Warning: Permanently added '10.128.0.170' (ECDSA) to the list of known hosts. 2019/12/02 12:08:00 fuzzer started 2019/12/02 12:08:05 dialing manager at 10.128.15.235:19709 2019/12/02 12:08:05 syscalls: 337 2019/12/02 12:08:05 code coverage: enabled 2019/12/02 12:08:05 comparison tracing: enabled 2019/12/02 12:08:05 extra coverage: support is not implemented in syzkaller 2019/12/02 12:08:05 setuid sandbox: enabled 2019/12/02 12:08:05 namespace sandbox: support is not implemented in syzkaller 2019/12/02 12:08:05 Android sandbox: support is not implemented in syzkaller 2019/12/02 12:08:05 fault injection: support is not implemented in syzkaller 2019/12/02 12:08:05 leak checking: support is not implemented in syzkaller 2019/12/02 12:08:05 net packet injection: enabled 2019/12/02 12:08:05 net device setup: support is not implemented in syzkaller 2019/12/02 12:08:05 concurrency sanitizer: support is not implemented in syzkaller 2019/12/02 12:08:05 devlink PCI setup: support is not implemented in syzkaller 12:08:10 executing program 1: 12:08:10 executing program 0: r0 = socket$inet(0x10, 0x80002, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000037c0)=""/4090, 0xffa}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f0000000040)=""/222, 0xde}], 0x7}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="4c0000001200ff09fffefd9567a283b724a600800000000000000068354046002c001d001fc41180b598bc593a5a0d6ed1cfe502a1455f18efd3b6821148a730de33a49868c62b2ca63d8961", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 12:08:11 executing program 1: ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000240)=[{}, {0x34, 0x0, 0x1f}]}) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x400000002, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x2b) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) socket(0x18, 0x3, 0x3f) socket(0x400000000018, 0x3, 0x3a) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000140)="ad18f05de2f4ef18", 0x23c) 12:08:11 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r1}, 0x0, 0x1}], 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='<'], 0x1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) r2 = socket(0x18, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x112) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000140)=0x8) bind$inet(r3, &(0x7f0000000080)={0x2, 0x2}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r2) r4 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000100)="8c65", 0x26d) 12:08:11 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202e57f7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00.ofihe0\x00'], 0x10) pledge(&(0x7f0000000040)='A\'\x00', &(0x7f0000000080)='\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3) getpeername(r2, 0x0, &(0x7f0000000100)) 12:08:11 executing program 1: socket(0x10, 0x8001, 0x0) socket(0x6, 0x3, 0x80) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000700)=ANY=[], 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xfffffe91}], 0x1, 0x0, 0x6a2a00000000) getpeername$unix(0xffffffffffffff9c, &(0x7f0000000400)=@file={0x0, ""/108}, &(0x7f0000000380)=0x6e) getrlimit(0x3, &(0x7f0000000080)) r2 = socket(0x2, 0x4001, 0x0) getrlimit(0x3, &(0x7f00000000c0)) write(r1, &(0x7f0000000040)="7a45d131e622f35cdca3323507d8fe01149f58e875a53b6518a78cc9289012dfe0ee32ddcf425b4d4418c4e40085c8543d41dc08b14bb6c6c3edab60a5971e5f", 0x40) connect$unix(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8202006384a143dce4a7efe1970da711ecdd57be971e2f66c7124304693daaf1ada3642d8cee30be82fea40824b09c66a3e55fd590a3ed7ce984254713c6a02c18b0397fe1c8fed307891bcd567980f4bdacf0b606f0f4e9dfd9bc24f4b7265f9b3806c9153424713e0a5c5b479ac1475c7a37fbd99f019dee54eb44dd2ede7e0283c6bbfeda888ba26e"], 0x10) socket(0x0, 0x0, 0x0) r3 = dup2(r2, r2) getpgid(0xffffffffffffffff) ktrace(0x0, 0x4, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) socket(0x22, 0x4000, 0xcb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1, 0x0, 0x0, 0x9}, 0x40) getpeername$unix(r5, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x8) ioctl$BIOCSRTIMEOUT(r3, 0x8010426d, &(0x7f0000000240)={0x3, 0x22c}) r6 = open(&(0x7f0000000300)='./bus\x00', 0x5, 0x0) write(r6, &(0x7f0000000040)="670dc3", 0x3) write(r6, &(0x7f00000001c0)="08ade09f32746a223c471c0795bf5ca1acdd50ca4d001955", 0x18) r7 = semget$private(0x0, 0x3, 0x200) semctl$GETPID(r7, 0x4, 0x4, &(0x7f0000000580)=""/235) fcntl$getown(r4, 0x5) 12:08:11 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x2d}, {0xc}, {0x6}]}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r1, &(0x7f0000000040)="670dc3", 0x3) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080), 0xc) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x50, &(0x7f0000000340)='\b') 12:08:11 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000a80)="bc08e5b6d81b7c0c16ffaf41d41a7ea9041c55838a13ef5fb078c5e6f6bf54d6b5d0d240664955f8a55b37320863c77ce6815b58a95f94040ebd07407c3035e7cab3c19c1d14f7c6be493f4a509adc25c150727a4dc36c8d79e3690872df8c9807465f39a755d331c2f5ddb95c37b4c8bfbc58da76c4504856e011500c05c719a01e312ec5797ddbf652ce21e1ab50693e12925071e9ff95acf06da1d21e002271754fb2d9d58c53825aa874da0764309070c403a575c8cf695b187146ff815ceaed3cb8f5dcbc7f9d34ef0c75b7fa858b6fde44260ed52ecc2fc7764aa7b4bafefba63a73de6b31", 0xe8}], 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6a, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x100) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000400)=0xc) r3 = getppid() wait4(r3, &(0x7f0000000480), 0x2, &(0x7f00000009c0)) r4 = getgid() r5 = socket$inet(0x2, 0x2, 0x1f) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) pledge(&(0x7f0000000300)='/dev/bpf\x00', &(0x7f0000000540)='@}\x00') r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x10020, 0x0) ioctl$WSDISPLAYIO_LSFONT(r8, 0xc058574e, &(0x7f0000000340)) r9 = socket$inet(0x2, 0x4000, 0x9) setsockopt$inet_opts(r9, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff125c00000000", 0x8) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r10, 0x0, 0x208000000000d, &(0x7f00000000c0), 0x0) sendto(r10, &(0x7f0000000780)="c4cdab409f765ba8ac76e5e35cc5e706b425c38aa13e6d0503538d199c96e5e0ab78cf2e5d2cb0e7a34788da8c2328fc5951d9473fa9ee9ef0dfd39fb34f2c45b81f8d9884d71f73e19932de140b77d695dc4772038ab077661e7901ac9428c72552e1db360be1e1c8f9293e60887c09eae17b6b370737e5fba562118a903313492c60adc0880bd2ead5a411b139d0303ff3ca0d4dcd0cfa00657d82f00821f33c66358b8867363fb29d514b900c1eeaa016173da196031d20ef1244ab8a6c9a6f7fc093a792aa147d15b1c89074aac81a34308694376ac5870b17683a6cc1002e3bef2ed567374cbdb1c46a17a185", 0xb0, 0x1, &(0x7f00000003c0)=@in={0x2, 0x0}, 0xc) unveil(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)='W\x00') getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000640), &(0x7f0000000680)=0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2, 0x1, 0x1, 0x7, r1}) r11 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000300), &(0x7f0000000640)=0xc) getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f0000000280), 0xffffffe7) r12 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ttyCcfg\x00', 0x28080, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), 0xc) semop(r0, &(0x7f00000000c0)=[{0x0, 0x81, 0x1000}, {0x1, 0x6, 0x800}, {0x2, 0x8000, 0x800}, {0x3, 0x9, 0x1000}, {0x3, 0xffff, 0x800}], 0x5) ioctl$VT_WAITACTIVE(r12, 0x20007606, &(0x7f0000000100)=0x7) ioctl$WSDISPLAYIO_SVIDEO(r12, 0x80045745, &(0x7f0000000240)=0x1) dup(r8) shmget$private(0x0, 0x1000, 0x601, &(0x7f0000ffc000/0x1000)=nil) listen(0xffffffffffffffff, 0x4) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bpf\x00', 0x80, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x20000000, r2, r4, r6, r7, 0x2, 0x9}, 0x5, 0x5, 0x8}) 12:08:11 executing program 0: r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x9130fbf, 0x0, 0x5000000, 0x0) ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20800000, 0x200000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0x0, 0x0, 0x3], [], [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}]}}) 12:08:12 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x102c0, 0x6d) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x100000001, 0x0, 0x0, 0x29d8aaaa}, {0x74}, {0x3c}, {0x7ffffffe}]}) pipe2(&(0x7f0000000080), 0x4) syz_emit_ethernet(0xe, &(0x7f0000000200)="bdd9477c320c93ba8c1a900e8656") 12:08:12 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000}}) r0 = socket(0x18, 0x8000, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$unix(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a\x00'/108], &(0x7f0000000040)=0xffffffffffffff19) close(r1) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000080)={{0x18, 0x2, 0x6c, 0x8}, {0x18, 0x1, 0x7fff}, 0x1, [0xfffff800, 0x0, 0xfffffff7, 0x0, 0x7fff, 0x0, 0x100, 0x9]}, 0x3c) r3 = socket(0x18, 0x400000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 12:08:12 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x44}, {0x61}, {0x8fe}]}) syz_emit_ethernet(0x17d, &(0x7f0000000340)="b6") r1 = semget$private(0x0, 0x3, 0x0) semctl$GETNCNT(r1, 0x4, 0x3, &(0x7f0000000580)=""/170) r2 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r2, &(0x7f0000000040)="670dc3", 0x3) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r4, 0x0, 0x0) shmctl$IPC_SET(r4, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xfffffeaf) r6 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r6, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r6, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r6, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r7 = getgid() r8 = socket(0x800000018, 0x1, 0x0) bind$unix(r8, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r10 = getgid() semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r7, r9, r10, 0x10, 0x9}, 0x8, 0x1, 0x9}) r11 = getgid() r12 = getppid() r13 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r14, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r15, r16) chown(&(0x7f0000000200)='./file0/file0\x00', r15, r16) lchown(&(0x7f0000000780)='./file0\x00', r15, r16) lchown(&(0x7f00000001c0)='./file0\x00', r15, r16) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000080)={{0x6, r15, r5, r9, r11, 0x1e6, 0x8}, 0x5, 0x5, r12, r13, 0xfffffffffffffe01, 0x9, 