ES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
pidfd_open(r1, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xff, 0xa, 0x4, 0x4, 0x9, {}, {0x2, 0xc, 0x0, 0x3, 0x8, 0x6, "bf6e5a57"}, 0x0, 0x1, @offset=0x4aee193b, 0xf4e, 0x0, <r5=>0xffffffffffffffff})
getresgid(&(0x7f00000027c0), &(0x7f0000002800)=<r6=>0x0, &(0x7f0000002840))
r7 = getegid()
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r9, 0x0)
dup2(r8, r9)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r11, 0x0)
dup2(r10, r11)
fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000380)=0xc)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
r16 = fcntl$dupfd(r15, 0x0, r15)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, <r17=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r17, r17, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r18=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18)
r19 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r19, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, <r20=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r20, r20, 0x0)
r21 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r22 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r22, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r22, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r23 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r23, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r23, 0x1, &(0x7f0000000180)={{0x3, r17, r18, r20, r13, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r21, r22, 0x5})
r24 = socket$inet_tcp(0x2, 0x1, 0x0)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, <r26=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r26, r26, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r27=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27)
r28 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r28, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, <r29=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r29, r29, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
setregid(r30, 0x0)
r31 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r32, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r29, r30, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r31, r32, 0x5})
r33 = getegid()
fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x7, r13}, {0x8, 0x5, r14}, {0x8, 0x4, r18}, {0x8, 0x4, r30}, {0x8, 0x4, r33}], {0x10, 0xd}, {0x20, 0x5}}, 0x64, 0x3)
r34 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r35 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r35, 0x0)
dup2(r34, r35)
r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r37 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r37, 0x0)
dup2(r36, r37)
fstat(r37, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
r39 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r40=>0x0}, &(0x7f0000000380)=0xc)
r41 = socket$inet_tcp(0x2, 0x1, 0x0)
r42 = fcntl$dupfd(r41, 0x0, r41)
getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, <r43=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r43, r43, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r44=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44)
r45 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r45, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000200)={0x0, <r46=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r46, r46, 0x0)
r47 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r48 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r48, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r48, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
r49 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r49, 0xf, &(0x7f0000000540)=""/221)
shmctl$IPC_SET(r49, 0x1, &(0x7f0000000180)={{0x3, r43, r44, r46, r39, 0x42, 0x7}, 0x803ff, 0x2, 0xfffffffffffffffd, 0x0, r47, r48, 0x5})
r50 = socket$inet_tcp(0x2, 0x1, 0x0)
r51 = fcntl$dupfd(r50, 0x0, r50)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000200)={0x0, <r52=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r52, r52, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r53=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r53)
r54 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r54, 0x80386433, &(0x7f0000000bc0)=""/4096)
getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, <r55=>0x0}, &(0x7f0000000240)=0x194)
setresuid(r55, r55, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
setregid(r56, 0x0)
r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000})
waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180))
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r52, r53, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5})
r59 = getegid()
fsetxattr$system_posix_acl(r34, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r38, @ANYBLOB="040004000000000008000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r39, @ANYBLOB="08000500", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r56, @ANYBLOB="08010400", @ANYRES32=r59, @ANYBLOB="10000d00000000002000050000000000"], 0x64, 0x3)
getgroups(0x3, &(0x7f0000002880)=[r30, <r60=>r39, 0x0])
setresgid(r6, r7, r60)
recvmsg$can_raw(r5, &(0x7f0000002780)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @netrom, @remote, @netrom, @default, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=""/207, 0xcf}, 0x10021)
syz_open_dev$evdev(&(0x7f00000028c0)='/dev/input/event#\x00', 0x9, 0x42)
r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900)='/dev/snapshot\x00', 0x600000, 0x0)
r62 = dup(r61)
ioctl$PERF_EVENT_IOC_ENABLE(r62, 0x8912, 0x400200)

19:12:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000070100000020000000000000ff000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x802000004, 0xa)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)={0x0, 0x9, 0x101, &(0x7f0000000100)=0x2f})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006500)={&(0x7f0000006100)={0x3e0, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xffffffd5}}, {{0x8}, {0x7c}}, {{0x8}, {0x7c}}, {{0x8}, {0xb8}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40}, 0x24000048)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010701fdeb733400000000001800000000ff20000886bf891d659ee301702686d0a3f44c878249756bab04728a746a8f32c0b6975eb6c2e528b4ba30dbf3344b00ec69350c599c3e61cac214c2400db3598b5f844d0710eb08ea5e228035d8baa7"], 0x1c}}, 0x0)

