3f0f8179c8cddade892279b8bead6f374d3f2eb9b1dfdb897fe4a98381178f97637190d141656fa7a11d39e91685201a14aa25aca8e8c9d8fb6d279ed0fa2d7e5ef573de4aeb631d679e4bb0660c5e193dda9785b76fb17c3265ab2231065c0f207129263ad3fcd7b6e60b33811dd67ed5653eb47a9445ef4fd9b3cb86c9daf2c1022aaed5022be48025b5778875a22ab95f4919e166c4f10a05bb3dd21cf736ad4aba2067258696b7691f7e7768429e97d6ba7cca13f1dc41fb112c59c3faf7af66376e109046fbe5fa8a4996d4dbd3072a9d50b58eaada3eba63100c6de540f378b765228eeafd07e0d1455864e2abb67d9e1f2d3a8cf013712ce70f6e8955edd1c6afcaa2a9b12bd02fd5778a24d7ee4b17e268563c2f9a7e3d032914f1fab9a1b05ae765b178df3b04fc3a4837efd5ce2738f3a146e162b1cd96d3f8bdaa143c5d463a3a314e200ba773a4bbe4a0dabdb9d23106d6ecc4929ce0583dab907957c758094fa6ac13fd2fef017b83501c127ecbed87832eaa4925813ab273cebaefd261bff096cd544565a2bc3e5248dd11e01be626cf593ac409cd39fa4190fe604071271ed3b96a944e52d5626d5b39fac5e0e2896551d13c0764eb795b98da4ec0c04e793c521992b6b9f1c775279d3270ab275add1bf982e170ff89c8707a1f00160daeb0b6b957e7b47a2eaacfe5ed4746d35fed47a42c06e843c16f8d5abd867fddb91d58f6e9ddae17c124730332220b1d5fe46034d79650cff1f0ae5f5f3bc1581de0c56e4f4537c38e8871ce74a24123772b0039f11492f8660a5b3a6ea31083465fcd3a2d2728f47ff44fd5491d4ef985caf4af4319868e631623af5b36819f0ce45f0f3e4b5b8ec774f8cfa7117938e4d92590bc80b1069012e6c1ade4bf305d2e244be3323c075bcd8778e09b7b4988c9923a7ce3369ce9bcb13d50f02b074a4336f786756fd998137f6a95e6f8e1d89a061e15b6805931728dcc6221ffb3df601b37dd708982c2f731fd19023a5593698c2ccc5d3d83ccba3729c7e145ae523f5e40affa69e5a1b381cfc338e27dd29fbbbb7594bad0726558199f0eae6b5af6a5b0c3aa7e50865f066414395193ce955e540816367211b8d3da3aa0329b635ac95abe202c25aac4f8d9fdaff15003f81f80d26052a4a8cf7bea86d9c4cf0e7433e00b366df7db11c0d8d88dd04a1036723f671437977ed4e1209bf9e8f0a237f5c4de189111b23a056fc73e9fd8db3b7fde4c4175707fc22d9a8002f9dfe95db96095b9bafa3e80e8b5e8e5d760773e91d5197a0534c405e2c3d626d6b57bd7ea9de2f088f1808a976ef7232131dd3707c99467cdac84288dd732edef488784ae034e05b8fbdd828ea04a2d0e87370d0a645d5fab3cf690b220d07ac12bec60bed1926f1a7bd61597490ae2c86b7eab7a224a7c33642732b1e210356000518c0a4f0ac76a1d3dcd9e53de80f037d0abc8e2b82895f7ac1e3a5425d588cad021aff10bc108fee83855064ae6c78d797f544b3b2e20b6ed1a3f18d914bd9f00b9b1766786db814f77b56932cdac24bd55195fe7f37a2e66696c7e5f586b8968692d5c1c152cf8bbf2d71443a71747d5026bcd5b2fe78202619a64aa8896bdb8a1aacf24840403f8f191a13dc226710bea97aa7527b2210499bb5658f8691dbf4578befd426f852913db2ce024205c8070862db7697eeb08a33af2a579c32d163c464614f0f594207df835e9ac25d421ad156b83ff0c480ec3433b840a5e6bb65b59ee969966070a7d0993bc4bc44af57e9b3ab4c80b03378853e73935e912afb5a30097b956cb78a69d47c80817389b57ab20068a219b8fcb9a0074de34d098ece3a65242ab58efdd1b53565f2a1b345c4e7c4f4845d4b820621de790941acdd7c00445a514c16a6fea0351bb91903fbc75260b22574de6a8905577e039071a6206dd0a6544008e6dce80b8b1eb3a1fc7be357253883db18fcc12b576427aa19f5c2aed88549247fa3a97149bd899b5d7217c2f7628acd374dc177a019234e63ecaa2e0e21f8d33c47294e328437a533284e0d334d9ed5a0b337725c815c29375346546497a31260d13013145519f69951b9387896074564e187937e28b0f31da0daa243efa4ac9f6792c215c6ad5aa473073699cce2a0dec40dfb992013f22e01c7d2a3dba8c8ecff64a0b5b66c64ab77e38676566dbf4057dd034b7509fbd495bf925be86fe1e1e6be52d83656bdea2504005fd7fa1e9a1feeccd188b167cf22de0eb69c31cea4f696c00affc13c547fa0a80790a3cf41b51fa39b1bbe21c490c7fee753f951a84fb6fd6681809b3e344bf059f5df01fc8c1f356407cbb5bceb8c9f77b517076079516f97d04bcfaf6eb98590e3e42ac871213abd13bd952674e89030bf7782489de0ee527254f8aff9eb2955b1186f79f43d2ec4eb2ace3818ea1f6ff2d94df321f771e3c10eac5fe4290952ecb7c92c072bd8ac7020a4013653f178c8d5966e8ef553b5d5496f9c88482d2d65ffee4844dd1258b792a1a23062eb5d822f83de8182104d9ee81afa80dd4e7a928c230c8c29cc3ce897d0390fd93285dfa8758ec3a667c5a8b724cd2b4dff9320794c1615af0ef8bef1bc73791e7da6b04891ff235ba3791638195182ce2a9f76dfba43d37a2a2eac2abc8694792c4d64582e29163190251e9563ac76a13090f11cf60b584704e0b39b0f596899701b1f84ccd3b1b1853815cb018aa4b07113c500a91d9247ca68e97d194bafa313e6dd0a8b1968a63ce3d627b96c78e59ac5a58dd20b5de"}}, @coaddr={0x14, 0xe, @in=@local}, @sec_ctx={0xdd, 0x8, {0xd9, 0x8, 0x1, 0xa3, 0xd1, "73a1b601f57e3dde24ab45d5ed60b7b18a22283018eac01377cc5786596260b8e1629094b5403961ce42006a57ce923ad5c46a6565f26492c3561830fa6905cd5c9f03da638ec67c03715f3eea199c82f7e40e541d61da4ed043c9f3e1156df2131e24841d89d251d5716672490869bd4c5a7dd81df37cd08b3b8e7c4c5a609963f8aafb84a996127660d1ee4d38d18561b296571f6483fbca9b8742fd08b10c6247a1aff72ab13a88606198d053f0a6a095c08fd28f0d2fedcc9ab2f3b377175346d78e948053e1eecb27e931de97d8a2"}}, @sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, [], 0x18}, @in=@multicast1, 0x4e22, 0x40, 0x4e20, 0xfffe, 0x2, 0xa0, 0x0, 0x5979b69a924fc96a, r6, r8}, {@in=@rand_addr=0x64010102, 0x4d3, 0x441d503cae461118}, @in=@rand_addr=0x64010100, {0xbd3, 0x7fffffff, 0x4, 0x4, 0x8003984, 0x10001, 0x1, 0x3ff}, {0x9, 0x2, 0x7, 0x51}, {0x1f, 0x0, 0x91}, 0x70bd25, 0x34ff, 0x2, 0x1, 0x0, 0xb1}}, @algo_auth={0x145, 0x1, {{'sha224-arm64-neon\x00'}, 0x7e8, "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"}}]}, 0x13b8}, 0x1, 0x0, 0x0, 0x800}, 0x800)
pipe(&(0x7f0000000200)={<r9=>0xffffffffffffffff})
close(r9)
pidfd_getfd(r9, 0xffffffffffffffff, 0x0)

[  821.434771][ T2651] net_ratelimit: 29 callbacks suppressed
[  821.434778][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.449259][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.513357][ T2554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:28 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0)
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b63000024c3909120e328ffffe0be1f3845a207bcec52c48cedc51c9c9b"], 0x0, 0x0, 0x0})
read$alg(r1, &(0x7f0000000080)=""/59, 0x3b)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000040)={{r4}, 0xe9, 0x3, 0x9})

[  821.751373][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:28 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x9cukUp:\xfe\xbf /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

[  821.835344][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.835349][ T2554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.843925][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.851995][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.871126][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:29 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x1}, 0x16, 0x3)
unshare(0x2a000400)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001380)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0x1, 0x80, &(0x7f0000000300)="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", 0x1000, 0x5, 0x2, 0x0, 0x7f, 0x10001, &(0x7f0000001300)="db87cad6dc25581817fdc76c252a12e6b762df5e57fecf8f9f85f5154980460a9fedac0a7983f32f7ba55d7de0a370834efabe6b08c7d2d4e757780a9b71a48c95137815916aa8c66280a3ffe96082b892f4dd7df2cc95af6965bb75c8fa3868248d67d3806dda855a0dc995f1bdfe"})
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/autofs\x00', 0x408000, 0x0)
ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000001400)={0x9})
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x1, @multicast}, 0x20, {0x2, 0x4e22, @multicast2}, 'veth1_to_hsr\x00'})

11:19:29 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0xf1a}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000240)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2}, 0xc)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r2, 0x6, 0x10}, 0xc)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6301020000000000"], 0x0, 0x0, 0x0})
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r6}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000200)={r6, 0x5, 0x6, 0x8, 0x1}, &(0x7f0000000280)=0x14)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x10000000001)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000180))

11:19:29 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = dup3(r0, r1, 0x80000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfffffffffffffffb)