0x7ff}) msgrcv(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a5f38c7e8792179541c95712ac3bbb216f22d05ce079d9e97ece3dc07c69c45525dafe03ae333ad1a6167d95e6119745c5bda163990f2e94b16d789dc076aa596803", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT=r9, @ANYRES16, @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="169a65592a3c2f08628b6866e7a0aada96603cb1e06df4c48427f02b8221da8ae08ddff6f864f1b91a4ff0e2450b16179074bc5b5d0dc437fbbb0f645a5d0b117d7e5c11271271ecc9fa0bdb4f108841523a4ba6c7f6ae8ca3ab2e26aba07ba5cbc6a831b1ebcd8ac926e9ddda6d65bfdcf587983324fe25abcee3264e83f061c6e957b69d9c4acda017d5cdf5e4df9c22612d93111183be9c64a558a62ef9e1", @ANYRESHEX], @ANYRES16=0x0, @ANYRESDEC=r3, @ANYPTR, @ANYPTR64=&(0x7f0000000c00)=ANY=[]], @ANYRESOCT=r8, @ANYRESOCT], 0x4, 0x1, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r18, r19) chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19) lchown(&(0x7f0000000780)='./file0\x00', r18, r19) lchown(&(0x7f00000001c0)='./file0\x00', r18, r19) r20 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r20, &(0x7f0000000040)="670dc3", 0x3) pwritev(r20, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r20, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r22, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) getsockopt$SO_PEERCRED(r22, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r24 = fcntl$getown(0xffffffffffffff9c, 0x5) r25 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r25, 0x0, 0x0) shmctl$IPC_SET(r25, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r25, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r27 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r27, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r27, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r27, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r28 = getgid() r29 = socket(0x800000018, 0x1, 0x0) bind$unix(r29, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r29, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r31 = getgid() semctl$IPC_SET(r27, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r28, r30, r31, 0x10, 0x9}, 0x8, 0x1, 0x9}) r32 = getgid() r33 = getppid() r34 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r35, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r36, r37) chown(&(0x7f0000000200)='./file0/file0\x00', r36, r37) lchown(&(0x7f0000000780)='./file0\x00', r36, r37) lchown(&(0x7f00000001c0)='./file0\x00', r36, r37) shmctl$IPC_SET(r25, 0x1, &(0x7f0000000080)={{0x6, r36, r26, r30, r32, 0x1e6, 0x8}, 0x5, 0x5, r33, r34, 0xfffffffffffffe01, 0x9, 0x7ff}) msgrcv(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a5f38c7e8792179541c95712ac3bbb216f22d05ce079d9e97ece3dc07c69c45525dafe03ae333ad1a6167d95e6119745c5bda163990f2e94b16d789dc076aa596803", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT=r30, @ANYRES16, @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="169a65592a3c2f08628b6866e7a0aada96603cb1e06df4c48427f02b8221da8ae08ddff6f864f1b91a4ff0e2450b16179074bc5b5d0dc437fbbb0f645a5d0b117d7e5c11271271ecc9fa0bdb4f108841523a4ba6c7f6ae8ca3ab2e26aba07ba5cbc6a831b1ebcd8ac926e9ddda6d65bfdcf587983324fe25abcee3264e83f061c6e957b69d9c4acda017d5cdf5e4df9c22612d93111183be9c64a558a62ef9e1", @ANYRESHEX], @ANYRES16=0x0, @ANYRESDEC=r21, @ANYPTR, @ANYPTR64=&(0x7f0000000c00)=ANY=[]], @ANYRESOCT=r29, @ANYRESOCT], 0x4, 0x1, 0x0) r38 = geteuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x2, r30, r23, r38, 0x0, 0x46, 0xffffffff00000001}, 0x2, 0xc06, r24, r24, 0xa5, 0x1, 0x9, 0x6}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000080)={{0x100, r3, r19, 0x0, r23, 0x20, 0xb57}, 0xf40000000, 0x6, 0x1000}) 12:08:12 executing program 0: r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "000000000000000100002000"}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$KDENABIO(r2, 0x20004b3c) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x8, 0x286) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "d700"}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) syz_open_pts() setsockopt(r1, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getpeername(r1, &(0x7f0000000100)=@in6, &(0x7f0000000140)=0xc) shutdown(r1, 0x1) 12:08:12 executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f00000004c0)={0x10, 0x10001, 0x4, 0xb373, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x84}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x1}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xff}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0xffff}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xd37}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x81}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x40}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x4}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7f}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x2}, {&(0x7f0000fe9000/0x12000)=nil, &(0x7f0000fed000/0x8000)=nil, 0x3855}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000feb000/0x1000)=nil, 0x9}], ['./file0\x00', './file0\x00', './file0\x00', './file0\x00'], './file0\x00', './file\x00', './file1\x00', ['./file', './file', './file', './file'], 0x1ff}) ioctl$TIOCMBIS(0xffffffffffffff9c, 0x8004746c, &(0x7f0000000000)=0x1) r1 = socket(0x2000000011, 0x3, 0x0) getsockopt$sock_timeval(r1, 0xffff, 0x1005, 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000040), 0xc) r2 = open(&(0x7f0000000180)='./file0\x00', 0xf937650c0372fe8b, 0x0) dup(r2) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000140)='#!', 0x2}], 0x1) fchmod(r2, 0xe3) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="e92243f80fded3230791448254396f7cf04d7f8f29daa64a599ac38dd86eead5e929394fcc880e896628b2a08ae65f9861fa27e7863f6842b69697f5d9d9a3e364c18b82b1cbc80b0c9f8e3dd215d7d367a8a705093c0a", 0x57}], 0x1) ioctl$TIOCNXCL(r2, 0x2000740e) r3 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r3, &(0x7f0000000c80)={0x1, "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"}, 0x44b, 0x800) r4 = geteuid() r5 = getgid() r6 = socket(0x10, 0x8000, 0x2) r7 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) pwritev(r7, &(0x7f0000000480)=[{}], 0x1000000000000093, 0x0, 0x0) ftruncate(r7, 0x0, 0x3ffff) r8 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) pwritev(r8, &(0x7f0000000480)=[{}], 0x1000000000000093, 0x0, 0x0) ftruncate(r8, 0x0, 0x3ffff) dup(r8) r9 = fcntl$getown(0xffffffffffffffff, 0x5) r10 = fcntl$getown(r6, 0x5) r11 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000001000/0x2000)=nil) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000840)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1c4, 0x80000000}, 0xd, 0x100, r9, r10, 0x2, 0x92, 0xffff}) r12 = getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, r12, r4, r5}, 0x0, 0x4, r9}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000200)=0xc) r14 = getgid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0x0, r14}}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r16 = socket(0x1, 0x2, 0xfe) r17 = getgid() getgroups(0x1, &(0x7f00000003c0)=[r17]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = kqueue() r21 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r21, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) r22 = msgget(0x0, 0x2) msgsnd(r22, &(0x7f0000000100)=ANY=[], 0x0, 0x0) msgsnd(r22, &(0x7f0000000380)=ANY=[], 0x0, 0x1000) r23 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r23}, 0xfffffffffffffff9, 0x4, 0x20, 0x7, 0x10001}, {{r23}, 0xffffffffffffffff, 0x27}], 0x0, &(0x7f0000000000)=[{{r23}, 0xfffffffffffffff9, 0x1, 0x3, 0x36dc9b59, 0x10000}], 0x8, &(0x7f0000000140)={0x7, 0x2}) r24 = kqueue() kevent(r24, &(0x7f0000000100)=[{{r23}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) r25 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r25}, 0xfffffffffffffff9, 0x4, 0x20, 0x7, 0x10001}, {{r25}, 0xffffffffffffffff, 0x27}], 0x0, &(0x7f0000000000)=[{{r25}, 0xfffffffffffffff9, 0x0, 0x0, 0x36dc9b59, 0x10000}], 0x8, &(0x7f0000000140)={0x7, 0x2}) r26 = kqueue() kevent(r26, &(0x7f0000000100)=[{{r25}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) r27 = kqueue() r28 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) dup(r28) writev(r28, &(0x7f0000000640)=[{&(0x7f0000000140)='#!', 0x2}], 0x1) fchmod(r28, 0xe3) writev(r28, &(0x7f00000001c0)=[{&(0x7f0000000080)="e92243f80fded3230791448254396f7cf04d7f8f29daa64a599ac38dd86eead5e929394fcc880e896628b2a08ae65f9861fa27e7863f6842b69697f5d9d9a3e364c18b82b1cbc80b0c9f8e3dd215d7d367a8a705093c0a", 0x57}], 0x1) pipe2(&(0x7f0000000c00)={0xffffffffffffffff}, 0xa1c73361972bf04b) kevent(r2, &(0x7f0000000f80)=[{{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x2, 0x0, 0x1}, {{r28}, 0xfffffffffffffffe, 0x20, 0x1, 0x0, 0x3}, {{r20}, 0x0, 0x2, 0xa43650b6e34dedc1, 0x7ff, 0x7}, {{r2}, 0x0, 0x40, 0x8b46d0d583c0d5ff, 0x2, 0x1}, {{r29}, 0xfffffffffffffffb, 0x38, 0x1, 0x0, 0x6}, {{r28}, 0xfffffffffffffffc, 0x40, 0x20000000, 0xffff, 0xeb}], 0x6, 0x0, 0x0, 0x0) kevent(r27, &(0x7f0000000000), 0x1ff, 0x0, 0xfffffffffffffff8, 0x0) r30 = open$dir(&(0x7f0000000ac0)='./file1\x00', 0x2, 0x0) r31 = kqueue() kevent(r31, &(0x7f0000000100)=[{{r30}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) r32 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r32}, 0xfffffffffffffff9, 0x4, 0x20, 0x7, 0x10001}, {{r32}, 0xffffffffffffffff, 0x6f}], 0x0, &(0x7f0000000000)=[{{r32}, 0xfffffffffffffff9, 0x1, 0x3, 0x36dc9b59, 0x10000}], 0x8, &(0x7f0000000140)={0x7, 0x2}) r33 = kqueue() kevent(r33, &(0x7f0000000100)=[{{r32}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) kevent(r33, &(0x7f0000000000), 0x1ff, 0x0, 0xfffffffffffffff8, 0x0) r34 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r34}, 0xfffffffffffffff9, 0x4, 0x20, 0x7, 0x10001}, {{r34}, 0xffffffffffffffff, 0x27}], 0x0, &(0x7f0000000000)=[{{r34}, 0xfffffffffffffff9, 0x1, 0x3, 0x36dc9b59, 0x10000}], 0x8, &(0x7f0000000140)={0x7, 0x2}) r35 = kqueue() kevent(r35, &(0x7f0000000100)=[{{r34}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) kevent(r35, &(0x7f0000000000), 0x1ff, 0x0, 0xfffffffffffffff8, 0x0) r36 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r36}, 0x8000000000000007, 0x4, 0x20, 0x7, 0x10001}, {{r36}, 0xffffffffffffffff, 0x27}], 0x0, &(0x7f0000000000)=[{{r36}, 0xfffffffffffffff9, 0x1, 0x3, 0x36dc9b59, 0x10000}], 0x8, &(0x7f0000000140)={0x7, 0x2}) r37 = kqueue() kevent(r37, &(0x7f0000000100)=[{{r36}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) r38 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r38}, 0xfffffffffffffff9, 0x4, 0x20, 0x7, 0x9}, {{r38}, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x1}], 0x0, &(0x7f0000000000)=[{{r38}, 0xfffffffffffffff9, 0x1, 0xd9f14558daacf7b8, 0x36dc9b59, 0x10000}], 0x6, &(0x7f0000000140)={0x2, 0x2}) r39 = kqueue() kevent(r39, &(0x7f0000000100)=[{{r38}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r17, @ANYPTR=&(0x7f00000009c0)=ANY=[@ANYRESDEC=r23, @ANYRESOCT=r25, @ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYRES16=r30, @ANYRES32=r23, @ANYRESHEX=r33, @ANYPTR=&(0x7f0000000e80)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="2594f9f5c67fd5cee3df46ae298ae476bb6c824839a22bf17bc0ab997d23d0f06b3e5eeb6be875832d22b51faf94d8a9757c8f6add0ec1a4daa2173790bb3e0100dabf287fc7ed9ecfc46211b389b534f6216f725662de1c16fda683614b4d1cec7aa4a692cf767bdaf6e4ab3500800000a7ca325e289d01bc682c5156d52848ce95c4a80977b663686fda9ddc183d504f5fe2", @ANYRES32=r35, @ANYPTR64, @ANYRESHEX=r36]], @ANYRESOCT], @ANYRES64=0x0, @ANYRES32, @ANYRES64=r27, @ANYRES64=r38], 0x6, 0xc00) r40 = getuid() r41 = geteuid() setreuid(r40, r41) r42 = getegid() r43 = getuid() r44 = geteuid() setreuid(r43, r44) r45 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r45, &(0x7f0000001040)=ANY=[@ANYBLOB="01000000000000002e1100b0df6d7fcf409def1a1fc1ed341c5533b89b0603ae37c860fe2c09c110ff00f45709d664539e1e381f35071f061ac0e16f328dca5d39656da02489672db6d19f37405111e97aa998473fffff1e8f3b32b90000000041cfd6c2df99a9d60031c125814bb6ee11e303000000b33d0000000049ad4ae8d462fcf5fa3b57806356cdb615f058b0fed6706a4d152ed0cea438f8387c3440ba6ba9cc08452fc04250db61cf3bcacfe9d34b6a31de9d05a5615416a1e222dcba8dee9f0cdc7527d27e8a15b700000000000000000000000000000000cd846e9ea6bfe963e86814791c698df63e5e23fa327326484829f3f7769669e325cd2485e172bf129055fbdb1a16fda60f271cc45781df858925b87250d4cabad6981ef8059dc98ef316ab18791701c33f7436a1f7ac76e98a85704b011410f01c5d370e5f946abf13240f79c911f0af2dd6122ae395d0b71ab9c5110ec271d874edf9baa17913acca954e3892922a0cc9402fe3a79f3dea616d09b599b437ba3287d25a73cd09fd1cd1d14a6dbcf02ff8a56437ec324a213bd7e5acda1bc4a56ef4de66ec5d7f4a4581a6e2012a012b4be35cae6394c7d7bb3bb1356b0175f4351989658d147c326330d7be5b89a2c99061245f277e06b2f9b4026e4edfec8a538bc6f489f4e0ddf2f1885e39c4aa12fd142dfbcc5a13a637f814c9257df3136e7124bbf18e4d2c6e35eb7e55f80ecff820653aa8f1a2ff"], 0x44b, 0x800) msgctl$IPC_SET(r45, 0x1, &(0x7f00000000c0)={{0x6, r41, r42, r44, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x2e3, 0x138, 0x2}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r47 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r47, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x7fc) msgsnd(r47, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1, 0x800) msgsnd(r47, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffff6c17153cf3d1170700547a40d43f5d31059c11c5a953448e0e5a392c598c258300980190f7f757f7d10080000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d795ddc34c98a2b152433ed3de8de7ec37031bc10f8ba5567bf43cbceee1600000000000000000000c8f766c107daabda0c23e9475c9d6bf97f93cf02b9422e05e492a016904df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef041384979c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f608a6f5e06140675f6faf247dbec8eb6d5651b30570785dc386c8e6b121b9046568bd76f403b8b7ab4af81b1c992b76d6c971287631ef79362412cb3dcea1361ba99d9b3c83ffc312d6931ec5ba0bb0e8997f7a941759689d37da81600"/371], 0x1, 0x7fb) r48 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r48, 0x0, 0x0) shmctl$IPC_SET(r48, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r48, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r50 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r50, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r50, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r50, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r51 = getgid() r52 = socket(0x800000018, 0x1, 0x0) bind$unix(r52, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r52, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r54 = getgid() semctl$IPC_SET(r50, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r51, r53, r54, 0x10, 0x9}, 0x8, 0x1, 0x9}) r55 = getgid() r56 = getppid() r57 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r58, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r59, r60) chown(&(0x7f0000000200)='./file0/file0\x00', r59, r60) lchown(&(0x7f0000000780)='./file0\x00', r59, r60) lchown(&(0x7f00000001c0)='./file0\x00', r59, r60) shmctl$IPC_SET(r48, 0x1, &(0x7f0000000080)={{0x6, r59, r49, r53, r55, 0x1e6, 0x8}, 0x5, 0x5, r56, r57, 0xfffffffffffffe01, 0x9, 0x7ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r61, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000ffff0000050000007c916b60848a9dadb1517769f4b5b2c849a47107836de37b3e1f48a368be8c6464ed53a98b69f38017cf1b04755d408c03834b7689b7b130bcc4607fbf11497a54080e56ed044d2868622a679a8a08a886916c5f9bb1e8350854e944fb1455deb7a586fb8222d6b728264b5a28d6b0f5a45dceab7eba4033e90a0bd323e33a25ec2e7e5a53b8a11d9c8b861a25f0dfcbeb61b2e4eb1458dd33a576d813878459e55186f6c90c657388af2f3854826f536d8235b4bd7b270f291a4ffde25e1ce547e943b3d257d4f28f487eec53896c330000000000000000ffff0000080000006c2838e9fe7f51442f07396d7910fffe388ff614567198fa9e12922b6c68516290e722245f1bb2de62c8893d78524e237199d15856896291085e5301673fb50357bcf1c61ed373b41075387eedc824524765f23d2f2db32acbc66b190c4f9b1e6bac9bcdce289288d9e1fd9710070c5d386aa385547cdab0f657e303cd149700"], 0x379}, 0x400) getsockopt$SO_PEERCRED(r61, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r62 = msgget$private(0x0, 0x10) msgsnd(r62, &(0x7f0000000a80)=ANY=[@ANYPTR], 0x1, 0x800) msgrcv(r47, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x800) r63 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) pwritev(r63, &(0x7f0000000480)=[{}], 0x1000000000000093, 0x0, 0x0) ftruncate(r63, 0x0, 0x3ffff) r64 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) pwritev(r64, &(0x7f0000000480)=[{}], 0x1000000000000093, 0x0, 0x0) ftruncate(r64, 0x0, 0x3ffff) r65 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) pwritev(r65, &(0x7f0000000480)=[{}], 0x1000000000000093, 0x0, 0x0) ftruncate(r65, 0x0, 0x3ffff) r66 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) pwritev(r66, &(0x7f0000000480)=[{}], 0x1000000000000093, 0x0, 0x0) ftruncate(r66, 0x0, 0x3ffff) msgsnd(r47, &(0x7f0000001480)=ANY=[@ANYRES64=0x0, @ANYPTR=&(0x7f0000000e00)=ANY=[@ANYRESOCT=r63], @ANYRESOCT=r35, @ANYRESOCT, @ANYRES32=r28, @ANYPTR=&(0x7f0000001380)=ANY=[@ANYPTR=&(0x7f0000001280)=ANY=[@ANYBLOB="6c1c0ffef16e0ed9603a907a94b4c6e72a0bf7095da7eb6409a13011097b039f47c74edd5384460674f010c87c56dcf68df8f1342429c86a3534b7b410193ff39e65578ab5cab932e743fd4a6e61cff746f8fefe5c57a04e4ef436e4c2ae9d30f576059d1d8af577fbe88338f26e7a946cea8860beae3ecff0ba96ce479a4df55dfb5bb3dfc387901db5f2fb18f90b775b6cda3c74cb1bd8c5982ea25019104178df1851b0b86697c808656ce81fa6779de8ba6c3bfa74cfdfce906e7c311a147a1a79f9955d1baf0edb99d9187a3e6770b6391248e7451651b1312bf8dd812168"], @ANYRESOCT=r64, @ANYRESOCT=r65, @ANYRES16=0x0, @ANYBLOB="83d2dd389e197dbc44ace8c5fff276bb46e5b8018fc7cdc0df99e9aa1115d6047ae6948d3b7d36da74c8e97a512fb3f973470a136f062d8b3b223a6c824e2230e9dc69627893299a3d79e971756a60328f4c47a903992ed242dddb84d97c92590dfc618f1e317a6602d114e2dcaa86b40f58c369e8d1daeef63ded2a77b444ddf5806769d7458bd47ede0f34dd8464", @ANYRESOCT=r66]], 0x6, 0x800) msgsnd(r47, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x222, 0x40000000000800) r67 = getuid() r68 = geteuid() setreuid(r67, r68) r69 = getegid() r70 = getuid() r71 = geteuid() setreuid(r70, r71) r72 = geteuid() r73 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r73, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/296], 0xfffffffffffffe9f, 0x1, 0x1000) r74 = socket(0x18, 0x1, 0x0) setsockopt(r74, 0x29, 0x9, &(0x7f0000000000)="03000000", 0x4) setsockopt(r74, 0x29, 0x80000000000000d, &(0x7f0000000180), 0x14) msgsnd(r73, &(0x7f0000000200)=ANY=[@ANYRESOCT=r74], 0x1, 0x800) msgrcv(r73, 0xfffffffffffffffe, 0x0, 0x0, 0x800) msgctl$IPC_SET(r73, 0x1, &(0x7f00000000c0)={{0x6, r72, r69, r71, 0x0, 0x80, 0x9}, 0x3, 0x3f, 0xffffffffffffffff, 0x0, 0x95fe, 0x6, 0x138, 0x2}) getgroups(0x4, &(0x7f0000000300)=[r42, r46, r69, 0xffffffffffffffff]) getgroups(0x9, &(0x7f0000000540)=[r17, r17, r17, r17, r46, r18, r18, r18, r18]) getsockopt$SO_PEERCRED(r19, 0xffff, 0x1022, &(0x7f0000000440)={0x0, 0x0}, 0xc) r78 = geteuid() r79 = getpgid(0xffffffffffffffff) r80 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000c40)={{0xbaec, r77, r75, r78, r76, 0x143, 0x80000001}, 0x8, 0x100000000, r79, r80, 0xfffffffffffffffd, 0xfffffffffffffe00, 0x100000000, 0x9}) fcntl$lock(r16, 0xe, &(0x7f0000000400)={0x3, 0x0, 0x800, 0x8, r80}) msgctl$IPC_SET(r3, 0x1, &(0x7f00000002c0)={{0xf0, r4, r5, r13, r14, 0x44, 0x9}, 0x5, 0x3, r15, r80, 0x2, 0x24cee5ef, 0x81, 0x5d}) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x136, r80) 12:08:12 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x7fffffff], [0x0, 0x0, 0x482]}}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x1) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f00000004c0)={0x10, 0x400, 0x4, 0x1f, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000762000/0x1000)=nil, 0x3}, {&(0x7f00006bb000/0x4000)=nil, &(0x7f000057f000/0x1000)=nil, 0x26}, {&(0x7f0000013000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f000030e000/0x4000)=nil, &(0x7f0000057000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000053000/0x1000)=nil, 0xb19}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00005f3000/0x1000)=nil, 0x4}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f000076b000/0x2000)=nil, &(0x7f0000363000/0x1000)=nil, 0x3}, {&(0x7f00003df000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x100}, {&(0x7f0000741000/0x1000)=nil, &(0x7f00004a3000/0x1000)=nil, 0x2}, {&(0x7f000069d000/0x3000)=nil, &(0x7f000005b000/0x5000)=nil, 0xfffffffffffffff8}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4}, {&(0x7f000011f000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f000066d000/0x3000)=nil, 0x2}, {&(0x7f00001c2000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00004d4000/0x4000)=nil, 0x100}], ['./file0\x00', './file0\x00', './file0\x00', './file0\x00'], './file0\x00', './file0\x00', './file0\x00', ['./file', './file', './file', './file']}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r1, &(0x7f0000000040)="670dc3", 0x3) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080), 0xc) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) truncate(&(0x7f0000000040)='./file\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) mlockall(0x1) 12:08:12 