19:12:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000070100000020000000000000ff000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x802000004, 0xa)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)={0x0, 0x9, 0x101, &(0x7f0000000100)=0x2f})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006500)={&(0x7f0000006100)={0x3e0, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xffffffd5}}, {{0x8}, {0x7c}}, {{0x8}, {0x7c}}, {{0x8}, {0xb8}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40}, 0x24000048)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010701fdeb733400000000001800000000ff20000886bf891d659ee301702686d0a3f44c878249756bab04728a746a8f32c0b6975eb6c2e528b4ba30dbf3344b00ec69350c599c3e61cac214c2400db3598b5f844d0710eb08ea5e228035d8baa7"], 0x1c}}, 0x0)

[  765.631979][T28876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
19:12:17 executing program 2:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfc)

[  765.748240][T28905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:12:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000070100000020000000000000ff000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x802000004, 0xa)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)={0x0, 0x9, 0x101, &(0x7f0000000100)=0x2f})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006500)={&(0x7f0000006100)={0x3e0, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xffffffd5}}, {{0x8}, {0x7c}}, {{0x8}, {0x7c}}, {{0x8}, {0xb8}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40}, 0x24000048)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010701fdeb733400000000001800000000ff20000886bf891d659ee301702686d0a3f44c878249756bab04728a746a8f32c0b6975eb6c2e528b4ba30dbf3344b00ec69350c599c3e61cac214c2400db3598b5f844d0710eb08ea5e228035d8baa7"], 0x1c}}, 0x0)

19:12:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000070100000020000000000000ff000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x802000004, 0xa)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)={0x0, 0x9, 0x101, &(0x7f0000000100)=0x2f})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006500)={&(0x7f0000006100)={0x3e0, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xffffffd5}}, {{0x8}, {0x7c}}, {{0x8}, {0x7c}}, {{0x8}, {0xb8}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40}, 0x24000048)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010701fdeb733400000000001800000000ff20000886bf891d659ee301702686d0a3f44c878249756bab04728a746a8f32c0b6975eb6c2e528b4ba30dbf3344b00ec69350c599c3e61cac214c2400db3598b5f844d0710eb08ea5e228035d8baa7"], 0x1c}}, 0x0)

[  766.053617][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:12:17 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

[  766.096160][T28980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
19:12:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000070100000020000000000000ff000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x802000004, 0xa)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)={0x0, 0x9, 0x101, &(0x7f0000000100)=0x2f})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006500)={&(0x7f0000006100)={0x3e0, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xffffffd5}}, {{0x8}, {0x7c}}, {{0x8}, {0x7c}}, {{0x8}, {0xb8}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40}, 0x24000048)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010701fdeb733400000000001800000000ff20000886bf891d659ee301702686d0a3f44c878249756bab04728a746a8f32c0b6975eb6c2e528b4ba30dbf3344b00ec69350c599c3e61cac214c2400db3598b5f844d0710eb08ea5e228035d8baa7"], 0x1c}}, 0x0)

19:12:17 executing program 2:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfc)

19:12:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000070100000020000000000000ff000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x802000004, 0xa)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)={0x0, 0x9, 0x101, &(0x7f0000000100)=0x2f})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006500)={&(0x7f0000006100)={0x3e0, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xffffffd5}}, {{0x8}, {0x7c}}, {{0x8}, {0x7c}}, {{0x8}, {0xb8}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40}, 0x24000048)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010701fdeb733400000000001800000000ff20000886bf891d659ee301702686d0a3f44c878249756bab04728a746a8f32c0b6975eb6c2e528b4ba30dbf3344b00ec69350c599c3e61cac214c2400db3598b5f844d0710eb08ea5e228035d8baa7"], 0x1c}}, 0x0)

[  766.356978][T29025] xt_CT: No such helper "snmp_trap"
19:12:17 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0)

19:12:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340))
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)

19:12:17 executing program 2:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfc)

[  766.408245][T29031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  766.496436][T29067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
19:12:17 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:17 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0)