[  822.475502][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
r4 = socket(0x4, 0x800, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00020000ffffffff000000000900010067726564000000001400020010000300010000000000000001000000"], 0x44}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
ptrace(0xffffffffffffffff, 0x0)
sched_setparam(0x0, &(0x7f00000002c0))
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000240092e4562c455fc3b62d6e990af59d", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010067726564000000001400020010000300010000000000000001000000"], 0x44}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x124, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xd}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x31}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008801}, 0x0)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:29 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f6304400000000000000000000000060b410000d282901ebcfebe8f921e26ea6913d8"], 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
setresuid(0x0, r2, r4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000000000000000fcffffff0a630000"], 0x0, 0x0, 0x0})
accept4$packet(r5, &(0x7f0000002940)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002980)=0x14, 0x800)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @remote, 0x99}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000000c0)="eedd82305e8cbf7c2646c92fc9508afaf7a3d53386e970d9a3f1cae968c6a67beaa81eb52f007121c7d5b9bc80e233c6cc108fed688f7399d7336ea0584559f17d13f58a80d3d1d2be4362e074063e5cd7459fd146bdd82b0925e6e8bb14fe06a7326231d26d9922d5b3a01d50ec6625d361bfaa149d2abb70d73fdc82f751430142db9a445ab466397f878289bd13431f614ed4b846bed508032e623d1fde129ca185f2d94dbc7cc5e92fc056708dbb972ad82a5eb7c1dccdec0dd8e5f45e8a8f855675d28093aea436de9751d0406192763b91", 0xd4}, {&(0x7f0000000300)="c29165a918362eeb128afdb34be1299fa786257f360c8a34e072eddd3c556a90e733e080d8a453419d2cc4a7994466f1b2de5a200c88383a32fe90c6491f4f915e1bd0e78ab0224c8de627f97ba4d457246c117b4a3832cf9519e8a38532ef076e691c3c6506d9058c5ed72c7bcf0f4a77456e3630c2a5de87766a0f181509bf16953100599abd33255566c2fc6a99fefc18df519fa31897bd48e8b1b771da818d8022eeb7d680ff418588cb4a14aab0b4fd0ab2a05e4a5b6f2992ecc59c628a69e82109e25db41ce07ae289101539ed83ad6deec121fa44a8e93c6fc1d357c836d88f58096bd79176250171ce250c4ade6903e05638fcee", 0xf8}, {&(0x7f0000002580)="857cff1d7073cf3dafed2ea2e528add3bb8ac9554e793598f208bbfdd9afa064ebaf9350c260ff35acb7c60b0f0fcdbfeaee9fa7e6b320f93647e7d27a5514748754fab25f9ed1de3b1d9da0bfd79c51721d4a05d4af50341dc4dbc1222531b2137cf5dfdc3f4a3518dc9214a22e2247b7a4eecffc7740bebdbd4ac28d532ac0086809043276be1fea234d9c79cc65f99a6da4d485e65d5f60c9a925b82ac82a9948e5da72a1ede3c8ba664a948266679ee1b7e3fb496339df6f9a0946cb51147633da884487", 0xc6}, {&(0x7f0000000500)="0be5b83cd8831e1c6d996e3549ac4b027ee89b11f4261ab3d0cdee64f7a89455a9d62000ecda4c6e422e6d799dea79aca9f6d1fc64d7e5ab866c4fc7bbb6a8e0634d893ff0600861c9d6b483a9f256c038ab41e6058afba773d0872a567c64fa2f28990f75512657c5fd50cc88492ff6032854c7a739a5e948a56184b39f2ed21b3c465d0adb6ae959d58e6004d4b0768deede01524ed8e27ff242c76515f94d54f3c6d3ac22e4fdf4a695", 0xab}, {&(0x7f00000005c0)="c96c2467c7f4151cff840d0f7fb73057c09761108c5fb917d2594dcefab611d0df2c725b88cf785d2c42babd3633a1b644e910ecf6b39f51c1a63e1c3dfedfb3682d01ec35dfad6a09edd0d1bf516565a09fe649a095a4a37e90454225ff8af61e9d6db0c4", 0x65}, {&(0x7f0000000640)="923731765985ca7bada49d3c1cc0665be9161e69cbea7dd6fa34f9c26ddd49d58c04df1cb0fbf9c0d9308329f51282eda330c0311c04c5c568483faea9f968824dcefe", 0x43}], 0x6}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x528, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000780)="b2c0e72b1dc586a417a23861dab9caeca8aa730f55f03fedb780850a182a648ad160e7e97645012f42839da42fd307ae250962acd540bbfcfd07020851cc7674100e93914468f586981181333076d6c1d506ed24b5f632d72a8e077e348be1732e9e2753ff2e9888ef0cfcc9131b5f6cc9cf4a8dbf91e683d6d409c5d10e1be452653e9b1df97c4815cb45c0158f6302f522aedba0ce379123235deaa8d6f3c064ace69a4a759bbda9e141eb0a2a90a6acde00dc06fc3fe229db774ec3f5478991f431fbf8dc6dd7609fb59a4356ef43b1736ebcc318f95e339f48ca8c70c1639763d70a4875a4ec3171742ef8eb827c879eba686d61abcab7", 0xf9}, {&(0x7f0000000880)="b9ffbd497b9be3d9ab10b4b36c1915fb3c2a591b45200216989762701dc44b2f32d7", 0x22}, {&(0x7f00000008c0)}, {&(0x7f0000000900)="5e1cacf59697e4d393571ac493332abd9dfaeef38502bc49e516d991aacd7c3334ff963861f8372aa26141c79b68d390e111f03eb68e14a988f71d1067bf4f938539a9d206fcaa43c59195bcde18f8fce15f336c386599eaa7146ead45ac4f3ccf87f7fc7d2329fc8ca5ba3ec94f59e430a45ce21282f0ac880aa48001792fbe5b58fe8e52ba856d7607900b92bdf9b59401866c9cd6549d73daa2eed2ee98be12399df62713ec64447694994a37334e39f7bb203f8ea0a1cf23045a4d9e443f7c147e5ffed385926b221465e128a91a2f48009b0acfde25f2389ec50fbfcf", 0xdf}, {&(0x7f0000000a00)="2b26785c6bb73e7965183291b94ca5958e8baea013d7691a742fa849001fc7939023494e47752444590b45011462fc63e2715edfd7937c8cc09d116231561fbb67b9efbf20aa110877c1a4b68a29f13fd85aa387146197e35bf3888393f15667b608e0eeefef6252e3c5bbdacea483c52661538b07c26e291c661dc5016f41e38f75f0d609c9beafc393b7a858247c8b83f4047f2c7ac9021acb4c5ce09e4c252bf5f493b520235ecb7a86ef9de4b48e30281c5a39b9f9587bbea9b911f9e32c897578999f67b9d3466cbd1c7b584ff9bc73cb30d9be73605be7fe89d35048b63fd0ec854fb6313325f97cfc7ae50eb3a6a182", 0xf3}, {&(0x7f0000000b00)="685ee27911c8c2f38fcb06a97c4cbae84f83de4aa3109bd62c01d55501efab2eac8502f60d648db229126dee2a", 0x2d}, {&(0x7f0000000b40)="2d595e25a31605c338c0f2c4c29219d4e5e6a8f16e1d0c5dd7a04f14e2d30dcf7efe09483bcbca9fb7ca861f876ae1d9a9ce51f25d8890353aa6f34574b882508bf1ffa0148a992b88b9d8d3cd2c1e21c680f5b519ec", 0x56}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)="375e9b1989edaf9a48839f6a2fd61578ac1fefdf98406e6034db8d2413c4e5ed3baacedc0bcab53320edc2b03d64e184083c3d17406f3239d682231d5d603625c69dff4a8e155ad6a2b5f3591699c2db1283477c27818b180c584bdf47f53a96f42d65632e9e2436586d03f4a5985252dd31d7c0d6b32673acbad53d0c42f95c08c93435f86975370b7d56f41537a380d0ea2dc2f171b0393bceae0fcaf8fc69ed53f0a5411f4d2e40b2c7a9e432ad7dca050b7a32b3abc4e85581d8b620f198482484f6f94b8a1918373ca5d83c59e3c1f800081cc319070bfc8b92e3f0fe7cf32120520fe6838417d535cac831a1e68790ec6b0021a7ea14", 0xf9}, {&(0x7f0000000d40)="19dc222214a14266208c3bb72e4eb78fa3a1199bd0cada28d926ff11cb9fa25bd1e9c6d4985630f85659e525ea5dccccfc6e676c019d41b237ff5238c711442a664545d073f79f90fb062b0d077a06e844bfb3c12c890c2867f53320d811f7d6e88c8998e5db42f640bb38337131d5d6633cf9b9c36ff6677ef9eb8117f7ba29209a8ce508fd55368c503a1611906e636d355f5395c1c38db1b7132e480461837e8baf3c1f37a301095e2fcdb5931ea8cc3dc32d42abc75000281dd60190fb", 0xbf}], 0x2, &(0x7f0000003c40)=[@rthdrdstopts={{0x130, 0x29, 0x37, {0x67, 0x22, [], [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1eb9, [0x0, 0x101, 0x3, 0x4, 0x2c, 0xfff]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x3f, [0x8, 0x0]}}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0x94, 0x6b, "566ce1f17130b571ffff4949b66db5209772bf41e220ef522933b2d813ddd2f299fd023a1272ee95be2085b12017c8343c36a300b8eb20c7a29516168f7ba3777b27acfd0436b8d4bbda37ae1c6c0ffe55e89b48293563924b0231332d0b6ed9a7f78d011e9522461596a6"}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x40, {0x3, 0xe, 0x7, 0x0, [0xa9, 0x6, 0x7, 0x8, 0xd54, 0x6, 0x1]}}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x5e, 0x2, [], [@hao={0xc9, 0x10, @remote}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x88, 0xc, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @mcast1, @private0={0xfc, 0x0, [], 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x2f, 0xc, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xdf}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x1000, [0x6, 0xe030]}}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xc10b}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x36, [0x0]}}]}}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x87, 0xc, [], [@pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0xc0, 0x8, [0x7, 0x1ff, 0x1, 0x532, 0x9]}}, @jumbo={0xc2, 0x4, 0x1bd1}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @local}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}], 0x2e8}}, {{&(0x7f0000001100)={0xa, 0x4e21, 0x8, @remote, 0xf9}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000001140)="d94c9d025ef486bbc9e86dfad7d6a197c09727510f8defdaa5766dfd2ea53aa22110fab9dbce5d2ddcb06cd07879a6d6cb4a6cda185d3d5f7df36c31b67f68ee8b21c033cc76972565543616fabe304992e48c0969c837e27935c495565b98991702a7426bf71c291c297b78a72ef1e4f1cc5d67a3b8f3d2eb061e5607dd804cdf38f02d2d90cb0374cc4feff565724fce95871e7b1914dab5e19741322217fe6649486f2186", 0xa6}, {&(0x7f0000001200)="b2fe6a54649078da98109a5a0aefa7182cda8dd8a3975da9", 0x18}, {&(0x7f0000001240)="d4219d1de005c671b2b43e82a3870e8ce8175cea898a26614e8a933923a37cfcd9f75a15613ee7b7b006485045bf284be35cc3bde996c5c7d6c0f3436386505193d48ad751cfdd4203bf4308dc912059dd95a3a227d8e6c3e3721ecacd2329735341c11ce6145015f5bca659384456104f828ee73e75e41b9c3d1d01fcbcdf792cbb69cb15622fcaa9d3bfceb04b8975ff4f0c0e618b55a97c98c40401ec8b9cfe58ed9658bd3a4a366c979f967ba7e94f5dbebb057e3e87e81ea6a68f085708edef079e3abb381f32462c82d56f035d6623286ba66c1f40e27bca143010ad4f2d40bc480e50ba0924ad074c247175a15f1afb39c72c25ae049607065fb459", 0xff}, {&(0x7f0000001340)}, {&(0x7f0000001380)="a82c0c8c6cdc32a38eefd264706cc78aa76dc4ab1094abe7f45dd29bcee52ab8cc7511c1f1ebbaa3d57f3a252e521d3ce9719a698a2ca57759f0242a8f1c2b0c501689a7ae7d90cc198140cd4ee9b3336b15b08f143215a4697aee6c11b177a9f1b4b1143975d2f5a0c96ef655c52d1103c75423328f78ebc6062d22ec535b78c915010e27b5838aabba9ced74909532dc3e4210ad79981a4e4ee769850ad5f6cf862c801e30849b293d9b29ed33920cc6bb69ef700fb8b09034", 0xba}, {&(0x7f0000001440)="8a9a6b724eb6008ff471f0fce370662b4f8491a6ecef9e9a35b7a496a3cfd4fe488dc0dd8219fe12c45cf9bc1917186522367ed2e61165bc461e4eccb3e0987c43186243a4ccdcf67af8d2bc1cfca90ea18e20d9fe34e90db8bb6a93bb1d622f74e194d996622a1e6063406f13d8ecafa89b0b500da834d8f05204eb44a0c174486ad03b54c6fefa03063e88f34b2f19373558e7ddee2c3f0b26d6f51856616b6bcab8fadcc865ce97d59cb2f5", 0xad}, {&(0x7f0000001500)="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", 0x1000}], 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="24000000000000002900000032000000012f8e629142c20e6ede09e91fbfb2feef70419073ef22566c89570b098d2cb00ed3b622cf776ae7e7f5e1d0801a41280bd89406e39331c45d348dc1fe986515b1ecc08051ba796693099d56580e0617ebd55b8dcaee3a54", @ANYRES32=0x0, @ANYBLOB="0000000038000000000000002900000039000000080401e100000000fe8000000000000000000000000000aafe8000000000000000000000000000aa24000000000000002900000032000000fc010000000000000000000000000001", @ANYRES32=r6, @ANYBLOB="000000001400000000000000290000004300000074de000000000000"], 0xa0}}, {{&(0x7f0000002a80)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0x1}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000002ac0)='(', 0x1}, {&(0x7f0000002b00)="5343d8900ac8b002eb6485b335d498409a2ffc82b4bc8398d5bcf2b4d264547a1212e72b71ef4fdd4adbe47b9fdfae0d91940c03ed7930cf8aca44bb787d5995f575e19a90fd561805e41e0d60b028155af134ef1f5f1915ad9c7b889e55612646caf824b75818b8d352b76857cbb4eaeb441028a44bde2f5d8b3ee88d2e6ccd1cc55cd686ffb3a213cb13239bc31e0fad4793321fc9665a7546285f87d95e6e1cc5cc7d6ac93c1619568f3118104e9ad04783689e87de02", 0xb8}, {&(0x7f0000002bc0)="8146f5e85e575c9dcbf827ced722b8b783adf18b1d2fb486037d2e6e4f17fd2163e31d2cdb42deee23a9e3e1302dc00c6055aa7e8cd26420a6e1b3f3892825b2a9bf4ea3226da3453793dcffe49e2a323352d59c4c42ffc6fbc623db5c52ba0f634f4f8ce04a8e7a5818cae771576281a7780004a12517656b48b1f2662e4a4aa3d21ce4359b315b49df878669908e8dd2fcbeac813d37", 0x97}, {&(0x7f0000002c80)="01db694ed8d675ff2f8d60778c5c9096a2978aca0dab7a092a586862f961e7b37c90f02a03cd1d9b4d1ee3c8efe61bc9d7d587eecd88fd6733c7ae9c69516855383b45c871f60d006f6f5f5118e2b832f722499a56e85bced0baf0dac2a0dc0f6b6a454935b58d382099ff695e0889ef6f23d4dbb1a858d2174cabddb436fb874bbf5d95bbf48b3c6c0979b1cbb3a06bf8e80918", 0x94}, {&(0x7f0000002d40)="f6351a88238e37f5231579dcbaefdd27e02352964850a378f54fc9483aed693d407ff9f9fcc07c01b8503d86a8caa79745474dd00b30412c2424d6b267786e63624d27ae9cbcd7a271f124808778fb4d69a7e6c3582b3c34af0dda86a2368fb2e0093f7000f660596d4f59690f548fb64f7776ffc415c74a754504c6ced38b0b4a9770289074", 0x86}], 0x5}}, {{&(0x7f0000002e80)={0xa, 0x4e20, 0xfffffffc, @mcast1, 0x400}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000002ec0)="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", 0xfd}, {&(0x7f0000002fc0)="e3ffca82e0b56d85ca69882516b25189e27ff7e1d31ed25b1b6338eddf0585bf264106f4642b99e441169f19015b7d874b89fd55ad179ea4afd6d6dc9290e8b1099859fa1cba9ad4c5184e41661f395a77cfd27529955085aa558c4de81701694eed81d2c2a2e0f53780b5441fb5dfffbdb9cecfa3fd2fca8b1beeb4389ce0", 0x7f}, {&(0x7f0000003040)="7ef8eecc1b0d29a576c8e8d75915d12e2681e655a8b023a82da6842941c67fd4bc058c9513c0e8e4bd1b32ea89c2914a154839329fb7439b8da1e50fd2869b174cf8c48004", 0x45}, {&(0x7f00000030c0)="dd421ebab8734b7e7d09ccf1c7cefb7d286d9046e64373f3dcc33bd9cd29d9bccfe940b635b245", 0x27}, {&(0x7f0000003100)="ef409927838514788dad3e1900b5140bca16cee265a658f6be15647a5f510bbfb4c9925ac9537fed412c8b22b584738c7d9554fc3626051bbbaea1dfe808e473a40da615f7731a7164be64b9df1c1d949e106f47577413a31eef929d2fa0e45dc0d31c83b52747a668fd2a4a2d0aa7bfd6e992c2320b1000d7a5088c4678ab9bc376730985860b54d7a5147bd65b010493bf4d10851aff51df46014231663e7866f53146205671a009942b764fa4084740b9b07fabe845f69048904eadbb0c66fbc238e43f480b5b450c9c720ba0eb", 0xcf}, {&(0x7f0000003200)="6e272ad1663b05663f64c39262276313f2e7316e5c49c20ef19bbfa6c7a35fc6c549ad4cd3c1f9056f6d6cd4323c1090619e8d5642611dff11c72734b392ab41c12950ed129f580e33913c53f5a7e31a0fb7161ecfd1c8dcfc071262fe609f03cb16867567c51b3562f856ad18b5145f2140bfef25902c491df3813f89c2aa7f687c8eb329253f8b9a984672ece7f9d990524622f6f4588b745c06b7c5fb0f115dff", 0xa2}, {&(0x7f00000032c0)="1ac53a5846ad65f886", 0x9}], 0x7, &(0x7f0000003380)=[@hoplimit={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x28, 0x29, 0x39, {0x67, 0x2, 0x2, 0x6, 0x0, [@remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r9}}}, @dstopts={{0x28, 0x29, 0x37, {0x1, 0x1, [], [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @padn]}}}, @dstopts_2292={{0x230, 0x29, 0x4, {0x33, 0x43, [], [@calipso={0x7, 0x48, {0x1, 0x10, 0x20, 0x400, [0x6, 0x5, 0xc, 0x5, 0x4, 0x200000000000000, 0x8, 0x7]}}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x12}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x80, 0x1a, "76f3339f6248eb5c2a895c54494600f479b6941fd2ffb1d891f3"}, @enc_lim={0x4, 0x1, 0x7f}, @pad1, @generic={0x6, 0x59, "936c1b6535c377fd410c016a608fdd575d805f3410f4f863780c34bb20f6280490b5fd6a8c9560ad7df5e99b81835da2c4af3635dade597235d24e81d1a7bff9eadabcba9f100c815c45a31254b0bc6828d535ce47977d0009"}, @generic={0x1b, 0xf8, "d73d7a0a0f2092afbcc6cb81dad68ce16387e511cedc0f077a1b232ca88861dc2866238012a38a38990dbbdf94745056fa31cd85bf531034a44e2b6783692bb2ae3547ce5261751e1d3f66f690d0e6671fbd6c010beb96cd22774d7076cf726185caab0a5113fda4ecc89f112a75b927ec6b7a9a82ca48852311cc25c6613831e6a04374a6e64cb0708483f4fbca9972dd1fbe859b43d2ae47ca94f3857db8f7abaa9fe542202682eb1b4c8ce3c2ec9e0685a7f5586d9fc0afa7fbd5677e023e1a333d08a35fe14b708c140cbe31286abb01b665dfefcef5b2adfbe1dde9c3512b5f6240a0991ae45b9c649a370620fadb3578b263134bd8"}, @generic={0x3, 0x49, "9ec2e48e6021c04cd59a6f2255e55e7f925f4d2da24fb8d1a266beb63a0c0c49cdcb25b26248442923d82ab3d94033a0b6b45964b21468686deb673eb042913a770e4b8260592b3686"}]}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x32, 0x23, [], [@generic={0x80, 0xe7, "49c077aedd72199e74a2f0cca90e1c2ee97a0fc62871530df1a8dd739dd385b63907ee7eb0975edfc00f51a357a437f30c6035b1964f13ffd7efa597838e4deba40c952cf84060f3888d7b1ea08796e4838158c86ba9aee8d34bace4f2221453b89e0b9fb858e5097c6d42ff2a1053a42e36d09e17f57c1f4a3a4db4fcd6fe43945ce83e951b8572b1bcf5301c740fa1f463868cd434056433d0e0ae51e8fbcba955edbe2da32286309fad75f47015b539b85a809627fb7daeb7ddf1d92df507f5919727e59b5bea1ef5aeda2044a26d23ea1c58ffbc427fa7a97f25971a93abf480eaadc31aef"}, @padn, @calipso={0x7, 0x30, {0x2, 0xa, 0xaf, 0x4, [0x100000000, 0x800, 0x0, 0x5, 0x9]}}]}}}], 0x410}}], 0x6, 0x4000)

