l, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:23 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:23 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:23 executing program 4:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)

17:12:23 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:23 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:23 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:23 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:23 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:23 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
geteuid()

17:12:23 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:23 executing program 1:
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:24 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:24 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:24 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:24 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:24 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:24 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:24 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:24 executing program 0:
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:24 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:24 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:24 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:24 executing program 1:
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:25 executing program 0:
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:25 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:25 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:25 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:25 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:25 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:25 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:25 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:25 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:25 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:25 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:26 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:26 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:26 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:26 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:26 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:26 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:26 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:26 executing program 1:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:26 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:26 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:26 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:26 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:26 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:26 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:26 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:26 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:27 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:27 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:27 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))

17:12:27 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:27 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:27 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:27 executing program 4:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:27 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))

17:12:27 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:27 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:27 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:27 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:28 executing program 4:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:28 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:28 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:28 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()

17:12:28 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:28 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:28 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:28 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:28 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:28 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()

17:12:28 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:28 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:28 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:28 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:29 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:29 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:29 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:29 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:29 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()

17:12:29 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:29 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:29 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:29 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:29 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:29 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:29 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()

17:12:29 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:30 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:30 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:30 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:30 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:30 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()

17:12:30 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:30 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:30 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:30 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:30 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:30 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:30 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:31 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:31 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:31 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:31 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:31 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:31 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:31 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:31 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:31 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:31 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:31 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:31 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:31 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:32 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:32 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:32 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:32 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:32 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:32 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:32 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:32 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:32 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:32 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:32 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:32 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:32 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:32 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:33 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:33 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:33 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:33 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:33 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:33 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:33 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:33 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:33 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:33 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:33 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:33 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:33 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:33 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:34 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:34 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:34 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:34 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:34 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:34 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:34 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:34 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:34 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:34 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:34 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:34 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:35 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:35 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:35 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:35 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:35 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:35 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:35 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:35 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:35 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:35 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:35 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:35 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:35 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:35 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)

17:12:36 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:36 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:36 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:36 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:36 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)

17:12:36 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:36 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:36 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:36 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)

17:12:36 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:36 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:36 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:36 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)

17:12:36 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:36 executing program 1:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:37 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:37 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)

17:12:37 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:37 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:37 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:37 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:37 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)

17:12:37 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:37 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:37 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:37 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:37 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:37 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:37 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:37 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:38 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:38 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:38 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:38 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:38 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:38 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:38 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:38 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:38 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:38 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:38 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:38 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:38 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:39 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:39 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:39 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:39 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:39 executing program 1:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:39 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:39 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:39 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:39 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
r2 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r2, 0x0)
r3 = geteuid()
setuid(r3)

17:12:39 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:39 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)

17:12:39 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:39 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:39 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)

17:12:39 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
r2 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r2, 0x0)
r3 = geteuid()
setuid(r3)

17:12:39 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
r2 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r2, 0x0)
r3 = geteuid()
setuid(r3)

17:12:40 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:40 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)

17:12:40 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
r2 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r2, 0x0)
r3 = geteuid()
setuid(r3)

17:12:40 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:40 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
r2 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r2, 0x0)
r3 = geteuid()
setuid(r3)

17:12:40 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)

17:12:40 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:40 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:40 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:40 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:40 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)

17:12:41 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:41 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)

17:12:41 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:41 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:41 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:41 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:41 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:41 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:41 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:41 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:41 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:42 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:42 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:42 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:42 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:42 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:42 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:42 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:42 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:42 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r0, 0x0)
getegid()
geteuid()

17:12:42 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:42 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r0, 0x0)
getegid()
geteuid()

17:12:42 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r0, 0x0)
getegid()
geteuid()

17:12:42 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:43 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:43 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:43 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:43 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r0, 0x0)
getegid()
geteuid()

17:12:43 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:43 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:43 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:43 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:43 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:43 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:43 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:43 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:43 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:43 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:43 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:43 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:43 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:44 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:44 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:44 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:44 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:44 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:44 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:44 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:44 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:44 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:44 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:44 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:44 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:44 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:44 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:45 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:45 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:45 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:45 executing program 5:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{0x0}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:45 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:45 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:45 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:45 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:45 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:45 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:45 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:45 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:45 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:46 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:46 executing program 4:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:46 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:46 executing program 0:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:46 executing program 3:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:46 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:46 executing program 1:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:46 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:46 executing program 3:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:46 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:46 executing program 0:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:46 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:46 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:47 executing program 0:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:47 executing program 1:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:47 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:47 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:47 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:47 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:47 executing program 0:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:47 executing program 1:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:47 executing program 3:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:47 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:47 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:47 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:47 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:47 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:48 executing program 3:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:48 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:48 executing program 4:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:48 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:48 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:48 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:48 executing program 3:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:48 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:48 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:48 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:48 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:48 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:48 executing program 3:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:49 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:49 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:49 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:49 executing program 1:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:49 executing program 3:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:49 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:49 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:49 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:49 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:49 executing program 1:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:49 executing program 3:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:49 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:50 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:50 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:50 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:50 executing program 1:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:50 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)

17:12:50 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:50 executing program 5:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:50 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:50 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:50 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:50 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:50 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:50 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:51 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:51 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:51 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r0, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
getegid()
geteuid()

17:12:51 executing program 5:
r0 = syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:51 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:51 executing program 0:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:51 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:51 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:51 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:51 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:51 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:52 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:52 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:52 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r1, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:52 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:52 executing program 4:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:52 executing program 3:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:52 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:52 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:52 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:52 executing program 4:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:52 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:52 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:53 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:53 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:53 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:53 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:53 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:53 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:53 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:53 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:53 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:53 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:53 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:53 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:54 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:54 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:54 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:54 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:54 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:54 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:54 executing program 1:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:54 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:54 executing program 5:
syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:54 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:54 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:54 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
geteuid()

17:12:54 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:55 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:55 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:55 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:55 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:55 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
geteuid()

17:12:55 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
geteuid()

17:12:55 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0)
r4 = geteuid()
setuid(r4)

17:12:55 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:55 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:55 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r3 = geteuid()
setuid(r3)

17:12:55 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
geteuid()

17:12:55 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:56 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:56 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:56 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:56 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r3 = geteuid()
setuid(r3)

17:12:56 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
setuid(0x0)

17:12:56 executing program 1:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
r2 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r2, 0x0)
r3 = geteuid()
setuid(r3)

17:12:56 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:56 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:56 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)

17:12:56 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r3 = geteuid()
setuid(r3)

17:12:56 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
setuid(0x0)

17:12:56 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
setuid(0x0)

17:12:57 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r3 = geteuid()
setuid(r3)

17:12:57 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r3 = geteuid()
setuid(r3)

17:12:57 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)

17:12:57 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
setuid(0x0)

17:12:57 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
geteuid()
setuid(0x0)

17:12:57 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0)
setuid(0x0)

17:12:57 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)

17:12:57 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)

17:12:57 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:57 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
geteuid()
setuid(0x0)

17:12:57 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:12:57 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:57 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)

17:12:57 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:58 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:58 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
geteuid()
setuid(0x0)

17:12:58 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
geteuid()
setuid(0x0)

17:12:58 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:12:58 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:12:58 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:58 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:58 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
geteuid()
setuid(0x0)

17:12:58 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = geteuid()
setuid(r3)

17:12:58 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r3, 0x0)
geteuid()
setuid(0x0)

17:12:58 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:58 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:12:59 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:59 executing program 2:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:59 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:12:59 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = geteuid()
setuid(r3)

17:12:59 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:59 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = geteuid()
setuid(r3)

17:12:59 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:12:59 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = geteuid()
setuid(r3)

17:12:59 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r3 = geteuid()
setuid(r3)

17:12:59 executing program 1:
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:12:59 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:12:59 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:00 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:13:00 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:00 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:13:00 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:00 executing program 5:
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:00 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:00 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:00 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:00 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:13:00 executing program 1:
syz_io_uring_setup(0x68ce, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:00 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:00 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:01 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:01 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:01 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:13:01 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

[ 3091.708769][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[ 3091.715154][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
17:13:01 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:01 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:01 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:01 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:01 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:01 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:01 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:13:01 executing program 5:
read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8)
prctl$PR_PAC_RESET_KEYS(0x36, 0x4)
syz_io_uring_complete(0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:02 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:02 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:02 executing program 2:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:02 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
getegid()
geteuid()

17:13:02 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:02 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:02 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:02 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r4 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r4, 0x0)
r5 = geteuid()
setuid(r5)

17:13:02 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0xf36a, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:02 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:02 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:02 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:03 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:03 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:03 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:03 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r5 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r5, 0x0)
r6 = geteuid()
setuid(r6)

17:13:03 executing program 4:
r0 = io_uring_setup(0x7dbd, &(0x7f0000000000)={0x0, 0x56cf, 0x1, 0x2, 0x61})
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:03 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
geteuid()

17:13:03 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:03 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:03 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:03 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
geteuid()

17:13:03 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:03 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:03 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:04 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
geteuid()

17:13:04 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:04 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:04 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:04 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:04 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:04 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:04 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()
geteuid()

17:13:04 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:04 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:04 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:05 executing program 2:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)

17:13:05 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:05 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()
geteuid()

17:13:05 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:05 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:05 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:05 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
geteuid()

17:13:05 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:05 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:05 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:05 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:05 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:05 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:05 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:06 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:06 executing program 0:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:06 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:06 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:06 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:06 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:06 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:06 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:06 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:06 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)

17:13:07 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)

17:13:07 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:07 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
geteuid()

17:13:07 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:07 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r5 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r5, 0x0)
r6 = geteuid()
setuid(r6)

17:13:07 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:07 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:07 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)

17:13:07 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:07 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:07 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()

17:13:08 executing program 0:
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x6be9, &(0x7f0000000080)={0x0, 0x4, 0x10, 0xfc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{}, {}, {}, {<r1=>0x0}]})
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000300)={r1, 0x9})
syz_io_uring_setup(0x4a96, &(0x7f0000000000)={0x0, 0xe023, 0x4, 0x2, 0xc5, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180))
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x800)
ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000400)={r1, 0x27})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000380)={<r4=>0x0})
ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000003c0)={r4, 0x30})
syz_io_uring_complete(r2)

17:13:08 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:08 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r5 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r5, 0x0)
r6 = geteuid()
setuid(r6)

17:13:08 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r5 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r5, 0x0)
r6 = geteuid()
setuid(r6)

17:13:08 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r3, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
r5 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r5, 0x0)
r6 = geteuid()
setuid(r6)

17:13:08 executing program 3:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:08 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:08 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x12, r0, 0x0)

17:13:08 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:08 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
setgid(0x0)
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:08 executing program 3:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:08 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:08 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:08 executing program 1:
munlockall()
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xfffffffe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

17:13:09 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:09 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:09 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r2, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:09 executing program 3:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:09 executing program 0:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:09 executing program 4:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:09 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:09 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:09 executing program 3:
r0 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r0, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:09 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)

17:13:09 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)

17:13:09 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()
r6 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r6, 0x0)
r7 = geteuid()
setuid(r7)

17:13:10 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:10 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
geteuid()

17:13:10 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:10 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:10 executing program 4:
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:10 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:10 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:10 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:10 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)

17:13:10 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
getegid()
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:10 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r7 = geteuid()
setuid(r7)

17:13:11 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)

17:13:11 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)

17:13:11 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:11 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:11 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:11 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:11 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:11 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r7 = geteuid()
setuid(r7)

17:13:11 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0)
r7 = geteuid()
setuid(r7)

17:13:11 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:11 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:11 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:12 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:12 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:12 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:12 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:12 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:12 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:12 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:12 executing program 5:
syz_io_uring_setup(0x34d, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0))
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_io_uring_setup(0x1504, &(0x7f0000000000)={0x0, 0xa52e, 0x2, 0x0, 0xb0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

17:13:12 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))

17:13:12 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:12 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:12 executing program 1:
syz_io_uring_setup(0x34d, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0))
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_io_uring_setup(0x1504, &(0x7f0000000000)={0x0, 0xa52e, 0x2, 0x0, 0xb0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

17:13:13 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r7 = geteuid()
setuid(r7)

17:13:13 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)

17:13:13 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)

17:13:13 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:13 executing program 2:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:13 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)

17:13:13 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
geteuid()

17:13:13 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)

17:13:13 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:13 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
geteuid()

17:13:13 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
r8 = geteuid()
setuid(r8)

17:13:13 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
geteuid()

17:13:14 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
geteuid()

17:13:14 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
r8 = geteuid()
setuid(r8)

17:13:14 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)

17:13:14 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0)
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:14 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:14 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)

17:13:14 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
r8 = geteuid()
setuid(r8)

17:13:14 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0)
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:14 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)

17:13:14 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)

17:13:14 executing program 2:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
setuid(0x0)

17:13:14 executing program 4:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
setuid(0x0)

17:13:15 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0)
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:15 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xb2d, 0x12002)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8900)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0)
read$fb(r0, 0x0, 0x1b)

17:13:15 executing program 0:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
setuid(0x0)

17:13:15 executing program 1:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
geteuid()

17:13:15 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xb2d, 0x12002)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8900)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
clock_getres(0x4, &(0x7f0000000200))
read$fb(0xffffffffffffffff, 0x0, 0x1b)

17:13:15 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xb2d, 0x12002)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8900)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
clock_getres(0x4, &(0x7f0000000200))
read$fb(0xffffffffffffffff, 0x0, 0x1b)

17:13:15 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xb2d, 0x12002)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8900)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
clock_getres(0x4, &(0x7f0000000200))
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0)
read$fb(r2, 0x0, 0x1b)

17:13:15 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:15 executing program 0:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0)
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:15 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xb2d, 0x12002)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8900)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
clock_getres(0x4, &(0x7f0000000200))
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0)
read$fb(r2, 0x0, 0x1b)

17:13:15 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xb2d, 0x12002)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8900)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
clock_getres(0x4, &(0x7f0000000200))
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0)
read$fb(r2, 0x0, 0x1b)
syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)

17:13:15 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xb2d, 0x12002)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8900)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
clock_getres(0x4, &(0x7f0000000200))
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0)
read$fb(r2, 0x0, 0x1b)
syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)

17:13:15 executing program 5:
r0 = syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10010, r4, 0x1ff)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r2, 0x0)
r6 = getegid()
setgid(r6)
r7 = syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x2010, r7, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000002c0), 0x60}, 0x20)
r8 = geteuid()
setuid(r8)

17:13:16 executing program 2:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x101ff}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:16 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
sendmsg$rds(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x7fff, 0x6, 0x8, 0xccf8, 0xae42, 0x28, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x80, 0x7ed9}, {&(0x7f0000000480)=""/110, 0x6e}, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/138, 0x8a}], 0x7, 0x2, 0x7c3a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7ff80}, &(0x7f0000000a40)=0x8, &(0x7f0000000a80)=0x9282, 0x5a000c85, 0xffffffff, 0x8, 0x1cc000, 0x0, 0xf5}}], 0xf8, 0x200000c0}, 0x4004084)
bind$rds(r0, 0x0, 0x0)
socket(0x9, 0xa, 0x36cdf0db)
r3 = syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)
connect$rds(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10)
sendmsg$rds(r3, &(0x7f0000001200)={&(0x7f0000000c00)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/164, 0xa4}], 0x4, &(0x7f00000012c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x59a}, &(0x7f0000001140)=0xfffffffffffffffb, &(0x7f0000001280)=0x6, 0x3f, 0x5, 0x3, 0x8d38, 0x30, 0xac9}}], 0x58, 0xc044001}, 0x40800)