19:12:18 executing program 1:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 4:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 0:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 2:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfc)

[  766.862829][T29150] xt_CT: No such helper "snmp_trap"
19:12:18 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0)

[  766.897347][T29153] xt_CT: No such helper "snmp_trap"
[  766.919307][T29159] xt_CT: No such helper "snmp_trap"
[  766.938953][T29158] xt_CT: No such helper "snmp_trap"
19:12:18 executing program 1:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 4:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 0:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 2:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0)

19:12:18 executing program 3:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

[  767.377855][T29188] xt_CT: No such helper "snmp_trap"
19:12:18 executing program 2:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

[  767.413656][T29186] xt_CT: No such helper "snmp_trap"
[  767.413683][T29185] xt_CT: No such helper "snmp_trap"
[  767.423656][T29189] xt_CT: No such helper "snmp_trap"
[  767.439059][T29193] xt_CT: No such helper "snmp_trap"
19:12:18 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 0:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:18 executing program 1:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 4:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 3:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 0:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 2:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 1:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x44, 0xb, 0x8, [@rand_addr=0x2000000, @loopback]}]}}}], 0x20}}], 0x1, 0xbb8)

19:12:19 executing program 4:
r0 = socket(0x200040000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

19:12:19 executing program 3:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 0:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:19 executing program 4:
r0 = socket(0x200040000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

19:12:19 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0xb, 0x0, 0x0)

19:12:19 executing program 1:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x44, 0xb, 0x8, [@rand_addr=0x2000000, @loopback]}]}}}], 0x20}}], 0x1, 0xbb8)

19:12:19 executing program 4:
r0 = socket(0x200040000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

19:12:19 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x44, 0xb, 0x8, [@rand_addr=0x2000000, @loopback]}]}}}], 0x20}}], 0x1, 0xbb8)

19:12:20 executing program 0:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:20 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1)
semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x2, 0x8001, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x7, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0x18, 0x1000}], 0x6)
semctl$GETNCNT(0x0, 0x2, 0x10, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x361001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000300), 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8)

19:12:20 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0xb, 0x0, 0x0)

19:12:20 executing program 1:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x44, 0xb, 0x8, [@rand_addr=0x2000000, @loopback]}]}}}], 0x20}}], 0x1, 0xbb8)

19:12:20 executing program 4:
r0 = socket(0x200040000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

19:12:20 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x44, 0xb, 0x8, [@rand_addr=0x2000000, @loopback]}]}}}], 0x20}}], 0x1, 0xbb8)

19:12:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}}, 0x28}}, 0x0)

19:12:20 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0xb, 0x0, 0x0)

19:12:20 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x3e, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

19:12:20 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

19:12:20 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x44, 0xb, 0x8, [@rand_addr=0x2000000, @loopback]}]}}}], 0x20}}], 0x1, 0xbb8)

19:12:20 executing program 1:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x44, 0xb, 0x8, [@rand_addr=0x2000000, @loopback]}]}}}], 0x20}}], 0x1, 0xbb8)

19:12:20 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0xb, 0x0, 0x0)

19:12:20 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x3e, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

19:12:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}}, 0x28}}, 0x0)

19:12:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))

19:12:20 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
shutdown(r1, 0x0)

19:12:21 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x3e, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

19:12:21 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4080, 0xff0}], 0x1, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)

19:12:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}}, 0x28}}, 0x0)

19:12:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c10300000300000098030000d0010000d001000000000000d0010000d0010000c8020000c8020000c8020000c8020000c802000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000009001d001000000000000000000000000000000000000000000000000c000737472696e6700000000000000000000000000000000000000000000000101005f85626d0000000000000000000000000000e7252943dbb4f5f8afaf946d72c340f92f908d6e6b8033e825db7975007cba3af665cc0da87a4c5c88d9dadf17aaed191816d1d900d54fc0b9cd1cb72d022c7a56cffdf0c65a76bcc754233982ae47b4f7d657c8ef7d7cf8dbab03f8e8416698f70faf25207c17ef213018accef0fd6d28913a4e0a91b50a7cb9761e4d12e2967e03000000ff0000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000040004c4f470000000000000000000000000000000000000000000000000000000526e6c3e432778d611921a3210b35d18caaf894758abe3f9602e95412408c350040000000000000000000000000000000000000000000000000000000000000000000000000a50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000800000000000000280053594e50524f5859000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000dfb51485e45526a30000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff680bd05982690cba6c3587a50041343751adca43ff4e504eb34cd7afbc35e14763ad99160d83fb3a51c6ee9f5c6dfdf7404627c75500f7348a654bff34f456e4094902f54e54586c2879f18ddbe5ff2c335bab03a0b17bb7f5a356bb1d77a2f179726bf6e0f6dfb450fdff7671141cdbb5e7f28f869f107c456d2d53a4ffb19ad944cc26289b02f39f1b64"], 0x1)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))