11:19:30 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x8010, r0, 0x10000000)
socket$kcm(0x29, 0x2, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xe400, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:30 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000280)=0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', r6})

11:19:30 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0xff, 0x3, "9dd41b3643c6f902f47d7838672248d2012c29"})
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockname$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x20)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

11:19:30 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = getpgrp(0x0)
get_robust_list(r2, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000140)={&(0x7f0000000080)}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f00000002c0)=0x18)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0xd02, 0x0, 0x0, {0x3}}], {0x14}}, 0x3c}}, 0x80)

11:19:30 executing program 4:
unshare(0x44000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20120}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7b}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x204}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20008004)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
r4 = getpid()
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)={0x240, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x795d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x38d1f7a0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xab}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00', 0xfffffffb}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local, 0x80}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff69}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4adb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbce}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb17f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0)
r6 = getpid()
rt_tgsigqueueinfo(r6, r4, 0x80000002, &(0x7f0000000100)={0x39})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/1080], 0x438}, 0x1, 0x0, 0x0, 0x20011}, 0x4004880)
ptrace(0xffffffffffffffff, r4)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)=r4)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

[  823.665279][T11569] IPVS: ftp: loaded support on port[0] = 21
[  823.843669][T11569] IPVS: ftp: loaded support on port[0] = 21
11:19:31 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000080)={0x3, 0x47, [0x2, 0x40, 0x3, 0x463f, 0x401]})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000000)={0x6, 0x8, 0x1ff, 0xeb7c, 0x8000, 0x100, 0x10001, 0x40})

[  824.238246][ T9541] tipc: TX() has been purged, node left!
11:19:31 executing program 4:
unshare(0x60000600)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
pidfd_getfd(r0, r0, 0x0)

11:19:31 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaed\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

[  824.455241][T11628] IPVS: ftp: loaded support on port[0] = 21
11:19:31 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fallocate(r2, 0x0, 0x1, 0x10000)
sendfile(r2, r3, 0x0, 0x11f08)
write$P9_RSTAT(r1, &(0x7f0000000000)={0x50, 0x7d, 0x2, {0x0, 0x49, 0x2, 0xac8, {0x40, 0x2, 0x2}, 0x2240000, 0x6, 0x3f, 0xb8c, 0x7, '^J{F}($', 0x5, '((#),', 0x2, '&\'', 0x8, '&\xfb/-)\\-['}}, 0x50)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
close(r0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000000c0)={0xc023, 0x1})
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

[  824.761169][   T27] audit: type=1800 audit(1593083971.918:56): pid=11662 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16381 res=0
[  824.814580][   T27] audit: type=1804 audit(1593083971.938:57): pid=11662 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir440994093/syzkaller.PkJ8nc/1351/file0" dev="sda1" ino=16381 res=1
11:19:32 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = getpid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r1)
r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x7, 0x1, 0x3, 0x0, 0x6, 0x80684, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x8, 0x3, 0x1, 0x3, 0x3, 0x1}, r1, 0x8, r3, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x4, 0x70, 0x0, 0x7f, 0x1f, 0xff, 0x0, 0x6, 0x308, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x6a, 0x1}, 0x40024, 0x4, 0x7, 0x1, 0x1, 0x1, 0xfffa})

[  824.864833][   T27] audit: type=1804 audit(1593083972.018:58): pid=11662 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir440994093/syzkaller.PkJ8nc/1351/file0" dev="sda1" ino=16381 res=1
11:19:32 executing program 4:
unshare(0x50000800)
close(0xffffffffffffffff)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x1f, 0x1)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x640, 0x320, 0x80, 0x1e0, 0xfffffffc, 0x7ff, 0x18, 0x2, {0x101, 0x800, 0x1}, {0x3, 0x2, 0x1}, {0x5, 0x7fff}, {0x3, 0x2, 0x7fff}, 0x2, 0x10, 0x9, 0x6, 0x0, 0x0, 0x0, 0x9b, 0xfffffff8, 0x4, 0xffffff5a, 0x7ff, 0x21, 0x200, 0x1, 0xb})

11:19:32 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x9e}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa, 0x1, 'quota\x00'}, @void}}, @NFTA_SET_USERDATA={0x8, 0xd, 0x1, 0x0, "cf55f73b"}]}], {0x14, 0x10}}, 0x94}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'ip6tnl0\x00', {}, 0x1})