17:13:16 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:16 executing program 1:
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xd52e86674bbf6574, 0xffffffffffffffff, 0x0)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r0, r1, &(0x7f00000013c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="a9409c6dd6e52f5f4e943a9d", 0xc}, {&(0x7f0000000100)="1475b6e345d4bac9d05fcd4934deea0aeb45f82c03873e99200f1d05a022de92708e5395fadefa09d8ae0ed3d3504cb2e756e0a720e3bb3c19ab8bb9259b24376b42ee571c68fda0a24a0b0494f468154465afdaa044b783902c4e6e703efd484a6024f31a9c506be4c9acd0d3b6e7", 0x6f}], 0x2, &(0x7f00000001c0)=[{0x88, 0x1, 0x3, "169da3aaeccb83014958fd2e67a73645836b89e1593d5208af3a37aad4e3885f257e073769cfa3198c6d190c2aba802cda248e3ec33c74889d4c786635ca16c65dfa721ed01d3ab694a38c87f4ed10918b1b25f65a8ecee5e574766c3bea07efea925a30830f010cf15df24bdae4e3ed4a67bc7a"}, {0xa0, 0x38a, 0x2, "416044fc6fef9d5794ce6bc7f6b8b29699b82f3fd3ad7b382a9f68180d7192e64bdb68e9de57480dd4b22e8d6b005adc5aca866add8025bae4dcd15256f282cabd928cf84ae441dad9fdff4292bbe834d2d713c8d3b07e641573e7d6c35d366743f1492c846ebd02aa101e94a1cd213b1486bbaa748a056ed77a0c3e0140fb5e121ae22b07be291a64c63273d9116825"}, {0x1010, 0x10c, 0x401, "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"}, {0x20, 0x11, 0x8, "fd09d5796759e5a9d45aae"}, {0x30, 0x196, 0x8, "0b51375cd3590c771363e44012dc6992d5a3a9c701353fc73117710c"}], 0x1188}, 0x0, 0x4004800, 0x1}, 0x8)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)

17:13:16 executing program 4:
r0 = socket(0xa, 0x4, 0x0)
bind$rds(r0, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x14000, 0x0)
accept(r1, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80)

17:13:16 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x4000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:16 executing program 2:
bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x0, 0x1, 0x6, 0x41}, 0x6)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)

17:13:16 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
sendmsg$rds(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x7fff, 0x6, 0x8, 0xccf8, 0xae42, 0x28, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x80, 0x7ed9}, {&(0x7f0000000480)=""/110, 0x6e}, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/138, 0x8a}], 0x7, 0x2, 0x7c3a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7ff80}, &(0x7f0000000a40)=0x8, &(0x7f0000000a80)=0x9282, 0x5a000c85, 0xffffffff, 0x8, 0x1cc000, 0x0, 0xf5}}], 0xf8, 0x200000c0}, 0x4004084)
bind$rds(r0, 0x0, 0x0)
socket(0x9, 0xa, 0x36cdf0db)
r3 = syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)
connect$rds(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10)
sendmsg$rds(r3, &(0x7f0000001200)={&(0x7f0000000c00)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/164, 0xa4}], 0x4, &(0x7f00000012c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x59a}, &(0x7f0000001140)=0xfffffffffffffffb, &(0x7f0000001280)=0x6, 0x3f, 0x5, 0x3, 0x8d38, 0x30, 0xac9}}], 0x58, 0xc044001}, 0x40800)

17:13:16 executing program 1:
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xd52e86674bbf6574, 0xffffffffffffffff, 0x0)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r0, r1, &(0x7f00000013c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="a9409c6dd6e52f5f4e943a9d", 0xc}, {&(0x7f0000000100)="1475b6e345d4bac9d05fcd4934deea0aeb45f82c03873e99200f1d05a022de92708e5395fadefa09d8ae0ed3d3504cb2e756e0a720e3bb3c19ab8bb9259b24376b42ee571c68fda0a24a0b0494f468154465afdaa044b783902c4e6e703efd484a6024f31a9c506be4c9acd0d3b6e7", 0x6f}], 0x2, &(0x7f00000001c0)=[{0x88, 0x1, 0x3, "169da3aaeccb83014958fd2e67a73645836b89e1593d5208af3a37aad4e3885f257e073769cfa3198c6d190c2aba802cda248e3ec33c74889d4c786635ca16c65dfa721ed01d3ab694a38c87f4ed10918b1b25f65a8ecee5e574766c3bea07efea925a30830f010cf15df24bdae4e3ed4a67bc7a"}, {0xa0, 0x38a, 0x2, "416044fc6fef9d5794ce6bc7f6b8b29699b82f3fd3ad7b382a9f68180d7192e64bdb68e9de57480dd4b22e8d6b005adc5aca866add8025bae4dcd15256f282cabd928cf84ae441dad9fdff4292bbe834d2d713c8d3b07e641573e7d6c35d366743f1492c846ebd02aa101e94a1cd213b1486bbaa748a056ed77a0c3e0140fb5e121ae22b07be291a64c63273d9116825"}, {0x1010, 0x10c, 0x401, "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"}, {0x20, 0x11, 0x8, "fd09d5796759e5a9d45aae"}, {0x30, 0x196, 0x8, "0b51375cd3590c771363e44012dc6992d5a3a9c701353fc73117710c"}], 0x1188}, 0x0, 0x4004800, 0x1}, 0x8)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)

17:13:16 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:16 executing program 5:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:16 executing program 4:
syz_io_uring_setup(0x342, &(0x7f00000002c0)={0x0, 0xac22, 0x27, 0x2, 0x324}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000380)=@in={0x2, 0x4e23, @local}}, 0xfffffffc)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x480000)

17:13:16 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0, 0x1})
r3 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r3, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0, 0x1})
clock_getres(0x1, &(0x7f0000000200))
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, r1, 0x0, r2, 0x0, r4, r5, r6, 0x0], 0x9})

17:13:16 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
sendmsg$rds(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x7fff, 0x6, 0x8, 0xccf8, 0xae42, 0x28, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x80, 0x7ed9}, {&(0x7f0000000480)=""/110, 0x6e}, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/138, 0x8a}], 0x7, 0x2, 0x7c3a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7ff80}, &(0x7f0000000a40)=0x8, &(0x7f0000000a80)=0x9282, 0x5a000c85, 0xffffffff, 0x8, 0x1cc000, 0x0, 0xf5}}], 0xf8, 0x200000c0}, 0x4004084)
bind$rds(r0, 0x0, 0x0)
socket(0x9, 0xa, 0x36cdf0db)
r3 = syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)
connect$rds(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10)
sendmsg$rds(r3, &(0x7f0000001200)={&(0x7f0000000c00)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/164, 0xa4}], 0x4, &(0x7f00000012c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x59a}, &(0x7f0000001140)=0xfffffffffffffffb, &(0x7f0000001280)=0x6, 0x3f, 0x5, 0x3, 0x8d38, 0x30, 0xac9}}], 0x58, 0xc044001}, 0x40800)

17:13:16 executing program 1:
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xd52e86674bbf6574, 0xffffffffffffffff, 0x0)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r0, r1, &(0x7f00000013c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="a9409c6dd6e52f5f4e943a9d", 0xc}, {&(0x7f0000000100)="1475b6e345d4bac9d05fcd4934deea0aeb45f82c03873e99200f1d05a022de92708e5395fadefa09d8ae0ed3d3504cb2e756e0a720e3bb3c19ab8bb9259b24376b42ee571c68fda0a24a0b0494f468154465afdaa044b783902c4e6e703efd484a6024f31a9c506be4c9acd0d3b6e7", 0x6f}], 0x2, &(0x7f00000001c0)=[{0x88, 0x1, 0x3, "169da3aaeccb83014958fd2e67a73645836b89e1593d5208af3a37aad4e3885f257e073769cfa3198c6d190c2aba802cda248e3ec33c74889d4c786635ca16c65dfa721ed01d3ab694a38c87f4ed10918b1b25f65a8ecee5e574766c3bea07efea925a30830f010cf15df24bdae4e3ed4a67bc7a"}, {0xa0, 0x38a, 0x2, "416044fc6fef9d5794ce6bc7f6b8b29699b82f3fd3ad7b382a9f68180d7192e64bdb68e9de57480dd4b22e8d6b005adc5aca866add8025bae4dcd15256f282cabd928cf84ae441dad9fdff4292bbe834d2d713c8d3b07e641573e7d6c35d366743f1492c846ebd02aa101e94a1cd213b1486bbaa748a056ed77a0c3e0140fb5e121ae22b07be291a64c63273d9116825"}, {0x1010, 0x10c, 0x401, "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"}, {0x20, 0x11, 0x8, "fd09d5796759e5a9d45aae"}, {0x30, 0x196, 0x8, "0b51375cd3590c771363e44012dc6992d5a3a9c701353fc73117710c"}], 0x1188}, 0x0, 0x4004800, 0x1}, 0x8)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)

17:13:16 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:16 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0, 0x1})
r3 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r3, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0, 0x1})
clock_getres(0x1, &(0x7f0000000200))
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, r1, 0x0, r2, 0x0, r4, r5, r6, 0x0], 0x9})

17:13:16 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
read$usbmon(r0, &(0x7f00000000c0)=""/216, 0xd8)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x75)
ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000040)=0x2)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

