)=[{0x3, 0x1}, {0x0, 0x9, 0x1800}, {0x7, 0x3e664106, 0x1000}, {0x3}], 0x4) r5 = shmget(0x0, 0x4000, 0x1f, &(0x7f0000ffc000/0x4000)=nil) sendto$inet6(r0, &(0x7f0000000640)="7b36cdf1e04afd779998cb5b2b65c747acf3e0d037fd2f3e92cfe72664a9d09784fbe78caa3cbd3c8dd79537a8d6fa43b8d67de33f21a6794260ed6f97c9ce406d93c2e5f5c7490bf126fecb0ff9415fff022357eba05ec9bddcbf38f8bee7dc7d01c2872c44c4ddc0b0ee94d6bad99f4d20c20a36fa7a", 0x77, 0x5, 0x0, 0x0) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f00000000c0)=0x1) semctl$SETVAL(r2, 0x3, 0x8, &(0x7f0000000100)=0xfff) mknod(&(0x7f0000000580)='./file0\x00', 0x55875684757fc82f, 0x40000000000) clock_settime(0x0, &(0x7f0000000400)={0x2, 0x580f}) shmctl$SHM_UNLOCK(r5, 0x4) nanosleep(&(0x7f0000000000)={0xffffffffffff462d}, 0x0) clock_gettime(0x3, &(0x7f0000000180)) clock_settime(0x0, &(0x7f0000000240)={0x3, 0x5}) rmdir(&(0x7f00000001c0)='.\x00') semop(r2, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {0x3, 0x1ff, 0x1000}, {0x6, 0x8}, {0x3, 0x28, 0x1000}, {0x4, 0x7fffffff00000, 0x1800}, {0x0, 0x438e, 0x1000}, {0x4, 0x8, 0x1000}, {0x1, 0x9, 0x1000}, {0x3, 0x3, 0x800}], 0x9) read(r0, &(0x7f0000000740)=""/207, 0xcf) 09:02:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:03 executing program 0: r0 = kqueue() mknod(&(0x7f0000000180)='./file0\x00', 0x3a0914c44f7b202c, 0x20000008613a) r1 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) kevent(r0, &(0x7f0000000140), 0x7, 0x0, 0x0, 0x0) r2 = dup(r0) setsockopt(r2, 0x0, 0x5, &(0x7f0000000040)="ef96a56ef1390ba60e462c244e812863892383e55c90d81106fbdd1bb1012bf64698da06a906696afcdc1717f0f918e8232ebe570591e4a88b883a4ec466230c725a6a8b83918c8e0dd28746", 0x4c) ioctl$WSDISPLAYIO_SMODE(r2, 0x8004574c, &(0x7f0000000000)=0x2) fcntl$dupfd(r0, 0xa, r1) kevent(r0, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) 16:00:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:03 executing program 0: r0 = socket(0x18, 0x4004, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0xfffffed5) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x40001ffffff, 0x0, "050000000000000900"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xfffffffffffffffc) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 16:00:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) read(0xffffffffffffffff, &(0x7f0000000180)=""/219, 0x54) dup2(0xffffffffffffffff, r0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:03 executing program 0: munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmget(0x2, 0x4000, 0x80, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000002000/0x1000)=nil, 0x3002) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) poll(&(0x7f0000001280)=[{r1, 0x28}, {r1, 0x40}, {r1, 0x111}, {r1, 0x5}, {r1, 0x40}, {r1, 0x3}, {r1, 0x80}, {r1, 0x2}], 0x8, 0xdc8) sendto$inet6(r1, &(0x7f00000011c0)="2533b4211108db2990737a83baeb5e552cd64f421f77d82a552f611a514a9f8cac89457310c4ef04ed4f6060c4d4cb7cbd977a1f3b3d3f4f416d8ceb92cda4c8681b8e3a47b629fe4998a6636a87b60a120599e886101af2937e7d4d2933d3d39c", 0x61, 0x2, &(0x7f0000001240)={0x18, 0x2, 0xde, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f00000004c0)="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", 0xb41) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/4096, 0xc0980d) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000010c0)) recvfrom$unix(r2, &(0x7f0000001140)=""/70, 0x46, 0x2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 16:00:03 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) read(0xffffffffffffffff, &(0x7f0000000180)=""/219, 0x54) dup2(0xffffffffffffffff, r0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:04 executing program 0: r0 = kqueue() r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) kevent(r0, &(0x7f0000000080)=[{{r1}, 0xffffffffffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r1}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff}], 0xdde, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) kevent(r0, &(0x7f0000000100)=[{{r1}, 0xffffffffffffffff, 0x8}], 0x5, 0x0, 0x0, 0x0) kevent(r0, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) 16:00:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) read(0xffffffffffffffff, &(0x7f0000000180)=""/219, 0x54) dup2(0xffffffffffffffff, r0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:04 executing program 0: unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8) r0 = socket$inet6(0x18, 0x4001, 0xfffffffffffffff8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x3010, r0, 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) lseek(r1, 0x0, 0x204) getdents(r1, &(0x7f00000020c0)=""/4096, 0x1000) 16:00:04 executing program 0: setuid(0xee01) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty\x00', 0xa0, 0x0) write(r0, &(0x7f0000000040)="804852b953eadf9482439a9d5821614bb8570f78b2faf457bb58273b2e78d1467cd3877bea4c398fbff2e449a2c4ea85c8740faeed39b53891ecb125673cd05a0672ae0c30a5498f6b0ac83fe96a295f5a785426c2c42759afd7c9f91e5f63cf13d076bdcf30cc246ba20270bc336ea51603d4354ffb58190bc6966216118290f8a368b092a9a0f6e33884ba89cb7d85719eae55f872c510c5f919994212", 