11:19:32 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="b59d7235e4d7f1f68c2ff76651a490eb418677de1d28009851d65010c9e9b581bc67f7f0e9d581b7c5800041328231379de4cf0f8bed2efbbea56d4d7b3b82d6", 0x40}], 0x1, &(0x7f0000000300)=[{0x80, 0x100, 0x81, "491ae3944a44442688dd605999dd886251a3f9efb69a77a9bbd6bff689ac9775288b0f49e4b5ef6a883294f09991721d134689ed1fb83fb38944d7ce54bf50e2461b68a9762c0a186511e1a110ea72438b6e4fcac5016e6eb54b219dc182650da262a8f49ffbb0904472d1bd"}, {0xa0, 0x105, 0x5, "7e548530abb12d4b1fe14932fc1c2f7e72859bd8e9bbfbb51f8b0d170e3e17879292f558e0fe942c109675ad37624ee1bf43544d6c139ccfb1301ebd9e5776dc4dbbb8a3599e66b085bdf8724ab9c2c9ee7ce9a82d1b905fdf861bfbc5d0e6a370f06a22b6b181b40e6f26585e3932e412aeeb841832ab3aac14f8b8afc5c988eb3e517952839cc591148d"}, {0x70, 0x1, 0xfffffe00, "a52938a99fba89b3beacb596ff9ed95ffbb6aba46c9e19fb30df33cc0d36bd48114ab2b590237abf7e25675df376a5cff42b5e3c8f267764a7011b6ccdff50da79dede13e79f6a184f41c911c4b8e1f50624cf357bc4f19e758d"}], 0x190}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
sendmsg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="687af395ccfe36e178313ee7c1a0bc31ba13b9433be064e09f4fbcf24a3fa6ddfc26475aa21068df23ec87d43634974855eca346437e8a684e70fc69b1c500d7edf374da2bf69cf693d706ba17172a40534306a09bb8f510720bed190901599c873415ba59d9eaa9f0bd6f5af1eb5611f5f795f7337339cafd270aabc9210ee7fdaf97c1d3ab597d175e1ca4e21b616b6ca431922cb76b7abd06ac92cd0e37f7c4f2b84409a6663a80f28beea0ffa010b01ff71b0ff92d3d46a2962af4eb44065005be", 0xc3}, {&(0x7f00000004c0)="7a15713f57e42bdf76879effb2ad5b4b89b06cb28bc6f0ddebfd4b6c39b9166b919c3a73254ee41a2607edaf31e67d91d1af9526fba7385765e9876f40a7ecf35eccf1a129c9478c7dc12f02956a6c6997abca59112baa578819c62300e4ffdf6faaf3f2b444fbd98cc1f97ca1e3f2a05726bca6f1ed98f8301d8764cfd1603d85c36ce0c39b3a5b389244f4ec75af63d521e581849b54d89f1a891a4497d12bc31fa17c5383f6d7942f66e41d0290cc06b6893ce345df", 0xb7}], 0x2, &(0x7f00000005c0)=[{0x30, 0x10b, 0x2, "0bf430569f7eca299f9d09d24221c750233ba79435c4cb66d7"}, {0x38, 0x10c, 0x7ff, "005df4c6ffecb33b96c585da50f64a7fa06c70de83d3010a820a6b74661e743209651e0a"}, {0x100, 0x11, 0x80, "7864ecf0f16ffb12b6d4a5611e7c48088ac091baed7653656d21d0753c1c731b922a527b487a1ac644e3844379c92cd4934c6bd216f5f6ab45a47b3ff1681f605084f6c76f3560502e56611a66ccdb48b14a8984988a01c12b4645052ab5babbe0467dc5d740a4cf738729b6df748a7767cab1bfe9d2c018b0fcec832b11ab1fa10d378ab973e5454e532468453c11095a2d425e8077360c626e5e6f9ec29db59156ad3ec013f9ac2aa21010197976774acf909d963bba6c37499082bdb9312e8c713f03cb93a5c8d6f9cd0a3a52d1d48908d10772e74a59b11dac3939e6d9ecac3473af20d9d65d2b5434"}, {0x18, 0x100, 0x1ff000, "aa14173d882c5b2f"}, {0xe8, 0x100, 0x80, "9085e0571d967f1da8db76cfbc80372e2cb340cc7d78d5c493dc8ee560acbf153cbc83cbb2216e8b42a8580ce679af37650e3224980a406fce700b1d85fc606bd0dfa7fe5036a423bbbf10bce1e2280a44b7d9931d83439b031c9dfb9e6c94ea44dbc1a88f786343681253649a83d1ee36d974fed70a59acdd308d095226b5cab88f6d4ea3a2a1f6220b900fa76550139dc42ad07e2e265d5fe6e0ff5423a26a774e5eae0df79130616a1f68d094fda911aa94ffaf9e62fed4c07ed8170d2cbd19f2c472815eb4b22e68c7ae577e695f13f2eb"}, {0x40, 0x84, 0x9, "107b08529052763feddf8de6683779bffa313049cbecbf9716e0e66021b508479428aa2659589ae9b0525dbeb7e6c9d8"}, {0xc8, 0x10e, 0x5, "7e50b39ec14478c277ce73536b3afdb55fbb5df03c90a4418d4d2a62775be0cdac97189843a36e22e91dd47daa767084e0bc580ceb4127131ecd76e4614200a5534c429a25d871b9ee6989bfcb13a8b05e5f6eebfb0bc1de5e2f5737e9defc9a1a0b6dc06aa9214ea28876328491171eea19dff1446b11d757723ae770c1cc1cefe676755902c7b15e201227455a4d5724332fa52bd2cfd1d430dea6928673723488115fb16f8835bfec717bc59b383e683893d1a90b"}, {0x30, 0x0, 0x7f, "4d199f02cde00fab0dd8589d0ff3cdc60d5e00cf128938990930f77950"}], 0x3a0}, 0x1)

11:19:32 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f634b4000000000000000001063084000000000009d2a0000000000"], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080))
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8)
write$binfmt_elf64(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0xac, 0x7f, 0x3, 0x13cc2d9a6251f4fe, 0x3, 0xd1e, 0x24b, 0x40, 0x182, 0x86c2, 0x9, 0x38, 0x2, 0xecb, 0x7f, 0x3}, [{0x6, 0x12, 0xd6, 0x3, 0x4, 0x3f, 0x8, 0x7}, {0x5, 0x100, 0x40b9, 0xdb11, 0xfffffffffffffffd, 0xffffffffffffff81, 0x80, 0x80000000}], "c834edae62ef914ecd2e22d0f65b0659586c48c7db19ee1850", [[]]}, 0x1c9)
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

11:19:32 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b5b05351f48ae6897880f20f630c400000000000000000000000000b630000"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0xb}, 0x1, 0x44, &(0x7f00000001c0)={0x3, 0x5, 0xff, 0x0, 0x2}, 0x8, 0x8000, 0x5, 0x0, 0x4, 0xfffff94d, &(0x7f0000000280)="b7c129771259423706e44262fdfe41a3ce5f98b464ecc32b70e8e133beaa078021eb12a933db579d932bc9761062bdd672654b70cc7ee6f49c4b4828abf3594d2bfec1ac9ddc1283be9db5a057b11cb47875273ab7ba5115431fda4e7578cf53334c031596a76035528e815e8118f67b45eae6c0ca9cc8365e242465b0073f500197a559eabcbabb50d4010018ba0a816436f10db4070cc6970933d4563952b18374d448c780853c09f494c9578fbccea96810"})
write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x2, 0x3, 0x6}, 0xff}}, 0x18)

11:19:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x9, "62a2fbec656d26487e699eb52e2e5483db6e73252fe273e045b67274c29e412d", 0x1})

11:19:33 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000140)=0x40)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pidfd_getfd(r2, r1, 0x0)

11:19:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x3, &(0x7f0000000040)="e390b5de3522bfb6e2457592e2765b6beb264a62c5f8b9ed080c5ffaa6fab9be3410a208d46dab27d6ecd548093acd0d3066dd13dded3f3b5e24f9bfa0d1f604"})

11:19:33 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000100)=""/148)
ioctl$BLKRAGET(r1, 0x125d, &(0x7f0000000040))
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x40})
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000))

11:19:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:33 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
recvfrom$x25(r1, &(0x7f0000000000)=""/164, 0xa4, 0x40000020, &(0x7f00000000c0)={0x9, @null='               \x00'}, 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

[  826.473626][ T2554] net_ratelimit: 27 callbacks suppressed
[  826.473632][ T2554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:33 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="71b30f630c400000000000000000000000000b63"], 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @local}, 'veth0_macvtap\x00'})
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00f37edd06c3fa666933840000000b6300000000"], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)={0x0, <r5=>0x0, 0x7})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={r5, 0x0, r6})

11:19:33 executing program 0:
unshare(0x20000480)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xa4, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x0, 0xffffffffffffffff}, @flat=@handle={0x73682a85, 0x200, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/79, 0x4f, 0x1, 0x26}}, &(0x7f00000001c0)={0x0, 0xfffffffffffffd59, 0x30}}}, @request_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x9, 0x2, 0x26}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000400)={0x0, 0x20, 0x38}}, 0x2400}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r3=>r1})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000400000040000b63ff04000000000001000000"], 0x0, 0x0, 0x0})
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setresgid(0x0, r7, 0x0)
fchown(r3, r5, r7)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
splice(r1, &(0x7f0000000000)=0x6, r0, &(0x7f0000000040)=0x5, 0x6, 0x1)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

[  826.634236][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.649076][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:33 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
write$P9_RLERROR(r0, &(0x7f0000000000)={0x9, 0x7, 0x2}, 0x9)

11:19:34 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
recvfrom$l2tp6(r2, &(0x7f0000000300)=""/4096, 0x1000, 0x12100, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630405"], 0x0, 0x0, 0x0})
dup2(r4, r3)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f, 0x2}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x7c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x8c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x4)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
pidfd_getfd(r0, r0, 0x0)

11:19:34 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x28, 0x0, &(0x7f00000000c0)=[@request_death={0x400c630f}, @clear_death={0x400c630f, 0x2}, @exit_looper, @exit_looper], 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getpeername$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

[  826.907400][T11776] binder: 11774:11776 unknown command 84173572
11:19:34 executing program 0:
unshare(0x60050080)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="3aa2940c1302", 'ip6gre0\x00'}})
rt_sigprocmask(0x2, &(0x7f0000000080)={[0xfffffffffffffff8]}, &(0x7f00000000c0), 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000100))
openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/netlabel\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'veth1_virt_wifi\x00', {}, 0x2})
ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000180)={0x400, 0x0, 0x3, 0x5})

[  826.948180][T11776] binder: 11774:11776 ioctl c0306201 20000200 returned -22
[  827.006174][T11783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.028229][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.036896][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.048596][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x5, 0x4, 0xc4, 0x9, 'syz0\x00'})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

[  827.085922][T11776] binder: 11774:11776 unknown command 84173572
[  827.096119][T11783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.109209][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.120189][T11776] binder: 11774:11776 ioctl c0306201 20000200 returned -22
11:19:34 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x40c0, 0x0)
recvmsg$qrtr(r1, 0x0, 0x0, 0xa5d0a42983b11cc)

[  827.156154][T11783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:34 executing program 3:
r0 = socket$kcm(0x29, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000000)={0x40, 0x4, [0x6]})

11:19:34 executing program 4:
unshare(0x20040000)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c40000000000000f5ffffff00000b630000"], 0x0, 0x0, 0x0})
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x20, @any, 0x18}, 0xe)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:34 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = accept(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000100)=0x80)
recvmsg$qrtr(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000, 0xd000, 0xff, 0x2, 0x83})

11:19:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
rt_tgsigqueueinfo(r3, r1, 0x38, &(0x7f0000000100)={0x8001})
ptrace(0xffffffffffffffff, r1)
r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x10c02)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2)
syz_open_procfs(r1, &(0x7f0000000000)='cpuset\x00')

11:19:34 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r1, 0x0, 0xfffffffffffffec2, 0x40000000)

11:19:34 executing program 3:
socket$kcm(0x29, 0x7, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b34, &(0x7f0000000300)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:34 executing program 0:
unshare(0xc000700)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3)
close(r0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x3, {0x1}}, 0x18)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)={0x2f, 0x4, 0x2, 0x3f, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00']}, 0x28)

11:19:35 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000080))
getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:35 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
recvmsg$qrtr(r1, 0x0, 0x0, 0x10100)

11:19:35 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x105040, 0x0)
getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4)