17:13:17 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3c00}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:17 executing program 1:
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xd52e86674bbf6574, 0xffffffffffffffff, 0x0)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r0, r1, &(0x7f00000013c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="a9409c6dd6e52f5f4e943a9d", 0xc}, {&(0x7f0000000100)="1475b6e345d4bac9d05fcd4934deea0aeb45f82c03873e99200f1d05a022de92708e5395fadefa09d8ae0ed3d3504cb2e756e0a720e3bb3c19ab8bb9259b24376b42ee571c68fda0a24a0b0494f468154465afdaa044b783902c4e6e703efd484a6024f31a9c506be4c9acd0d3b6e7", 0x6f}], 0x2, &(0x7f00000001c0)=[{0x88, 0x1, 0x3, "169da3aaeccb83014958fd2e67a73645836b89e1593d5208af3a37aad4e3885f257e073769cfa3198c6d190c2aba802cda248e3ec33c74889d4c786635ca16c65dfa721ed01d3ab694a38c87f4ed10918b1b25f65a8ecee5e574766c3bea07efea925a30830f010cf15df24bdae4e3ed4a67bc7a"}, {0xa0, 0x38a, 0x2, "416044fc6fef9d5794ce6bc7f6b8b29699b82f3fd3ad7b382a9f68180d7192e64bdb68e9de57480dd4b22e8d6b005adc5aca866add8025bae4dcd15256f282cabd928cf84ae441dad9fdff4292bbe834d2d713c8d3b07e641573e7d6c35d366743f1492c846ebd02aa101e94a1cd213b1486bbaa748a056ed77a0c3e0140fb5e121ae22b07be291a64c63273d9116825"}, {0x1010, 0x10c, 0x401, "74cf7b45fee74c8e9ed811c00956347a184d9592bacff5100a2ed63f89d53ebc0187f6d27ce00abe475771082985d7d948c634e740e8006dcc7c1a1fc710772fde4819b5414b06546ab961d94335844e0b172830a70c30c635e88d7f599bae00b9f2e16884a63d406dc96440a77559ab189cc6ca26832c3962f722254c8a0ffeb9c06a935593b5d98392f0cca5aa6d9767eb9dfc92a2f6d0aca459bb7a90cc64e8eecdbcb94e8eb5c7ea29655652b3b682b54016045bd2fb685f59f7bd1fd1b90b621ab57d06b5fed2bef5779119fa2570e46d536de41427bef4fc1197a4ef199d7a7c300ee7d7075d5ce1e616f75ec87b1aec861738b6076373011871812f30137c5c732af21a9bd52853064945ccb9f304fccab46e264ad7e83935b424f284e6fc1641628d85dc00c9519e80cba29e1125e94c47927eae683422f50973ddd408af6e6a2cc4548a4f26ba6c28764aaedab32ba11466c90d8bd48804f2d0a39e5b35d1a85d8131bf05f8250207f7e72766efbcf82fe1a1b05f3de79ef73c18e6330d8ad75bb29f512fbd86f00b31ff866af5ab71823f250f0992a2f1d997075fe341cf81eadc09b24b9105fb926b1facdfcd593793fca663f05dfacc0d5ab39c54a9468277485742eb06b7eec529e7c872bef9b46dad4688ac4ef61f16fa32089702cab82fd5cef27e0602d1c3c6325a19f757d6fa9551b5888316c6c2e749b5bafde5a919a43101eba44ddb1571c3c1ebfcb02e4a3dbaee4b538d6979301c8f17296c3fbcfd9babb894ebe346d2b8945207382ac81d38fa67063828188c0aa4df0c84fc6729be856c924e86bc3ce6b7e670d5cc915f853879a6955ff42ae7bf7e55f92a8961f468e69c94925b274bbbebf0c88c7753923beddb38aed846b3e9ae5dc238d9399fe907d1451124cf1661ac67f5cbbf5c1f6bce4adc4d018261ddce84aaecbc889490c96a6be6275ee512760c71768e1ba33e9bd8105f96416bd99ec036ddded03c132d549da2426706cb381a736d06a382ba390d2c0379d428a089dc514e472386c91b9c1b9cca849299f335ff5d5a25a67a97d8c17c618f2a1b49e7b41124894a199fb2e86d18759dcc6bfb14e904eba09a60459b0bfae72bcf2406b12e35003c8cac40ca1f8274568c73847dd924d0245a9fb5a5838836eb550ece3847119f25965648ec4e1f775485bfcb939c351e3121f86eaac008ec6cfa3342e300beacfa5a61ccacdfa5c1e3dac47b1fae99b0accc501fd248b64dab31b801322b1afd2f93053e7ab87a7ae4c50f98aa09cb57e7081d2ac74f8402a31e111ad2218f13e66e9289b604c44c313b91fa26bf5286961f64526f5eb7cafd404848b4cff8c0dba837c0da17567d68d2c85bb965bf7f819c5114f395df5a4d39d9c3f1cf20a5f5b178bffe3734785b9395344dd38e6d338f5bbe8ef533d1e476dac2b6ea3964d8f10c9cd354e7813c0ae9a21f480dcbec3a769a7ef6c7cb12f275b27e8b325c2d8ca017336035e1b09d8d1dba1fdb7b88e8dba360e119b47ced8f3e3cadaff2c2a360a2876949ba91054d66a432dc6354ad196c0eaf35692c0e83a475ac41661f1cc54649c032cbad58f6e4702e3e789a45aeee36250fc151fa0430badbab345b64603c03191b6ee2fd39f02cfb4952f797993e669244841fc4d19394113389dc549b6bb1838b6ab9898ee7e66381144b5f1527e8ab2eab0cb0908b24af2147ee7cbcf9e4ca850286e83111d42c228afcc8846f6fb35e096716308a94929f5e68886e96261764f5bcf9a0ce8eb12b4011c4fc540d00b99656291740210a5c22fdfcfac6a5b65319e45b824c384506dca273c91cfb6a95535bdbcb1f80fd184adf198f143dc05ecd974b0ce81f842fb417679acc1aac355d823a7ade6b02436145a484f6402a66ac4d6f228f9c97d3556d5a7c221ee9f874d6daec0277c9bb267cf46002d92624d335980a978d7a98e1008061605244a85d9bd15ea812a62e7a054786780eb89a664ec57f820adfabd08efb1a06bf8b4f07c4f1cb71383d9a6ee84ddf868d860a980ade90652fc93064aad5c3452cb96ff764edcb72e7a5107b6fac2cc1068d6d1285d02bb039be60cd133f9c8e419b1830333eea643cef2a521d0106fe27e92d42ce76aeda9460e9876786b235e5aa190814cd1473f01ec412afa34db259d14cebd2e7233d007391f242624e69245c81505a2da3361b3005e185da33a43451e8fd25233684853f7d9ae6302e83a91c1bab07700efeb8402924668f2798034f2490f0176fc8b2f96f76f1a06213eb73fb4a222731d97ad5fcab4679f65076066a357ebf7c0c4a8495a861f28edef9a1f236c6ab4a8822c0d7c66da09794c1872658fb29ef18c7ed22b762e0eae65a286c1753de04bc2fbad16e74ef9da2700846e00c115770a314a0ef1c02baed35c3f036a78d82051271304f816f1c0c065e851d505bd13ca1251eaac11d9b62e7164fbe0d8a01e68be4f3bb32747b9fa75d0afa2e6c2f165f854121e9b7406d916b6d4d07a00943ecc8e9c6db02f163b87115d391a3b4fbd672331071c4cb365e877c589b637348ed21ba7f6ffe5c3234aa5e07398c3e78633dbb01a90a49a257925b4f1356aecb16249de52254c6549a0e12d8a5a83f9cafe3803ae962e33499bde67ab9085890d20e1c6d72eb6708c93e8de0a5a4736a1e80b19f1f1096f2ba0c5ac61049dffc0963ce74c2f106cc9f576f8982d3946a0c5175ee2e076db240f6e4a89275075a1a0a4f675be7d62b11c1d4ba86756ea053020f3ec8f012bc8b687c1cbbf914ce3a5f3b1de47c0493145a9626ceb1241080ab5231cfe2d06e51aebb20efae03e3e3cf9f23f14796aa1b817c9e848c0d0bc537b482b74d7a3b2bf764ceebfadd6754faf42a6fc83dcdf49c04782b9706390d1c2d939c9f481e1d286879c05d159ba0e7eea2bd9e85d1c4cb9a0229c713ac064eefcebf0b8d9ece4ddb914623f07b678d90d903b009708c85d529c5c230432b00ab046cd589acffb41626a5b91b30ba74f52fde37153d06e5a8b862dd46580463005ed0c1558c644a8fe70d49db8f9b2362377952b4ca44a30980ea47ce643b86fdb5a4f074b0e8bb0276fa90d14caa3676dc7d56a070026586d5c0013db9548a814007befac19e0d0bf6e1b84fe87550ae56b8bf4089c3f69efbdc37055e52cf089d0f725bfd3506905dd1193a47d15772c0d2677691f57706b749dec7cbd105870204dc2ef1d28898d07d88483cc597a5287154efea4371d871e0436b817cf5ea112c29b67290e4d3ac05ad9d18aa3d6bae03b8ac4e7ca246b9d5929ab6c1bf91afbf59016de8138aa78c2aad9f91f90922423bab34fbd84809fe753a5000a9af7990431e9bdcfad2dccacf061d0c15c687075d39421d1487a8c95ab5f2a2ed8567f3a96d74c4823e441bd525347abfe3705d2cf48936c252c9734bc23ecd56240c41c2f50c5d9ff31dd69812e588d96c200a6b450fbffb93a71e392c812f2a71603f618b392ee8df40de189210c871f7f32b6ec6c4002cedb19a55236d6927efcd664eb1fa951dbcae45bc340fc12144ca8e163efb54a4901330658346994645a0c83f1ab787da20992c5139e1d5206ce3e9db0740b2a6421f46eb289c3fd5d56e1984117a53c08e936bf411a5e1b712ce8e31bdcbcc270aa25e2abe1dc4fd6f3b90d327fdfc38c33567d8757d8660e283f756031cef65b20e339a3573d6467bc06fbc76d62b60a63304dcdd8e4af5d41e42cd111237e172fe74d00813393aa863264f7c576b868e4806dff656d990904206797b313f5f85670b2f812b82698da37beacac2d6115498ec64c72acc5d3027bc4a33829233c9b9df07dc3ee534ded8f5941844c4d52238613a6ae7f5255a4f97559e911fd6a1421d24719674c9d0c8b480fb2b0f9013fbfb76e4be90cb5e68201b19f59e9f9ea6f513207096bfd6e8ba03c727b6561b8aa301b12d7d1023c3f669af1c1c0eb0e09b6a0b8d6b566074a1e49ca64dbe9c24d895d49eeced2b8e2d590dd571f1bb6bca71536475e9552241ea2ef2d25d84dbbb98718f7436bd41a207641d7503ef0d132ea347830d62e7602647d5a588352f967bd6fb0a7c6fed155fa7ba4703d287776f5d598334070047f940a2f60a8d77ac11e9b351a5e9ac1cd39df8f9b13f63daa096b7156b3f509b07e66345ca061291b9ce12258b8ccfde261fc69a1e1a520d27b4c8d37bd7c06bdae50f7c65109388e624e953acbbe5362fd636594c7eec93172c0cd47a8d4ef804c963145d1bbc174358eb5557392df4a80a31ee61598746bdb4b215b5d89f2b1628769591bc743f08f8a94a03dfe1540013872349fe3ac4d083e158ee70622581a2de05fc4f8ef92e7ad3ff634a8ce268a89dd23b6f377afb023ec5dbba92dcde54a3f32da00027ff801586b9b3e43980e583966270b4413edf0ad6b9d68680bcbfecf7959d1c5f4c107967eff04cc26866fa7be7a77b1bbf1715d1e0ea887127d9fb7ad6963d7c88153f119503963104c40dc901aceca16a2eadb0c0e07a7f43d09a30bde6a73c501e1c18f8ee37a69f24d5c8f7d839acc72ca458a04cfb8c54fc4a2741521f2eebb5ffbda799198e7ced1cf0ee63846491f95d23fc10e235b38642bce79484cc896d059c65bd93c7733608c299c527ec996fda55e3fab418bf6be14242f946eb0ee7810f45dd94e95e98baaa5e4a9c7b1c46dedd29dcd5756c45d75c458260742eb77906b33d07b7c413c2b4a63f6db36bc4ee9ccf2bff0cde94b82ee6366bad5fb9930a2444daadf5d4f24291d49514477017d45da26ee700a89bd9b1ed14b6f26c5c1bf97dcdef30d9dbfba87638866ada7cd0c86392315f0eb3b8180c7f10ef5d0403fd6e17e17ffc4aed364161afcfed8b2867b8448060f6966b4edd678413faa2e46e018381e460469e20cbfad5e098a12a7adf4f5dee74c95dfe276fb582c33621c88e625a340e444ef9c8c98e8c453934c5a8e112cf1ee3267e660f954d454b030ca82cb5d2ab80f3fc4b6f2562418270dcb5599baed77bd2c9ab56e0baac9466e1b2d9db378605ff5d95076da0d6bbfce605486fcf6d141fbaf1d382a0059a8b990e13044ca29e23db321577a03a8cf49401360c80272720d06356b00c561a46d6fd20a8170f8219886e7d286211ce48e2c36ff0d56c6984fe06139d0cf1ba1ab33ef66ffa87cbe4d8ebb1e43ad4c54b8b5ba24f920eded84a377066013ed9e01a5446fbd9fce1ee2850867b132d23dfbd8f4af63522ef788d37696130e47344dc4bf1c466e38df8dc031ea6641ed05cbbf5824040d158db3b3d2a47e559ff911bc7a1b7c3e8f0b10579422ecd9894160b50ff89342f891ae5374452a3cb57ce375bdae6d7dce8e4d36a087ac4fbf60be486286f866ddc3edaa487c0437f597b5f145bf8bf849f73ab03571e0d5f0435b3dd3e2dd882ad47527cc4f2239f9363960094c55cec5e03823f55647cfe28969b7c44c68b8e5f86b85ffe9fe5a6d7f1b127c9a94289eac0e5f74fef1fe7abfd418a15e013f852c412cf5a8b10e320142576adcd898f16c7ce9a8130e4ebcee3f688b363b4d1e411663960e09cb3da79899212666254c38517b7eadb2bf0dba90b1a61248f922bc82493fde534a6384724983c40cb2864804c224bb0d147b8d1e74a32f26c01bd3fe6f0b91113c139c9d988e4b2191ccc005273c39422622ac8f5adf800c677a009bd858a328cd19b918522317f867f1dbf5c47e614402ff4be877cdb3bdd6d4836c23bef1b74"}, {0x20, 0x11, 0x8, "fd09d5796759e5a9d45aae"}, {0x30, 0x196, 0x8, "0b51375cd3590c771363e44012dc6992d5a3a9c701353fc73117710c"}], 0x1188}, 0x0, 0x4004800, 0x1}, 0x8)

17:13:17 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
sendmsg$rds(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x7fff, 0x6, 0x8, 0xccf8, 0xae42, 0x28, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x80, 0x7ed9}, {&(0x7f0000000480)=""/110, 0x6e}, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/138, 0x8a}], 0x7, 0x2, 0x7c3a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7ff80}, &(0x7f0000000a40)=0x8, &(0x7f0000000a80)=0x9282, 0x5a000c85, 0xffffffff, 0x8, 0x1cc000, 0x0, 0xf5}}], 0xf8, 0x200000c0}, 0x4004084)
bind$rds(r0, 0x0, 0x0)
socket(0x9, 0xa, 0x36cdf0db)
r3 = syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)
connect$rds(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10)

17:13:17 executing program 2:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x5f}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
getitimer(0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x303200)

17:13:17 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:17 executing program 4:
syz_io_uring_setup(0x342, &(0x7f00000002c0)={0x0, 0xac22, 0x27, 0x2, 0x324}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000380)=@in={0x2, 0x4e23, @local}}, 0xfffffffc)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x480000)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x1})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x442480, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]})

17:13:17 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2400}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:17 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
sendmsg$rds(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x7fff, 0x6, 0x8, 0xccf8, 0xae42, 0x28, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x80, 0x7ed9}, {&(0x7f0000000480)=""/110, 0x6e}, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/138, 0x8a}], 0x7, 0x2, 0x7c3a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7ff80}, &(0x7f0000000a40)=0x8, &(0x7f0000000a80)=0x9282, 0x5a000c85, 0xffffffff, 0x8, 0x1cc000, 0x0, 0xf5}}], 0xf8, 0x200000c0}, 0x4004084)
bind$rds(r0, 0x0, 0x0)
socket(0x9, 0xa, 0x36cdf0db)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:17 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xd52e86674bbf6574, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000)

17:13:17 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000000c0)=""/197})

17:13:17 executing program 4:
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$fb(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x5, 0x84200)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x18002, 0x0)
write$fb(r2, &(0x7f0000000200)="587bd37ccc0df1e8d82619c2b6e588621e0f545ecd35370b78f7e9cd377c2994c66ad12627842d3d342e50099c57aa499b986b2320adbc85bdb04415128211cfd571a2a93f9aa33f7dd15a887d09556cda586882fb80ccaaca8f0720df4441a7287db3bd21c938223f514d39a56b9ebdf3faa86507fb745eab86", 0x7a)
write$rfkill(r1, &(0x7f0000000180)={0x0, 0x6, 0x3}, 0x8)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x20010, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd_index=0x7, 0x8, &(0x7f0000000080)="8d8f12fec296df46dc7fc3d51a1b0cf6f21d9693c2493cae3df1b47873c3428d6381496ab66e34eeed510867fb1891463272cd4b925d9ea0c64fa374388860ee051360f38b58a90372b7d8b642797c54a8f8b207dddd5a3879a1665438d139cc36d556e70d1e6424398908aef1855d13888eef0971bed2fa0fd3f2d858bfdd64591c2b25c1ab8ae5f11b8e9a34c5845c45623098283a6e1991e79e9c7275041a", 0xa0, 0x10, 0x1}, 0x8e2)

17:13:17 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:17 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xd52e86674bbf6574, 0xffffffffffffffff, 0x0)

17:13:17 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:17 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
sendmsg$rds(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x7fff, 0x6, 0x8, 0xccf8, 0xae42, 0x28, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x80, 0x7ed9}, {&(0x7f0000000480)=""/110, 0x6e}, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/138, 0x8a}], 0x7, 0x2, 0x7c3a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7ff80}, &(0x7f0000000a40)=0x8, &(0x7f0000000a80)=0x9282, 0x5a000c85, 0xffffffff, 0x8, 0x1cc000, 0x0, 0xf5}}], 0xf8, 0x200000c0}, 0x4004084)
bind$rds(r0, 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:17 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:17 executing program 4:
r0 = socket(0xa, 0x2, 0x0)
bind$rds(r0, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@local})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000300)=0x5)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000080)={0x3, '\'`|'}, 0x4)
r3 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f00000000c0)={<r4=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000100)={<r5=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000140)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x7f36f441, 0x4, 0x4, <r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, r4, r5, r6, 0x0, 0x0, 0x0], &(0x7f0000000280)=[r7, 0x0], 0x7})

17:13:18 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

17:13:18 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:18 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
sendmsg$rds(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x7fff, 0x6, 0x8, 0xccf8, 0xae42, 0x28, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x80, 0x7ed9}, {&(0x7f0000000480)=""/110, 0x6e}, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/138, 0x8a}], 0x7, 0x2, 0x7c3a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7ff80}, &(0x7f0000000a40)=0x8, &(0x7f0000000a80)=0x9282, 0x5a000c85, 0xffffffff, 0x8, 0x1cc000, 0x0, 0xf5}}], 0xf8, 0x200000c0}, 0x4004084)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:18 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:18 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:18 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

17:13:18 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:18 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:18 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:18 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:18 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:18 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

17:13:18 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:18 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
accept(r1, 0x0, &(0x7f00000002c0))
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:18 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:18 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:18 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:18 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:18 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:19 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:19 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:19 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:19 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:19 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:19 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:19 executing program 4:
timerfd_create(0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000))

17:13:19 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:19 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
accept(r1, 0x0, &(0x7f00000002c0))
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7ffffffb, 0xb368}, 0x11}, 0x7)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:19 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:19 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:19 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:19 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:20 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
accept(r1, 0x0, &(0x7f00000002c0))
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:20 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:20 executing program 0:
socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:20 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:20 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:20 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:20 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:20 executing program 0:
socket(0xa, 0x2, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:20 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:20 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:20 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:20 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:20 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:20 executing program 0:
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:20 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:20 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:20 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:20 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:21 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:21 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:21 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:21 executing program 0:
syz_open_dev$audion(0x0, 0xffffffffffffffd8, 0x200)

17:13:21 executing program 1:
socket(0xa, 0x2, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x16, 0x0, 0x1, 0x1f}, {&(0x7f0000000100)=""/153, 0x99}, &(0x7f00000001c0), 0x49}, 0xa0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:21 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0xe39, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:21 executing program 4:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1a00}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:21 executing program 0:
syz_open_dev$audion(0x0, 0xffffffffffffffd8, 0x200)

17:13:21 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000500)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r3 = geteuid()
setuid(r3)

17:13:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:21 executing program 1:
socket(0xa, 0x2, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:21 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x10000)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={<r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000001c0)={0x0, 0x8})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = syz_io_uring_complete(0x0)
timerfd_settime(r5, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180))
write$P9_RREMOVE(r4, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={r2})
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, 0x0)
timerfd_gettime(r6, &(0x7f0000000200))

17:13:21 executing program 0:
syz_open_dev$audion(0x0, 0xffffffffffffffd8, 0x200)

17:13:21 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:21 executing program 0:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x200)

17:13:21 executing program 1:
syz_open_dev$audion(&(0x7f0000000080), 0xffffffffffffffd8, 0x200)

17:13:22 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:22 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:22 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:22 executing program 0:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x0)