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x114, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="00002e2f66696c6530008acaad4a95724a3260bc33fb218958ea2134534aa8fc36914d0fd560056eebd0168f08dcbaf4618a1b160b859a4a67514407d04b5cd7ecf20749048991808cd5c3cc56a869b14edfeb533fdca2ab3318f85c466ca325c86dce37b5bf5ee0ad378ccf7e4bd858dffaec8d962074a695edf72836d2e5e30aa1648e93b076288f2f27802b8d0a45ae36a2049df15a7e6298ec86a8865d9bdd78907e3b307f64fc667653caadbfe5a098f6a8"], 0xa, &(0x7f0000000840), 0x303}, 0x0) 12:08:12 executing program 0: r0 = socket(0x18, 0x1, 0x0) close(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="14960465ebf81bec922d2e63a37a7bafb61ae1e2685cb6fd028c1c13a022e1181e653fc5559ccdb1bbb2ab7f3141e3920f7ac0fb55634440b0c1889498b3f7f473d35eec436f10bbbb6bcd66da4bc7519e3520ed9cbb63710162b5b8323223a669a950e815b6dbcbc28734cbb1d9ccf7443154662271b832807c4b20931e71f03a47729d132843fcbb900c4b19303c", 0x8f, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x400000002, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r2, 0x80047470, &(0x7f0000000000)=0x8001) ioctl$TIOCCONS(r2, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f0000000040)) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x201, 0x0, '\x00\x00\x00\x00 \x00'}) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000300), &(0x7f0000000640)=0xc) recvfrom(r3, &(0x7f00000001c0)=""/130, 0x82, 0x4, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x0}, 0x8) close(r1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x400000000018, 0x3, 0x3a) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000180), 0x2ee) 12:08:13 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) r1 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r1, &(0x7f0000000040)="670dc3", 0x3) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r5 = fcntl$getown(0xffffffffffffff9c, 0x5) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r6, 0x0, 0x0) shmctl$IPC_SET(r6, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r8 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r8, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r8, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r8, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r9 = getgid() r10 = socket(0x800000018, 0x1, 0x0) bind$unix(r10, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r12 = getgid() semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r9, r11, r12, 0x10, 0x9}, 0x8, 0x1, 0x9}) r13 = getgid() getppid() r14 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r15, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r16, r17) chown(&(0x7f0000000200)='./file0/file0\x00', r16, r17) lchown(&(0x7f0000000780)='./file0\x00', r16, r17) lchown(&(0x7f00000001c0)='./file0\x00', r16, r17) r18 = getpgrp() shmctl$IPC_SET(r6, 0x1, &(0x7f0000000080)={{0x6, r16, r7, r11, r13, 0x1e6, 0x8}, 0x8003, 0x5, r18, r14, 0xfffffffffffffe01, 0x49, 0x7ff}) msgrcv(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a5f38c7e8792179541c95712ac3bbb216f22d05ce079d9e97ece3dc07c69c45525dafe03ae333ad1a6167d95e6119745c5bda163990f2e94b16d789dc076aa596803", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT=r11, @ANYRES16, @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="169a65592a3c2f08628b6866e7a0aada96603cb1e06df4c48427f02b8221da8ae08ddff6f864f1b91a4ff0e2450b16179074bc5b5d0dc437fbbb0f645a5d0b117d7e5c11271271ecc9fa0bdb4f108841523a4ba6c7f6ae8ca3ab2e26aba07ba5cbc6a831b1ebcd8ac926e9ddda6d65bfdcf587983324fe25abcee3264e83f061c6e957b69d9c4acda017d5cdf5e4df9c22612d93111183be9c64a558a62ef9e1", @ANYRESHEX], @ANYRES16=0x0, @ANYRESDEC=r2, @ANYPTR, @ANYPTR64=&(0x7f0000000c00)=ANY=[]], @ANYRESOCT=r10, @ANYRESOCT], 0x4, 0x1, 0x0) r19 = geteuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x2, r11, r4, r19, 0x0, 0x46, 0xffffffff00000001}, 0x2, 0xc06, r5, r5, 0xa5, 0x1, 0x9, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r20, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) getsockopt$SO_PEERCRED(r20, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r21 = msgget$private(0x0, 0x651) msgsnd(r21, &(0x7f0000000c00)=ANY=[], 0x0, 0x800) connect$unix(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000dc0)=ANY=[@ANYBLOB="eb0d123d9adcda7c8514ae37ce6ed97d9a30a979d35fe298bd2f6abe9a49fc73671dac6fcfbc9b64a03410553f603742ecee09ab2609ee59bc3737c987850b78a97091e27caed5762601004d4f5e8a7c402c86455c0441b025143d64906456654abfe5477a957c74c163ae2718c229cdc00049ea9de7a7f23d09a8259f11948023e537de0faf619f39d79613ddcf9a46558a3a8ab4dc11f80e35aac9d5fe2ccf20b9b49846f0cf74fe8590ab6f575929540d44611c69d5de0e2f199210bbf585a50f74d19a4f723fd3229dd0e6b77dc5eff7ce903df4584b395f6ef99de39f6462db4d5cbcf21fcaa13a3dc9723699308a77ae0dda292f62", @ANYRES64=r19, @ANYRESHEX=0x0, @ANYRES16, @ANYRES64, @ANYBLOB="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"], @ANYRES16=r21, @ANYRESDEC=r20, @ANYRESHEX], 0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r22 = socket(0x2, 0x3, 0x0) r23 = fcntl$dupfd(r22, 0x0, r22) r24 = socket(0x2, 0x3, 0x0) pipe(&(0x7f0000000000)) r25 = fcntl$dupfd(r24, 0x0, r23) ioctl$TIOCFLUSH(r25, 0x8020699f, &(0x7f0000000300)) 12:08:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) mmap(&(0x7f0000002000/0x600000)=nil, 0x600000, 0x0, 0x10, r0, 0x0, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r1, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x200000]}}) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000000)=0x5) 12:08:13 executing program 0: ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffa, 0x0, "68d19de7f43f0db1cb2fd71bc1c36f1cc6822bc6"}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x8) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) linkat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x4) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffffc, 0x29}], 0x47eb, 0x0, 0x2, 0x0) close(r2) 12:08:13 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="db321a455dd4b10894afc70180000000000000e817332154e1de1e958e45b7cbeb1489b5d97e3d9f03128626c5b80f9ebbad79fc75da60fd0952924cb188ca994bed379904ed30"], 0x1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) r1 = socket(0x18, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/43, &(0x7f0000000140)=0x2b) close(r1) r2 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000100)="8c65", 0x168) 12:08:13 executing program 0: ioctl$KDDISABIO(0xffffffffffffffff, 0x20004b3d) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000180)="01000000", 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x2ff, 0x0, "00370020000f000005000000fa3900"}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000000)=0x4a4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x400000000002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x802069ad, &(0x7f0000000300)) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x14a) writev(r1, &(0x7f0000000580), 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10202, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28}, {0x3d}, {0x7ffffffe}]}) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x3b9, &(0x7f0000000200)="d0") mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x10, r4, 0x0, 0x0) pwritev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="04", 0x1}], 0x1, 0x0, 0x0) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10202, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x10, r6, 0x0, 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000140)="04", 0x1}], 0x1, 0x0, 0x0) r7 = fcntl$dupfd(r4, 0xa, r6) ioctl$WSDISPLAYIO_LSFONT(r7, 0xc058574e, &(0x7f0000000240)) socket(0x18, 0x2, 0x0) 12:08:13 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86138) r0 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x31c) write(r0, &(0x7f0000000140)="220e22", 0x3) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r2, r3) chown(&(0x7f0000000200)='./file0/file0\x00', r2, r3) lchown(&(0x7f0000000780)='./file0\x00', r2, r3) lchown(&(0x7f00000001c0)='./file0\x00', r2, r3) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000640)=0xc) r6 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r8, 0x0, 0x0) shmctl$IPC_SET(r8, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r8, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r10 = semget$private(0x0, 0x4, 0x1) semctl$SETVAL(r10, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r10, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r11 = getgid() r12 = socket(0x800000018, 0x1, 0x0) bind$unix(r12, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r12, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r14 = getgid() semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r11, r13, r14, 0x10, 0x9}, 0x8, 0x1, 0x9}) r15 = getgid() r16 = getppid() r17 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r18, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r19, r20) chown(&(0x7f0000000200)='./file0/file0\x00', r19, r20) lchown(&(0x7f0000000780)='./file0\x00', r19, r20) lchown(&(0x7f00000001c0)='./file0\x00', r19, r20) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000080)={{0x6, r19, r9, r13, r15, 0x1e6, 0x8}, 0x5, 0x5, r16, r17, 0xfffffffffffffe01, 0x9, 0x7ff}) sendmsg(r7, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r17], 0xfffffffffffffc94}, 0x400) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x4) r22 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000980)={{0x2, r6, r21, r5, 0x0, 0x46, 0xffffffff00000001}, 0x100, 0xc07, r22, r22, 0xa5, 0x1, 0x100000003, 0x6}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffffe, 0x0, 0x0, r6, r3, 0x4}, 0x3000000000004, 0x8, 0x0, 0x0, 0xfffffffffffffffb}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 12:08:13 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x90d2, 0x0, "d730c1e77a6fc6e23c5cd188b6aea417e4e74de4"}) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) r3 = accept$inet6(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) write(r3, &(0x7f0000000480)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd506008963", 0x22b) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x7) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047470, &(0x7f0000000000)=0x8001) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(0xffffffffffffffff, 0x4010745b, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000000), 0xc) poll(&(0x7f0000000100)=[{r4, 0x1}], 0x1, 0x7ffa) r5 = open(&(0x7f0000000300)='./file0\x00', 0x5, 0x0) write(r5, &(0x7f0000000040)="670dc3", 0x3) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000080), 0xc) ioctl$TIOCCLRVERAUTH(r5, 0x2000741d) r6 = syz_open_pts() getdents(r2, &(0x7f0000000200)=""/121, 0x79) r7 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r0, &(0x7f0000000280)="0000b4a110500c00", 0x8) pwritev(r7, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000080), 0xc) ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f00000001c0)={0x3, 0x8, 0x4, 0x8, "d2bf8586ea27a6d980f099057e4fa3474d124c5c", 0x1, 0x4}) close(r0) dup(r6) syz_open_pts() 12:08:13 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x10110, 0x0) r0 = kqueue() r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0, 0x0) select(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 12:08:13 executing program 0: r0 = open(&(0x7f0000000540)='./file0\x00', 0x80000000000206, 0x19) writev(r0, &(0x7f00000014c0)=[{&(0x7f00000000c0)='#!