11:19:35 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:35 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f0a630000"], 0x0, 0x0, 0x0})
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040)=0x8, 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'caif0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}})
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}, 0x5c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc053}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x2)

11:19:35 executing program 3:
socket$kcm(0x29, 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:35 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
poll(&(0x7f0000000000)=[{r1, 0x4418}, {0xffffffffffffffff, 0x450}, {r2, 0x4400}], 0x3, 0x3)

11:19:35 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000000)={0x0, 0x1, 0x6})
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5)

11:19:35 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40c300, 0x0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r2)
r4 = getpid()
r5 = getpid()
rt_tgsigqueueinfo(r5, r4, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r4)
rt_tgsigqueueinfo(r4, r4, 0x80000003, &(0x7f0000000080)={0x39, 0xffffffff, 0x9})
ptrace(0xffffffffffffffff, r1)
r6 = getpgrp(r1)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r6)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
close(r7)
recvmsg$qrtr(r7, 0x0, 0x0, 0x0)

11:19:35 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x5, [0xffffff0c, 0x2], 0x80}, 0x10)

11:19:35 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x6, 0x2, 0x3f})
recvmsg$qrtr(r0, 0x0, 0x0, 0x40)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0x401)

11:19:36 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer\x00', 0x2000, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000680)="492caa871dc58dee71355914759010689ad43a59a1a387c6f845b7791faa1fb543eacd15a6f073809312a3f1a77e8f9b56cbdb707d9c4cca994187f218ed036d58c16ed35b176a0de947fb65ed979fb8303b7f649a09c1229e35f4a78e26019f446f6bde4cf97ebaf52c328e1bd3736963d92dde443c6b52cbcc4ab01b4caa669ff681c23a8fec5c47621b98004fffcefeead4a0ded5696de0a8", &(0x7f00000007c0)=@buf="afd2010f43a9cfe454485e9339fe17ef357fcb5096481f8acaaf4ea2761bc2f82adc753fb2fd53798d6fdb26339eb2619f785928554d1ca6aa4aa51dd258d8bdbd95c1a0cfe423d8ef5df3f48b75d7b0c737df7d870ee84c0efdda849675c9ef6bdc16dee4d71cc36b6db899ea5f4c5723bb36651130a66f8d0b7cd1216cab87aabcb28c58143baa9880448fbe63e6d8c6c271a26e4c268d6652e7fbb4dbcb5274619bb97a599e48207d", 0x4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000040)="83a75c97b466c68641314a176a6ef1348f9b5bab6b38c88bc61ca16dec36e151a2bad3ddf2e138aba260906eac19cc69743dc761571bf61758c27273dcab80cb02e4cbea777720db75842dada38be611ac2758fa9c3aa908fabc24e52d1d8b6273f78eebf34694f78e093e847b7d5ce4b2d753885aa2fe0f15bd43d278c6a778ff1ee2986d84bffb87f6553fb32eb383cde513984078cca99723fda2c637638f87d1aa22f3a075b3e77bb086d24cb8e274674aa21dd594fa3534e939802bcbc7d88e9e4baaf9ff147dde8878af9b598889f8bf2b8f89", &(0x7f0000000140)=""/124}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000580)={0x1, &(0x7f00000003c0)=""/182, &(0x7f0000000540)=[{0xffffffff, 0x89, 0x1, &(0x7f0000000480)=""/137}]})
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b6300006e447b53b573458efd4227f16ae3ca9083ff70ffdf1603d6ab1aef1328d735759a666bb3004eacd3dd2f47e48a350fac261cef5ba1a2b8862d8634c55fb3d2e9b612d45d44ea00612eea544e37cf0626b5cfa8980f160a18d382bb07f539feab0b3da1bdd85983e8e79f8b7d7964b2e1dde36316e7276c99c0b1609a605395998cbd3e423641a3"], 0x0, 0x0, 0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f0000000380)={r6, r7/1000+10000}, 0x10)

11:19:36 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2101, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0xdf9)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

11:19:36 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
recvmsg$qrtr(r1, 0x0, 0x0, 0x0)

11:19:36 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f0000000200), 0x4)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c40000080000000000000000074fab1000be6ea4c85e3f1588bdde633582beac25064b574fdb6964c4f7841a78061ce245fe7d31b690ebf7a0fe261f30000000000dfffff997870acdb51a2c37d3724237cf9e4e76ac5856b18e0988cecdcf1103dc77e"], 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, [], 0x1}, 0x8}, r7}}, 0x38)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0xad00cc32abe75f23, 0xb, 0x85, {0x85, 0x4, "29edae4d7610bc572785a67909b5afedf6c19a6c05b5dacce461b82bec37e8cc6f933a40443ccefd89573d4801e33ecd1855dca50a08045ccff9cc5c726d0386e62b37424eeece50f2f62a02b419f7ad628380dee2bdfbe60d26e9d1d1c86e8a370a21241a44a56da56b7c94405873cff9fabbbd56b2ccc9e1b00a3e2ffb9f1e8b0473"}}, &(0x7f0000000000)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "32ee1c8c0e590b99d04f998cbc5c185d0efd2772593c7a6a914acda1bc54c602a3f19123022799759acc09"}}, &(0x7f0000000280)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x7f, 0x0, 0x5, [0xff00c0, 0xc000, 0xf, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x5f, 0x7ff}, @ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0xd44, 0xf, 0x5, [0x3f6f, 0xc17f]}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x7, "611843a8", "e6749d86"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x7, 0xff, 0x6, 0x1, 0x8}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="403143000000a790dc534c63275b4721a2a2d1b325d8b67bfb8057638d2d1b64de37ca4c5a6d11eb6163ba4cb66dec08cddc7892213b97969c646fa5c96d739d1c84b083b174010000"], &(0x7f0000000580)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x50}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x20, 0x1, [0xf00]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xf6}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ad5d"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "62bc"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x1}})
write(r4, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="2321202e2f66696c65302094a09617489d0700000000b200005978a3becd872fd1708932b015185b4d6c20ca24e7f82ff989581b16ebad674ffc2e0fda2fd4cacdc136f28b4a2b72144fded2fab153f78f571fdc4afd7cf475ca410a52915bdfd0bf80c624c7460a8a2995a247df054de6cbda2fae21097090791c2420356c9846d1e589c97c288794dd4d6507c87568af4410efbe21a6e2da0ab815035659db084f172e75f33da650ebb67da600c85420da9bdae34755633f0054d7b9e2ff", @ANYRESOCT, @ANYRESHEX], 0x7f)

11:19:36 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f630c4000000000002d0900000b630000b3d778e1bb73b5ef705e34314239ed538a1f3bb0c930dac42ce4f20e350a9e4d73f1436301e51b811473711f94094fb772538a749bc314b04270262c2e0fd72055288216094b52e2781fdff8d255850c665f54cb222eb490c69e4525ed3f4090d65f7394ce6f7273ec031da5ef976ae50887df27ee68"], 0x0, 0x0, 0x0})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r2)
r4 = syz_open_procfs(r2, &(0x7f0000000000)='sessionid\x00')
sendto$rose(r4, &(0x7f0000000040)="0beb3fd3cc708015cb4870ebe9b2864f3d255938de524c398b1866b93dd31e42609e9ee463f3fb9aeb1e9efe54864b988d81cc9c55847cc8478eac2b7ea542259b63479b807b7c847a9b50d0e830ab61041502d4ad5ac44ea49e33570f968e2deb92fc2a433da07030f76dc7d4b67e9392e31c51ce6213361ee684345f40e7944434094a80aa36ff7f18e0bab47cdafd4db1a15eee2e82828f02fc61f55d1ca86a37e4e3f866bf20cb0196f02289f2dd95c902abb72f7331de749912298b1b50f494a82c91a02373ab56eb9354f43b9dcf8665c998109271c2988b1d1a55b84ff937fc8d8de2b397002098", 0xeb, 0x8000, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x3, 0x3, 0x1, 0x1, 0xa, 0x4, 0x1, 0x6}})
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000180)=0x2, 0x4)

11:19:36 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c40000000000018630000000000000000002e67563af8b53445b6c35608aa32e4e5188772d073c6da348f3bb4e0645af9814bd02e6916e0297baddf2dceef9c89121c412f4baee86bc6cd1786514bc7cc86243ad7b3e9c8ed41abed49f26c92054296a948f1d144bd5077fff99ae0bf8dc566bcfe93dcc817124cb99add774e6487b414536022bf57dc23d4a2853aff10eb1814ca64af436bcc8e877126118f4aba075314389f897e148b9520488c7f7c6190b03e22b823d8b2d335b6e56a129e98db85c4f52b7b267ce34c9c300a00007b7033a3513db6483a9a923cfcef06bc582d"], 0x0, 0x0, 0x0})
getpeername$ax25(r2, &(0x7f0000000040)={{0x3, @null}, [@rose, @rose, @default, @rose, @default, @null, @remote, @null]}, &(0x7f00000000c0)=0x48)
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000100)=0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))

11:19:36 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:36 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x1000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket(0x11, 0x800000003, 0x0)
bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:36 executing program 4:
unshare(0x300)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000100)={0x5, 0x2, [{0xfffd, 0x0, 0x1}, {0xffffffe5, 0x0, 0x1}, {0x7, 0x0, 0x200}, {0x3800, 0x0, 0x3f}, {0x1, 0x0, 0x2}]})
ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040))
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c40000000000400000000000000000000002baa02f60e"], 0x0, 0x0, 0x0})
pidfd_getfd(r4, r0, 0x0)

11:19:36 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000004060108000000000000000000000000050001000700000058ff586c66dbb6a423720a847d808a15fe09287afba490b262b00b3f37ded5afdc4e35fe5583960f145fb5c00659907c27e8de23c3526b47f9e7da0d9e0a2851364b9fb830de0db52dde33d00be77e928f275e714de14840ccb710910d58a09051a97ac186488af331c766d38c9bb7862237418b13a7bddc5b55b96e4ceb2404b6f6eb1995e56a70ffce89b035a43d7198d4b69bb6f9c4c98641b4e4dbc2626a8e6fd71d8b872ae2bc51d6a0e200a5db7763b3f3346528df9151"], 0x1c}}, 0x0)
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff01}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800c5)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a01010000000000000000140011800c0001007061796c6f6164000400028008000840000000000900010073797a310000000008000a40000000000800054000000034140000001000010000000000000000000000000a"], 0x80}}, 0x0)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8095}, 0x2000c010)

11:19:36 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x2000)

11:19:36 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:36 executing program 4:
unshare(0x20000400)
socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:36 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x803, 0x100)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x16b7, 0x4)
connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x6, 0x6, 0xfd}, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4)
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x1)

11:19:36 executing program 3:
r0 = socket$kcm(0x29, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000001010000000000000000000000000900020073797a3200000000140011800c0001007061796c6f6164000400028008000840000000000900010073797a310000000008000a40000000000800054000000034140000001000010000000000000000000000000a"], 0x80}}, 0x0)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044804)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'batadv0\x00', <r5=>r4})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
getsockname(r9, &(0x7f0000001440)=@xdp={0x2c, 0x0, <r10=>0x0}, &(0x7f00000014c0)=0x80)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000000400)=ANY=[@ANYBLOB="54010000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fbdbdf250600000030000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653100000000000000000008000300030000000c00018008000300030000007400018008000300020000001400020076657468305f746f5f7465616d00000014000200677265746170300000000000000000001400020074756e6c300000000000000000000000080003000100000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000c00018008000300020000001400018008000300070000000800030002000000300001801400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="fd135e6254fc431ec663d325000100", @ANYRES32=0x0, @ANYBLOB="40000180080003000100000014000200697036746e6c3000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000100", @ANYRES32=r10, @ANYBLOB], 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

11:19:37 executing program 4:
unshare(0x10000480)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:37 executing program 0:
unshare(0x20000400)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:37 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, r1, 0x0)

11:19:37 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x800, 0xb)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040))
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:37 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x16, 0x7fffffff, 0x80000000, 0x10001, 0xe47d, 0x2})
ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x4, 0x100, 0x101, 0x2, 0x8})