17:13:22 executing program 1:
syz_open_dev$audion(0x0, 0xffffffffffffffd8, 0x200)

17:13:22 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xffffff1f, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:22 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:22 executing program 1:
syz_open_dev$audion(0x0, 0xffffffffffffffd8, 0x200)

17:13:22 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:22 executing program 0:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x0)

17:13:22 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:22 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:22 executing program 1:
syz_open_dev$audion(0x0, 0xffffffffffffffd8, 0x200)

17:13:22 executing program 0:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x0)

17:13:22 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:23 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 1:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x200)

17:13:23 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:23 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 1:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x0)

17:13:23 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 1:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x0)

17:13:23 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:23 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 1:
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x0)

17:13:24 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 1:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:24 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:24 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:24 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 1:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:24 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:25 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:25 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:25 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:25 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:25 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={<r0=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r0], 0x1, 0x1, 0x5})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000000)={0x0, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000040)={0x0, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000180)={0x0, 0x3})

17:13:25 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:25 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:25 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:25 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:25 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:25 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x300}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:25 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:25 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:25 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, 0x0)

17:13:25 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:25 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:26 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, 0x0)

17:13:26 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:26 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:26 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086601, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, 0x0)

17:13:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:26 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:26 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 5:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x0, 0xff00, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:27 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:27 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:27 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:27 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:27 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

17:13:27 executing program 4:
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x50, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x32f1, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$fb(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
recvmsg$can_raw(r2, &(0x7f0000000680)={&(0x7f0000000100)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/126, 0x7e}], 0x6}, 0x20)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf250b0000000c0001000100000019c6728e7745a80ebbc1fd60443eb6bcfae419d941975e4563cc3a2d458fd0930dbbc597ccd74b28262135b10cb14e571ad1ab159fba0429400b0ac091a0b5893e5c1cbb7fbe5d3aee2b0dde9debeb", @ANYRES32=r4, @ANYBLOB="1c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

17:13:27 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:28 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 4:
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x50, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x32f1, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$fb(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
recvmsg$can_raw(r2, &(0x7f0000000680)={&(0x7f0000000100)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/126, 0x7e}], 0x6}, 0x20)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf250b0000000c0001000100000019c6728e7745a80ebbc1fd60443eb6bcfae419d941975e4563cc3a2d458fd0930dbbc597ccd74b28262135b10cb14e571ad1ab159fba0429400b0ac091a0b5893e5c1cbb7fbe5d3aee2b0dde9debeb", @ANYRES32=r4, @ANYBLOB="1c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

17:13:28 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x0, {{0x1, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:28 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 4:
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x103)

17:13:28 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:28 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:28 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:29 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, 0x0)

17:13:29 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:29 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, 0x0)

17:13:29 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:29 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:29 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, 0x0)

17:13:30 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:30 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:30 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:30 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, 0x0)

17:13:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:30 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, &(0x7f0000000280), 0x0})

17:13:30 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:30 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, 0x0)

17:13:30 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, 0x0)

17:13:31 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:31 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:31 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:31 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:31 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, 0x0)

17:13:31 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, 0x0)

17:13:31 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, 0x0)

17:13:31 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:31 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:31 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:31 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:31 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:31 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:31 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:31 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), 0x0, 0x0})

17:13:31 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0})

17:13:31 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:31 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:32 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:32 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:32 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:32 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x40049409, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:32 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:32 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:32 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, 0x0)

17:13:32 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:33 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:33 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:33 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:33 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:33 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, 0x0)

17:13:33 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:33 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:33 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:33 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:33 executing program 2:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:33 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, 0x0)

17:13:33 executing program 5:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x4}, 0xfffffffd}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:33 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:33 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:33 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:33 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:33 executing program 2:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:34 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:34 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:34 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:34 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:34 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:34 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
r1 = syz_open_dev$audion(&(0x7f0000000240), 0x2f, 0x280)
r2 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, 0x0)
syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={<r5=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000040)={<r6=>0x0})
openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x280000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={<r7=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={<r8=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, r6, 0x0, r6, 0x0, r7, 0x0, 0x0, r8], &(0x7f0000000180), 0x80000001, 0x5, 0x2, <r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000280)={<r10=>r7, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={r10, 0x1})
r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x28002, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r11, 0xc00864c0, &(0x7f00000002c0)={<r12=>r7})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000300)=[r6, r6, r10, r12, r8, r5, r5], &(0x7f0000000340)=[r9, 0x0, r9], 0x7})

17:13:34 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:34 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:34 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:34 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
r1 = syz_open_dev$audion(&(0x7f0000000240), 0x2f, 0x280)
r2 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, 0x0)
syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={<r5=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000040)={<r6=>0x0})
openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x280000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={<r7=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={<r8=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, r6, 0x0, r6, 0x0, r7, 0x0, 0x0, r8], &(0x7f0000000180), 0x80000001, 0x5, 0x2, <r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000280)={<r10=>r7, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={r10, 0x1})
r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x28002, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r11, 0xc00864c0, &(0x7f00000002c0)={<r12=>r7})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000300)=[r6, r6, r10, r12, r8, r5, r5], &(0x7f0000000340)=[r9, 0x0, r9], 0x7})

17:13:34 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:34 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:34 executing program 2:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:34 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:34 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:34 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x140, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, 0x2, 0xa})

17:13:34 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:34 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
syz_open_dev$usbmon(&(0x7f0000000040), 0x100000001, 0x80000)
read$fb(r0, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)

17:13:34 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:35 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:35 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:35 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:35 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
syz_open_dev$usbmon(&(0x7f0000000040), 0x100000001, 0x80000)
read$fb(r0, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)

17:13:35 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
syz_open_dev$usbmon(&(0x7f0000000040), 0x100000001, 0x80000)
read$fb(r0, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)

17:13:35 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:35 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:35 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:35 executing program 2:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:35 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
syz_open_dev$usbmon(&(0x7f0000000040), 0x100000001, 0x80000)
read$fb(r0, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)

17:13:35 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8909, 0x4000)
r2 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000040)={<r3=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={<r4=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000100)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, r3, r4, 0x0, r5], 0x7})

17:13:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, 0x0)

17:13:35 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:35 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:35 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
syz_open_dev$usbmon(&(0x7f0000000040), 0x100000001, 0x80000)
read$fb(r0, 0x0, 0x0)

17:13:35 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:35 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:36 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, 0x0)

17:13:36 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, 0x0)

17:13:36 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
syz_open_dev$usbmon(&(0x7f0000000040), 0x100000001, 0x80000)

17:13:36 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:36 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:36 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, 0x0)

17:13:36 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:36 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, 0x0)

17:13:36 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:36 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:36 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

17:13:36 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:36 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, 0x0)

17:13:36 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:36 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)

17:13:36 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:36 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:37 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:37 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)

17:13:37 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:37 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:37 executing program 1:
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x2ff00)

17:13:37 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x5408c1, 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)

17:13:37 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 1:
syz_io_uring_setup(0x10005968, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))

17:13:37 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:37 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

17:13:37 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:37 executing program 1:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:38 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:38 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 5:
r0 = syz_open_dev$usbmon(0x0, 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

17:13:38 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:38 executing program 1:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:38 executing program 5:
r0 = syz_open_dev$usbmon(0x0, 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

17:13:38 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 5:
r0 = syz_open_dev$usbmon(0x0, 0x5, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

17:13:38 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:38 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:38 executing program 1:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:39 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:39 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:39 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:39 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x41)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

17:13:39 executing program 1:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:39 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:39 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:39 executing program 0:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:39 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:39 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

17:13:39 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, 0x0)

17:13:39 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, 0x0)

17:13:39 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x24005)

17:13:39 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:39 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)

17:13:39 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, 0x0)

17:13:39 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, 0x0)

17:13:40 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)

17:13:40 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:40 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, 0x0)

17:13:40 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, 0x0)

17:13:40 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)

17:13:40 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:40 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_RSTATFS(r0, &(0x7f0000000300)={0x43, 0x9, 0x1, {0xff, 0xfffff4b8, 0x7, 0x7a93, 0x2c6, 0x0, 0x6, 0x0, 0x9}}, 0x43)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x100000001)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$fb(r1, 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
r3 = getpid()
write$P9_RGETLOCK(r2, &(0x7f0000000080)={0x31, 0x37, 0x1, {0x1, 0x0, 0xff, r3, 0x13, '/dev/btrfs-control\x00'}}, 0x31)
r4 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x3, 0x2, 0x3, <r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x0, <r7=>0x0, 0x2})
write$P9_RCREATE(r0, &(0x7f0000000380)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x5}, 0x1}}, 0x18)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000100)=[r5, 0x0], &(0x7f0000000280)=[r6, r7], 0x2})

17:13:40 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:40 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:41 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0)

17:13:41 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:41 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:41 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0)

17:13:41 executing program 1:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:41 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:41 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:41 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0)

17:13:42 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:42 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:42 executing program 2:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:42 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:42 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:42 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 5:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 2 (fault-call:1 fault-nth:0):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:42 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:42 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:42 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:42 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

[ 3133.307966][T31161] FAULT_INJECTION: forcing a failure.
[ 3133.307966][T31161] name failslab, interval 1, probability 0, space 0, times 0
17:13:42 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

[ 3133.409849][T31161] CPU: 1 PID: 31161 Comm: syz-executor.2 Not tainted 5.15.0-rc2-syzkaller #0
[ 3133.418681][T31161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3133.428760][T31161] Call Trace:
[ 3133.432051][T31161]  dump_stack_lvl+0xcd/0x134
[ 3133.436684][T31161]  should_fail.cold+0x5/0xa
[ 3133.441223][T31161]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 3133.447345][T31161]  should_failslab+0x5/0x10
[ 3133.451882][T31161]  __kmalloc+0x72/0x320
17:13:43 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

[ 3133.456074][T31161]  tomoyo_realpath_from_path+0xc3/0x620
[ 3133.461648][T31161]  ? tomoyo_profile+0x42/0x50
[ 3133.466360][T31161]  tomoyo_path_number_perm+0x1d5/0x590
[ 3133.471850][T31161]  ? tomoyo_path_number_perm+0x18d/0x590
[ 3133.477523][T31161]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 3133.483620][T31161]  ? lock_downgrade+0x6e0/0x6e0
[ 3133.488529][T31161]  ? __fget_files+0x23d/0x3e0
[ 3133.488570][T31161]  security_file_ioctl+0x50/0xb0
[ 3133.488613][T31161]  __x64_sys_ioctl+0xb3/0x200
[ 3133.488649][T31161]  do_syscall_64+0x35/0xb0
[ 3133.488686][T31161]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3133.488721][T31161] RIP: 0033:0x7f4511819739
[ 3133.488742][T31161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3133.488767][T31161] RSP: 002b:00007f450ed90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3133.488795][T31161] RAX: ffffffffffffffda RBX: 00007f451191df80 RCX: 00007f4511819739
17:13:43 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3133.553701][T31161] RDX: 0000000020000300 RSI: 0000000000005452 RDI: 0000000000000003
[ 3133.561704][T31161] RBP: 00007f450ed901d0 R08: 0000000000000000 R09: 0000000000000000
[ 3133.569695][T31161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3133.577681][T31161] R13: 00007f4511e51b1f R14: 00007f450ed90300 R15: 0000000000022000
17:13:43 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:43 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:43 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x10, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

[ 3134.194590][T31161] ERROR: Out of memory at tomoyo_realpath_from_path.
17:13:43 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:43 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:43 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:43 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:43 executing program 0:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x41833, r1, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = geteuid()
setuid(r2)

17:13:43 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:44 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:44 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0xe39, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:44 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:44 executing program 0 (fault-call:1 fault-nth:0):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:44 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:44 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3134.697907][T31233] FAULT_INJECTION: forcing a failure.
[ 3134.697907][T31233] name failslab, interval 1, probability 0, space 0, times 0
17:13:44 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

[ 3134.802794][T31233] CPU: 1 PID: 31233 Comm: syz-executor.0 Not tainted 5.15.0-rc2-syzkaller #0
[ 3134.811618][T31233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3134.821698][T31233] Call Trace:
[ 3134.824994][T31233]  dump_stack_lvl+0xcd/0x134
[ 3134.829615][T31233]  should_fail.cold+0x5/0xa
[ 3134.834165][T31233]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 3134.840084][T31233]  should_failslab+0x5/0x10
[ 3134.844616][T31233]  __kmalloc+0x72/0x320
17:13:44 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3134.848914][T31233]  tomoyo_realpath_from_path+0xc3/0x620
[ 3134.854489][T31233]  ? tomoyo_profile+0x42/0x50
[ 3134.859201][T31233]  tomoyo_path_number_perm+0x1d5/0x590
[ 3134.864684][T31233]  ? tomoyo_path_number_perm+0x18d/0x590
[ 3134.870354][T31233]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 3134.876233][T31233]  ? lock_downgrade+0x6e0/0x6e0
[ 3134.881130][T31233]  ? __fget_files+0x23d/0x3e0
[ 3134.885840][T31233]  security_file_ioctl+0x50/0xb0
[ 3134.890815][T31233]  __x64_sys_ioctl+0xb3/0x200
[ 3134.895520][T31233]  do_syscall_64+0x35/0xb0
[ 3134.899967][T31233]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3134.905889][T31233] RIP: 0033:0x7f5fe8483739
[ 3134.910332][T31233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3134.930337][T31233] RSP: 002b:00007f5fe59fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3134.938786][T31233] RAX: ffffffffffffffda RBX: 00007f5fe8587f80 RCX: 00007f5fe8483739
17:13:44 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, 0x0)

17:13:44 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:44 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5421, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

[ 3134.946782][T31233] RDX: 0000000020000300 RSI: 0000000000004611 RDI: 0000000000000003
[ 3134.954790][T31233] RBP: 00007f5fe59fa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3134.962781][T31233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3134.970775][T31233] R13: 00007f5fe8abbb1f R14: 00007f5fe59fa300 R15: 0000000000022000
17:13:44 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:44 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, 0x0)

17:13:44 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:44 executing program 4:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

[ 3135.634102][T31233] ERROR: Out of memory at tomoyo_realpath_from_path.
17:13:45 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, 0x0)

17:13:45 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:45 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:45 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:45 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, 0x0)

17:13:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, 0x0)

17:13:45 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:45 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:45 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, 0x0)

17:13:45 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:45 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:45 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:45 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:45 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:45 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:45 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:46 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:46 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:46 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:46 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:46 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:46 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

17:13:46 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:46 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:46 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:46 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:46 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:46 executing program 5:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:46 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:46 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:47 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, 0x0)

17:13:47 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, 0x0)

17:13:47 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:47 executing program 5:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:47 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8913, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:47 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:47 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, 0x0)