/', 0x3}], 0x1) write(r0, &(0x7f0000000140)="0920120000feffffff04148027454a638a711de274fe266ce23205554752cd8439df6dfe4e0f84b94aaa41f680fa371c960a", 0x32) shutdown(r0, 0x2) r1 = msgget$private(0x0, 0x20000003c4) pipe(&(0x7f0000000480)) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyCcfg\x00', 0x20000, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x8) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)='#!', 0x2}], 0x10000000000000dd) fchmod(r2, 0x8e3) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000000340)=0x7fb0) msgrcv(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000f199"], 0xc, 0x2, 0x1000) msgrcv(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000e700"/235], 0xeb, 0x1, 0x1000) r3 = kqueue() fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) getegid() r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000380)=0x32a) kevent(r3, &(0x7f0000000100)=[{{r4}, 0xfffffffffffffff9, 0x1}], 0x8, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000200)=ANY=[], 0x0, 0x800) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f00000001c0)) msgsnd(r1, 0x0, 0x0, 0x1800) msgget$private(0x0, 0x10120) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280), &(0x7f0000000400)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='%%\\\x00', &(0x7f0000000940)='F-\x00\xd5&\xfcQy\xe7\x15\xb0\xb3EQ\xf0g8\xee\x800O\xc6\xfa,\xff\xaf\x92)9\xd9r\xeel\x12\x10kx\x9c\x8a\x96\xa7b\xbd\x049\x88\x1c\xc1z>\x7f\x82O\xa4\xe8\x0fK`\xb7\x81\r\xee \xc0\xc3\x10pw\xdd\x85Rp\vT#J^\x90\xadN$\n\x7f\xa9\x1dz\xf8\xc57\xfaq\xbc\x96P\xd0\x00\xc10x0}, 0xfffffedd) getegid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xff4b) r11 = semget$private(0x0, 0x1, 0x102) semctl$GETZCNT(r11, 0x1, 0x7, &(0x7f0000002600)=""/155) semctl$GETPID(r11, 0x7, 0x4, &(0x7f00000026c0)=""/163) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f00000004c0)={{0x3, r8, r10, r9, 0x0, 0x4}, 0x200, 0x401, 0x8000005}) semop(r5, &(0x7f0000000040)=[{0x0, 0x7, 0x400}, {0x531bcef4eb67362f, 0x9}, {0x58d70e956d7aaab8, 0x8, 0x1000}, {0x4, 0x7}, {0x0, 0x9, 0x800}], 0x2aaaa881) 12:08:13 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10000, 0x0) pwritev(r0, &(0x7f00000002c0)=[{0xffffffffffffffff, 0x57238155}], 0x10000000000000c0, 0x0, 0x0) 12:08:13 executing program 1: r0 = syz_open_pts() ioctl$TIOCNOTTY(r0, 0x20007471) fcntl$lock(r0, 0x9, 0x0) 12:08:13 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4c}, {0x5}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000380)="93bdc06c8a6b3c45e96ebbad16fc") ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000040)) 12:08:14 executing program 0: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) syz_open_pts() r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xfffffffc, 0x40000, 0x9e91, 0x6, "42d63c9a8a7b5cdb5a77f447432be5816f157e33", 0x0, 0x80}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="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", 0xa7c}], 0x1) 12:08:14 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) syz_open_pts() r1 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0x80047470, &(0x7f0000000000)=0x8001) ioctl$TIOCCONS(r1, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000040)) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x0, 0x3e67, 0x5, 0x1000799, "b3ad2e0d3fc9c06d00007f00000000000200"}) writev(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)="028cf4cde92caed869cfc127807da494c8dc1a8e0e4d246e042ec4a06e2251ddf7dbffe2b38216993650c735ded76c17e29d2a23ad5982b65bd362c5dbf841c893ff113ad92a76d133249d52b96390fd412a9f0926c89eb5032e1dab250fc391a98e6bca5eeb19d0bba5fe51e469d5eb5414c9", 0x73}], 0x1) 12:08:14 executing program 1: r0 = dup(0xffffffffffffff9c) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x4000, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x802069de, &(0x7f0000000300)) 12:08:14 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1) r0 = socket(0x2, 0x3, 0x1) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="071400000000db00080000000025c6149b33ff0f", 0x14) write(r0, 0x0, 0x0) 12:08:14 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000080)={{0x18, 0x2, 0x8, 0xe6d}, {0x18, 0x2, 0x0, 0x7}, 0x8000, [0x3, 0x4, 0x7, 0x8000, 0x7b84, 0x5, 0x8, 0x3ff]}, 0x3c) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r2, &(0x7f0000000040)="670dc3", 0x3) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000080), 0xc) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x2000000000000027, &(0x7f00000000c0)=[{0x101}, {0x8b2d, 0x0, 0x0, 0x3}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r4, &(0x7f0000000040)="670dc3", 0x3) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r6, 0x0, 0x0) shmctl$IPC_SET(r6, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r8 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r8, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r8, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r8, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r9 = getgid() r10 = socket(0x800000018, 0x1, 0x0) bind$unix(r10, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r12 = getgid() semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r9, r11, r12, 0x10, 0x9}, 0x8, 0x1, 0x9}) r13 = getgid() r14 = getppid() r15 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r16, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r17, r18) chown(&(0x7f0000000200)='./file0/file0\x00', r17, r18) lchown(&(0x7f0000000780)='./file0\x00', r17, r18) lchown(&(0x7f00000001c0)='./file0\x00', r17, r18) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000080)={{0x6, r17, r7, r11, r13, 0x1e6, 0x8}, 0x5, 0x5, r14, r15, 0xfffffffffffffe01, 0x9, 0x7ff}) msgrcv(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a5f38c7e8792179541c95712ac3bbb216f22d05ce079d9e97ece3dc07c69c45525dafe03ae333ad1a6167d95e6119745c5bda163990f2e94b16d789dc076aa596803", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT=r11, @ANYRES16, @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="169a65592a3c2f08628b6866e7a0aada96603cb1e06df4c48427f02b8221da8ae08ddff6f864f1b91a4ff0e2450b16179074bc5b5d0dc437fbbb0f645a5d0b117d7e5c11271271ecc9fa0bdb4f108841523a4ba6c7f6ae8ca3ab2e26aba07ba5cbc6a831b1ebcd8ac926e9ddda6d65bfdcf587983324fe25abcee3264e83f061c6e957b69d9c4acda017d5cdf5e4df9c22612d93111183be9c64a558a62ef9e1", @ANYRESHEX], @ANYRES16=0x0, @ANYRESDEC=r5, @ANYPTR, @ANYPTR64=&(0x7f0000000c00)=ANY=[]], @ANYRESOCT=r10, @ANYRESOCT], 0x4, 0x1, 0x0) seteuid(r5) sendmsg(r3, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r19 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$VT_GETACTIVE(r19, 0x40047607, &(0x7f0000000100)) syz_emit_ethernet(0x253, &(0x7f0000000000)="b6") 12:08:14 executing program 0: open(&(0x7f0000000640)='./file0\x00', 0x200, 0x0) fcntl$setstatus(0xffffffffffffff9c, 0x4, 0x8) ktrace(&(0x7f0000000000)='./file0\x00', 0x14, 0x10, 0x0) mknod(&(0x7f0000000680)='./bus\x00', 0x80002000, 0x801) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2, 0x0) close(r0) 12:08:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x1000000008002, 0x0) connect$unix(r1, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x10) dup2(r1, r0) r2 = dup(r0) r3 = socket(0x1e, 0x3, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x120) fcntl$setstatus(r5, 0x4, 0x80) pwritev(r5, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r4, 0x0, 0x0) getsockname$inet(r3, 0x0, &(0x7f0000000140)) close(r3) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 12:08:14 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x1d}, {0x7}, {0x86}]}) shmctl$SHM_UNLOCK(r0, 0x4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') syz_emit_ethernet(0xe, &(0x7f00000000c0)="b75d03dd00ef43f7f7c855bb7042") ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xb15, 0x8, 0x5, 0x4f5a}, {0x0, 0x0, 0x0, 0xd4}]}) 12:08:14 executing program 1: r0 = socket(0x2, 0x4003, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000140)="01003f8a", 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x12, 0x0) write(r2, &(0x7f0000000240)="220e2a", 0x3) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8) r3 = socket$inet(0x2, 0x3, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400004002c5, 0x0) lseek(r4, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x1000200000005}) fchdir(r4) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x220, 0x80) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r6, 0x80047470, &(0x7f0000000000)=0x8001) ioctl$TIOCCONS(r6, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(r6, 0x4010745b, &(0x7f0000000040)) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f0000000280)=r6) recvfrom$inet(r5, &(0x7f0000000180)=""/232, 0xe8, 0x40, 0x0, 0x0) socket(0x32, 0x8000, 0x1f) r7 = socket(0x2, 0xc003, 0x0) connect$unix(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/586], 0x10) dup2(r7, r1) r8 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r8, &(0x7f0000000840)="67bcd651d2d706f4f8fd993f57f09a9241860035e68041f3336a976936a3f1081e07f1040784f581d37a512d127ecf97f95c17c5df76fb4fcc98d67868831424293d7157031dace211fcadd50ff7c6ea308df0dd480fcb91a25104", 0x389) pwritev(r8, &(0x7f0000000a40), 0x0, 0x0, 0x0) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000080), 0xc) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r10, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r11 = fcntl$dupfd(r9, 0xa, r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r12, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) getsockopt$SO_PEERCRED(r12, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r13 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x20000, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r14, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) kevent(r6, &(0x7f0000000380)=[{{r3}, 0x8000000000000005, 0xa, 0xa00000d0, 0x8, 0x3}, {{r8}, 0xfffffffffffffff8, 0x10, 0x80000000, 0x3c, 0x3}, {{r2}, 0xfffffffffffffff9, 0x10, 0x5, 0x5, 0x8}], 0x10001, &(0x7f0000000680)=[{{r11}, 