11:19:37 executing program 4:
unshare(0x8000900)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendto$llc(r1, &(0x7f0000000240)="802297e5b42b5ee3bb2d9f1fa66ed2f79de020bb8f0f2855699bd6f27da3b0ac115b1ff5e249481b536bbcee88a27756af47a542914a5c493d946a0fd6b1e25ae13e42090078195f6a3516d06bad407ecf6819057d283d566170b8d85819ea20685bf2135da5a08acbbbebce2159a685e9dbc2361ffb321db48c5ca4aa3e80e5affe541e7a6054731e07626bb7f1394bf148521c48e1fd45da54f90764b99438fd230fd4c936480f594bd6498dd3f20b2a1ff6436366ce7b5d330e0727212dedc8869b3c60f4c7b3604db5f3c90e3795dd987e19447948004fcd8ea9ace9ae5786a488c469aee0c2ae699317e1df76f34b7777ed69", 0xf5, 0x200880d1, &(0x7f00000000c0)={0x1a, 0x337, 0x5, 0xff, 0x28, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

[  830.407858][ T9541] tipc: TX() has been purged, node left!
11:19:37 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = dup3(r0, r1, 0x80000)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000003c0)={0x2, {{0x2, 0x4e20, @loopback}}}, 0x88)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000140))
recvmsg$qrtr(r3, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
waitid$P_PIDFD(0x3, r4, &(0x7f0000000280), 0x4, &(0x7f0000000300))
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa2636a57652c84ce, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

11:19:37 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1, 0x100}], 0x1, 0x0)

11:19:37 executing program 4:
unshare(0x20000400)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
fstatfs(r0, &(0x7f0000000000)=""/219)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

[  830.560896][ T9541] tipc: TX() has been purged, node left!
11:19:37 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)={0xd2, ""/210})
r2 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0)

11:19:37 executing program 4:
unshare(0x6000800)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f0000000000)=[0xffff, 0x400], &(0x7f0000000040)=[0x3800, 0x9, 0x6, 0x1, 0x5, 0x4cb], &(0x7f0000000080)})

11:19:38 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x28, &(0x7f00000000c0)={0x0, <r3=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3, 0x400}, 0xc)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x2)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:38 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xd0, "10cc259b7b3e8a81643977148e3f080ab7eb99e87eb18e8bf8aaad2eb3b9f567ec9a62556299ac87871cbd7521c8af9eed487d4e34af59267d0a15bdc6ae75e5512985a1f5222c85c21fb456127b2cfe04fa2565db4bb396e3910064838531ceb7df2fc66163bebbd5e75a06390f19145a35e2eabd8c7ddddf54e09d2bd81f1c8372697dd7b7f1f8f14c4b78f25d7347e46f674d9f735a5bf55e16ff2172c8e7cfadb5c0fe070f2219687a542a67ebfa5b6a5a54ae022f1401e674f4e73a031eb1d2036c0fe31ba7c7be0881e30b2de1"}, &(0x7f0000000100)=0xf4)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000280)={{0x2, @name="6ea95d1a75f3dd90301928d94987bb845da37bb739b2fe0c58e2f36a4cb40cf8"}, "ff88cba15642390eaf763d36d350456062aec6866c5e28254218a2234a637244", 0x6})
pkey_alloc(0x0, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:38 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:38 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x2e4, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ba3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x250, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "4dd026ba99b4a1f40fcad0b7198495c7e588acd2314ee95c921190fc"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7f6ff23f0f7350eb48b44902b7dd4a9dd38db28c88f7132e2d4646e7"}}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "988669a14ba68a4af0fc8f66aa129e49b70e51eeea8f70a586791ba5006e7966f7fa22989553cdfa057d9fac4a05192809a8064651c8e3e59064d2338812cd09046debbc692733de5473848c2e93abbdce8c3b5956810a6b5f0d7bea4cb20ed1b0b65a53b8d9db2c759a647afaa79f8ff7167be0d7a7db8636cc68fe77eb192ef9fd91a928f5b07fe72edb711d6115b113b28f60fc1815348f7d227d61c5f6b6b04312cf445a05597a69338760890157f31188f8ada36846fc98a8358ed7ee40c629e6932290e3f34f327511cad2b16997f3355f8db854494dbb24243b841d0fb6349be0d21fb32d02355664ba20"}, @TIPC_NLA_NODE_ID={0xca, 0x3, "c5b1c10f0ce679eddc5335807006c3b065607a2679e0946ca511a9d82a91e18b5ca071d6f2c8ae797404bd07b6420a942306eca0c8a50b0ba8f5063022b5ebaff7cfdce5e3693b461c5822816eb6776a156c3a89efac7b5bd9239ea215742632644f104f6e4a270de297b2e20366db1d5132afb39d09ebde903ec77996b6c4eeb47f5d2c9a3e13328ce7c0da4916a09f79c356e40c0a025a2755220bcc6172164c6eeb9c0d4d2cc9b62b78474ccc29e7ca4e59d7eb91f41edd56e4acc51819ea604328a53948"}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4040}, 0x44001)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
recvmsg$qrtr(r3, 0x0, 0x0, 0x0)

11:19:38 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0xa6000)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={<r4=>r3, 0x40}, &(0x7f00000001c0)=0x8)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c4000000300000000000000000b63000065383bd08eadecb28d2d4fedf4ccc980013eaf8112445d60c24923f8e6"], 0x0, 0x0, 0x0})
r5 = getpid()
r6 = getpid()
rt_tgsigqueueinfo(0x0, r5, 0x35, &(0x7f0000000100)={0x103a, 0x8})
r7 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x12400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x7fff, 0x0, 0x100000000, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000077a1bfdd000000000000000073014300000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r8, 0xc0, &(0x7f0000000400)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r9}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={<r10=>r6, r7, 0x0, 0x10, &(0x7f0000000280)='/dev/input/mice\x00', r9}, 0x30)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000480)={{0x4, 0x0, 0x75d, 0x1ff}, 0x2, 0x3, 0x8, r10, 0x9, 0x2, 'syz1\x00', &(0x7f00000005c0)=['\\,\x00', '\'&:\x00', '-\'^%&\x00', '/dev/input/mice\x00', 'wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7', '\x00\f\xec\xaf\xe2\xcb\x1e\xfcR\xf5\x93Dy\x9d\x9bY\xf7\x99y?\xfdeW\xd2\xff\x7f>\x87\xa0\xa9]\xce\a\xa0j\x9a\xd2\xaeb\xddg\x86,\xdd\"\x85\x14\x04\xf4\x8d\xc8\x050/\xfd(\xe6\xda\xb4\x7f0\x02\x12:\xc8\xff\xf3\x9dS\xa67w\x94K\x00\x00\x00', '\x00', '/dev/input/mice\x00', '/dev/input/mice\x00'], 0x1b0, [], [0xf895, 0x6, 0x100, 0x800]})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r4, 0x2, 0x1, [0x3]}, &(0x7f0000000240)=0xa)

11:19:38 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r2)
r4 = getpid()
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r5, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="0100f01b71543e2bbacc52d4b7d9ff7a757a6d1b59ec3e30f0aaa058cd2b7aadc1192faed30a9597e9df136c3ed7ce4bee0bfbe8cad2b99e7bee19b423fce42827b124236079e4a8ee5c4ea9ba77b23a9e6bea"], 0x1f)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r7 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r7, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r5, &(0x7f0000000000)={r6, r7, 0x4})
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:38 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg1\x00', <r3=>0x0})
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r3, @empty, @multicast1}, 0xc)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:38 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000280)={0xa9, "46eb97a755c91236239f72a0e71df8ab94395c3956823782344820813268143f5fcbc3e882c0a3ccb0d2263a083b03cfc23b9a3669ad1729745cb60e6e0a8aedd271c63cab7d24c4c08d2eb5acf42ed7b3dd58f62089836670f03c72dd1e45c7d4d6585487a71fb39d3fe32535f1d45e5ed29069efdd70010a095715d0939800c58fa3a18c45d8abf4460007b7cb746b2c31cc049f944e1c4ff05daeea05ac528c2ffa796fc759d63c"})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/40, 0x28, 0x2, 0x26}, @fda={0x66646185, 0x1, 0x1, 0x29}, @fda={0x66646185, 0x7, 0x1, 0xf}}, &(0x7f0000000140)={0x0, 0x28, 0x48}}}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000000), 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

11:19:38 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x8, 0x206041)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000580)={0xec9, 0x30e, 0x9, 0x6, 0x8, 0x1f, 0x1dfb}, 0xc)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000))

11:19:38 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfc2, 0x20000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x200, 0x70bd27, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000280)="097581cf9b2b5dcf5489bee51229656ee2e32bb68f84c2cf646af6acdb506f58ae5399efae1ec394860dd5850b2d11dadb1edc2c6483e5a5e99ce11c0c15bca00193cba03e09a83fa874e3e4f8d6d6fb0898a1755bdefa9ca151e325fb0370c79a90588634a747cbea52afe0a80bbacafd116f862e106b25d221e0395e7e1154b64fc410b1e60990df5dd47ab8df52b1c2e80c681c1e5c95bfded772155d5110ddcabcd68256f94690c70d4e0e3c1dff87c41651145f0462e6", 0xb9)

11:19:38 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
pidfd_getfd(r0, r1, 0x0)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x242040)
write$cgroup_int(r3, &(0x7f0000000040)=0x200, 0x12)

11:19:38 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1, 0x230}], 0x1, 0x0)

11:19:38 executing program 3:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xeb)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x20000, 0x0)
bind$x25(r3, &(0x7f0000000340)={0x9, @remote={[], 0x2}}, 0x12)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b63000021a209ff9d3a5834b89b4d54e58f617e32ca862c631ee6391b8b68a1d025d8bd4327f8716a99808a0746059bd8445a1a714a49c7ada60f3d8038414e299a82faa654463603501b8309366110f3ce26a0500f584bf0f566167e63e0cd20c813e9ad19d302d1362c6176e2052dc6a70e931d5db7495460f173106bc1066ce21de9bf9faf282c1c4fc001c2da478c0e82f17b9920b0b47ebddddc7610bbdbc63c308ac32fb4b6d6921553cd08d17281857843c6c10000000000000000"], 0x0, 0x0, 0x0})
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xb59, 0x0, 0xd0, 0x1}, {0xc773, 0x1, 0x8, 0x4}, {0x8000, 0xb5, 0x6, 0x4}]})

11:19:39 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40400, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
write$smackfs_access(r1, &(0x7f0000000040)={'/dev/ocfs2_control\x00', 0x20, ')\x93^!.{\\{/@,)-#$', 0x20, 'atb'}, 0x28)

[  831.833934][T20114] net_ratelimit: 2080 callbacks suppressed
[  831.833942][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.852549][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:39 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0)
getrlimit(0xe, &(0x7f0000000180))
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x100000000)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0xe801e4678bb3cd97, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4000)

11:19:39 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="4c7ccf69af2ab4f0c8", 0x9, 0xfffffffffffffffc)

11:19:39 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800)
r3 = dup(r2)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r3}], 0x1, 0x0)

[  831.914861][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:39 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
fcntl$setsig(r1, 0xa, 0x3c)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4000e7ebe978d118ddc60000000b630000a0b51ed52bb2c952295f72e3b5e798ac0bc4209e9a4d826960aa8dbb1d5348495b527060edb8576853c15de13ae59d"], 0x0, 0x0, 0x0})
recvmsg$qrtr(r2, 0x0, 0x18, 0x0)

11:19:39 executing program 4:
unshare(0x22000000)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8, @private2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x80004007)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private2, 0x1}, 0x1c)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x0, 0x4004061)
recvmmsg(r2, &(0x7f00000021c0), 0x1, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf59, 0x2)
write(r3, 0x0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000080))
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x80, 0x2}, 0x20)

11:19:39 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x42})
r2 = dup(r0)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x3, 0x2)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
poll(&(0x7f0000000080)=[{r3, 0x8000}, {r4, 0x28}, {r1, 0xa101}, {r0, 0x4000}, {r0, 0x1c59658ee14da492}, {r2, 0x4040}], 0x6, 0x80ffff)

11:19:39 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x5, 0x2, 0x1})
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:39 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x3, 0x7ff, 0x101, 0xf001, 0x8]}, 0xe)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