17:13:47 executing program 1 (fault-call:1 fault-nth:0):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:47 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:47 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8914, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:47 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:47 executing program 5:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3137.986103][T31412] FAULT_INJECTION: forcing a failure.
[ 3137.986103][T31412] name failslab, interval 1, probability 0, space 0, times 0
[ 3138.098736][T31412] CPU: 0 PID: 31412 Comm: syz-executor.1 Not tainted 5.15.0-rc2-syzkaller #0
[ 3138.107559][T31412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3138.117634][T31412] Call Trace:
[ 3138.120936][T31412]  dump_stack_lvl+0xcd/0x134
[ 3138.125557][T31412]  should_fail.cold+0x5/0xa
[ 3138.130213][T31412]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 3138.135965][T31412]  should_failslab+0x5/0x10
[ 3138.140512][T31412]  __kmalloc+0x72/0x320
[ 3138.144716][T31412]  tomoyo_realpath_from_path+0xc3/0x620
[ 3138.150278][T31412]  ? tomoyo_profile+0x42/0x50
[ 3138.154987][T31412]  tomoyo_path_number_perm+0x1d5/0x590
[ 3138.160459][T31412]  ? tomoyo_path_number_perm+0x18d/0x590
[ 3138.166192][T31412]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 3138.172040][T31412]  ? lock_downgrade+0x6e0/0x6e0
[ 3138.176909][T31412]  ? __fget_files+0x23d/0x3e0
[ 3138.181606][T31412]  security_file_ioctl+0x50/0xb0
[ 3138.186553][T31412]  __x64_sys_ioctl+0xb3/0x200
[ 3138.191232][T31412]  do_syscall_64+0x35/0xb0
[ 3138.195657][T31412]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3138.201558][T31412] RIP: 0033:0x7f99cd1a4739
[ 3138.205972][T31412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3138.225590][T31412] RSP: 002b:00007f99ca71b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3138.234011][T31412] RAX: ffffffffffffffda RBX: 00007f99cd2a8f80 RCX: 00007f99cd1a4739
17:13:47 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, 0x0)

[ 3138.241990][T31412] RDX: 0000000020000300 RSI: 0000000000000002 RDI: 0000000000000003
[ 3138.249960][T31412] RBP: 00007f99ca71b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3138.257926][T31412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3138.266326][T31412] R13: 00007f99cd7dcb1f R14: 00007f99ca71b300 R15: 0000000000022000
17:13:48 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0})

17:13:48 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:48 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4606, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:48 executing program 5 (fault-call:1 fault-nth:0):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:48 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:48 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})

[ 3138.745267][T31448] FAULT_INJECTION: forcing a failure.
[ 3138.745267][T31448] name failslab, interval 1, probability 0, space 0, times 0
[ 3138.845469][T31448] CPU: 0 PID: 31448 Comm: syz-executor.5 Not tainted 5.15.0-rc2-syzkaller #0
[ 3138.854289][T31448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3138.864367][T31448] Call Trace:
[ 3138.867663][T31448]  dump_stack_lvl+0xcd/0x134
[ 3138.872286][T31448]  should_fail.cold+0x5/0xa
[ 3138.876836][T31448]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 3138.882667][T31448]  should_failslab+0x5/0x10
[ 3138.887187][T31448]  __kmalloc+0x72/0x320
[ 3138.891353][T31448]  tomoyo_realpath_from_path+0xc3/0x620
[ 3138.896905][T31448]  ? tomoyo_profile+0x42/0x50
[ 3138.901594][T31448]  tomoyo_path_number_perm+0x1d5/0x590
[ 3138.907063][T31448]  ? tomoyo_path_number_perm+0x18d/0x590
[ 3138.912723][T31448]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 3138.918570][T31448]  ? lock_downgrade+0x6e0/0x6e0
[ 3138.923442][T31448]  ? __fget_files+0x23d/0x3e0
[ 3138.928125][T31448]  security_file_ioctl+0x50/0xb0
[ 3138.933093][T31448]  __x64_sys_ioctl+0xb3/0x200
[ 3138.937776][T31448]  do_syscall_64+0x35/0xb0
[ 3138.942218][T31448]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3138.948131][T31448] RIP: 0033:0x7fbe4fa13739
[ 3138.952560][T31448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3138.972189][T31448] RSP: 002b:00007fbe4cf8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3138.980717][T31448] RAX: ffffffffffffffda RBX: 00007fbe4fb17f80 RCX: 00007fbe4fa13739
[ 3138.988689][T31448] RDX: 0000000020000300 RSI: 0000000000005421 RDI: 0000000000000003
[ 3138.996654][T31448] RBP: 00007fbe4cf8a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3139.004630][T31448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3139.012600][T31448] R13: 00007fbe5004bb1f R14: 00007fbe4cf8a300 R15: 0000000000022000
[ 3139.207376][T31412] ERROR: Out of memory at tomoyo_realpath_from_path.
17:13:48 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:48 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:48 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:48 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x460f, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:48 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448c9, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:49 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448dd, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4610, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3139.563569][T31448] ERROR: Out of memory at tomoyo_realpath_from_path.
17:13:49 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:49 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:49 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:49 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:49 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:49 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:50 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:50 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:50 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:50 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:50 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:51 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:51 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086601, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:51 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:51 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:52 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x801c581f, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8913, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:52 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:52 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8914, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8913, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0086421, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:52 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8914, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:52 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:52 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:53 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448c9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:53 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc02064cc, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448dd, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448c9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:53 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:53 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448dd, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:53 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:54 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8913, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:54 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x2, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:54 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8914, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x3, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 4:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:54 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x4, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:54 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:13:54 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 4 (fault-call:1 fault-nth:0):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x5, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448c9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3145.673633][T31796] FAULT_INJECTION: forcing a failure.
[ 3145.673633][T31796] name failslab, interval 1, probability 0, space 0, times 0
[ 3145.746945][T31796] CPU: 0 PID: 31796 Comm: syz-executor.4 Not tainted 5.15.0-rc2-syzkaller #0
[ 3145.755780][T31796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3145.765951][T31796] Call Trace:
[ 3145.769333][T31796]  dump_stack_lvl+0xcd/0x134
[ 3145.773959][T31796]  should_fail.cold+0x5/0xa
[ 3145.778505][T31796]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 3145.784255][T31796]  should_failslab+0x5/0x10
[ 3145.788788][T31796]  __kmalloc+0x72/0x320
[ 3145.792983][T31796]  tomoyo_realpath_from_path+0xc3/0x620
[ 3145.798561][T31796]  ? tomoyo_profile+0x42/0x50
[ 3145.803275][T31796]  tomoyo_path_number_perm+0x1d5/0x590
[ 3145.808766][T31796]  ? tomoyo_path_number_perm+0x18d/0x590
[ 3145.814438][T31796]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 3145.820313][T31796]  ? lock_downgrade+0x6e0/0x6e0
[ 3145.825205][T31796]  ? __fget_files+0x23d/0x3e0
[ 3145.829916][T31796]  security_file_ioctl+0x50/0xb0
[ 3145.834897][T31796]  __x64_sys_ioctl+0xb3/0x200
[ 3145.839609][T31796]  do_syscall_64+0x35/0xb0
17:13:55 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r1 = geteuid()
setuid(r1)

[ 3145.844055][T31796]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3145.849980][T31796] RIP: 0033:0x7fed393a0739
[ 3145.854419][T31796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3145.874053][T31796] RSP: 002b:00007fed36917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3145.882495][T31796] RAX: ffffffffffffffda RBX: 00007fed394a4f80 RCX: 00007fed393a0739
[ 3145.890486][T31796] RDX: 0000000020000300 RSI: 0000000000005452 RDI: 0000000000000003
[ 3145.898480][T31796] RBP: 00007fed369171d0 R08: 0000000000000000 R09: 0000000000000000
[ 3145.906476][T31796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3145.914471][T31796] R13: 00007fed399d8b1f R14: 00007fed36917300 R15: 0000000000022000
17:13:55 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x6, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448dd, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:55 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r1 = geteuid()
setuid(r1)

17:13:55 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3146.560435][T31796] ERROR: Out of memory at tomoyo_realpath_from_path.
17:13:56 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x7, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r1 = geteuid()
setuid(r1)

17:13:56 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x8, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086601, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086601, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:56 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x300, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x801c581f, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086425, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x801c581f, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:56 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:57 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x500, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x600, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:57 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x700, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:57 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0086421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:57 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0xff00, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:58 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x1000000, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0684608, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x2000000, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086601, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:58 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x3000000, 0x0, 0x0, 0x0, 0x0})

17:13:58 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x801c581f, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:59 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x4000000, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8913, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
geteuid()
setuid(0x0)

17:13:59 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x5000000, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8914, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x6000000, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0086420, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:13:59 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x7000000, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0086421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448c9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x8000000, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc00864c0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400448dd, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0xff000000, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc010641d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:00 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0xb, 0x2})
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x10000000)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000014c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x6000, @fd=r4, 0x6, &(0x7f0000001400)=""/133, 0x85, 0x14}, 0x1)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000013c0), 0x2000, 0x0)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x7, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x8001, 0x6f, &(0x7f0000000100)=""/111, 0x40f00, 0x6, '\x00', 0x0, 0x2, r5, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x1, 0x5}, 0x10, 0x0, r6}, 0x78)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
read$usbmon(r0, &(0x7f0000000340)=""/4096, 0x1000)

17:14:01 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:01 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={0xe39, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40086602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc02064c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_GET_TID_ADDRESS(0x27, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe37, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 3 (fault-call:6 fault-nth:0):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:01 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:01 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7)
mmap$fb(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x4000003, 0x4000010, r0, 0x7d000)

17:14:02 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3152.419039][T32083] FAULT_INJECTION: forcing a failure.
[ 3152.419039][T32083] name failslab, interval 1, probability 0, space 0, times 0
[ 3152.517976][T32083] CPU: 1 PID: 32083 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3152.526808][T32083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3152.536889][T32083] Call Trace:
[ 3152.540182][T32083]  dump_stack_lvl+0xcd/0x134
[ 3152.544801][T32083]  should_fail.cold+0x5/0xa
[ 3152.549342][T32083]  ? resv_map_alloc+0x42/0x3f0
[ 3152.554228][T32083]  should_failslab+0x5/0x10
[ 3152.558763][T32083]  kmem_cache_alloc_trace+0x55/0x2b0
17:14:02 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3152.564087][T32083]  resv_map_alloc+0x42/0x3f0
[ 3152.568706][T32083]  hugetlbfs_get_inode+0x2de/0x560
[ 3152.573921][T32083]  ? hugetlb_file_setup+0x125/0x6c0
[ 3152.579152][T32083]  hugetlb_file_setup+0x164/0x6c0
[ 3152.584213][T32083]  ksys_mmap_pgoff+0x228/0x620
[ 3152.589007][T32083]  ? mlock_future_check+0x120/0x120
[ 3152.594322][T32083]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3152.600258][T32083]  do_syscall_64+0x35/0xb0
[ 3152.604709][T32083]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3152.610631][T32083] RIP: 0033:0x7fd47a3ed739
[ 3152.615067][T32083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3152.634732][T32083] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 3152.643174][T32083] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
[ 3152.651168][T32083] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3152.659168][T32083] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
17:14:02 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:02 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3152.667197][T32083] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3152.675192][T32083] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:02 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:02 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:02 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x18, 0x1})
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3153.135242][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[ 3153.141624][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
17:14:02 executing program 3 (fault-call:6 fault-nth:1):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:02 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:02 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x1af4, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:02 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:02 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:02 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x5452, &(0x7f0000000300)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xf41a, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3153.506651][T32125] FAULT_INJECTION: forcing a failure.
[ 3153.506651][T32125] name failslab, interval 1, probability 0, space 0, times 0
17:14:03 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xe2080, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3153.592220][T32125] CPU: 1 PID: 32125 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3153.601043][T32125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3153.611121][T32125] Call Trace:
[ 3153.614855][T32125]  dump_stack_lvl+0xcd/0x134
[ 3153.619484][T32125]  should_fail.cold+0x5/0xa
[ 3153.624029][T32125]  ? resv_map_alloc+0x7a/0x3f0
[ 3153.628822][T32125]  should_failslab+0x5/0x10
[ 3153.633371][T32125]  kmem_cache_alloc_trace+0x55/0x2b0
[ 3153.638708][T32125]  resv_map_alloc+0x7a/0x3f0
[ 3153.643342][T32125]  hugetlbfs_get_inode+0x2de/0x560
[ 3153.648491][T32125]  ? hugetlb_file_setup+0x125/0x6c0
[ 3153.653718][T32125]  hugetlb_file_setup+0x164/0x6c0
[ 3153.658792][T32125]  ksys_mmap_pgoff+0x228/0x620
[ 3153.658833][T32125]  ? mlock_future_check+0x120/0x120
17:14:03 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3153.658870][T32125]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3153.658916][T32125]  do_syscall_64+0x35/0xb0
[ 3153.658949][T32125]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3153.658984][T32125] RIP: 0033:0x7fd47a3ed739
[ 3153.659008][T32125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3153.659036][T32125] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 3153.659066][T32125] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
17:14:03 executing program 3 (fault-call:6 fault-nth:2):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:03 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 2:
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
bind$isdn_base(r1, &(0x7f00000000c0)={0x22, 0x5, 0xc0, 0x9, 0x80}, 0x6)
ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x37, 0x2})
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000100)={0xe0, 0x26, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x80086601, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3153.659085][T32125] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3153.659104][T32125] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
[ 3153.659122][T32125] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3153.659140][T32125] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:03 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x801c581f, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3154.268002][T32152] FAULT_INJECTION: forcing a failure.
[ 3154.268002][T32152] name failslab, interval 1, probability 0, space 0, times 0
17:14:03 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:03 executing program 2:
kexec_load(0x6, 0x7, &(0x7f0000000640)=[{&(0x7f00000000c0)="d13ed0a8bee38478bd89d10e", 0xc, 0xfffffffffffff2a0, 0x5}, {&(0x7f0000000340)="00a12a9b1fdef3a77a65c66c275a40051a70f0536e007dbbf549c3c1fffdc3943b34cb720c7dda5f349af547c67d2b5e8220f96e87d652e01f2f7bac628e4e5be2a401adc4898f9e3559f777e049a8adfa874e6d6eb2b72104f4d57c72ee5ee8c9a6bc07c4471e04dccb4763bda45e1f5091dd298335d1965d8266bdfcaef11c61f92410dec3394156bc85e41d4867f92f34f61e7fc6", 0x96, 0x9c6, 0x6}, {&(0x7f0000000400)="c7a20e59b5f297beb479f2995f08cdd177e2f78088d9ff74723fab2e2f24bf8f79bd7ade390de6d434985bb61796b30cf76d6ae5c79e116299b6512edf0d45c3322a99ed599bbe9f4b3cd5", 0x4b, 0x7, 0x4}, {&(0x7f0000000480)="8ccfe5575f20f42c185134a287b9996628cbf958a0ee5df6f5eff2e40f6a06733223d0f75336f12cc6fc633d2829961370cbd53c46fb6d1be41f7c77deb07dac00f71de58192230da80f57ff5d087c393ff34132195799ce0e054c24c59df7618115a379adc912b819213824587a02bc2c20ea80beb9f73b0b4cd35349e8184ebca7411aa3cba7e5605307b3989762dfcd86e8b6a9a42c192db776f93b0ad56a51c84703cb4ce5e3ce7cce58ed27f351c4549e4deee2f4e406", 0xb9, 0x7fffffff, 0x39b}, {&(0x7f0000000540)="116f97234144e37545d43bf90bd567b29f15667bba874c75654442fb008e8eff2d151b5b0b22b269d58b14b9687ffddabfacb6d6b6f487ee9d00e9e5c656b961bb112a3bcbf8e165149bdbdb1ff06bc270e611890c744dbba7d4add13a82d7eea28d85b7b0aecf18576560e70125", 0x6e, 0x40, 0xf87}, {&(0x7f0000000100)="7aed22f02435c235f6698ac92ba56ba86240c47f454a5c5b267c0a1189", 0x1d, 0x5, 0xf869}, {&(0x7f00000005c0)="e37ec739030c8822b5df4dc4c67e2b1dae15f9eec2ae17c9adb27d820d9683246d7825eca154e8295a94b7c6dd8c301437118b492ec7f24005987164cde23211f0b1c6d433513d2e867af21cc8ce3743fd35b888b0eccbcf9493ff381cd339899e5057b2bf18f246402d81c3aba072", 0x6f, 0x4, 0x401}], 0x3e0000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x40200, 0x0)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f00000001c0)=0x1, 0x4)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0x404000, 0x0)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000013c0)={{&(0x7f0000000780)=""/97, 0x61}, &(0x7f0000000800), 0xa0}, 0x20)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000900)={@l2tp6={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x4}, {&(0x7f0000000880)=""/64, 0x40}, &(0x7f00000008c0)}, 0xa0)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000009c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/123, 0x7b}, {&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/235, 0xeb}], 0x3, &(0x7f0000001200)=[@rdma_dest={0x18, 0x114, 0x2, {0x3ff, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x3f, 0x80000001}, {&(0x7f0000000cc0)=""/38, 0x26}, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/19, 0x13}, {&(0x7f0000000d40)=""/209, 0xd1}, {&(0x7f0000000e40)=""/224, 0xe0}], 0x3, 0x21, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0xffffff80, 0x50c8fdf8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000f80)=""/179, 0xb3}, &(0x7f0000001040), 0x36}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x7f}, &(0x7f0000001080)=0x9, &(0x7f00000010c0)=0x2, 0x2, 0x3, 0x3, 0x2, 0x0, 0x100000001}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x40000000}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x5}, {&(0x7f0000001100)=""/51, 0x33}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/89, 0x59}], 0x1, 0x32, 0xedb}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x178, 0x240400c0}, 0x4004)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="00000000e5ebb49a85b0d9274eb0f3a444b1ca646d7df412ff29c7805e7bba884c817d8c2e498f65439d1f4149c35a9c4660c8ba60a7378d00000000000009c57f700e62a4d876697a0923eda13cebcac4297b5d16511ecc7ae883ab1d072e53df619ea8f00dd9dfec620b9642a1efaecfac88ccf584c0cf769558e684bbb3547f08b3026b038d30b995bcc6c61f0ec4e829f4dab494e7743b7ae06577a63fcf2ca73b3703447428e1d6612abd483c055b319a86f01373317f2bc62434ecfafeff9140e1cba558a1cb8d45fe87c43ff4", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf250500000005000200070000000500020003000000050002007f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
ustat(0x3ff, &(0x7f0000000000))