19:12:21 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

19:12:21 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x3e, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

19:12:21 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
shutdown(r1, 0x0)

19:12:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}}, 0x28}}, 0x0)

19:12:21 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4080, 0xff0}], 0x1, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)

19:12:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))

19:12:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))

19:12:21 executing program 0:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x3})
r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f"], 0x5)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

19:12:21 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4080, 0xff0}], 0x1, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)

19:12:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c10300000300000098030000d0010000d001000000000000d0010000d0010000c8020000c8020000c8020000c8020000c802000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000009001d001000000000000000000000000000000000000000000000000c000737472696e6700000000000000000000000000000000000000000000000101005f85626d0000000000000000000000000000e7252943dbb4f5f8afaf946d72c340f92f908d6e6b8033e825db7975007cba3af665cc0da87a4c5c88d9dadf17aaed191816d1d900d54fc0b9cd1cb72d022c7a56cffdf0c65a76bcc754233982ae47b4f7d657c8ef7d7cf8dbab03f8e8416698f70faf25207c17ef213018accef0fd6d28913a4e0a91b50a7cb9761e4d12e2967e03000000ff0000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000040004c4f470000000000000000000000000000000000000000000000000000000526e6c3e432778d611921a3210b35d18caaf894758abe3f9602e95412408c350040000000000000000000000000000000000000000000000000000000000000000000000000a50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000800000000000000280053594e50524f5859000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000dfb51485e45526a30000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff680bd05982690cba6c3587a50041343751adca43ff4e504eb34cd7afbc35e14763ad99160d83fb3a51c6ee9f5c6dfdf7404627c75500f7348a654bff34f456e4094902f54e54586c2879f18ddbe5ff2c335bab03a0b17bb7f5a356bb1d77a2f179726bf6e0f6dfb450fdff7671141cdbb5e7f28f869f107c456d2d53a4ffb19ad944cc26289b02f39f1b64"], 0x1)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))

19:12:21 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
shutdown(r1, 0x0)

19:12:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c10300000300000098030000d0010000d001000000000000d0010000d0010000c8020000c8020000c8020000c8020000c802000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000009001d001000000000000000000000000000000000000000000000000c000737472696e6700000000000000000000000000000000000000000000000101005f85626d0000000000000000000000000000e7252943dbb4f5f8afaf946d72c340f92f908d6e6b8033e825db7975007cba3af665cc0da87a4c5c88d9dadf17aaed191816d1d900d54fc0b9cd1cb72d022c7a56cffdf0c65a76bcc754233982ae47b4f7d657c8ef7d7cf8dbab03f8e8416698f70faf25207c17ef213018accef0fd6d28913a4e0a91b50a7cb9761e4d12e2967e03000000ff0000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000040004c4f470000000000000000000000000000000000000000000000000000000526e6c3e432778d611921a3210b35d18caaf894758abe3f9602e95412408c350040000000000000000000000000000000000000000000000000000000000000000000000000a50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000800000000000000280053594e50524f5859000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000dfb51485e45526a30000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff680bd05982690cba6c3587a50041343751adca43ff4e504eb34cd7afbc35e14763ad99160d83fb3a51c6ee9f5c6dfdf7404627c75500f7348a654bff34f456e4094902f54e54586c2879f18ddbe5ff2c335bab03a0b17bb7f5a356bb1d77a2f179726bf6e0f6dfb450fdff7671141cdbb5e7f28f869f107c456d2d53a4ffb19ad944cc26289b02f39f1b64"], 0x1)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))

19:12:22 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

19:12:22 executing program 0:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x3})
r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f"], 0x5)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