0x9e) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x29, 0x32, 0x0, 0x0) 16:00:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) syz_open_pts() r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:04 executing program 0: r0 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={0x20}], 0x20}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000000000)) 16:00:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) syz_open_pts() r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:04 executing program 0: setuid(0xee01) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fchdir(r0) r1 = semget(0x2, 0x1, 0x610) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) semctl$IPC_RMID(r1, 0x0, 0x0) 16:00:04 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x86138) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r1 = getegid() chown(&(0x7f0000000100)='./bus\x00', r0, r1) socket$unix(0x1, 0x3, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0x0, 0x0, 0x1}], 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, 0xc) fcntl$setown(r2, 0x6, r3) write(r2, &(0x7f0000000040)="510fc3a0", 0x4) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0) 16:00:04 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) syz_open_pts() r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:04 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x80002000, 0x801) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/wskbd0\x00', 0x0, 0x0) r1 = getppid() fcntl$lock(r0, 0x8, &(0x7f00000000c0)={0x0, 0x3, 0xff, 0xf932, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000480)=0x7) close(r2) 16:00:05 executing program 0: r0 = kqueue() open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r2, 0x4, 0x80) execve(0x0, 0x0, &(0x7f00000003c0)=[&(0x7f00000002c0)='(\\\x83\x00', &(0x7f0000000300)='\x00']) execve(0x0, 0x0, &(0x7f0000000580)=[&(0x7f00000004c0)=':-/*&\x00']) pwritev(r2, &(0x7f00000003c0), 0x273, 0x0) ioctl$WSDISPLAYIO_GMODE(r2, 0x4004574b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)) close(r0) 16:00:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) fcntl$getflags(0xffffffffffffffff, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) fcntl$getflags(0xffffffffffffffff, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:05 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) fcntl$getflags(0xffffffffffffffff, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: r0 = shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x80, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/208, 0xd0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/56, 0x38}, {&(0x7f00000008c0)=""/38, 0x26}, {&(0x7f0000000900)=""/56, 0x38}, {&(0x7f0000000940)=""/93, 0x5d}], 0x8, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x4b5d3bbdf49d07fd, 0x0, 0x1}, 0x8) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/190, 0xbe) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0}, 0xc) setuid(r3) setuid(0xee01) r4 = semget$private(0x0, 0x3, 0x81) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000340)=0xea) unveil(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='x\x00') shmctl$IPC_RMID(r0, 0x0) r5 = geteuid() bind(r2, &(0x7f0000000300)=@in={0x2, 0x2}, 0xc) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) sendmsg(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=[{0x108, 0xffff, 0x0, "c0678d45fc810d1016e29185c5267243ec51d6ee9ad92d7bb71ff0f38c3a7eff1ee59ef8c020b081c9203f98870cbc877e412ef690a3acc3d57c63c2ce6aaff1520ad3d18a2692aa07eaefcf4a6170a637de321bb46c5da0d2d77f7bd36f4dbb11df627baf806d5acb9e02779db3cf8b35d6772db77e40b1409ca22a7d70fc4c183f41190f15be9aea96d7e64fc8b150878e37492c8046f42feaf7feb3a85112413f157f3f917d76663b573e7ff215d03b50a6496997cf762d1e3bc229e47a227d3fe31814e461efacd118320aa7049fc4171e86020d5de004c0b9a394c5f3102c74c54abf3bb18d5b0fd9beb5b31ba520"}, {0xa0, 0xffff, 0x80, "64610b006c670ef3bac82fb873708dbbdfa2b3848ee7f5d34b072f75466098969d30131c1dfb5a3cdb9e38ea8d960a900eb34e193eb70386b61297dba2cf912b746c1928e225d9c827664ca1fae8346c1805e9c5cfe497833f2bed19351d488fb5b1588d64018f62656a3c7797d683815b0df2264f39f073134cb05fee93540956760d6ff574f9c4d43b50d46624fe"}], 0x1a8}, 0x400) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x4, r5, r6, 0x0, 0x0, 0x50}, 0x1, 0x7fffffff, 0x0, 0x0, 0x6, 0x7fffffff, 0x800}) 16:00:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) getuid() r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='c\x00') symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2011, r1, 0x0, 0x0) readlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x40) 16:00:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) getuid() r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x20110, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCFLUSH(r0, 0x8004667c, &(0x7f00000000c0)=0x9860) 16:00:06 executing program 0: mknod(&(0x7f0000000280)='./bus\x00', 0x2000, 0x86128) r0 = open(&(0x7f0000000140)='./bus\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000001c0), 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./bus\x00', r0, &(0x7f00000001c0)='./bus\x00') writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="01", 0x1}], 0x1) writev(r0, &(0x7f0000000880)=[{&(0x7f00000004c0)="2dd8c4bbce1c66c89ff6268d71d7cda102c3f1f19a77d37aa215ecbd20fabf85e506d08ff1cbcb16620e75b05dd43c74b05dd96c770bcc65a494560e7e9ffb43bad2a1022e7bfedabdde1d8a2d6b241001817af2911e1059a1f4dd6cf0f876a01091d5b73c658517a587a9b7b497358eadcbeea9e8a65b0eb7106cb09005228953aa39c36c343b19b0d6b54e12b26c4097355c5fd1b3a6a294e655d6cc16fb46aa9d83c7f77ed45ed808aecdac273faa0358b093d3f54bdd031a9aa37eddd5c0ad61afd52394dbcda73d6971", 0xcc}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000100)}, {&(0x7f00000005c0)="3a40c0a0e91bd91d2c82bdcc7a07a2e963dacb321e0f056fa638d7846fb6648de5ed0fb4435ce677b1cc80b3de567114fe75006c82ed2352d1312ca7bdeeb795ee1b44e50a25d2e27046e98893ce2aca1a428a5f29806ce574b85c0af40dd5a63f127a18212f372fc0ea17c6545bbca5234bda20", 0x74}, {&(0x7f0000000640)="cf8eba69e237ad633b362fee997ca11cff126fe1f812b0ca29b09f686c5deb3eb214e4dd0ec35b3010f143667ffd0694b5c808b44ddd9c322e45fd7757ecccb0d19e1cc8096539e20451df5aea1c0cf4a251a55d7b0583550882fa462582f4d1849d5e94dd3fff684d3617494abab7b8a8952c44ad6615bbbe1e8c61a2329aab300a6f433e18b20067e1eb0b0272600d673bf47609eeecaec6d49d536c076981ced40f425b241df04d85532ec53ca61da9f555", 0xb3}, {&(0x7f0000000700)="59282cc3e7b36604cb047bd749f450253f0db2ef2a303d308ff70479c993c1721a2aed28b788b373ee9ef072b9f3c3ef65a6738cbe6018f16b3f57cdd5e48558240e67b50b80610e3e39f1b5fe03c5b871a6de3bd47a7d085cd68bbecc984d251355c2f146af43541dd0e758ad5e955c14b273cc7862a33cff239c2054b9a983da8a6e45e4ddf463c9c531506f3477ffe277d75a163987b7b7ed18e3ab18a7f937f32fef9bfe3613b341", 0xaa}, {&(0x7f00000007c0)="7699ff3cfd1c1e2b72098784dfd41720eff597a3f9906ae09a01d4bbe0d8f30614a8daa4d53204bc8e5cf7aa077672596e9731e20d0fcfd3b8d1e371d7ee67010b42942a914bee2d1cd8f16721a7dfc6e3069b5bdf6d7c0501cea7b5e169d8b448a90297e86f3ff8074b577af602371db5683074ef2b769d9ee11bbc397753f6690a66b48e652de95872cf4c0cca7330856dca914e0a4e58f1", 0x99}], 0x7) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="08dd", 0x2}], 0x1) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000100)}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x5, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000e80)="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", 0x498}], 0x1, 0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) 16:00:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) getuid() r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x1, &(0x7f0000000140)=[0x0]) setregid(r0, r1) setuid(0xee01) open$dir(&(0x7f0000000080)='./file0\x00', 0x400000002c2, 0xfffffffffffffffc) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getgroups(0x2, &(0x7f0000000200)=[r0, r1]) 16:00:06 executing program 0: setreuid(0x0, 0xee00) r0 = socket(0x18, 0x2, 0x0) pipe(&(0x7f0000000000)) getpeername$unix(r0, &(0x7f0000000040)=@file={0x0, ""/80}, &(0x7f00000000c0)=0x52) setsockopt(r0, 0x29, 0x200000036, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) 16:00:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) setuid(0x0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x2003, 0x1700) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x8000000000000, r0) ioctl$TIOCCONS(r1, 0x40044274, &(0x7f0000000000)) 16:00:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) setuid(0x0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) setuid(0x0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x2bc43fd1595dcdb2) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x5, 0xffff}, {0x3, 0x80000001}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff125c00000000", 0x8) getsockname$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) setsockopt$inet_opts(r0, 0x0, 0x2002000000009, 0x0, 0x0) 16:00:06 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x2080002002, 0x40004000000028aa) r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="000000186004000000002c000000000000a73c85d75259d653000000000000000000000001000000000af6cee7a484edd0ff7ae6", 0x34}], 0x2c6) open(&(0x7f0000000000)='./bus\x00', 0xa20, 0x48) 16:00:06 executing program 1: r0 = syz_open_pts() r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: socketpair(0x2, 0x8003, 0x0, 0x0) r0 = kqueue() open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/247, 0xf7}], 0x1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r2, 0x4, 0x80) pwritev(r2, &(0x7f00000003c0), 0x273, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0, 0x0) close(r2) 16:00:06 executing program 1: r0 = syz_open_pts() r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 1: r0 = syz_open_pts() r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:06 executing program 0: mknod(&(0x7f0000000180)='./bus\x00', 0x12000, 0xf1d) open(&(0x7f0000000000)='\x00', 0x18080, 0x127) open(&(0x7f0000000100)='./bus\x00', 0x82, 0x0) 