[ 3154.339919][T32152] CPU: 1 PID: 32152 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3154.348742][T32152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3154.358818][T32152] Call Trace:
[ 3154.362119][T32152]  dump_stack_lvl+0xcd/0x134
[ 3154.366757][T32152]  should_fail.cold+0x5/0xa
[ 3154.371378][T32152]  ? hugetlbfs_alloc_inode+0x81/0x1d0
[ 3154.376775][T32152]  should_failslab+0x5/0x10
[ 3154.381310][T32152]  kmem_cache_alloc+0x5e/0x390
[ 3154.386108][T32152]  hugetlbfs_alloc_inode+0x81/0x1d0
[ 3154.391335][T32152]  ? init_once+0x20/0x20
[ 3154.395852][T32152]  alloc_inode+0x61/0x230
[ 3154.400216][T32152]  new_inode+0x27/0x2f0
[ 3154.404409][T32152]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 3154.410694][T32152]  hugetlbfs_get_inode+0x2f3/0x560
[ 3154.415827][T32152]  ? hugetlb_file_setup+0x125/0x6c0
[ 3154.421058][T32152]  hugetlb_file_setup+0x164/0x6c0
[ 3154.426112][T32152]  ksys_mmap_pgoff+0x228/0x620
[ 3154.430911][T32152]  ? mlock_future_check+0x120/0x120
[ 3154.436142][T32152]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3154.442067][T32152]  do_syscall_64+0x35/0xb0
[ 3154.446508][T32152]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3154.452509][T32152] RIP: 0033:0x7fd47a3ed739
[ 3154.456941][T32152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3154.476683][T32152] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
17:14:04 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3154.485121][T32152] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
[ 3154.493110][T32152] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3154.501095][T32152] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
[ 3154.509167][T32152] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3154.517162][T32152] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:04 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 3 (fault-call:6 fault-nth:3):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:04 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xc80, 0x20, 0x556, 0x780, 0x0, 0xffffffbd, 0x4, 0x1, {0x1, 0x7, 0x1}, {0x6, 0x1, 0x1}, {0x3ff, 0x231}, {0xdf, 0x7}, 0x0, 0x40, 0x40, 0x4f4, 0x0, 0x1, 0xc46, 0x5, 0x6, 0xffff, 0xfffffffa, 0x6, 0x26, 0x2, 0x1, 0x4})

17:14:04 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xe0ffff, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 2:
connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x100001)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x3, 0x3, {0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}}}, {&(0x7f0000000080)=""/17, 0x11}, &(0x7f00000000c0), 0x1}, 0xa0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x5452, &(0x7f0000000300)={0xe3a, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3155.184005][T32184] FAULT_INJECTION: forcing a failure.
[ 3155.184005][T32184] name failslab, interval 1, probability 0, space 0, times 0
17:14:04 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:04 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0086421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3155.282796][T32184] CPU: 0 PID: 32184 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3155.291648][T32184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3155.301733][T32184] Call Trace:
[ 3155.305043][T32184]  dump_stack_lvl+0xcd/0x134
[ 3155.309663][T32184]  should_fail.cold+0x5/0xa
[ 3155.314209][T32184]  ? security_inode_alloc+0x34/0x160
[ 3155.319551][T32184]  should_failslab+0x5/0x10
[ 3155.324088][T32184]  kmem_cache_alloc+0x5e/0x390
[ 3155.328929][T32184]  security_inode_alloc+0x34/0x160
[ 3155.334086][T32184]  inode_init_always+0x5d8/0xdb0
[ 3155.339063][T32184]  alloc_inode+0x82/0x230
[ 3155.343429][T32184]  new_inode+0x27/0x2f0
[ 3155.347614][T32184]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 3155.353888][T32184]  hugetlbfs_get_inode+0x2f3/0x560
[ 3155.359034][T32184]  ? hugetlb_file_setup+0x125/0x6c0
[ 3155.364262][T32184]  hugetlb_file_setup+0x164/0x6c0
[ 3155.369319][T32184]  ksys_mmap_pgoff+0x228/0x620
[ 3155.374113][T32184]  ? mlock_future_check+0x120/0x120
[ 3155.379338][T32184]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3155.385264][T32184]  do_syscall_64+0x35/0xb0
[ 3155.389719][T32184]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3155.395666][T32184] RIP: 0033:0x7fd47a3ed739
[ 3155.400113][T32184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3155.419747][T32184] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
17:14:04 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:05 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000))

[ 3155.428201][T32184] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
[ 3155.436284][T32184] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3155.444280][T32184] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
[ 3155.452276][T32184] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3155.460271][T32184] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:05 executing program 3 (fault-call:6 fault-nth:4):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:05 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:05 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:05 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc01064c4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:05 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:05 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x3485e711d4ef623b, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000040))

17:14:05 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:05 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3156.170969][T32218] FAULT_INJECTION: forcing a failure.
[ 3156.170969][T32218] name failslab, interval 1, probability 0, space 0, times 0
17:14:05 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:05 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3156.254339][T32218] CPU: 0 PID: 32218 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3156.263162][T32218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3156.273238][T32218] Call Trace:
[ 3156.276535][T32218]  dump_stack_lvl+0xcd/0x134
[ 3156.281157][T32218]  should_fail.cold+0x5/0xa
[ 3156.285809][T32218]  ? __d_alloc+0x2a/0x950
[ 3156.290253][T32218]  should_failslab+0x5/0x10
[ 3156.294789][T32218]  kmem_cache_alloc+0x5e/0x390
[ 3156.299608][T32218]  __d_alloc+0x2a/0x950
[ 3156.303777][T32218]  d_alloc_pseudo+0x19/0x70
[ 3156.308821][T32218]  alloc_file_pseudo+0xc6/0x250
[ 3156.313677][T32218]  ? alloc_file+0x590/0x590
[ 3156.318189][T32218]  ? lockdep_init_map_type+0x2c3/0x7b0
[ 3156.323660][T32218]  ? lockdep_annotate_inode_mutex_key+0x43/0x180
[ 3156.330008][T32218]  ? hugetlbfs_get_inode+0x365/0x560
[ 3156.335301][T32218]  hugetlb_file_setup+0x3e0/0x6c0
[ 3156.340337][T32218]  ksys_mmap_pgoff+0x228/0x620
[ 3156.345118][T32218]  ? mlock_future_check+0x120/0x120
[ 3156.350325][T32218]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3156.356242][T32218]  do_syscall_64+0x35/0xb0
[ 3156.360701][T32218]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3156.366627][T32218] RIP: 0033:0x7fd47a3ed739
[ 3156.371062][T32218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3156.390688][T32218] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
17:14:06 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
gettid()

[ 3156.399109][T32218] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
[ 3156.407095][T32218] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3156.415081][T32218] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
[ 3156.423056][T32218] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3156.431029][T32218] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:06 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 3 (fault-call:6 fault-nth:5):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:06 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x40e600, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x410082, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000280)={0x57c, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0]})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0)
mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r1, 0x42000)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x10200)
r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x102800)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000340)=0x2, 0x4)
write$P9_ROPEN(r2, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x2, 0x4, 0x5}, 0xfffffffd}}, 0x18)
ioctl$FBIOPUTCMAP(r3, 0x5452, &(0x7f0000000300)={0xe0f, 0xffffffffffffffee, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3157.183028][T32253] FAULT_INJECTION: forcing a failure.
[ 3157.183028][T32253] name failslab, interval 1, probability 0, space 0, times 0
17:14:06 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:06 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3157.279419][T32253] CPU: 1 PID: 32253 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3157.288249][T32253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3157.298334][T32253] Call Trace:
[ 3157.301637][T32253]  dump_stack_lvl+0xcd/0x134
[ 3157.306258][T32253]  should_fail.cold+0x5/0xa
[ 3157.310798][T32253]  ? __alloc_file+0x21/0x280
[ 3157.315432][T32253]  should_failslab+0x5/0x10
[ 3157.319977][T32253]  kmem_cache_alloc+0x5e/0x390
[ 3157.324785][T32253]  __alloc_file+0x21/0x280
[ 3157.329239][T32253]  alloc_empty_file+0x6d/0x170
[ 3157.334037][T32253]  alloc_file+0x59/0x590
[ 3157.338320][T32253]  alloc_file_pseudo+0x165/0x250
[ 3157.343292][T32253]  ? alloc_file+0x590/0x590
[ 3157.347817][T32253]  ? lockdep_init_map_type+0x2c3/0x7b0
[ 3157.353309][T32253]  ? lockdep_annotate_inode_mutex_key+0x43/0x180
[ 3157.359686][T32253]  ? hugetlbfs_get_inode+0x365/0x560
[ 3157.365033][T32253]  hugetlb_file_setup+0x3e0/0x6c0
[ 3157.365079][T32253]  ksys_mmap_pgoff+0x228/0x620
[ 3157.365114][T32253]  ? mlock_future_check+0x120/0x120
[ 3157.365154][T32253]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3157.365191][T32253]  do_syscall_64+0x35/0xb0
[ 3157.365221][T32253]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3157.396375][T32253] RIP: 0033:0x7fd47a3ed739
[ 3157.400813][T32253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3157.420441][T32253] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
17:14:07 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3157.428879][T32253] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
[ 3157.436878][T32253] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3157.444870][T32253] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
[ 3157.452865][T32253] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3157.460853][T32253] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:07 executing program 3 (fault-call:6 fault-nth:6):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:07 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:07 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:07 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:07 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x5)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xfc729)
socketpair(0x6, 0x0, 0x0, &(0x7f0000000040))
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
write$fb(r0, &(0x7f0000000080)="c2e8f99d3c6230061a376075a4c9399e009bb4ab503824ffc6e099eefeb94d5b94833244f53017d0df75122ecccc4fb293eedd203228c70041bd9c6fa525eaebacf484792a01fdf0", 0x48)

17:14:07 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:07 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:07 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:07 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3157.981247][T32285] FAULT_INJECTION: forcing a failure.
[ 3157.981247][T32285] name failslab, interval 1, probability 0, space 0, times 0
17:14:07 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0})