[  832.227872][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.228648][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.245897][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:39 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000080)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x3, 0x1})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
recvmsg$qrtr(r1, 0x0, 0x0, 0x0)

11:19:39 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x72000800)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
close(r2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x1}, @enter_looper], 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
poll(&(0x7f0000000000), 0x0, 0x0)

11:19:39 executing program 3:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4)

11:19:39 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000))
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

[  832.548032][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:39 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r1, r2}, &(0x7f0000000480)=""/220, 0xdc, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-avx\x00'}})
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r2, 0xfb, 0xfa}, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d72617720686173683d733bf46d33000000000000000000000000000000000008000000000000000000002000"/62], &(0x7f0000000340)="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", &(0x7f0000000440)=""/250)
r4 = dup(r0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x4)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r4}], 0x1, 0x0)
close(0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000140)=<r7=>0x0)
r8 = socket(0x1000000010, 0x80002, 0x0)
io_submit(r7, 0x3, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}, 0x0])
r9 = socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x7, r9, &(0x7f0000000580)="2a3b559e2d2f50fd7e46d777d22a23110656bb3a3aedfc5201e377d13593fc80ac3294875ab385ed7f29a5bb10209fee8f24f9ae69b868e3e126dcd7955867eee157b2df4bbe717054573efa0bc24a693d24d8366660321a071764d13ee9ff18bd2997b2c08d2f98ef8d4e9539a0a7c46029bd9709f389aff14b06e69f3e1882fa315fd0c16a2055c24ad77b32713f9075951da082ba43e8cb6a4b71dcae389458e7e3187896797e8d5aadc3d3c5d5e85fa5a1b447ef7cf1869c1391244958b0a7c81028d1fa8813fc5bc52396a1fd4a4b506160286de9ca688b53a563", 0xdd, 0x8, 0x0, 0x3, r5}, &(0x7f00000006c0))

[  832.707791][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:39 executing program 0:
unshare(0x20000400)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = msgget$private(0x0, 0x0)
msgctl$MSG_INFO(r0, 0xc, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x0}})
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/120)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
recvmsg$qrtr(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$input_event(r2, &(0x7f0000000080)={{0x0, 0xea60}, 0x12, 0x3f, 0x7}, 0x18)

11:19:39 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)

[  832.867752][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.876767][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:40 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
recvfrom$unix(r2, &(0x7f0000000040)=""/212, 0xd4, 0x1, 0x0, 0x0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x6, 0x8, 0x3ff})

11:19:40 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000000)="d7bd976eca524998eb302e7f7d69706891ff808577504ed47506f15f6ae8f8cba5c273d229504c2d96e3de7107664a4049827b97aba405ac898c81693310080e9b3b9fcdbc696e707957752a26844c95faa71154aaf6f9c557367863d3f78e4c2515b3dcc5da9ae663d7b7dd6da03794e36e492fa93bf581cc7a044370f65f2125714db28ce34a72b4959af35f1f8eb8b1ad4c8f53f11842f5be649f1f8bcbbe66aa2e7624dc892f7bb7b713a8f3f89711703a997b07913191edc8cd84dcda4e", 0xc0)

11:19:40 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x141140, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x8190, {0x200, 0x1, 0xe42, 0x4, 0x9b7f, 0x4}})
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
fsetxattr$security_evm(r3, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "f738c91159130fba1ec2bd5c38c5e085360a072e"}, 0x15, 0x0)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x78)

11:19:40 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pidfd_getfd(r4, 0xffffffffffffffff, 0x0)

11:19:40 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x3)

11:19:40 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x4000200)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:40 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)

11:19:40 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:41 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180)=0x14)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0xca, 0xfff, 0x2, "bb13074f75c70d8f0093623a82c59af275b960584a4ebf5f4debf102179e49c6476d5919e6540804287fc9812b22039bcc6fe8a3adb49dcbd591f6a283bae86e74bfdcc09bebb5b28e5c0672f91d02a04a8481a7d36590e87a197704403719b9ac55f6cded2ae2c87df5976e7d79602fe7aca8c466e97132d65821d15a98e650d7fffa4c8b5cac6935bb4122c29be93eaaf4df8e20a862436324f7330d5a11483ef6fc3cfa83075b098e366271e2b01854d6b3a8cd13c5185501728579c86f709fd83e707d331af93880"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0xc4080, 0x0)
pidfd_getfd(r5, r4, 0x0)

11:19:41 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x0)
fallocate(r0, 0x1a, 0x7fff, 0x94)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3)

11:19:41 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
clock_adjtime(0x4, &(0x7f0000000000)={0x7f, 0x5, 0x40, 0xf8, 0x9, 0x20, 0x7, 0x9, 0x8, 0xb61, 0xfff, 0x5, 0x7, 0x2, 0x8, 0x40, 0x400, 0x2, 0x4, 0x10000, 0x9, 0xff, 0x6, 0xfffffffffffffffe, 0xd5d, 0x3bc})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x80000002, &(0x7f0000000100)={0x39})
sendmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000280)=@caif=@dbg={0x25, 0xab, 0xff}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="bd79958659a2f73933594be01ccb48787d6740790423b73256d96070ede0e7a67f180f20cc9de3fa", 0x28}, {&(0x7f0000001340)="c394275f34c7a6b9696196d28491ee2706d09a721eff11172d149a367e5f99b1669f7706ed432db72f9f4b1107e8b10a66d228f99e35b6d6cbb1a00e42e0450fec35346dc99de45299012e2b2213f4d897a8abf76a3abf5c8446e2a93dee1c03cea959d1a4938cf42ba3d5b94dfd624960a8a9f8c74b28a42fcc5c38b1d54476874b1589d2e4145c54285068de684709ee456090a3161e76f8a00a1941763f4cef76a085a80ae867a8cf5fed0ac27fc4ca83c3d686b2ba3f", 0xb8}, {&(0x7f0000001400)="e0efb4902be33a914b4a396720c59d4e845bc7bcb0055cec0bf61e24cac76956b174de93f63dee54aa8d1c2aba9be5eeaaeb5fafae3a5ac884dbfc284a2c3170895f9569a720b477e10a226d5a2c311b4a3ae2592bddad1d031266f4876c2bd773f310d14f346250c18a2b5f3f53724527386bb202a43e0b83f283bf847b34d92faf1de030cf3cf099ecbce2c6c724848b7ed91814ca776cc762e398e381af75d37df7f8c57a14b8a6adc68393a3c0c33da4529715a3dc5f5c851123af1fcdadefb3a1704b238b1282da9b38fe3829b2e5c90b89d65e8cb930de688dffdeb0d30dbdc7e34f", 0xe5}, {&(0x7f0000001500)="3d4be5f5f84d13c1b3eda28358367384f6b32aeff5108a016d6038a9b542cd4a5a497fc97112845c78c54d6bcfe13fd89a4037d56c79883dbc3af48a1987d564079472f2bbfc7b99339470aae7cbc161a82f22c9c30951b867b74aac084abdb57853daa9fa19d317080d8eb946d31ef11c7d5ec26d4f321b4a0a5ff8e0d94c6b992ce12add874a441ca85e3e41bcc706787f04c1e698f5697e5b92b6931f6f87830159c439", 0xa5}, {&(0x7f00000015c0)="0c85897d501db023971804cc029364077e3e5591dca8f2d7a08e099d02451781fa646c1fff961586d7a6beddb1a73ef7419c3e04feb41be34ca0b3c8524e6adeb5d864abd71e4c85b0b7907204afd937f5c50f1a760c92fa82cdc3ba27000ddbf521b1a07bf746490f770a417a3f2fbcfea10aa652018f44298a3f1f1a99e5434f6bc382095decc511a67123f93d6ebd0d4d0ac4f31af7c9ab7e54942a94c9f01c2582fd795ee765071db2e9eb5b0695daaad4bc9a5e6c460ab218897192683fc32a370e778c0d943b2b0d1a0064ffb406bd9eba9c80646a3c56e47e870b9db67711c60ffe3dc65862b850ab", 0xec}], 0x6, &(0x7f0000001740)=[{0xa8, 0x102, 0x8, "95aabf5ccb879f54de0b40f1eee7f4638029a3f06afa284ba2ef309e0594922eba865ff833afaf426098816e89c6f6ea0682900a2e1d8a750a36bc5461e6d6110205fe3023ed652fac4f40a83dbf9ed5d05f38448728998ed2b8957b130fe5716d9a5739283364b6cedd23e5ee78595c6566a63bd676e159ed19771a90b0ecf6d5fb9ee43a026d6150391f4a2e61ebca3aadee3e"}, {0xb8, 0x0, 0x2, "956f6e9faddf705c22f0538718d7e12280d428a7130c5473da68d7ade408d198cb0425b0ed12ab36ff1cba837d2e2cf20de262fa34a10e9afc93d69ffbd3ed5144d668ddbbf47f2d85c0777a53296e9bdb59feaa742b50f70f485af16b9ce097d3a1ceedd5aa0ba76de0119029a523203d91b9a1b65e6dc8ae84ee579f8b138aafa360473e2a23bdc4810336da5b3504bdf6b10f8c7cf3ae2b4ff9b9a259795bbbf55f22cb30"}], 0x160}, 0x11)
ptrace$setregset(0x4205, r2, 0x6, &(0x7f0000000240)={&(0x7f0000000100)="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", 0xfa})

11:19:41 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x2)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000040)=0x1)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
close(r5)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f630c440000000000000000f76351fd51fd04e93cf9cc7fd91e57b295b6dda2977fa248e6f0373d6e39f76d48892f1e72d4047bad2fdf68d7ccc6340adc06a0c51d666bc2edc95b1f12d2000000100000000000168040fdd5295ab4e52745e2df47baaac67f0248daabc949c710496e4454a979bc47000000000000000081078f6b1884c383b3f2696d97637763130233b9dcbef7262fef08e7e9576f56a225e7189409d776becd66c686b68d78a96259a89d2c6770d5270b23"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r7 = accept4$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r7, r1, 0x400, 0x1000, &(0x7f0000000240)="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", 0x1, 0x92, 0xa0, 0x3, 0x6, 0x2, 0x6, 'syz1\x00'})

11:19:41 executing program 3:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x82200, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x401)

11:19:41 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
write$P9_RGETLOCK(r1, &(0x7f00000001c0)={0x22, 0x37, 0x1, {0x1, 0x7831b02e, 0x6, 0x0, 0x4, '-#^-'}}, 0x22)
r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$instantiate(0xc, r4, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', ',.'}, 0x1a, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0xc, 0x0, r3, r2, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b630000853a8341bac9485116ebff9630ae7bfb654ff5a34af263ae4c326e96f1227257265dc9065dbc38e33480"], 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000000c0)=""/70)
keyctl$clear(0x7, r2)

11:19:41 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, r0)

11:19:41 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a01010000000000000000000000000900020073797a3200000000140011800c0081007061796c6f6164000400028008000840000000000900010073797a31000000000c000a4000000000080004400094001e14001e001000010000000000000000000000000a"], 0x80}}, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:41 executing program 1:
unshare(0x2000800)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000006000000000f7ffff2451d3ef4d6d363401d5018ac82ac12bd70d95b0ba76e1000b000000c292a93371b30bc24f35f7d95f8404933cd0f1cc37704b219a91cdc3d32c8de93134397ceb15856137c36d6d3a1cafbbdd11e29a088221dec5ca054e0e06c58af5e075091acebd0bdbfa1eca0ff44e3a214cd1bc8bb083af7a527a232ab464603a9ab52271f04e41d3dd9f9e0000000000"], 0x0, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00')
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000100))
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '::.\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x5c}}, 0x20004041)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x19c, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a9a0ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11ac70fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78bd5323}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26968648}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x382cad96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d58c58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65777a97}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58edfc8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8e811ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ac05531}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f2529ff}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31211ef6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a2d091c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bdd564}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x185e7867}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5de2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd83f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29de4a7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x628}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x173f7145}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c398e21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x695dbfa6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2db1}]}, {0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x801)
inotify_add_watch(r0, 0x0, 0x200000a1)

11:19:41 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x0, 0x6, 0x4})