16:00:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f0000000040)={0x2d158689, './file0\x00', './file0\x00'}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), 0x4) 16:00:06 executing program 1: nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r0 = getuid() setuid(r0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(0xffffffffffffffff, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:07 executing program 1: nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r0 = getuid() setuid(r0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(0xffffffffffffffff, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:07 executing program 0: ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000000)={&(0x7f0000000080)=[{0x25}], 0x1}) 16:00:07 executing program 0: clock_getres(0x0, &(0x7f00000000c0)) 16:00:07 executing program 1: nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r0 = getuid() setuid(r0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(0xffffffffffffffff, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:07 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1ffb, 0x0) r0 = open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x7fc, 0x4) select(0x40, &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 16:00:07 executing program 1: r0 = syz_open_pts() nanosleep(0x0, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:07 executing program 1: r0 = syz_open_pts() nanosleep(0x0, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:07 executing program 1: r0 = syz_open_pts() nanosleep(0x0, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvfrom$unix(r1, &(0x7f0000000040), 0x0, 0x5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0xfffffffffffffdca) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x0, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x0, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 0: mknod(&(0x7f0000000140)='./bus\x00', 0x80002005, 0x5300) mknod(&(0x7f0000000000)='./file0\x00', 0x2000000006001, 0x401) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000000c0), 0x1000000000000207, 0x0) r1 = kqueue() r2 = kqueue() r3 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) getpeername$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8) kevent(r2, &(0x7f0000000000)=[{{r3}, 0xffffffffffffffff, 0x21}], 0x227082db, 0x0, 0x0, 0x0) kevent(r1, &(0x7f0000000040)=[{{r3}, 0xffffffffffffffff, 0x11}], 0x800007, 0x0, 0x80000000000, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) kevent(r2, &(0x7f00000001c0)=[{{r4}, 0xffffffffffffffff, 0x1}], 0xa4dd, 0x0, 0x0, 0x0) kevent(r1, &(0x7f0000000340)=[{{r4}, 0xffffffffffffffff, 0x7}], 0x470c7792, 0x0, 0x0, 0x0) dup2(r1, r3) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x0, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x80002000, 0x801) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f0000000180)={'./bus\x00', 0x8001, 0x0, 0x411, 0x1, 0x4, 0x4, 0x5, 0x0, 0x0, 0x6, 0x8}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000000200)={'./file0\x00', 0xe0, 0xb7f, 0x74e7ad81, 0x0, 0x0, 0x3, 0x16da, 0x2, 0x0, 0x1, 0x1f54bf6c}) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, "f0dc3e9e21ba43818487dc8157aa6567444326e9"}) poll(&(0x7f00000000c0)=[{r0, 0x20}, {r1, 0x4}, {r0}], 0x3, 0x6) writev(r2, &(0x7f0000002540)=[{&(0x7f0000001540)="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", 0x1cc}], 0x1) close(r2) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x61c5, 0x401) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1b00) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) linkat(r0, &(0x7f0000000000)='./bus\x00', r0, &(0x7f0000000080)='./file0\x00', 0x4) ioctl$WSMUXIO_LIST_DEVICES(r0, 0x80085301, &(0x7f0000000140)={0x0, [{0x9}]}) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x10000221, 0x0) r4 = open(&(0x7f00000003c0)='./file1/file0\x00', 0x611, 0x100) fcntl$setstatus(r4, 0x4, 0x80) pwritev(r4, &(0x7f00000003c0), 0x273, 0x0) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000000140)={'./file0\x00', 0x5f, 0xfffffffffffeffff, 0x1, 0x1, 0xfffffffffffffffe, 0x2, 0x10000, 0x4, 0x0, 0x1e1, 0x4}) connect$inet6(r1, &(0x7f00000002c0)={0x18, 0x1, 0x1b41, 0x80000001}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r3, 0x0, 0x0) write(r1, &(0x7f0000000000)="b5", 0x1) chdir(&(0x7f0000000340)='./file1/file0\x00') write(r1, &(0x7f0000000000), 0xff85) kevent(r4, &(0x7f0000000080)=[{{r4}, 0xffffffffffffffff, 0x0, 0x40, 0x100000000, 0x7}, {{r1}, 0xffffffffffffffff, 0x10, 0xa5, 0x3, 0x8}], 0x200, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffff8, 0x4, 0x1, 0xffff, 0x7ff}, {{r3}, 0xffffffffffffffff, 0x40, 0x9, 0x0, 0x101}, {{r0}, 0xffffffffffffffff, 0x20, 0x0, 0x7a74a0f7, 0x5}, {{r2}, 0xffffffffffffffff, 0x20, 0x0, 0x5, 0x3}, {{r1}, 0xffffffffffffffff, 0x88, 0x1, 0x3, 0x5}, {{r0}, 0xffffffffffffffff, 0x0, 0x80, 0x200, 0x1}, {{r2}, 0xfffffffffffffffe, 0x8, 0x4, 0x3, 0x6}], 0x9, &(0x7f00000000c0)={0x1, 0x5}) fcntl$getown(r0, 0x5) write(r1, &(0x7f00000001c0), 0xfec4) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) getuid() setuid(0x0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:08 