[ 3158.045884][T32285] CPU: 0 PID: 32285 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3158.054709][T32285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3158.064774][T32285] Call Trace:
[ 3158.068053][T32285]  dump_stack_lvl+0xcd/0x134
[ 3158.072652][T32285]  should_fail.cold+0x5/0xa
[ 3158.077171][T32285]  ? security_file_alloc+0x34/0x170
[ 3158.082461][T32285]  should_failslab+0x5/0x10
[ 3158.086970][T32285]  kmem_cache_alloc+0x5e/0x390
[ 3158.091742][T32285]  security_file_alloc+0x34/0x170
[ 3158.096773][T32285]  __alloc_file+0xd8/0x280
[ 3158.101198][T32285]  alloc_empty_file+0x6d/0x170
[ 3158.105963][T32285]  alloc_file+0x59/0x590
[ 3158.110214][T32285]  alloc_file_pseudo+0x165/0x250
[ 3158.115162][T32285]  ? alloc_file+0x590/0x590
[ 3158.119674][T32285]  ? lockdep_init_map_type+0x2c3/0x7b0
[ 3158.125149][T32285]  ? lockdep_annotate_inode_mutex_key+0x43/0x180
[ 3158.131485][T32285]  ? hugetlbfs_get_inode+0x365/0x560
[ 3158.136776][T32285]  hugetlb_file_setup+0x3e0/0x6c0
[ 3158.141808][T32285]  ksys_mmap_pgoff+0x228/0x620
[ 3158.146585][T32285]  ? mlock_future_check+0x120/0x120
[ 3158.151790][T32285]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3158.157779][T32285]  do_syscall_64+0x35/0xb0
[ 3158.162204][T32285]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3158.168107][T32285] RIP: 0033:0x7fd47a3ed739
[ 3158.172529][T32285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3158.192225][T32285] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 3158.200638][T32285] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
[ 3158.208604][T32285] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3158.216693][T32285] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
[ 3158.224670][T32285] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3158.232645][T32285] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:07 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x10000e39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 3 (fault-call:6 fault-nth:7):
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:08 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xf41a0000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
syz_open_dev$audion(&(0x7f0000000000), 0x3ff, 0x800)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000140)=""/169, 0xa9}, &(0x7f0000000040), 0x2a}, 0x20)
r4 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000200))
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, 0x0)
ioctl$FBIOPUTCMAP(r5, 0x5452, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:08 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3159.058164][T32320] FAULT_INJECTION: forcing a failure.
[ 3159.058164][T32320] name failslab, interval 1, probability 0, space 0, times 0
[ 3159.097059][T32320] CPU: 0 PID: 32320 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0
[ 3159.105879][T32320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3159.115957][T32320] Call Trace:
[ 3159.119251][T32320]  dump_stack_lvl+0xcd/0x134
[ 3159.123870][T32320]  should_fail.cold+0x5/0xa
[ 3159.128405][T32320]  ? integrity_inode_get+0x5a/0x270
[ 3159.133640][T32320]  should_failslab+0x5/0x10
[ 3159.138178][T32320]  kmem_cache_alloc+0x5e/0x390
[ 3159.143055][T32320]  integrity_inode_get+0x5a/0x270
[ 3159.148135][T32320]  process_measurement+0x350/0x1920
[ 3159.153383][T32320]  ? mmap_violation_check+0x1f0/0x1f0
[ 3159.158802][T32320]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 3159.165005][T32320]  ? find_held_lock+0x2d/0x110
[ 3159.169808][T32320]  ? aa_get_task_label+0x20f/0x540
[ 3159.174951][T32320]  ? lock_downgrade+0x6e0/0x6e0
[ 3159.179848][T32320]  ? aa_get_task_label+0x231/0x540
[ 3159.184996][T32320]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 3159.191255][T32320]  ? apparmor_task_getsecid+0xc2/0x110
[ 3159.196732][T32320]  ima_file_mmap+0x10a/0x130
[ 3159.201334][T32320]  ? percpu_counter_add_batch+0xbd/0x180
[ 3159.207226][T32320]  ? ima_file_free+0x420/0x420
[ 3159.211996][T32320]  ? apparmor_mmap_file+0x32d/0x5c0
[ 3159.217200][T32320]  security_mmap_file+0x15f/0x1b0
[ 3159.222236][T32320]  vm_mmap_pgoff+0xd3/0x290
[ 3159.226761][T32320]  ? lockdep_annotate_inode_mutex_key+0x43/0x180
[ 3159.233121][T32320]  ? randomize_stack_top+0x100/0x100
[ 3159.238431][T32320]  ? hugetlbfs_get_inode+0x365/0x560
[ 3159.243865][T32320]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 3159.250199][T32320]  ? hugetlb_file_setup+0x404/0x6c0
[ 3159.255405][T32320]  ksys_mmap_pgoff+0x269/0x620
[ 3159.260183][T32320]  ? mlock_future_check+0x120/0x120
[ 3159.265385][T32320]  ? syscall_enter_from_user_mode+0x21/0x70
[ 3159.271286][T32320]  do_syscall_64+0x35/0xb0
[ 3159.275704][T32320]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3159.281601][T32320] RIP: 0033:0x7fd47a3ed739
[ 3159.286022][T32320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
17:14:08 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20240, 0x0)
connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10)
read$rfkill(r1, &(0x7f0000000080), 0x8)
ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000001dc0))
sendmsg$rds(r1, &(0x7f0000002040)={&(0x7f0000001ac0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001c80)=""/34, 0x22}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000240)=""/179, 0xb3}], 0x5, &(0x7f0000002480)=[@rdma_args={0x48, 0x114, 0x1, {{0xd912, 0x4}, {&(0x7f00000005c0)=""/89, 0x59}, &(0x7f0000001840)=[{&(0x7f0000000640)=""/38, 0x26}, {&(0x7f0000000680)=""/212, 0xd4}, {&(0x7f0000000780)=""/12, 0xc}, {&(0x7f00000007c0)=""/127, 0x7f}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x5, 0x72}}, @fadd={0x58, 0x114, 0x6, {{0xfd, 0x9}, &(0x7f00000018c0)=0x3, &(0x7f0000001900)=0x7fffffff, 0x3, 0x9, 0x10000, 0x2, 0x10, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x10001, 0x80}, &(0x7f0000001940)=0x7ff, &(0x7f0000001980)=0x100000001, 0x8690, 0x0, 0x6, 0x0, 0x0, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x10000, 0x1}, &(0x7f00000019c0)=0x5e, &(0x7f0000001a00)=0x6, 0x0, 0xc328, 0x4, 0xb1, 0x0, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x40, 0x2}, &(0x7f0000001a40)=0x1, &(0x7f0000001a80)=0x101, 0x6, 0x20007, 0x3, 0xfffffffffffffeff, 0x44, 0x1f}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x8000}, &(0x7f0000002140), &(0x7f0000002180)=0x4, 0x5, 0x94c8, 0x40, 0x5, 0x40, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x100}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0xfffffffb}, &(0x7f0000001d40)=0xfffffffc, &(0x7f0000001d80)=0x547a, 0x7, 0x7ff, 0x10000, 0x10199fbd, 0x20, 0xe2ba}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x10000}}, @rdma_dest={0x18, 0x114, 0x2, {0x3f, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x10000, 0x1}, &(0x7f00000000c0)=0x6, &(0x7f0000001b00), 0x8, 0x80000000, 0xfbc, 0x2, 0x20, 0xfbef}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x4}, {&(0x7f0000001b40)=""/89, 0x59}, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/87, 0x57}], 0x1, 0x31, 0x1ff}}], 0x340, 0x4044010}, 0x1)
setxattr$security_capability(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), &(0x7f0000002100)=@v1={0x1000000, [{0x20, 0x7ff}]}, 0xc, 0x2)

[ 3159.305628][T32320] RSP: 002b:00007fd477964188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 3159.314050][T32320] RAX: ffffffffffffffda RBX: 00007fd47a4f1f80 RCX: 00007fd47a3ed739
[ 3159.322016][T32320] RDX: 0000000002000016 RSI: 0000000000004000 RDI: 0000000020ffc000
[ 3159.329986][T32320] RBP: 00007fd4779641d0 R08: ffffffffffffffff R09: 0000000000000000
[ 3159.337952][T32320] R10: 0000000000041833 R11: 0000000000000246 R12: 0000000000000001
[ 3159.345923][T32320] R13: 00007fd47aa25b1f R14: 00007fd477964300 R15: 0000000000022000
17:14:08 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:09 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 2:
setuid(0xffffffffffffffff)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {<r2=>0x0}]})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r2, 0x2})
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xffffe000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:09 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_io_uring_complete(0x0)
ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0xa, 0x1})
syz_io_uring_setup(0x67ee, &(0x7f0000000040)={0x0, 0x8a92, 0x1, 0x1, 0x204, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x2f4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f)
syz_io_uring_submit(r2, r3, &(0x7f0000000a40)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/57, 0x39}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/166, 0xa6}, {&(0x7f0000000740)=""/31, 0x1f}, {&(0x7f0000000780)=""/241, 0xf1}], 0x9, &(0x7f0000000940)=""/178, 0xb2}, 0x0, 0x20}, 0x2)

17:14:09 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:10 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@isdn={0x22, 0x9, 0x4, 0xe1, 0x4}, {&(0x7f0000000180)=""/105, 0x69}, &(0x7f0000000200), 0x1}, 0xa0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x107c46)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000140)={0x7, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})

17:14:10 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:10 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 2:
pipe2$9p(&(0x7f0000000040), 0x4000)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_complete(0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000000)={0x6, 0xfffffffffffffd27, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:10 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000000)={0xa, 0xfffffffffffffef5, 0x0, 0x0, 0x0, 0x0})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x6, 0x28, 0x3f, 0xb27, 0x7, 0x0, 0x1], &(0x7f00000000c0)=[0x141, 0x1], &(0x7f0000000140)=[0x1ff, 0x0, 0x1, 0x8000, 0xaa6e, 0xfffd, 0xffff, 0x7fff]})

17:14:11 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x0)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3161.453202][   T27] INFO: task kworker/0:2:17789 blocked for more than 143 seconds.
[ 3161.467111][   T27]       Not tainted 5.15.0-rc2-syzkaller #0
17:14:11 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:11 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0})

17:14:11 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0})

[ 3161.532022][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
17:14:11 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3161.599870][   T27] task:kworker/0:2     state:D stack:25792 pid:17789 ppid:     2 flags:0x00004000
[ 3161.640694][   T27] Workqueue: events_power_efficient reg_check_chans_work
[ 3161.681085][   T27] Call Trace:
[ 3161.706309][   T27]  __schedule+0x940/0x26f0
[ 3161.755059][   T27]  ? io_schedule_timeout+0x140/0x140
17:14:11 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x294081, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3161.792827][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
17:14:11 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0})

[ 3161.834999][   T27]  ? lockdep_hardirqs_on+0x79/0x100
[ 3161.877891][   T27]  schedule+0xd3/0x270
17:14:11 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0})

17:14:11 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0})

17:14:11 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3161.906111][   T27]  schedule_preempt_disabled+0xf/0x20
[ 3161.941399][   T27]  __mutex_lock+0xa34/0x12f0
17:14:11 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x2)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3161.971165][   T27]  ? reg_check_chans_work+0x83/0xe10
[ 3162.004012][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[ 3162.030754][   T27]  reg_check_chans_work+0x83/0xe10
17:14:11 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x20c81, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x690, 0x2000, 0x356, 0xa0, 0x4, 0x2, 0x0, 0x1, {0x5, 0x6}, {0x6, 0xfffffff8}, {0x9, 0x3}, {0x2, 0x2, 0x1}, 0x3, 0x0, 0x1f, 0x0, 0x1, 0x5, 0x0, 0x7, 0x51c8, 0x7a, 0x6, 0xc107, 0x1, 0x200, 0x7475650dfb6160e, 0xc})
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x8801, 0x103)

[ 3162.081677][   T27]  ? lock_release+0x720/0x720
[ 3162.120444][   T27]  ? regulatory_pre_cac_allowed+0x400/0x400
17:14:11 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0})

[ 3162.162992][   T27]  process_one_work+0x9bf/0x16b0
17:14:11 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})

[ 3162.236565][   T27]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3162.257890][   T27]  ? rwlock_bug.part.0+0x90/0x90
17:14:11 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0})

17:14:11 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3162.308844][   T27]  ? _raw_spin_lock_irq+0x41/0x50
[ 3162.342904][   T27]  worker_thread+0x658/0x11f0
17:14:11 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x7)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3162.378208][   T27]  ? process_one_work+0x16b0/0x16b0
[ 3162.419770][   T27]  kthread+0x3e5/0x4d0
17:14:12 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3162.448578][   T27]  ? set_kthread_struct+0x130/0x130
17:14:12 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0})

[ 3162.488718][   T27]  ret_from_fork+0x1f/0x30
[ 3162.532906][   T27] INFO: task kworker/0:0:14356 blocked for more than 144 seconds.
17:14:12 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0})

[ 3162.586889][   T27]       Not tainted 5.15.0-rc2-syzkaller #0
17:14:12 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0})

17:14:12 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3162.645849][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3162.710292][   T27] task:kworker/0:0     state:D stack:27192 pid:14356 ppid:     2 flags:0x00004000
17:14:12 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x700)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3162.780100][   T27] Workqueue: events linkwatch_event
17:14:12 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x88400, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000080)={0xe39, 0xfffffc49, 0x0, 0x0, 0x0, 0x0})

[ 3162.829604][   T27] Call Trace:
17:14:12 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0})

[ 3162.853377][   T27]  __schedule+0x940/0x26f0
17:14:12 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0})

[ 3162.912859][   T27]  ? io_schedule_timeout+0x140/0x140
[ 3162.918222][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
17:14:12 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0})

[ 3162.958873][   T27]  ? lockdep_hardirqs_on+0x79/0x100
17:14:12 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3162.991127][   T27]  schedule+0xd3/0x270
[ 3163.024534][   T27]  schedule_preempt_disabled+0xf/0x20
[ 3163.073139][   T27]  __mutex_lock+0xa34/0x12f0
[ 3163.135653][   T27]  ? linkwatch_event+0xb/0x60
17:14:12 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x2000, 0x280, 0x80, 0x40, 0xfffffffe, 0x6, 0x1, 0x1, {0x1f, 0x4, 0x1}, {0x7, 0x4f8c}, {0x80000000, 0x100}, {0x3, 0x80, 0x1}, 0x7, 0x100, 0x0, 0x3ff, 0x1, 0xfffffff8, 0x101, 0x9, 0x5, 0x1, 0x9, 0x5, 0x8, 0x0, 0x1, 0x5})
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3163.182732][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
17:14:12 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

[ 3163.228626][   T27]  ? lock_release+0x720/0x720
17:14:12 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0})

17:14:12 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x2000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3163.264907][   T27]  linkwatch_event+0xb/0x60
17:14:12 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0})

[ 3163.317195][   T27]  process_one_work+0x9bf/0x16b0
17:14:12 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3163.353774][   T27]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3163.373296][   T27]  ? rwlock_bug.part.0+0x90/0x90
[ 3163.410770][   T27]  ? _raw_spin_lock_irq+0x41/0x50
[ 3163.447485][   T27]  worker_thread+0x658/0x11f0
[ 3163.484234][   T27]  ? process_one_work+0x16b0/0x16b0
17:14:13 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]})

17:14:13 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0})

[ 3163.573535][   T27]  kthread+0x3e5/0x4d0
17:14:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0})

[ 3163.608350][   T27]  ? set_kthread_struct+0x130/0x130
[ 3163.653618][   T27]  ret_from_fork+0x1f/0x30
17:14:13 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0})

[ 3163.686045][   T27] INFO: task kworker/0:4:20620 blocked for more than 145 seconds.
17:14:13 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3163.762080][   T27]       Not tainted 5.15.0-rc2-syzkaller #0
[ 3163.797747][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
17:14:13 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x3f00)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3163.851917][   T27] task:kworker/0:4     state:D stack:27136 pid:20620 ppid:     2 flags:0x00004000
17:14:13 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0})

[ 3163.908717][   T27] Workqueue: events switchdev_deferred_process_work
17:14:13 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3163.953937][   T27] Call Trace:
17:14:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0})

[ 3163.986540][   T27]  __schedule+0x940/0x26f0
17:14:13 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0})

[ 3164.029145][   T27]  ? io_schedule_timeout+0x140/0x140
[ 3164.064113][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
17:14:13 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3164.087084][   T27]  ? lockdep_hardirqs_on+0x79/0x100
[ 3164.124318][   T27]  schedule+0xd3/0x270
[ 3164.149807][   T27]  schedule_preempt_disabled+0xf/0x20
[ 3164.185028][   T27]  __mutex_lock+0xa34/0x12f0
17:14:13 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x20000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3164.214540][   T27]  ? switchdev_deferred_process_work+0xa/0x20
17:14:13 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0})

[ 3164.256289][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
17:14:13 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0xc5000)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x161240, 0x0)

17:14:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0})

[ 3164.301977][   T27]  ? lock_downgrade+0x6e0/0x6e0
17:14:13 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

[ 3164.362670][   T27]  switchdev_deferred_process_work+0xa/0x20
[ 3164.368632][   T27]  process_one_work+0x9bf/0x16b0
17:14:14 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3164.412764][   T27]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 3164.440877][   T27]  ? rwlock_bug.part.0+0x90/0x90
[ 3164.470659][   T27]  ? _raw_spin_lock_irq+0x41/0x50
[ 3164.514541][   T27]  worker_thread+0x658/0x11f0
17:14:14 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x1af4, 0x0, 0x0, 0x0, 0x0})

[ 3164.543951][   T27]  ? process_one_work+0x16b0/0x16b0
[ 3164.583162][   T27]  kthread+0x3e5/0x4d0
17:14:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0})

[ 3164.614009][   T27]  ? set_kthread_struct+0x130/0x130
17:14:14 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$fb(r0, &(0x7f0000000000)=""/39, 0x27)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3164.656139][   T27]  ret_from_fork+0x1f/0x30
17:14:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0})

[ 3164.742526][   T27] 
[ 3164.742526][   T27] Showing all locks held in the system:
[ 3164.750693][   T27] 1 lock held by khungtaskd/27:
[ 3164.766122][   T27]  #0: ffffffff8b97fea0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
17:14:14 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3164.803430][   T27] 1 lock held by systemd-udevd/2974:
[ 3164.838381][   T27] 1 lock held by in:imklog/6459:
17:14:14 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x200000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0})

[ 3164.862677][   T27]  #0: ffff88807c075c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100
17:14:14 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xf41a, 0x0, 0x0, 0x0, 0x0})

[ 3164.920063][   T27] 3 locks held by syz-executor.4/11883:
[ 3164.963064][   T27] 3 locks held by kworker/0:2/17789:
17:14:14 executing program 2:
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000340)=""/197, 0xc5})
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x5452, &(0x7f0000000300)={0x80000e39, 0x44, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$audion(&(0x7f0000000280), 0x100000000, 0x181100)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x1ff, 0x0, &(0x7f0000000040), &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r4 = open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x800)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000002c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000440)={r5, 0x3})
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000240)={0x8})
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$FBIOBLANK(r6, 0x4611, 0x4)