0xfffffffffffffffc, 0x20, 0x3, 0x0, 0x7}, {{r12}, 0xfffffffffffffffb, 0x80, 0x0, 0x400, 0x3}, {{r13}, 0xfffffffffffffffe, 0x40, 0xfffff, 0x6, 0x6}, {{}, 0xfffffffffffffff8, 0x4, 0x4, 0xe12}, {{r6}, 0xfffffffffffffffa, 0x20, 0xfff17, 0x6, 0x7}, {{0xffffffffffffff9c}, 0xfffffffffffffffe, 0x30, 0x20, 0x4, 0x2}, {{r7}, 0xfffffffffffffffd, 0x2, 0x4, 0xfffffffffffffffa}, {{r0}, 0xfffffffffffffffe, 0x0, 0xbf473da88210b2d4, 0x6, 0x1aa110a1}, {{r14}, 0xfffffffffffffffc, 0x16222135f042b547, 0xfffff, 0x3, 0x7fffffff}], 0x7, &(0x7f00000007c0)={0xfffffffffffffffd, 0xfc0000000000000}) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r15 = dup(r1) sendto$inet6(r15, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 12:08:14 executing program 0: r0 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r0, &(0x7f0000000440)=ANY=[], 0x0, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r2, r3) chown(&(0x7f0000000200)='./file0/file0\x00', r2, r3) lchown(&(0x7f0000000780)='./file0\x00', r2, r3) lchown(&(0x7f00000001c0)='./file0\x00', r2, r3) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x1, 0x800) msgrcv(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf80020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000beaddc71776ed521fd8b9b00000000000000000000000000000000ffffff7f00"/184], 0xfffffffffffffe9f, 0x1, 0x1000) r4 = msgget$private(0x0, 0x410) msgsnd(r4, &(0x7f00000002c0)={0x1, "2f7650df1e59d39cd872a34a55ec58a5ca84f5b48a4a12cb864692f154e4a3bfec6ae74ae4206d4fd5105ce30f100471a5e21387e5"}, 0x3d, 0x800) msgsnd(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/280], 0x44b, 0x800) msgrcv(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0xfffffffffffffffd, 0x1800) msgrcv(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d8bd8026ec4a0fed1f31a72f3b597e6aba3daa7cd9c8f5125c1e6d7a958"], 0xffffff64, 0x1, 0x0) msgsnd(r0, &(0x7f0000000140)={0x3, "54120debbef164845f4b1f7b6fa5cc9b29f1c32e3624f6846071a3149aac192ee12f472c53f1f74f5dba5320f84229cc3f4340798c88dd50cbde06c7a914bd71a3c00908979a2d347293b5f59f3176d9bdbc184d8a41f11b80f3168187517886752ec5e16b90e8902b35550f4c81b850a7d9149e1795a4304a2d6f0ac881570939d11e1e6f52be0640ad242d9ca96c68f2407055c6cf4f56d85a78de57f2dac7f50c74bf88f60667891a813fe0c7abee6c449fed4e65401ee0c914"}, 0xc3, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000300)=[{0x34, 0x0, 0x0, 0x7ff}, {0x28}, {0x6}]}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0x24, 0xfffffff9}, {0x2, 0x5}], 0x2}) syz_emit_ethernet(0xe, &(0x7f0000000100)="d4962cf0fff3805fae4f42ec9a63") 12:08:15 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86139) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{r0}, 0x0, 0x0, 0x2, 0x1ad2, 0x8}], 0x0, 0x0, 0xfffffffe, 0x0) socketpair(0x1, 0x5, 0x51, &(0x7f00000001c0)={0xffffffffffffffff}) read(r1, &(0x7f0000000300)=""/236, 0xec) r2 = fcntl$dupfd(r1, 0xa, 0xffffffffffffff9c) socketpair(0x0, 0x4, 0x5, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000200)='./bus\x00', r2, 0x1}) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000440)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r4, &(0x7f0000000040)="670dc3", 0x3) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000080), 0xc) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x8, 0x6b, 0x8, 0x1}]}) recvfrom$unix(r3, &(0x7f0000000480)=""/229, 0xe5, 0x800, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0) r6 = socket(0x2, 0x400000000002, 0x0) r7 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r7, 0x80047470, &(0x7f0000000000)=0x8005) ioctl$TIOCCONS(r7, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(r7, 0x4010745b, &(0x7f0000000040)) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000000c0), 0xc) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$TIOCFLUSH(r8, 0x80206980, &(0x7f0000000300)) socket(0x18, 0x4, 0xff) ioctl$TIOCCDTR(r8, 0x20007478) socket(0x5, 0x6, 0x3) ioctl$KDMKTONE(r5, 0x20004b08, &(0x7f0000000140)=0x7fffffff) write(r5, &(0x7f0000000040)="670dc3", 0x3) write(r5, &(0x7f0000000000)="0991d2d0ffffffffff", 0x9) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 12:08:15 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x0, 0x0, 0x100000001, 0x550f, "2ea86ecce46adcd569ef64e16eb59560b6cfd711"}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r2, &(0x7f0000000040)="670dc3", 0x3) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r4, 0x0, 0x0) shmctl$IPC_SET(r4, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r7 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r7, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r7, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r7, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r8 = getgid() r9 = socket(0x800000018, 0x1, 0x0) bind$unix(r9, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r11 = getgid() semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r8, r10, r11, 0x10, 0x9}, 0x8, 0x1, 0x9}) r12 = getgid() r13 = getppid() r14 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r15, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r16, r17) chown(&(0x7f0000000200)='./file0/file0\x00', r16, r17) lchown(&(0x7f0000000780)='./file0\x00', r16, r17) lchown(&(0x7f00000001c0)='./file0\x00', r16, r17) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000080)={{0x6, r16, r6, r10, r12, 0x1e6, 0x8}, 0x5, 0x5, r13, r14, 0xfffffffffffffe01, 0x9, 0x7ff}) msgrcv(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a5f38c7e8792179541c95712ac3bbb216f22d05ce079d9e97ece3dc07c69c45525dafe03ae333ad1a6167d95e6119745c5bda163990f2e94b16d789dc076aa596803", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT=r10, @ANYRES16, @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="169a65592a3c2f08628b6866e7a0aada96603cb1e06df4c48427f02b8221da8ae08ddff6f864f1b91a4ff0e2450b16179074bc5b5d0dc437fbbb0f645a5d0b117d7e5c11271271ecc9fa0bdb4f108841523a4ba6c7f6ae8ca3ab2e26aba07ba5cbc6a831b1ebcd8ac926e9ddda6d65bfdcf587983324fe25abcee3264e83f061c6e957b69d9c4acda017d5cdf5e4df9c22612d93111183be9c64a558a62ef9e1", @ANYRESHEX], @ANYRES16=0x0, @ANYRESDEC=r3, @ANYPTR, @ANYPTR64=&(0x7f0000000c00)=ANY=[]], @ANYRESOCT=r9, @ANYRESOCT], 0x4, 0x1, 0x0) r18 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r18, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r18, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r18, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r19 = getgid() r20 = socket(0x800000018, 0x1, 0x0) bind$unix(r20, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r20, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r22 = getgid() semctl$IPC_SET(r18, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r19, r21, r22, 0x10, 0x9}, 0x8, 0x1, 0x9}) r23 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r23, 0x80047470, &(0x7f0000000000)=0x8001) ioctl$TIOCCONS(r23, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(r23, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(r23, 0x4010745b, &(0x7f0000000040)) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRES64=r22, @ANYRES32=r14, @ANYPTR, @ANYBLOB="b318a9992a94697024d3d796b47b1ada1e3985b52ddd4f83bfb7471fdb9d1a59a5463da26c7f75c4be23dcf4125900b271af52ce29304ca9704e3ea64f39a137877586807051aa7ebda38f1944dbd28832dc933fd3e85beba9164a7af2bfb677b382a11c2b7530b768ca5fb7bf291d2a1edd3a32ea97cc67b7b1fa19cc9833d09cf7c8f15a2267cd9aaa141386dfa771be6f15f3f4fd05f117ca0e9ef80385c22d7670c34ad22b25455f8bedb1950486a1057b938152f82b9a709adb88dea1572aed2977990a6f899a8ac84132f7e2324e0c6ccea26e0a09392b98a5923f284dcecc812c4980e6a207e10c1e"], @ANYRES16=r5, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYPTR], @ANYRESDEC=r23], @ANYRESHEX], 0x3, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x1) write(r0, &(0x7f0000000080)="2078f7b69541d6d97099188e90cd9c8e765f9ba2c14c0333177edf6d0f3295f5a5e8b04efdd700"/53, 0x241c5379a0e79b8e) 12:08:15 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semget$private(0x0, 0x1, 0x62) r1 = semget$private(0x0, 0x0, 0x228) semctl$IPC_RMID(r1, 0x0, 0x0) shmctl$IPC_SET(r0, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r3 = semget$private(0x0, 0x4, 0x20) semctl$GETNCNT(r3, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r3, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r4 = getgid() r5 = socket(0x800000018, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r7 = getgid() semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r4, r6, r7, 0x10, 0x9}, 0x8, 0x1, 0x9}) getgid() r8 = getppid() r9 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r11, r12) r13 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r13, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r13, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r13, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r14 = getgid() r15 = socket(0x800000018, 0x1, 0x0) bind$unix(r15, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r15, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r17 = getgid() semctl$IPC_SET(r13, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r14, r16, r17, 0x10, 0x9}, 0x8, 0x1, 0x9}) r18 = geteuid() chown(&(0x7f0000000340)='./file0/file0\x00', r18, r2) lchown(&(0x7f0000000780)='./file0\x00', r11, r12) r19 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r19, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r19, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r19, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r20 = getgid() r21 = socket(0x800000018, 0x1, 0x0) bind$unix(r21, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r21, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r23 = getgid() semctl$IPC_SET(r19, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r20, r22, r23, 0x10, 0x9}, 0x8, 0x1, 0x9}) r24 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r24, &(0x7f0000000040)="670dc3", 0x3) pwritev(r24, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r24, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) r26 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r26, 0x0, 0x0) shmctl$IPC_SET(r26, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r26, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(r15, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xfffffffffffffef7) r28 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r28, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r28, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r28, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r29 = getgid() r30 = socket(0x800000018, 0x1, 