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) getuid() setuid(0x0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:09 executing program 0: r0 = getgid() setegid(r0) mknod(&(0x7f0000000300)='./bus\x00', 0x80002005, 0x0) open$dir(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) 16:00:09 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) getuid() setuid(0x0) r1 = syz_open_pts() fcntl$getflags(r1, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:09 executing program 0: r0 = socket(0x18, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f00000000c0)={0x2, 0x8001}) setsockopt(r0, 0x1000000000029, 0x200000026, &(0x7f00000001c0)="4b74954c", 0x4) r2 = fcntl$dupfd(r0, 0xa, r0) ioctl$WSDISPLAYIO_DELSCREEN(r2, 0x80085754, &(0x7f0000000000)={0x7, 0x2}) bind(r2, &(0x7f0000000040)=@in={0x2, 0x2}, 0xc) 16:00:09 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) syz_open_pts() fcntl$getflags(0xffffffffffffffff, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:09 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) mknod(&(0x7f00000000c0)='./bus\x00', 0x3a0914c44f7b202c, 0x1000000001b00) r0 = open(&(0x7f0000000000)='./bus\x00', 0x400000003fd, 0x0) pwritev(r0, &(0x7f0000001600)=[{&(0x7f0000000040)="031a8b093c70cb75b59bcfac7224409a13f972dc3760c89b0866f26e", 0x1c}], 0x1, 0x0) execve(0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80) 16:00:09 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) syz_open_pts() fcntl$getflags(0xffffffffffffffff, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:09 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) syz_open_pts() fcntl$getflags(0xffffffffffffffff, 0x3) r2 = socket(0x18, 0x4000, 0x1) read(r2, &(0x7f0000000180)=""/219, 0x54) dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r3 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000000940)=0x5) r4 = kqueue() r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000080)=[{{r5}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r5}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:09 executing program 0: r0 = shmget$private(0x0, 0x600000, 0x2, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = semget$private(0x0, 0x4, 0x200) semctl$SETALL(r1, 0x0, 0x9, &(0x7f00000000c0)=[0x3f, 0x1, 0xfffffffffffffff9, 0x9, 0xf2, 0x7, 0x8000, 0x8, 0x5]) shmat(r0, &(0x7f0000e80000/0x2000)=nil, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') msgget$private(0x0, 0x200) r2 = msgget(0x1, 0x104) msgsnd(r2, &(0x7f00000001c0)={0x3, "9d13e97ead9f46926c40a6b814ba458225c45c0c00011e0900dc3c4e92b466df73766fc0c6fd9c5fe682bf20760bcd31536bc8172dae56b1dd398175ebd36521974df70a6913b7459844507b6246e07696c1f08bd6a723423970cf67e2b215ab5f04efe77f7657bb6b667c26b1579ce7a93bb8aee0a207dec1c5631061cf6b8052ed9c"}, 0x8b, 0x10000800) shmget$private(0x0, 0x1000, 0x600, &(0x7f0000f8e000/0x1000)=nil) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x30, 0x0) mmap(&(0x7f0000d61000/0x3000)=nil, 0x3000, 0x2, 0x2811, r3, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x422, &(0x7f0000f74000/0x3000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mkdirat(r3, &(0x7f0000000100)='./file0/file0\x00', 0xc0) socket(0x1, 0x3, 0x1) r4 = msgget$private(0x0, 0x44) msgsnd(r4, &(0x7f0000000280)={0x0, "e9025c822697c683655e2906a7731aab59f3d5069b88b6a8085bbbda607dc8b42bb5677be1eae8ddcbee72d90df2a988b4561350a71ef536f86c894d4eb13346d99c7dfe3d6d9f26e35e3f5c64eb5db6456fcf2ac499634252e99b5606266fa8a6f2f92f9dfc9777ffdf962bcd23a0c499b389c1186e6576e0190ea80db80c38de141dc2b76e548efb978ac907e80af14b0ff57f3ca17f2bfccf7e192e623cbdcd36becb45a8cf9b1c0997d632883fb373c58dab3155947044efdb46a47dd261c2676290a0d485"}, 0xcf, 0x800) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 16:00:10 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x0) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:10 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x2dbbb2ff, 0x0, "000000000000000100000000550000000300"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setitimer(0x0, &(0x7f0000000000)={{}, {0x1}}, 0x0) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty\x00', 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/135, 0x87}, {&(0x7f0000000080)=""/25, 0x19}], 0x2) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x400000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 16:00:10 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x0) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:10 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect(r0, &(0x7f00000000c0)=@in={0x2, 0x0}, 0xc) r3 = getpgid(0x0) fcntl$setown(r0, 0x6, r3) ioctl$WSDISPLAYIO_SETSCREEN(r0, 0x80045756, &(0x7f0000000100)=0x859e) r4 = syz_open_pts() ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f0000000140)={0x3, './file0\x00', './file0\x00'}) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000180)={'./file0\x00', 0xfff, 0x3f, 0x8001, 0x1, 0x8, 0x8000, 0x1, 0x0, 0x1, 