19:12:22 executing program 1:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:22 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4080, 0xff0}], 0x1, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)

19:12:22 executing program 0:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x3})
r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f"], 0x5)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

19:12:22 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
shutdown(r1, 0x0)

19:12:22 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_flags=0x1})

19:12:22 executing program 0:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x3})
r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f"], 0x5)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

19:12:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:12:22 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))

19:12:23 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_flags=0x1})

19:12:23 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

19:12:23 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_flags=0x1})

19:12:23 executing program 1:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:23 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt(r0, 0x6, 0x9, 0x0, &(0x7f0000000180))

19:12:23 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:23 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_flags=0x1})

19:12:23 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:24 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt(r0, 0x6, 0x9, 0x0, &(0x7f0000000180))

19:12:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:12:24 executing program 2:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:24 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt(r0, 0x6, 0x9, 0x0, &(0x7f0000000180))

19:12:24 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:24 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:24 executing program 1:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:24 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt(r0, 0x6, 0x9, 0x0, &(0x7f0000000180))

19:12:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:12:25 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:25 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:12:25 executing program 2:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:25 executing program 1:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:26 executing program 3:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:26 executing program 4:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:12:26 executing program 3:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:27 executing program 4:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:27 executing program 3:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:28 executing program 2:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:12:28 executing program 1:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:28 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r2, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80)

19:12:28 executing program 4:
r0 = getpid()
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xf0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:12:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:12:29 executing program 1:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r2, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80)

19:12:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r2, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80)

19:12:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r2, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80)

19:12:30 executing program 1:
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)

19:12:30 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r2, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80)

19:12:30 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00')
sendfile(r1, r2, 0x0, 0xfff)

19:12:30 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0x9}})

19:12:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}}, 0x0)

19:12:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r2, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80)

19:12:31 executing program 1:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x118, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30}, @TIPC_NLA_MON={0x1c}, @TIPC_NLA_LINK={0x18}, @TIPC_NLA_MEDIA={0x14}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x5c}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x4040800)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x20000000021)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)