[ 3164.993283][   T27]  #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0})

17:14:14 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3165.107030][   T27]  #1: ffffc9000c747db0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3165.177677][   T27]  #2: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10
[ 3165.234867][   T27] 3 locks held by syz-executor.1/25154:
17:14:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0})

17:14:14 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0})

[ 3165.279129][   T27]  #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x236/0x26f0
[ 3165.361611][   T27]  #1: ffff8880b9c1f9c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x16a/0x480
17:14:15 executing program 2:
socket(0x21, 0x0, 0x2)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xf39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:15 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x1000000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:15 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0})

[ 3165.444676][   T27]  #2: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: try_to_wake_up+0x49f/0x1350
17:14:15 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3165.522619][   T27] 3 locks held by kworker/0:1/8797:
[ 3165.527858][   T27]  #0: ffff888147923138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:15 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xe0ffff, 0x0, 0x0, 0x0, 0x0})

17:14:15 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0})

[ 3165.626757][   T27]  #1: ffffc9001b2a7db0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3165.688612][   T27]  #2: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20
17:14:15 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x2, "07cb"}, 0x3)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@vsock={0x28, 0x0, 0x0, @hyper}, {&(0x7f0000000400)=""/217, 0xd9}, &(0x7f0000000040), 0x1}, 0xa0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3165.737589][   T27] 3 locks held by syz-executor.0/8827:
17:14:15 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0})

[ 3165.787712][   T27]  #0: ffffffff8b60a098 (tasklist_lock){.+.+}-{2:2}, at: __schedule+0x236/0x26f0
[ 3165.882848][   T27]  #1: ffff8880b9c1f9c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39d/0x480
17:14:15 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:15 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0})

17:14:15 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0})

[ 3165.967182][   T27]  #2: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: try_to_wake_up+0x49f/0x1350
17:14:15 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x2000000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3166.041700][   T27] 2 locks held by kworker/u4:0/9726:
17:14:15 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0})

[ 3166.081222][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:15 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xa0003, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FBIOBLANK(r0, 0x4611, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000140))
r2 = syz_io_uring_complete(0x0)
read$fb(r2, &(0x7f0000000040)=""/231, 0xe7)

[ 3166.175272][   T27]  #1: ffffc9001ec37db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:15 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3166.228822][   T27] 4 locks held by kworker/u4:2/17400:
[ 3166.262579][   T27] 2 locks held by kworker/u4:4/17409:
17:14:15 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0})

17:14:15 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0})

[ 3166.295781][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:16 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0})

[ 3166.441133][   T27]  #1: ffffc90004fafdb0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:16 executing program 2:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x810, r0, 0x91000)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

17:14:16 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x7000000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3166.549048][   T27] 3 locks held by kworker/0:0/14356:
17:14:16 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3166.598322][   T27]  #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:16 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0})

17:14:16 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x13160afe648c4762, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$audion(&(0x7f0000001480), 0x3, 0x900)
bind$isdn(r2, &(0x7f00000014c0)={0x22, 0x6, 0x9, 0x4, 0x9}, 0x6)
r3 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffa04, 0x220102)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x13, r3, 0x52000)

[ 3166.665639][   T27]  #1: ffffc90006667db0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3166.738095][   T27]  #2: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60
17:14:16 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0})

[ 3166.809401][   T27] 2 locks held by kworker/u4:3/20560:
[ 3166.844812][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:16 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000))

17:14:16 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0})

[ 3166.952631][   T27]  #1: ffffc90020837db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:16 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0})

[ 3167.058269][   T27] 2 locks held by kworker/u4:5/20564:
17:14:16 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x20000000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3167.108920][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:16 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0})

17:14:16 executing program 5:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84000)
write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$fb(r0, &(0x7f0000000340)=""/219, 0xdb)
sched_yield()
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000140))
ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0xe, 0x2})
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x5}, 0x7)

[ 3167.201431][   T27]  #1: ffffc900212f7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:16 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000001400)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000001280)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0xb5a}, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x5f51, 0x100, 0x8, 0x7, 0x6, 0xdd, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001140), 0xe}}, @fadd={0x58, 0x114, 0x6, {{0x80, 0x2c}, &(0x7f0000001180)=0x1f, &(0x7f00000011c0)=0x7, 0x4d1, 0xfffffffffffffffc, 0x0, 0x10, 0x5, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x10001, 0x48}, &(0x7f0000001200)=0xd654, &(0x7f0000001240)=0x8, 0xfffffffffffff6ae, 0x4, 0x7, 0x5, 0x1e}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x736}}], 0x168, 0x8004}, 0x4040840)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000000)={0xe7c, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:16 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})

[ 3167.270634][   T27] 2 locks held by kworker/u4:6/20568:
[ 3167.324181][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:16 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0})

[ 3167.430274][   T27]  #1: ffffc90024997db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:17 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={r2})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3167.552414][   T27] 2 locks held by kworker/u4:8/20569:
[ 3167.566498][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:17 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0})

17:14:17 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0})

[ 3167.649538][   T27]  #1: ffffc900249a7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:17 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, 0x0)
write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)

17:14:17 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0})

[ 3167.725034][   T27] 2 locks held by kworker/u4:10/20575:
17:14:17 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x3f000000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3167.765293][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[ 3167.850900][   T27]  #1: ffffc90022dd7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:17 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0})

17:14:17 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0})

[ 3167.946792][   T27] 2 locks held by kworker/u4:11/20580:
17:14:17 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x3)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3167.997044][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:17 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/4096, 0x1000})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000140)={0x640, 0x400, 0x190, 0x280, 0x430b, 0xf1, 0x0, 0x2, {0x39, 0x6, 0x1}, {0x8001, 0x40, 0x1}, {0xfff, 0x5}, {0x7fffffff, 0x8000}, 0x2, 0x2, 0xe8f, 0xfffffff4, 0x0, 0x1f, 0x3, 0xffff62a0, 0xc672, 0x9, 0xcd, 0x2, 0x58, 0x200, 0x3, 0x1})
pipe2$9p(&(0x7f0000000200), 0x99c24c8ae1f2961c)
openat$fb1(0xffffffffffffff9c, &(0x7f0000000240), 0x200600, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r2, 0x7c000)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3168.074796][   T27]  #1: ffffc9001af07db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:17 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0})

17:14:17 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2540, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x5b, 0x0, 0x0, 0x0, 0x0})

17:14:17 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0})

[ 3168.244975][   T27] 2 locks held by kworker/u4:13/20582:
17:14:17 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0})

[ 3168.301753][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:17 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0})

17:14:17 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0xfeffffff)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:18 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x20, 0x84880)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040))

[ 3168.384192][   T27]  #1: ffffc90020ee7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3168.442700][   T27] 2 locks held by kworker/u4:14/20583:
[ 3168.465417][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:18 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0})

17:14:18 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x402800)
ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040))
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3168.575147][   T27]  #1: ffffc9001dec7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:18 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0})

17:14:18 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xf41a0000, 0x0, 0x0, 0x0, 0x0})

[ 3168.661192][   T27] 2 locks held by kworker/u4:15/20584:
[ 3168.697452][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[ 3168.773884][   T27]  #1: ffffc900228b7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:18 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0xffffff7f)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:18 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000000)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:18 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0})

[ 3168.863434][   T27] 2 locks held by kworker/u4:16/20585:
17:14:18 executing program 5:
socketpair(0xa, 0x0, 0x53d4, &(0x7f0000000000))
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3168.919816][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:18 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0})

17:14:18 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0})

[ 3169.010471][   T27]  #1: ffffc900249d7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3169.088376][   T27] 2 locks held by kworker/u4:17/20586:
[ 3169.137342][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:18 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

17:14:18 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x800, 0x384, 0x10, 0x4b0, 0x1000, 0x8001, 0x0, 0x2, {0x1f, 0x4}, {0xda2, 0x342d}, {0x3ff, 0x2, 0x1}, {0x9, 0x3fca, 0x1}, 0x1, 0x2, 0x800, 0x5, 0x1, 0x5, 0x6, 0x6, 0x4, 0x7, 0x1000, 0xd34, 0x1, 0x2, 0x1, 0x5})
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000200), 0x20, 0x0)
ioctl$FBIOBLANK(r2, 0x4611, 0x2)
syz_io_uring_setup(0x5aa, &(0x7f0000000140)={0x0, 0xe8c, 0x0, 0x3, 0x2ca, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0))

[ 3169.223829][   T27]  #1: ffffc9001a4f7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:18 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000006300)={&(0x7f0000004b80)=@can={0x1d, <r2=>0x0}, 0x80, &(0x7f0000006200)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/208, 0xd0}, {&(0x7f0000005d00)=""/158, 0x9e}, {&(0x7f0000005dc0)=""/247, 0xf7}, {&(0x7f0000005ec0)=""/129, 0x81}, {&(0x7f0000005f80)=""/51, 0x33}, {&(0x7f0000005fc0)=""/6, 0x6}, {&(0x7f0000006000)=""/102, 0x66}, {&(0x7f0000006080)=""/195, 0xc3}, {&(0x7f0000006180)=""/99, 0x63}], 0xa, &(0x7f00000062c0)=""/15, 0xf}, 0x40000000)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000063c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x34, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000a8d1}, 0x8008801)

17:14:18 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0})

17:14:18 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0xfffffffe)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:18 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0})

[ 3169.305225][   T27] 2 locks held by kworker/u4:18/20593:
[ 3169.338456][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[ 3169.403988][   T27]  #1: ffffc90019397db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3169.482685][   T27] 2 locks held by kworker/u4:19/20599:
[ 3169.517024][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:19 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0})

17:14:19 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x20, 0x360, 0x690, 0x400, 0x1, 0x7c, 0x4, 0x2, {0x1ff, 0xc58, 0x1}, {0x3, 0x7, 0x1}, {0x800, 0x4, 0x1}, {0x100, 0x1000, 0x1}, 0x2, 0x100, 0xffffff16, 0xe01, 0x1, 0x5, 0x375, 0xffffffff, 0xca5, 0x80000000, 0x4, 0xffff, 0x0, 0x4, 0x2, 0x3})
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000001c0)={0xf0, 0x4b0, 0xa00, 0x2000, 0xfff, 0x0, 0x1b, 0x1, {0x0, 0xffff}, {0x6, 0x5, 0x1}, {0x200, 0x3}, {0x8, 0x200, 0x1}, 0x1, 0x0, 0x1, 0x4, 0x1, 0xe8f, 0x6, 0x4, 0x5, 0x3c11, 0x78, 0x1, 0x20, 0x4, 0x0, 0xb})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x541000, 0x0)

17:14:19 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xffffe000, 0x0, 0x0, 0x0, 0x0})

[ 3169.627482][   T27]  #1: ffffc90024917db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000000)={0x400003, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000300)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0})

17:14:19 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x3fffffffffe)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3169.716925][   T27] 2 locks held by kworker/u4:20/20601:
[ 3169.749492][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[ 3169.805657][   T27]  #1: ffffc900205e7db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3169.874455][   T27] 2 locks held by kworker/u4:21/20603:
17:14:19 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0})

[ 3169.933377][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000240)={0x24, 0x1})
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=[0x1, 0x1, 0x0, 0x775], &(0x7f0000000080)=[0x800], &(0x7f00000000c0)=[0x9, 0xd757, 0x8, 0x6, 0x2d, 0x7, 0x7, 0xc7d], &(0x7f0000000140)=[0xfffb]})
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000001c0))

17:14:19 executing program 2:
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x90082)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)

17:14:19 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0})

[ 3170.104928][   T27]  #1: ffffc90020b97db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:19 executing program 1:
r0 = gettid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x37, 0x2, {0x0, 0x100, 0x1, r0, 0x9, '/dev/fb0\x00'}}, 0x27)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_io_uring_complete(0x0)
mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1010, r2, 0x40000)

17:14:19 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x21, 0x37, 0x2, {0x2, 0x97, 0x2c, 0x0, 0x3, '({('}}, 0x21)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3170.205435][   T27] 2 locks held by kworker/u4:22/20605:
[ 3170.242955][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:19 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0})

17:14:19 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x3ffffffffff)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:19 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/211, 0xd3})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
open_tree(r1, &(0x7f0000000400)='./file0\x00', 0x80800)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000100)={r4})
ioctl$FBIOPUTCMAP(r2, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]})

[ 3170.325835][   T27]  #1: ffffc9001a547db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:20 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x37})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={<r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r1, r2, r1, r1, 0x0], 0x4, 0x5, 0x4, <r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000240)={r2, 0x0, 0x0, r4, 0x4})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000180)={&(0x7f00000000c0)=[r1, r2], &(0x7f0000000140)=[0x0, 0x0], 0xfffffffc, 0x2, 0x1})

[ 3170.403105][   T27] 2 locks held by kworker/u4:23/20606:
[ 3170.474791][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:20 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000000)={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:20 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0})

[ 3170.597891][   T27]  #1: ffffc90016d7fdb0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:20 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000000)={0x0, 0xfffffffffffffde9, 0x0, 0x0, 0x0, 0x0})

17:14:20 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3170.678416][   T27] 2 locks held by kworker/u4:24/20607:
[ 3170.711775][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:20 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x200000000000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

[ 3170.793437][   T27]  #1: ffffc90021977db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:20 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0)

[ 3170.882513][   T27] 2 locks held by kworker/u4:25/20612:
[ 3170.930312][   T27]  #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:20 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0})

17:14:20 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000000)={0xa4a8, 0x24, 0x0, 0x0, 0x0, 0x0})

17:14:20 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x8000)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000280)=0x2, 0x4)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa0bbf6cdb707ad8f, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x65f, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x2, 0x2, 0x6, 0x6, 0x1, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x29, &(0x7f0000000080)=""/41, 0x0, 0x6, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0xcd4, 0x5}, 0x10, 0xffffffffffffffff}, 0x78)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3171.042513][   T27]  #1: ffffc9001a767db0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[ 3171.120942][   T27] 3 locks held by kworker/0:4/20620:
[ 3171.178499][   T27]  #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
17:14:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0xc0100)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={<r2=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000140)={&(0x7f00000000c0)=[r1, 0x0, 0x0, r2], 0x4})
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r3, 0x5421, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3171.281684][   T27]  #1: ffffc90002d0fdb0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
17:14:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000800), 0x2, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000200))
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{<r2=>0x0}]})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000180)={r2, 0x2, &(0x7f0000000080)=[0x2dae, 0x400], &(0x7f00000000c0)=[0x3, 0x81, 0x2, 0xc8, 0x9], 0x1, 0x9, 0x8, &(0x7f0000000100)=[0x7, 0x0, 0x1, 0x788, 0x3ff, 0x8, 0x80000001, 0x6, 0x200], &(0x7f0000000140)=[0x3ff]})
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:21 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$fb(0xffffffffffffffff, &(0x7f0000000040)="418509cdd76541f9ea40f612687806021d2a600f7f86948856298468d4b5019a50040dd2fe98e3899d3a70e967d7bda12a", 0x31)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001140)={@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, {&(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000000080), 0x1c}, 0xa0)
ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:14:21 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0})

[ 3171.394813][   T27]  #2: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
17:14:21 executing program 3:
r0 = syz_io_uring_setup(0x10005968, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x4, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r0}}, 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000016, 0x41833, 0xffffffffffffffff, 0x2000000000000)
setgid(0x0)
syz_io_uring_setup(0x5615, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
r1 = geteuid()
setuid(r1)

17:14:21 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, 0x0)
ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000))
ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000300)={0xe39, 0x0, 0x0, 0x0, 0x0, 0x0})