0x3ff}) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000200)={0x5, 0x5, 0x401, 0x7, "3cfa97b78bdf9a1a2963494eaeb5acfa60a7ee09", 0x4, 0x9}) ioctl$KDGETLED(r0, 0x40044b41, &(0x7f0000000240)=0x1) ioctl$TIOCNOTTY(r1, 0x20007471) ioctl$TIOCNOTTY(r2, 0x20007471) ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f0000000280)) chmod(&(0x7f00000002c0)='./file0\x00', 0x4) ioctl$TIOCSDTR(r2, 0x20007479) bind$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x1}, 0x8) ioctl$TIOCSTSTAMP(r4, 0x8008745a, &(0x7f0000000340)={0x9, 0x8}) getsockname$unix(r0, &(0x7f0000000380)=@file={0x0, ""/108}, &(0x7f0000000400)=0x6e) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x20000, 0x0) ioctl$TIOCSCTTY(r4, 0x20007461) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000000480)) mknod(&(0x7f0000000500)='./file0\x00', 0x8, 0x7) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) kqueue() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000600)={0x400, 0x2, 0x2, 0x3, "db327b352cf4c7d9b69b26984d0ccac27430de9d", 0x9, 0x80000000}) ioctl$TIOCNOTTY(r5, 0x20007471) fchdir(r2) ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000000640)={0x4, 0x4}) 16:00:10 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x0) r3 = socket(0x18, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:10 executing program 0: r0 = socket(0x400000000018, 0x3, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) setegid(r1) r2 = dup(r0) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000040)) setsockopt(r0, 0xd14f, 0x16, 0x0, 0xa7) 16:00:10 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x80000}) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc) r1 = fcntl$dupfd(r0, 0xa, r0) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyCcfg\x00', 0xb80, 0x0) ioctl$WSKBDIO_SETMODE(r1, 0x80045713, &(0x7f0000000080)=0x1) lseek(r0, 0xfffffffffffffffb, 0x8002004000003) 16:00:10 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x0, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:10 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x0, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:10 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x0, 0x4000, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:11 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, "8d0e36ddc3a2cd7ca9d466137343fd4c446c5cbe"}) ioctl$TIOCSTOP(r0, 0x2000746f) writev(r0, &(0x7f0000002380)=[{&(0x7f0000001380)="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", 0x201}], 0x1) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)) 16:00:11 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x0, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) 16:00:11 executing program 0: r0 = socket(0x1000000000011, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b100050105001e00000000b1ffff027c0a00000000000020741038f53e8551f30ce390500e08fecea11ea8fef96e4f9679d5bdc2a73764aebdbe781e4d8f6aef9187a869a4d3722c91f75073a1ebe2a4cbba982fd825582fe2aa7923ed00f4c8b2ca3ebbc259699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89040fd3872ba5fbb770c1f5a872c881ff7cc53c894303b298a85ff3faa8d9211830e0f2f0c9f69ec7ab3a34c29000000000", 0xb1, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000300)=[{&(0x7f0000000100)="5caab24b7179eb96562ea5c0f0a0d468ed00c37d1f89490e646e71127c74b5829759549a1cb7c7492406b31818f9545fa61a3103af987d8b11cca7b08d0cfd2de3d8b0f1e9bfe2c2566e7c508765d3fbeebd9b6623d2c3ca28d9f74f86689a5ed41beadb2da4c93832e80bbeead1fe3b2b088ab6f0278b9f7fb9d23f4846ce9440010041b2b9bbdf4a79968795936ecbec041a15573eb0fa0ef9fedaff192f580d02fd18cc50c9187a3d61b3cdd59c1587aeaf30795291aac455ddc39f770ddfbd6c42729cdf5a2248c203cc5d2fc1925f0c6e0eb14d7101f6adea4cb2d9e6dd934b", 0xe2}, {&(0x7f0000000200)="5c24d357a97356d694117aa9f06ca51bbfd4a5cf03f0ba0e5992532f751c3198d35f5d4227d2535e19651b2f697575c0a2588917cff3dafa3134ada61bc03648e96cb7463d", 0x45}, {&(0x7f0000000280)="4db7804357e665354354a6782eb6eacb95c76fcc7196d5e5f45309e63caff484169083c980024d9b82c2e4f86082e675b8cb88654c6d341700f91ed5878d84f522a0e46b883dba2cc2a00a9b754f256bb7ba8f72d527bdbb72b592ee91b5c73f28da2edace2c5aa03c4383909bb3f4", 0x6f}], 0x3, &(0x7f0000000340)=[@rights={0x28, 0xffff, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x28, 0x2}, 0x4) r1 = dup2(r0, r0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000400)={0x0, 0x1}) ioctl$WSDISPLAYIO_GETSCREEN(r1, 0xc0245755, &(0x7f00000003c0)={0x9, './file0\x00', './file0\x00'}) 16:00:11 executing program 1: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = getuid() setuid(r1) r2 = syz_open_pts() fcntl$getflags(r2, 0x3) r3 = socket(0x18, 0x0, 0x1) read(r3, &(0x7f0000000180)=""/219, 0x54) dup2(r3, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x0, 0x9, 0x1}, {0x18, 0x0, 0x200, 0x80000001}, 0x3ff, [0x200, 0x100000001, 0x6, 0x3, 0x1, 0x69, 0x1, 0x2]}, 0x3c) r4 = semget$private(0x0, 0x6, 0x8c) fcntl$getown(r0, 0x5) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x5, 0x5, 0x1800}, {0x3, 0x9, 0x1000}, {0x0, 0xffffffffffffffff, 0x1000}], 0x5) nanosleep(&(0x7f0000000980)={0x1, 