0x0) bind$unix(r30, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r30, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r32 = getgid() semctl$IPC_SET(r28, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r29, r31, r32, 0x10, 0x9}, 0x8, 0x1, 0x9}) r33 = getgid() r34 = getppid() r35 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r36, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r37, r38) chown(&(0x7f0000000200)='./file0/file0\x00', r37, r38) lchown(&(0x7f0000000780)='./file0\x00', r37, r38) lchown(&(0x7f00000001c0)='./file0\x00', r37, r38) shmctl$IPC_SET(r26, 0x1, &(0x7f0000000080)={{0x6, r37, r27, r31, r33, 0x1e6, 0x8}, 0x5, 0x5, r34, r35, 0xfffffffffffffe01, 0x9, 0x7ff}) r39 = msgget$private(0x0, 0x20) msgrcv(r39, &(0x7f0000000580)=ANY=[@ANYBLOB="a5f38c7e8792179541c95712ac3bbb216f22d05ce079d9e97ece3dc07c69c45525dafe03ae333ad1a6990f2e94b16d789dc076aa59680364956af2310ec0a164e39320ea145568b971247db04a5eb23202603aed1c333e5e0c7b90f11c8a972038c4f48e2c0ac18828a57fc78d25d24c23ab83ebb9478e929c44becfaab7ba93aa48004c37c6a35b196042cddeb9182b4e0a8eaea69937c6bc7e103ca0468971307eafb378118b371ea83e5fdd66c581edd1e49118443cc2f55f016ce84d1825ee451a1657bc904b2a23091974a5fd78773756ac29056a16d635767d7384243153", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT=r31, @ANYRES16, @ANYPTR=&(0x7f0000000b40)=ANY=[], @ANYRES16=0x0, @ANYRESDEC=r25, @ANYPTR, @ANYPTR64=&(0x7f0000000c00)=ANY=[]], @ANYRESOCT=r24, @ANYRESOCT], 0x4, 0x1, 0x0) r40 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r40, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r40, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r40, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r41 = getgid() r42 = socket(0x800000018, 0x1, 0x0) bind$unix(r42, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r42, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r44 = getgid() semctl$IPC_SET(r40, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r41, r43, r44, 0x10, 0x9}, 0x8, 0x1, 0x9}) lchown(&(0x7f0000000240)='./file0/file0\x00', r6, r44) r45 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r45, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r45, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r45, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r46 = getgid() r47 = socket(0x800000018, 0x1, 0x0) bind$unix(r47, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r47, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r49 = getgid() semctl$IPC_SET(r45, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r46, r48, r49, 0x10, 0x1}, 0x8, 0x4000000001, 0x9}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x6, r11, r2, r6, r46, 0x1e6, 0x808}, 0x5, 0x5, r8, r9, 0xfffffffffffffe01, 0x9, 0x7ff}) shmctl$SHM_LOCK(r0, 0x3) mknod(&(0x7f0000000140)='./bus\x00', 0x0, 0x8613b) r50 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) write(r50, &(0x7f0000000280)='\"*', 0xfffffe99) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{}, 0xc4c01002e}) pwritev(r50, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 12:08:15 executing program 0: socket(0x800000018, 0x1, 0x0) 12:08:15 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000001, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) r2 = socket$unix(0x1, 0x1, 0x0) accept$unix(r2, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) ioctl$TIOCSDTR(r1, 0x20007479) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000540)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x14}, {0x50}, {0x6, 0x0, 0x0, 0xfc}]}) pwrite(r0, &(0x7f00000001c0)="fbaf8a8d1a021b040c3be3e3f6be", 0xe, 0x0, 0x0) 12:08:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r2, &(0x7f0000000440)=ANY=[], 0x0, 0x0) msgsnd(r2, &(0x7f0000000240)=ANY=[@ANYRES64], 0x1, 0x800) msgrcv(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf80020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000beaddc71776ed521fd8b9b00000000000000000000000000000000ffffff7f00"/184], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/280], 0x44b, 0x800) msgrcv(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0xfffffffffffffffd, 0x1800) msgrcv(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0d8bd8026ec4a0fed1f31a72f3b597e6aba3daa7cd9c8f5125c1e6d7a958"], 0xffffff64, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r4 = getgid() r5 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r5, &(0x7f0000000040)="670dc3", 0x3) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r7, 0x0, 0x0) shmctl$IPC_SET(r7, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r9 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r9, 0x4, 0x3, &(0x7f0000000800)=""/170) semctl$SETVAL(r9, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r9, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r10 = getgid() r11 = socket(0x800000018, 0x1, 0x0) bind$unix(r11, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, 0xfffffffffffffcfa) r13 = getgid() semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r10, r12, r13, 0x10, 0x9}, 0x8, 0x1, 0x9}) r14 = getgid() r15 = getppid() r16 = fcntl$getown(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r18, r19) chown(&(0x7f0000000200)='./file0/file0\x00', r18, r19) lchown(&(0x7f0000000780)='./file0\x00', r18, r19) lchown(&(0x7f00000001c0)='./file0\x00', r18, r19) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000080)={{0x6, r18, r8, r12, r14, 0x1e6, 0x8}, 0x5, 0x5, r15, r16, 0xfffffffffffffe01, 0x9, 0x7ff}) msgrcv(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a5f38c7e8792179541c95712ac3bbb216f22d05ce079d9e97ece3dc07c69c45525dafe03ae333ad1a6167d95e6119745c5bda163990f2e94b16d789dc076aa596803", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT=r12, @ANYRES16, @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="169a65592a3c2f08628b6866e7a0aada96603cb1e06df4c48427f02b8221da8ae08ddff6f864f1b91a4ff0e2450b16179074bc5b5d0dc437fbbb0f645a5d0b117d7e5c11271271ecc9fa0bdb4f108841523a4ba6c7f6ae8ca3ab2e26aba07ba5cbc6a831b1ebcd8ac926e9ddda6d65bfdcf587983324fe25abcee3264e83f061c6e957b69d9c4acda017d5cdf5e4df9c22612d93111183be9c64a558a62ef9e1", @ANYRESHEX], @ANYRES16=0x0, @ANYRESDEC=r6, @ANYPTR, @ANYPTR64=&(0x7f0000000c00)=ANY=[]], @ANYRESOCT=r11, @ANYRESOCT], 0x4, 0x1, 0x0) getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, 0xc) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r21, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000004c0)='./file0\x00', r22, r23) chown(&(0x7f0000000200)='./file0/file0\x00', r22, r23) lchown(&(0x7f0000000780)='./file0\x00', r22, r23) lchown(&(0x7f00000001c0)='./file0\x00', r22, r23) r24 = fcntl$getown(0xffffffffffffff9c, 0x5) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0}, 0xc) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x0, r3, r4, r20, r23, 0xc0, 0x31}, 0x2, 0x7, r24, r25, 0x1, 0xffffffffffffffc0, 0x7, 0x66507801}) shutdown(r1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x9}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10}, 0x0) 12:08:16 executing program 1: r0 = syz_open_pts() fcntl$lock(r0, 0x100000000000009, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffffd, 0x1000200000001}) 12:08:16 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {0x44}, {0x6}]}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) syz_emit_ethernet(0x15c, &(0x7f0000000340)) 12:08:16 executing program 1: ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000240)=[{}, {0xc43c, 0x0, 0x1f}]}) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x400000002, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x2b) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffffe, 0x0, {0x10, 0x3}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) socket(0x400000000018, 0x3, 0x3a) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mprotect(&(0x7f0000634000/0x2000)=nil, 0x2000, 0x6) write(r1, &(0x7f0000000140)="ad18f05de2f4ef18", 0x7b8) 12:08:16 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000300), &(0x7f0000000640)=0xc) r2 = fcntl$dupfd(r1, 0x5, 0xffffffffffffff9c) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000000200)={0x0, 0x3, 0x9a, {[0x3252, 0x4, 0x40, 0x200, 0xc, 0x2bbc, 0x5, 0x80, 0xff, 0x4a5, 0x7, 0x6c55, 0x4, 0x6, 0x2, 0xffff, 0x100000000, 0xc0], [0xffff, 0x1, 0x80, 0x1, 0x6, 0x3, 0x1, 0x5, 0x4, 0x1ff], [0x0, 0xfffffffffffffff7, 0x4, 0x3, 0x1, 0x4, 0x603c0e47], [0x3f, 0xe790, 0x2, 0x100, 0x6, 0x3], [{0x2, 0x401, 0x8, 0xa04}, {0x68a6, 0x7fffffff, 0x5, 0x3f}, {0xfff, 0x6, 0x0, 0x1}, {0x0, 0x4, 0x9, 0x1}, {0x7, 0x8, 0xfff, 0x6}, {0x8000, 0x4, 0x3f, 0x10000}, {0x7fff, 0x3f, 0x3, 0x200}, {0x2, 0x7, 0x80000001, 0x4}], {0x6, 0x1, 0xffff76b1, 0x7}, {0x0, 0x1f, 0x8, 0x7}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x35}, {0x64}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x2, 0x0) 12:08:16 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x3d}, {0x64}, {0x4006, 0x0, 0x0, 0x1c}]}) syz_emit_ethernet(0x35c, &(0x7f0000000000)="b6") 12:08:16 executing program 1: munmap(&(0x7f00001ef000/0x4000)=nil, 0x4000) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x1, 0x0, 0x0, 0x20000000, 0x200000], [], [], [], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}]}}) shmget(0x0, 0x2000, 0xc00, &(0x7f00001f0000/0x2000)=nil) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000000)=0xbd04) 12:08:16 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x24, 0x0, 0x0, 0x6}, {0x64}, {0x6, 0x0, 0x10}]}) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0x80047470, &(0x7f0000000000)=0x8001) ioctl$TIOCCONS(r1, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000040)) dup2(r1, r0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) 12:08:16 executing program 1: r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, "0002000008dfcf5fb400"}) poll(&(0x7f0000000000)=[{r0, 0xfffffffffffffffd}], 0x2000000000000048, 0x0) ioctl$TIOCNXCL(r0, 0x2000740e) nanosleep(&(0x7f0000001c40)={0xf0, 0x7fefffff}, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0xf8b4, 0x0, 0x10000fe, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0xf8b4, 0x0, 0x10000fe, 0x0) kqueue() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) ioctl$BIOCVERSION(r4, 0x40044271, &(0x7f0000000000)) pwrite(r3, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 12:08:16 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x3a0914c44f7b202c, 0x1b00) r0 = open(&(0x7f0000000000)='./bus\x00', 0x400000003fd, 0x15) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)="8ff08093ab4f66706e0a07c40da82798b6b81a0d73a0987e5669c777f342458ad93fd020f394cb1faef9ffffffffffffff46aaaac23763c976f6401725ac2b1d115ee6e59c0bd387640900c1314723", 