[  779.871845][ T1385] ==================================================================
[  779.880693][ T1385] BUG: KASAN: use-after-free in raw_notifier+0x5a5/0x660
[  779.887750][ T1385] Read of size 8 at addr ffff8880797c8588 by task syz-executor.4/1385
[  779.896085][ T1385] 
[  779.898583][ T1385] CPU: 0 PID: 1385 Comm: syz-executor.4 Not tainted 5.6.0-rc1-syzkaller #0
[  779.907180][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  779.917348][ T1385] Call Trace:
[  779.921094][ T1385]  dump_stack+0x197/0x210
[  779.925439][ T1385]  ? raw_notifier+0x5a5/0x660
[  779.930320][ T1385]  print_address_description.constprop.0.cold+0xd4/0x30b
[  779.937372][ T1385]  ? raw_notifier+0x5a5/0x660
[  779.942071][ T1385]  ? raw_notifier+0x5a5/0x660
[  779.946773][ T1385]  __kasan_report.cold+0x1b/0x32
[  779.951831][ T1385]  ? raw_notifier+0x5a5/0x660
[  779.956564][ T1385]  kasan_report+0x12/0x20
[  779.961007][ T1385]  __asan_report_load8_noabort+0x14/0x20
[  779.966749][ T1385]  raw_notifier+0x5a5/0x660
[  779.971439][ T1385]  call_netdevice_register_net_notifiers+0xfa/0x2f0
[  779.978054][ T1385]  ? call_netdevice_unregister_notifiers+0x1e0/0x1e0
[  779.984852][ T1385]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  779.990726][ T1385]  register_netdevice_notifier+0xfc/0x290
[  779.996830][ T1385]  raw_init+0x299/0x340
[  780.001100][ T1385]  ? raw_sock_no_ioctlcmd+0x10/0x10
[  780.006320][ T1385]  can_create+0x288/0x510
[  780.010730][ T1385]  __sock_create+0x3ce/0x730
[  780.015352][ T1385]  __sys_socket+0x103/0x220
[  780.020033][ T1385]  ? move_addr_to_kernel+0x80/0x80
[  780.025218][ T1385]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  780.030703][ T1385]  ? do_syscall_64+0x26/0x790
[  780.035448][ T1385]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.041528][ T1385]  ? do_syscall_64+0x26/0x790
[  780.046231][ T1385]  __x64_sys_socket+0x73/0xb0
[  780.051049][ T1385]  do_syscall_64+0xfa/0x790
[  780.055588][ T1385]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.061607][ T1385] RIP: 0033:0x45c6c9
[  780.065643][ T1385] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  780.085259][ T1385] RSP: 002b:00007f16d2f88c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  780.093713][ T1385] RAX: ffffffffffffffda RBX: 00007f16d2f896d4 RCX: 000000000045c6c9
[  780.101712][ T1385] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
[  780.109701][ T1385] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  780.117974][ T1385] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  780.126089][ T1385] R13: 0000000000000b3b R14: 00000000004cd5a2 R15: 000000000076bf2c
[  780.134218][ T1385] 
[  780.136552][ T1385] Allocated by task 9775:
[  780.140977][ T1385]  save_stack+0x23/0x90
[  780.145233][ T1385]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[  780.150871][ T1385]  kasan_kmalloc+0x9/0x10
[  780.155419][ T1385]  __kmalloc_node+0x4e/0x70
[  780.160021][ T1385]  kvmalloc_node+0x68/0x100
[  780.164771][ T1385]  alloc_netdev_mqs+0x98/0xe40
[  780.169640][ T1385]  vti6_init_net+0x244/0x810
[  780.174245][ T1385]  ops_init+0xb3/0x420
[  780.178403][ T1385]  setup_net+0x2d5/0x8b0
[  780.182662][ T1385]  copy_net_ns+0x29e/0x5a0
[  780.187282][ T1385]  create_new_namespaces+0x403/0xb50
[  780.192569][ T1385]  unshare_nsproxy_namespaces+0xc2/0x200
[  780.198296][ T1385]  ksys_unshare+0x444/0x980
[  780.202819][ T1385]  __x64_sys_unshare+0x31/0x40
[  780.207596][ T1385]  do_syscall_64+0xfa/0x790
[  780.212240][ T1385]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.218237][ T1385] 
[  780.220568][ T1385] Freed by task 1286:
[  780.224566][ T1385]  save_stack+0x23/0x90
[  780.228735][ T1385]  __kasan_slab_free+0x102/0x150
[  780.233684][ T1385]  kasan_slab_free+0xe/0x10
[  780.238205][ T1385]  kfree+0x10a/0x2c0
[  780.242117][ T1385]  __netdev_name_node_alt_destroy+0x1ff/0x2a0
[  780.248343][ T1385]  netdev_name_node_alt_destroy+0x57/0x80
[  780.254137][ T1385]  rtnl_linkprop.isra.0+0x575/0x6f0
[  780.259346][ T1385]  rtnl_dellinkprop+0x46/0x60
[  780.264217][ T1385]  rtnetlink_rcv_msg+0x45e/0xaf0
[  780.269311][ T1385]  netlink_rcv_skb+0x177/0x450
[  780.274093][ T1385]  rtnetlink_rcv+0x1d/0x30
[  780.278522][ T1385]  netlink_unicast+0x59e/0x7e0
[  780.283304][ T1385]  netlink_sendmsg+0x91c/0xea0
[  780.288076][ T1385]  sock_sendmsg+0xd7/0x130
[  780.292500][ T1385]  ____sys_sendmsg+0x753/0x880
[  780.297269][ T1385]  ___sys_sendmsg+0x100/0x170
[  780.301956][ T1385]  __sys_sendmsg+0x105/0x1d0