0xa}, &(0x7f00000008c0)) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f0000000940)=0x5) r5 = kqueue() r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(r5, &(0x7f0000000080)=[{{r6}, 0xfffffffeffffffff, 0x11}], 0x400000009130dbf, &(0x7f00000000c0)=[{{r6}, 0xff7ffffffffffffc, 0xc19d3ee7c7461ca7, 0xffffffdfffffffff, 0x7}], 0xddc, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20100, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000400)='+\'+\x00', &(0x7f0000000440)='r\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='r\x00', &(0x7f0000000580)='r\x00', &(0x7f00000005c0)='\',\x00', &(0x7f0000000600)='r\x00', &(0x7f0000000640)=',%:}[\x00'], &(0x7f0000000780)=[&(0x7f0000000700)=':{\x00']) uvm_fault(0xffffffff82259780, 0xffff80000298f000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at memcpy+0x15: repe movsq (%rsi),%es:(%rdi) ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic kernel page fault uvm_fault(0xffffffff82259780, 0xffff80000298f000, 0, 1) -> e memcpy(fffffd807535e0e8,ffff80000298ef0d,0,fffffd807535e0e8,d20e4f1573252bf6,ffff800020bfce78) at memcpy+0x15 end trace frame: 0xffff800020bfcd80, count: 0 ddb{1}> trace memcpy(fffffd807535e0e8,ffff80000298ef0d,0,fffffd807535e0e8,d20e4f1573252bf6,ffff800020bfce78) at memcpy+0x15 rtrequest(1,ffff800020bfce78,38,ffff800020bfcdc0,0) at rtrequest+0x83c rtm_output(ffff80000298ef00,ffff800020bfce70,ffff800020bfce78,38,0) at rtm_output+0x760 route_output(fffffd806d433400,fffffd806f736300,0,0) at route_output+0x79b route_usrreq(fffffd806f736300,9,fffffd806d433400,0,0,ffff800020b384c8) at route_usrreq+0x35d sosend(fffffd806f736300,0,ffff800020bfd138,0,0,0) at sosend+0x6eb sendit(ffff800020b384c8,3,ffff800020bfd1f8,0,ffff800020bfd2c0) at sendit+0x590 sys_sendto(ffff800020b384c8,ffff800020bfd2d8,ffff800020bfd2c0) at sys_sendto+0x92 syscall(ffff800020bfd370) at syscall+0x5b8 Xsyscall(6,0,ffffffffffffffd8,0,6,5afb27ad010) at Xsyscall+0x128 end of kernel end trace frame: 0x5b257a3d080, count: -10 ddb{1}> show registers rdi 0xffff80000298edf0 rsi 0xffff80000298effd rbp 0xffff800020bfcc70 rbx 0xffff80000298ef0d rdx 0x100 rcx 0x2 rax 0xfffffffffffffdf3 r8 0 r9 0x5 r10 0x2b2242c4113acab1 r11 0xffff80000298ed00 r12 0xffff80000298ed00 r13 0x100 r14 0 r15 0xfffffd807535e0e8 rip 0xffffffff810902a5 memcpy+0x15 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff800020bfcc08 ss 0x10 memcpy+0x15: repe movsq (%rsi),%es:(%rdi) ddb{1}> show proc PROC (syz-executor.0) pid=255122 stat=onproc flags process=0 proc=4000000 pri=73, usrpri=73, nice=20 forw=0xffffffffffffffff, list=0xffff800020b38018,0xffffffff8235c268 process=0xffff800020b8d3c8 user=0xffff800020bf8000, vmspace=0xfffffd807effe9d8 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 28338 321582 66438 0 7 0 syz-executor.0 *28338 255122 66438 0 7 0x4000000 syz-executor.0 66438 346080 19212 0 3 0x82 nanosleep syz-executor.0 72286 276375 19212 0 3 0x2 biowait syz-executor.1 19212 297027 58990 0 3 0x82 thrsleep syz-fuzzer 19212 181494 58990 0 3 0x4000082 thrsleep syz-fuzzer 19212 202116 58990 0 3 0x4000082 thrsleep syz-fuzzer 19212 217769 58990 0 3 0x4000082 thrsleep syz-fuzzer 19212 251339 58990 0 3 0x4000082 thrsleep syz-fuzzer 19212 245172 58990 0 3 0x4000082 thrsleep syz-fuzzer 19212 238096 58990 0 3 0x4000082 thrsleep syz-fuzzer 19212 459067 58990 0 3 0x4000082 kqread syz-fuzzer 19212 475030 58990 0 3 0x4000082 thrsleep syz-fuzzer 19212 64491 58990 0 3 0x4000082 thrsleep syz-fuzzer 58990 429144 78514 0 3 0x10008a pause ksh 78514 286894 62413 0 3 0x92 select sshd 6109 143793 1 0 3 0x100083 ttyin getty 62413 124737 1 0 3 0x80 select sshd 20221 402139 69475 74 3 0x100092 bpf pflogd 69475 329 1 0 3 0x80 netio pflogd 14469 402553 72147 73 2 0x100090 syslogd 72147 472992 1 0 3 0x100082 netio syslogd 51020 194695 1 77 3 0x100090 poll dhclient 99830 475222 1 0 3 0x80 poll dhclient 1311 309987 0 0 3 0x14200 pgzero zerothread 54078 122871 0 0 3 0x14200 aiodoned aiodoned 79126 451328 0 0 3 0x14200 syncer update 8955 199413 0 0 3 0x14200 cleaner cleaner 55110 57452 0 0 3 0x14200 reaper reaper 83657 249227 0 0 3 0x14200 pgdaemon pagedaemon 6688 65237 0 0 3 0x14200 bored crynlk 62169 76109 0 0 3 0x14200 bored crypto 42888 222493 0 0 3 0x40014200 acpi0 acpi0 86067 204717 0 0 3 0x40014200 idle1 10938 129780 0 0 3 0x14200 bored softnet 94926 146599 0 0 3 0x14200 bored systqmp 45741 221194 0 0 3 0x14200 bored systq 81714 194775 0 0 3 0x40014200 bored softclock 55969 332355 0 0 3 0x40014200 idle0 91930 463908 0 0 3 0x14200 bored smr 1 45087 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 28338 (syz-executor.0) thread 0xffff800020b384c8 (255122) exclusive rwlock netlock r = 0 (0xffffffff821c45d8) locked @ /syzkaller/managers/multicore/kernel/sys/net/rtsock.c:883 #0 witness_lock+0x594 #1 rtm_output+0x6b0 #2 route_output+0x79b #3 route_usrreq+0x35d #4 sosend+0x6eb #5 sendit+0x590 #6 sys_sendto+0x92 #7 syscall+0x5b8 #8 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 1 (0xffffffff823681d0) locked @ /syzkaller/managers/multicore/kernel/sys/arch/amd64/amd64/trap.c:161 #0 witness_lock+0x594 #1 solock+0x7e #2 sosend+0x586 #3 sendit+0x590 #4 sys_sendto+0x92 #5 syscall+0x5b8 #6 Xsyscall+0x128 Process 72286 (syz-executor.1) thread 0xffff800020b39c38 (276375) exclusive rrwlock inode r = 0 (0xfffffd80689104e0) locked @ /syzkaller/managers/multicore/kernel/sys/ufs/ufs/ufs_ihash.c:140 #0 witness_lock+0x594 #1 _rw_enter+0x45d #2 _rrw_enter+0x60 #3 ufs_ihashins+0x6d #4 ffs_vget+0x143 #5 ffs_inode_alloc+0x1cf #6 ufs_mkdir+0x10f #7 VOP_MKDIR+0x76 #8 domkdirat+0x12d #9 syscall+0x5b8 #10 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd80689101b0) locked @ /syzkaller/managers/multicore/kernel/sys/ufs/ufs/ufs_vnops.c:1547 #0 witness_lock+0x594 #1 _rw_enter+0x45d #2 _rrw_enter+0x60 #3 VOP_LOCK+0x57 #4 vn_lock+0x6e #5 vfs_lookup+0xf5 #6 namei+0x4b2 #7 domkdirat+0x81 #8 syscall+0x5b8 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9482 6394K 6403K 78643K 10607 0 0 pcb 26 9K 10K 78643K 108 0 0 rtable 103 4K 4K 78643K 239 0 0 ifaddr 46 11K 12K 78643K 66 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 1470 0 0 iov 0 0K 12K 78643K 28 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1199 75K 76K 78643K 1303 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 5 0 0 VM map 2 1K 1K 78643K 2 0 0 sem 12 1K 1K 78643K 12 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1808 196K 290K 78643K 12628 0 0 file desc 5 13K 21K 78643K 230 0 0 sigio 0 0K 0K 78643K 11 0 0 proc 53 50K 71K 78643K 365 0 0 subproc 64 65538K 67586K 78643K 102 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 14 0 0 in_multi 33 2K 2K 78643K 45 0 0 ether_multi 1 0K 0K 78643K 1 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 42 185K 185K 78643K 42 0 0 exec 0 0K 1K 78643K 296 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 86 20K 24K 78643K 1573 0 0 UVM aobj 12 4K 4K 78643K 15 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 7 0 0 NDP 8 0K 0K 78643K 18 0 0 temp 117 2372K 2443K 78643K 3817 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 5 0 1 1 0 1 1 0 8 0 inpcbpl 280 105 0 98 1 0 1 1 0 8 0 plimitpl 152 16 0 8 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtentry 112 51 0 10 2 0 2 2 0 8 0 syncache 264 4 0 4 2 2 0 1 0 8 0 tcpcb 544 40 0 36 1 0 1 1 0 8 0 nd6 48 6 0 2 1 0 1 1 0 8 0 ppxss 1128 3 0 3 1 0 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 13 0 3 1 0 1 1 0 8 0 pfstkey 112 13 0 3 1 0 1 1 0 8 0 pfstate 328 13 0 3 1 0 1 1 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 227 0 41 12 0 12 12 0 8 0 art_table 32 228 0 41 2 0 2 2 0 8 0 art_node 16 49 0 15 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 1 1 0 1 1 0 8 0 semapl 112 10 0 0 1 0 1 1 0 8 0 shmpl 112 13 0 3 2 1 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1769 0 354 46 0 46 46 0 8 0 ffsino 272 1769 0 354 95 0 95 95 0 8 0 nchpl 144 2446 0 814 61 0 61 61 0 8 0 uvmvnodes 72 1838 0 0 34 0 34 34 0 8 0 vnodes 200 1838 0 0 97 0 97 97 0 8 0 namei 1024 6826 0 6825 2 1 1 1 0 8 0 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 5912 0 5911 10 9 1 6 0 8 0 sigapl 432 426 0 411 2 0 2 2 0 8 0 futexpl 56 2802 0 2802 1 0 1 1 0 8 1 knotepl 112 250 0 231 1 0 1 1 0 8 0 kqueuepl 104 119 0 117 1 0 1 1 0 8 0 pipepl 112 222 0 203 2 1 1 1 0 8 0 fdescpl 488 427 0 411 3 0 3 3 0 8 0 filepl 152 2680 0 2580 5 0 5 5 0 8 1 lockfpl 104 38 0 38 2 1 1 1 0 8 1 lockfspl 32 16 0 16 2 1 1 1 0 8 1 sessionpl 112 19 0 8 1 0 1 1 0 8 0 pgrppl 48 21 0 10 1 0 1 1 0 8 0 ucredpl 96 722 0 713 1 0 1 1 0 8 0 zombiepl 144 411 0 411 2 1 1 1 0 8 1 processpl 840 442 0 411 4 0 4 4 0 8 0 procpl 600 895 0 854 4 0 4 4 0 8 0 srpgc 64 6 0 6 1 1 0 1 0 8 0 sockpl 384 188 0 168 3 0 3 3 0 8 1 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 137 0 0 16 1 15 16 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 158 0 0 8 0 8 8 0 8 0 bufpl 256 6125 0 1143 312 0 312 312 0 8 0 anonpl 16 50427 0 41831 40 4 36 38 0 125 1 amapchunkpl 152 2047 0 1959 9 2 7 9 0 158 3 amappl16 192 1414 0 965 23 0 23 23 0 8 0 amappl15 184 158 0 154 1 0 1 1 0 8 0 amappl14 176 118 0 114 2 1 1 1 0 8 0 amappl13 168 26 0 23 1 0 1 1 0 8 0 amappl12 160 108 0 105 2 1 1 1 0 8 0 amappl11 152 24 0 8 1 0 1 1 0 8 0 amappl10 144 80 0 77 1 0 1 1 0 8 0 amappl9 136 588 0 585 1 0 1 1 0 8 0 amappl8 128 136 0 121 1 0 1 1 0 8 0 amappl7 120 35 0 29 1 0 1 1 0 8 0 amappl6 112 60 0 52 1 0 1 1 0 8 0 amappl5 104 109 0 95 1 0 1 1 0 8 0 amappl4 96 563 0 535 2 1 1 2 0 8 0 amappl3 88 307 0 298 1 0 1 1 0 8 0 amappl2 80 2658 0 2601 2 0 2 2 0 8 0 amappl1 72 18827 0 18383 25 15 10 20 0 8 0 amappl 72 1138 0 1103 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 14 0 3 1 0 1 1 0 8 0 uaddrrnd 24 427 0 411 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 427 0 411 1 0 1 1 0 8 0 vmmpekpl 168 7375 0 7353 2 0 2 2 0 8 0 vmmpepl 168 52609 0 51154 90 20 70 77 0 357 5 vmsppl 360 426 0 411 2 0 2 2 0 8 0 pdppl 4096 862 0 822 6 0 6 6 0 8 0 pvpl 32 174516 0 162680 114 9 105 107 0 265 7 pmappl 224 426 0 411 2 1 1 2 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 464 0 5 14 0 14 14 0 8 0