0x4f}], 0x1, 0x0, 0x0) execve(0x0, 0x0, 0x0) 12:08:17 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x8613a) r0 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r1, &(0x7f0000000040)="670dc3", 0x3) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080), 0xc) write(r1, &(0x7f0000000100)="220e2a", 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x44001000e}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) r2 = accept$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x2433, r2, 0x0, 0x3) 12:08:17 executing program 0: r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x9130fbf, 0x0, 0x4000000, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) munmap(&(0x7f00001ef000/0x4000)=nil, 0x4000) ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x200000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x202]}}) vm_impl_init_vmx: uvm_share failed (22) failed to init arch-specific features for vm 0x0xffff800015963658 12:08:17 executing program 1: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0x10) r1 = socket(0x10000000002, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) r2 = kqueue() r3 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r3, &(0x7f0000000040)="670dc3", 0x3) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000080), 0xc) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000140)=0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0) write(r5, &(0x7f0000000040)="670dc3", 0x3) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000080), 0xc) accept$inet6(r4, &(0x7f0000000280), &(0x7f0000000300)=0x3) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x10000) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) mkdir(&(0x7f00000001c0)='./bus\x00', 0x4) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), &(0x7f00000005c0)=0xffffffffffffff11) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r8, &(0x7f0000000380)={0x0, 0xffffffffffffff2f, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x379}, 0x400) r9 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r9, 0x80047470, &(0x7f0000000000)=0x8001) ioctl$TIOCCONS(r9, 0x80047460, &(0x7f0000000340)=0x8) ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f00000000c0)={0xa9e, 0x0, 0x0, 0x0, "4287f6452a105d7ea3c06a6c7790dbb728beab8c"}) ioctl$TIOCGTSTAMP(r9, 0x4010745b, &(0x7f0000000040)) r10 = accept$unix(r9, &(0x7f0000000340)=@file={0x0, ""/27}, &(0x7f0000000580)=0x1d) read(r10, &(0x7f0000000800)=""/229, 0xe5) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r11 = openat$pci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pci\x00', 0x100, 0x0) kevent(r2, &(0x7f0000000400)=[{{r1}, 0xfffffffffffffffa, 0x79, 0xfffff, 0x8000, 0x401}, {{r3}, 0x0, 0x4, 0x20000040, 0x8000, 0x9}, {{r4}, 0xfffffffffffffffd, 0x20, 0x40000000}, {{r5}, 0xfffffffffffffffd, 0x1, 0x80000000, 0xffffffffffff3a9d, 0x1}, {{r6}, 0xfffffffffffffffa, 0x2, 0x40, 0xada, 0x2}, {{r7}, 0x2, 0x14, 0x1, 0x4e6e, 0xff}, {{r2}, 0xfffffffffffffffe, 0x33, 0x80000000, 0x1, 0x3}, {{r4}, 0xfffffffffffffffc, 0x4, 0x2, 0x0, 0x2}, {{r8}, 0xfffffffffffffff9, 0x596fdcdf4125851d, 0x1, 0x10001, 0x99c}, {{r11}, 0xfffffffffffffffd, 0x4, 0xa0fe0d810eae4a54, 0x7c0, 0x101}], 0xffc, 0x0, 0xffffffffffffffff, 0x0) uvm_fault(0xffffffff82513c48, 0xffff800000abd000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at uvm_unmap_remove+0x3eb: movq 0x100(%r15),%r15 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xffffffff82513c48, 0xffff800000abd000, 0, 1) -> e uvm_unmap_remove(ffff800000abcf00,0,1ef000,ffff800014938a00,0,1) at uvm_unmap_remove+0x3eb end trace frame: 0xffff800014938ab0, count: 0 ddb> trace uvm_unmap_remove(ffff800000abcf00,0,1ef000,ffff800014938a00,0,1) at uvm_unmap_remove+0x3eb uvm_share(ffff800000abcf00,0,7,fffffd803f012990,20000000,200000) at uvm_share+0x55b vm_impl_init_vmx(ffff800015963658,ffff8000ffff8518) at vm_impl_init_vmx+0xf1 vm_create(ffff800000a8a800,ffff8000ffff8518) at vm_create+0x193 VOP_IOCTL(fffffd803b014680,c5005601,ffff800000a8a800,1,fffffd803f7c6a20,ffff8000ffff8518) at VOP_IOCTL+0x88 vn_ioctl(fffffd802d6db178,c5005601,ffff800000a8a800,ffff8000ffff8518) at vn_ioctl+0xb7 sys_ioctl(ffff8000ffff8518,ffff800014938e58,ffff800014938ea0) at sys_ioctl+0x5b9 syscall(ffff800014938f20) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdcede6ec690, count: -9 ddb> show registers rdi 0 rsi 0 rbp 0xffff8000149389d0 rbx 0 rdx 0x26da __ALIGN_SIZE+0x16da rcx 0xffff800016b41000 rax 0xffff800000abcf00 r8 0 r9 0x1 r10 0x380346d29163835f r11 0x5b60c47e77dd156c r12 0 r13 0xfffffd802d74d420 r14 0x10000 __ALIGN_SIZE+0xf000 r15 0xffff800000abcf00 rip 0xffffffff8212be9b uvm_unmap_remove+0x3eb cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800014938920 ss 0x10 uvm_unmap_remove+0x3eb: movq 0x100(%r15),%r15 ddb> show proc PROC (syz-executor.0) pid=130360 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff96d0,0xffff8000ffff2028 process=0xffff8000ffff6a90 user=0xffff800014933000, vmspace=0xfffffd803f012990 estcpu=36, cpticks=58, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 67507 219937 17883 0 2 0 syz-executor.0 *67507 130360 17883 0 7 0x4000000 syz-executor.0 67507 370654 17883 0 3 0x4000080 fsleep syz-executor.0 17883 83734 95473 0 2 0x482 syz-executor.0 98396 466167 95473 0 2 0x2 syz-executor.1 95473 260656 88477 0 3 0x82 kqread syz-fuzzer 95473 518759 88477 0 3 0x4000082 nanosleep syz-fuzzer 95473 388087 88477 0 3 0x4000082 thrsleep syz-fuzzer 95473 464563 88477 0 3 0x4000082 thrsleep syz-fuzzer 95473 444949 88477 0 3 0x4000082 thrsleep syz-fuzzer 95473 215308 88477 0 2 0x4000482 syz-fuzzer 95473 466462 88477 0 3 0x4000082 thrsleep syz-fuzzer 88477 75181 63947 0 3 0x10008a pause ksh 63947 285108 73861 0 3 0x92 select sshd 93678 296669 1 0 3 0x100083 ttyin getty 73861 377891 1 0 3 0x80 select sshd 48387 408680 12340 73 3 0x100090 kqread syslogd 12340 146634 1 0 3 0x100082 netio syslogd 43915 108033 1 77 3 0x100090 poll dhclient 92630 191750 1 0 3 0x80 poll dhclient 61304 40705 0 0 2 0x14200 zerothread 71730 224858 0 0 3 0x14200 aiodoned aiodoned 89612 416239 0 0 3 0x14200 syncer update 1046 405262 0 0 3 0x14200 cleaner cleaner 79673 379782 0 0 3 0x14200 reaper reaper 59654 181781 0 0 3 0x14200 pgdaemon pagedaemon 73226 105745 0 0 3 0x14200 bored crynlk 8820 93775 0 0 3 0x14200 bored crypto 517 309385 0 0 3 0x40014200 acpi0 acpi0 12076 492012 0 0 3 0x14200 bored softnet 62860 202982 0 0 3 0x14200 bored systqmp 26700 190213 0 0 3 0x14200 bored systq 81663 117696 0 0 3 0x40014200 bored softclock 79753 198415 0 0 3 0x40014200 idle0 51158 425973 0 0 3 0x14200 bored smr 1 93581 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9455 6326K 6714K 78643K 10697 0 pcb 13 8K 8K 78643K 37 0 rtable 105 3K 3K 78643K 193 0 ifaddr 46 11K 11K 78643K 46 0 counters 19 16K 16K 78643K 19 0 ioctlops 1 2K 2K 78643K 26 0 iov 0 0K 16K 78643K 56 0 mount 1 1K 1K 78643K 1 0 vnodes 1215 76K 76K 78643K 1261 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 6 1K 1K 78643K 7 0 sem 12 0K 0K 78643K 44 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 5 13K 25K 78643K 90 0 proc 47 38K 63K 78643K 360 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 7 0 in_multi 40 2K 2K 78643K 40 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 30 132K 132K 78643K 30 0 exec 0 0K 1K 78643K 193 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 112 38K 38K 78643K 1069 0 UVM aobj 28 2K 2K 78643K 28 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 26 0 NDP 6 0K 0K 78643K 10 0 temp 96 3554K 3628K 78643K 7479 0 kqueue 0 0K 0K 78643K 6 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 rtpcb 96 21 0 19 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 95 0 87 1 0 1 1 0 8 0 syncache 280 5 0 5 2 1 1 1 0 8 1 tcpqe 32 87 0 87 1 0 1 1 0 8 1 tcpcb 640 64 0 60 2 0 2 2 0 8 1 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 45 0 45 1 0 1 1 0 8 1 inpcb 280 134 0 127 2 0 2 2 0 8 1 nd6 48 4 0 0 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 212 0 0 14 0 14 14 0 8 0 art_table 32 213 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 41 0 20 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 42 0 32 1 0 1 1 0 8 0 shmpl 112 26 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1494 0 97 46 0 46 46 0 8 0 ffsino 240 1494 0 97 83 0 83 83 0 8 0 nchpl 144 1832 0 224 60 0 60 60 0 8 0 uvmvnodes 72 1573 0 0 29 0 29 29 0 8 0 vnodes 208 1573 0 0 83 0 83 83 0 8 0 namei 1024 4569 0 4568 1 0 1 1 0 8 0 vcpupl 1984 3 0 0 1 0 1 1 0 8 0 vmpool 520 5 0 1 1 0 1 1 0 8 0 scxspl 208 5051 0 5051 8 1 7 7 0 8 7 plimitpl 152 20 0 13 1 0 1 1 0 8 0 sigapl 432 260 0 247 2 0 2 2 0 8 0 futexpl 56 2393 0 2392 1 0 1 1 0 8 0 knotepl 112 80 0 61 2 0 2 2 0 8 1 kqueuepl 104 36 0 32 1 0 1 1 0 8 0 pipepl 128 236 0 217 3 1 2 2 0 8 1 fdescpl 424 261 0 247 2 0 2 2 0 8 0 filepl 120 1602 0 1503 5 0 5 5 0 8 2 lockfpl 104 42 0 41 1 0 1 1 0 8 0 lockfspl 48 8 0 7 1 0 1 1 0 8 0 sessionpl 128 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 88 0 81 1 0 1 1 0 8 0 zombiepl 144 247 0 247 2 1 1 1 0 8 1 processpl 896 275 0 247 4 0 4 4 0 8 0 procpl 648 364 0 328 4 0 4 4 0 8 0 sockpl 384 252 0 235 4 0 4 4 0 8 2 mcl64k 65536 5 0 5 1 0 1 1 0 8 1 mcl8k 8192 9 0 9 1 0 1 1 0 8 1 mcl4k 4096 15 0 15 2 1 1 1 0 8 1 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 68986 0 68947 15 5 10 12 0 8 4 mtagpl 80 6 0 2 2 1 1 1 0 8 0 mbufpl 256 109340 0 109241 27 9 18 25 0 8 8 bufpl 280 6337 0 1491 347 0 347 347 0 8 0 anonpl 16 52488 0 28764 98 2 96 96 0 62 0 amapchunkpl 152 1399 0 1234 9 0 9 9 0 158 2 amappl16 192 1904 0 578 68 1 67 67 0 8 0 amappl14 176 83 0 74 1 0 1 1 0 8 0 amappl12 160 6 0 4 2 1 1 1 0 8 0 amappl11 152 50 0 39 1 0 1 1 0 8 0 amappl10 144 11 0 9 1 0 1 1 0 8 0 amappl9 136 586 0 581 1 0 1 1 0 8 0 amappl8 128 177 0 148 1 0 1 1 0 8 0 amappl7 120 35 0 30 1 0 1 1 0 8 0 amappl6 112 56 0 48 1 0 1 1 0 8 0 amappl5 104 141 0 128 1 0 1 1 0 8 0 amappl4 96 467 0 440 1 0 1 1 0 8 0 amappl3 88 108 0 103 1 0 1 1 0 8 0 amappl2 80 1296 0 1228 4 2 2 3 0 8 0 amappl1 72 14148 0 13733 26 14 12 20 0 8 2 amappl 80 609 0 562 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 27 0 0 1 0 1 1 0 8 0 uaddrrnd 24 266 0 247 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 266 0 247 1 0 1 1 0 8 0 vmmpekpl 168 6212 0 6189 2 0 2 2 0 8 0 vmmpepl 168 39692 0 37265 139 12 127 127 0 357 21 vmsppl 272 260 0 247 2 0 2 2 0 8 1 pdppl 4096 538 0 499 6 0 6 6 0 8 1 pvpl 32 150672 0 123930 218 2 216 216 0 265 0 pmappl 200 265 0 248 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 158 0 17 5 0 5 5 0 8 0