[  780.306563][ T1385]  __x64_sys_sendmsg+0x78/0xb0
[  780.311348][ T1385]  do_syscall_64+0xfa/0x790
[  780.315874][ T1385]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.321764][ T1385] 
[  780.324373][ T1385] The buggy address belongs to the object at ffff8880797c8000
[  780.324373][ T1385]  which belongs to the cache kmalloc-4k of size 4096
[  780.338437][ T1385] The buggy address is located 1416 bytes inside of
[  780.338437][ T1385]  4096-byte region [ffff8880797c8000, ffff8880797c9000)
[  780.352013][ T1385] The buggy address belongs to the page:
[  780.357664][ T1385] page:ffffea0001e5f200 refcount:1 mapcount:0 mapping:ffff8880aa402000 index:0x0 compound_mapcount: 0
[  780.368610][ T1385] flags: 0xfffe0000010200(slab|head)
[  780.373911][ T1385] raw: 00fffe0000010200 ffffea0001e5ef08 ffffea0001e5f988 ffff8880aa402000
[  780.382515][ T1385] raw: 0000000000000000 ffff8880797c8000 0000000100000001 0000000000000000
[  780.391112][ T1385] page dumped because: kasan: bad access detected
[  780.397528][ T1385] 
[  780.399860][ T1385] Memory state around the buggy address:
[  780.405507][ T1385]  ffff8880797c8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  780.413618][ T1385]  ffff8880797c8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  780.421668][ T1385] >ffff8880797c8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  780.429810][ T1385]                       ^
[  780.434120][ T1385]  ffff8880797c8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  780.442404][ T1385]  ffff8880797c8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  780.450564][ T1385] ==================================================================
[  780.458611][ T1385] Disabling lock debugging due to kernel taint
[  780.483185][ T1385] Kernel panic - not syncing: panic_on_warn set ...
[  780.489829][ T1385] CPU: 0 PID: 1385 Comm: syz-executor.4 Tainted: G    B             5.6.0-rc1-syzkaller #0
[  780.499806][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  780.509966][ T1385] Call Trace:
[  780.513269][ T1385]  dump_stack+0x197/0x210
[  780.517611][ T1385]  panic+0x2e3/0x75c
[  780.521515][ T1385]  ? add_taint.cold+0x16/0x16
[  780.526322][ T1385]  ? raw_notifier+0x5a5/0x660
[  780.531033][ T1385]  ? preempt_schedule+0x4b/0x60
[  780.536038][ T1385]  ? ___preempt_schedule+0x16/0x18
[  780.541271][ T1385]  ? trace_hardirqs_on+0x5e/0x240
[  780.546313][ T1385]  ? raw_notifier+0x5a5/0x660
[  780.550998][ T1385]  end_report+0x47/0x4f
[  780.555292][ T1385]  ? raw_notifier+0x5a5/0x660
[  780.559979][ T1385]  __kasan_report.cold+0xe/0x32
[  780.564849][ T1385]  ? raw_notifier+0x5a5/0x660
[  780.569541][ T1385]  kasan_report+0x12/0x20
[  780.573992][ T1385]  __asan_report_load8_noabort+0x14/0x20
[  780.579765][ T1385]  raw_notifier+0x5a5/0x660
[  780.584291][ T1385]  call_netdevice_register_net_notifiers+0xfa/0x2f0
[  780.590890][ T1385]  ? call_netdevice_unregister_notifiers+0x1e0/0x1e0
[  780.597581][ T1385]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  780.603325][ T1385]  register_netdevice_notifier+0xfc/0x290
[  780.609061][ T1385]  raw_init+0x299/0x340
[  780.613233][ T1385]  ? raw_sock_no_ioctlcmd+0x10/0x10
[  780.618877][ T1385]  can_create+0x288/0x510
[  780.623225][ T1385]  __sock_create+0x3ce/0x730
[  780.627833][ T1385]  __sys_socket+0x103/0x220
[  780.632353][ T1385]  ? move_addr_to_kernel+0x80/0x80
[  780.637576][ T1385]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  780.643142][ T1385]  ? do_syscall_64+0x26/0x790
[  780.647950][ T1385]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.654027][ T1385]  ? do_syscall_64+0x26/0x790
[  780.658717][ T1385]  __x64_sys_socket+0x73/0xb0
[  780.663407][ T1385]  do_syscall_64+0xfa/0x790
[  780.667942][ T1385]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.673840][ T1385] RIP: 0033:0x45c6c9
[  780.677738][ T1385] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  780.697669][ T1385] RSP: 002b:00007f16d2f88c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  780.706111][ T1385] RAX: ffffffffffffffda RBX: 00007f16d2f896d4 RCX: 000000000045c6c9
[  780.714250][ T1385] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
[  780.722240][ T1385] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  780.730211][ T1385] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  780.738186][ T1385] R13: 0000000000000b3b R14: 00000000004cd5a2 R15: 000000000076bf2c
[  780.748275][ T1385] Kernel Offset: disabled
[  780.752848][ T1385] Rebooting in 86400 seconds..