[  834.317790][T12180] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  834.356187][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
11:19:41 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:41 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7\xd7\xc5&\xa5\x8f\x9bL\xeb\xbd\xf2\x17\x8f\x15\x9d\xd3\xa2\x05\x88\xfd\xd82\t?\x90\xb5\x85<\x03f\xae\x8eu\xd7Oa\xdf~O\xb5\xd7\xbeOrQ>B\x9c\xad\xe1\xf4\xd8X\xd0\xfb\xb0\xa7\x92y4\xfe\x95\xc74\xf8F\x02\xe4\x1c\xc9\xa5Yb#\x8f\xc9\x88\x02u\x18\x99\xc7o\xd8\xe9\xb9N\xad.qW\xb4\x86\x1a\xa0K\xed[\x0e\xeb\xc1Np\x7f\xcarP\xeb\x1c\xec\xd7n\x95\xc2;F=\xcc\x8f\xe5\xf2\xbbN\xee\xa0\vNi\x84\xafH\x00Y\xb1 \v<\xfczi\'cVq\xbe\xd3\xc8\xe5\x0eV')
accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @rc={0x1f, @any, 0x9}, @hci={0x1f, 0x3}, @can={0x1d, r1}, 0x0, 0x0, 0x0, 0x0, 0x66bd, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff})

11:19:41 executing program 4:
unshare(0x60000000)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
ftruncate(r1, 0x101)

11:19:41 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r5, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r6, 0x0, 0x0)
poll(&(0x7f0000000040)=[{r1}, {r2, 0x4688}, {r1, 0x430}, {r3, 0xc17c}, {r5, 0x143}, {r2, 0x605}, {r6}], 0x7, 0x0)

11:19:41 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
inotify_add_watch(r0, 0x0, 0x200000a1)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x1bc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x18c, 0x2, {{0x7, [0xb, 0x6, 0x6, 0x1, 0x2, 0x3, 0x5, 0x9, 0x2, 0x0, 0xa, 0xb, 0xc, 0x5, 0x5, 0x7], 0x0, [0x5b, 0x9, 0x7, 0x1040, 0x800, 0x8, 0x5, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x7fff, 0x20, 0x7f], [0xe79, 0x2, 0x5ce, 0x8001, 0x0, 0x81, 0x3, 0x3, 0x8, 0x4, 0x9, 0xfff, 0x800, 0x200, 0x85ce, 0xf730]}, [@TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7f}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x9c}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x353b}, {0xc}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x800}, {0xc, 0x3, 0x7ff}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0xffffffff}, {0xc, 0x3, 0xffff}, {0xc, 0x3, 0x2}]}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x7fffffff}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x7ff}, {0xc, 0x4, 0x799}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x10001}]}]}}}]}, 0x1bc}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2={0xfc, 0x2, [], 0x1}, @mcast1, 0x8001, 0x7ff, 0xffc0, 0x500, 0x8, 0x80000000, r3})
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000080)={0x8, {{0xa, 0x4e21, 0xd0a, @private0={0xfc, 0x0, [], 0x1}, 0x29}}}, 0x88)
getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x20)

11:19:41 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x1})
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20d00, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
bind$rose(r3, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)

[  834.739334][T12208] IPVS: ftp: loaded support on port[0] = 21
11:19:42 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
futex(0x0, 0x9, 0x2, &(0x7f0000000380)={0x77359400}, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:42 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x81, [], &(0x7f00000000c0)})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8)
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r5, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r7}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r7, 0x2}, &(0x7f0000000180)=0x8)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f0000000040)={0x8a, 0x3f})
poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x10}, {r0, 0x21}, {r4, 0x6}, {r5, 0x8100}], 0x5, 0x0)

11:19:42 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

11:19:42 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:42 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
close(r0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$qrtr(r2, 0x0, 0x0, 0x0)

11:19:42 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20001, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100))
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
linkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x1400)
creat(&(0x7f0000000280)='./file0\x00', 0x10)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x10800, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x8)
close(r4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000140)={0x5, 0x2f8, &(0x7f0000000000)="e13fffaf11a8db1fdfb01b7fc5eec12c15e7dc7879bb4c9730c449e07930f2a8555ac9648533d4462e1b810cc3d620773a5181d07903e5314c4dd51d55ecd9d7a9032f", &(0x7f0000000080)='4', 0x43, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
write$char_usb(r1, &(0x7f0000000340)="f55bff4b3338d5375bd3292914d0d66a5e8b5fe14d6f3ecdad187e91e1d390b6f0ff35caa952e7799555ddd094eac09757877c6eca35345133a8bc2877b4bd16bdd06c5f93a5606ad5450f0ccc5fd65f2b4a5b72ec13e129cce3fbf1a2344b86ab0d1aca51c51f2a0af558a5c8d1b35af9b6682fa3fe7ba18921d2705a73733fa75f0196760114b2f7623ec841a0cfcf43f57806cb3fb403b2651983043189ac4a0f0ea3e97e3a76ead839bcb91f8f5b529f92cb6c1a168589614e7a24a537376cf4a5790ca74539ae8dd2f6d38c6efb327f17475f57708f0ad8d42edbdbe5ea635ee9e2b9bcbdafe9f10cec945b34eb7701a854a01bd1dd56116ef4d803cae1ba7c4b8c440ca8d9d82cf592eb2495adee353451e44925ae72a71ee63b4d8bda4af0e1817a9a188a9ec93d221160e25b34611a7b1091d0d61a6ec26eb6e45c5f92a3a48dcd0f7356eaa1d82501e9f05a260acee4df27837bc64ffb2cd2b16c83267e64ae731da7242a506475c93a1dd1383c40dd6a7da0f47c9f5a7957bf9e3aee4daa35fc643914fe87b1ea99e7243c0a324f53be4300801df51c9fc342c6dd5e58d9ec210fdc3376a9860f214d29401f90f9dde9e3078e6a1142761efbb8a0106d411941c0c63e90170d896cd73d538963a11160985c9ea769c5657e2c682d2a64d9a386c7bb89b652b66104fb504bae724ddb35a9014215c64f3328949f5f6e31d053447fb819c05e52b6327e117be4605b906e4ce2a143f010dbb4805cb72f376f1e74208c01627695349cc70d8f6123989c5bb847262655507b92e1115a566381f2ca4a110ed4753560938be32653015590370ab55eb71615e3c93047e5b52656021cb45ede4ef0780ffca81bca0e855fb11db2eb553ca9e145485af00dd16e07ea3051f7364a5a70ef641757f5c26abc746b30b66cbdbaaf289f56fde20d7691e3f91fadd6c62d01e9fe9aa2f128bacac5000338a816719b29446cd4d54e395a4aa3090e1283c3b60a48d156b157799ce417bc62505f638867fde016e5b28af91813754a5401e53106064efbab22a36aa5e33acb6eefcfd6bb938da79a5abd1636596f20ec1a4e830852b7f0f1fe01fc3c6e5b05427a0ed8775b6ab67d7089da6838b486902f15e7e468237b8f36467fcf76e5af96da37a5700f82b170ed4a065259196731173241e5d6c7cd895bfeb8210d9b286820426a0e635e6d9da39e8d9a9de0e48e8baca800075ede361be9773a4b4262d1866dd6b35d888265baf007da4c363d891e7acbf3a62bb5256eecea187b012811a40cc926d3c077ea9967f78983de87a00e96dfb1118fb023eddb5b700a7d9a7425c159d39a6a1ec8708c683de2a72762f87be66463613e0c128e17c5c843fd8bb1de3d0ecae60c44ff01af994950d160d8104e214f221c201702deb75b13f568491e85f549cc2b5903fb8f8bb4bf6e411776dff709bccec62a539a001a61fd8afe5cc5a1040b57015e3f1b3efd3599965a8898454e99be40e1119a3b0094522df9f47b6610d051a6f30fea0696316f65e89198aa6c5fcd60e23a263bfc5b5b7cf766666a7a75273bba2c52fca1c6b5e8c672f99c8c75d951feff2ffbe68081277e9b885d8164150d6e8a08ec5ad744c5481ca1737b6a17e488538d6292935c63df6ff55ed5b8850b89f0deb4628d0ffd87da6c5cb1b7e7cbebeef82f93393d3eb72379a8e15975654a43de7825695ce9649ed0567cb6352c4ecf3d86f0cdfc640cdac02fbf546f0f7a19784817bf7947e522cda12622dbcfafbb751acaffbd8f1b8739ed774c042a97a8e5d7d609eabb964b088490ebbd5314cdc08f8fed6885b2b29f2464dd921c00859e3e092873814eb5670d735abcae7afb2433fa5f86f9f9e2f09625647e71cada29adb04be953132bfb81b40b7c734a5db4cd41629f5e35bf4c2c3714fa281df97180ab1c4875cb7b6fb8216a66253db769c057a60830f79eea550743f349dbd96767af6c11b13d6680f081fcf34b54ed5a7ed2096e1efced8db1f52dda052f8ea5e67bf9c574962055cc26a241e10a4112ec508bf52f40f1e8d0ba1e548a697989950f77c7c8eb60248107c090904fc17d29ba873ae2563b522ddeff1bf01c55aa89bd2d571bdfd7cd675a747addfc6431f4493fd11e54ae49a0619e0c7436a744f9f951a0cb25fa394b7d2870f105f219ef54717d107df01fa3eeaeb42ddf7d0ba337b750610099170385a2e9a4aa174a668107b3255f8bc331f37f9fbcb02a946d84ccc05e0947033fb842859673a99284c1a6b333729921444edf657f6fd9e9698cafa3b7d415b655e906db257bb8f98be1a9a746d2911c73c4796bc56558f566f6f03c62b890e338efc583d55a761567fc029a0ba5b9cc90c1d2a3e75b3ef4f1b0416f57af9597f910c28dbd3f55caa142d676bddafc8bcf424ddefc0d5c3eb3b30574bba2398e75469470538999746f15919f466474bda5e61ccdfe1b57aed701ff4d83fff8aecd98f6e3a444a9b83c1d1990368bd536a31fe08003cedb199481583c58f9c10bfb574869f8632ed6d833369057ef9fa31aa5f28eba35e46a3e58b05be2ae4d469b5924da02fd1d03fb70341b5c3bc1c8d658f4b264be235f6126fb4f99472c2cea53cf4e4e7726445e6d415bdbe643347b8cbc6c1c3e5880698eac624a7e7a1db1300c33794d2f697856f534566974391a327b22dbaa1af602b4552af5fb399e8fce8028e6c0898bf0c57ce93645a926089d6d364eaf8324c5b2e556ae36a13b809b3d46ed440f0b355350a0a516fcc1cf0e0beaaab6b0d575be8a4c42384ab5ac39a9721bb3761d955abb356b5a8c8f95b83add4b2df00024db2642ddace4643fa1da6821ec75d680e1701e49708ca9a4fa72fb1233e9903436e38d2757e0a15c4561c18a45e0c7692077887c4ae291c619acd2d371ecc4e650faff7bb71321abdb3583dd7cb20e25c69393b21d017b259b7414f758a7a7c029c84ffb340928224ad2d2aec9ef17a8a1f71aa34891cd8d88604485f5bb1f3db00e0d81d51f8eb2a3fdae710e5848d5db0bbddf3a9d1d0c5fe43a13f658d3a12fa75634ef8078bfbd1c20cdf3f5807809687a8a80bf6b920f6e3dd81055f60fbd85daf37e48e9de4a2204a9f74208e66b6618c84757e5895f01bdb5c72e7998e4f60775bacc52aad5e9306662af3cb61e65d01ed355be7926a56ed773a9dd1386971eeefb3dc57e5a3b0f38c24258fd267631e8967874261244c1c35fe16786c151c7cedf0886ba6787303b68fe8bd20baca06823e2afe3a9235dcfe783947a6f94322bb6d857d85a8a005c6ce65cda78f04163ef75b807c7a8349f352b8a0f24131692aaccce131c7e1958a110e4c5dabafedad06aac4803cbd5a189e2849901dd501464538c25d6f258a8b4cc9452744065fc21793a34a531b8e4567896a18536ee6c2d813976303ae73830fa5444d54b0391f6b857d0b46f80def05256a6735801c2b6acaabf615ebcb4fe55b464511861c037b3c4769bb63f430177ab9692cdb0964264091696937b0ae530a7d08d194d71e9f4e78426f7c4da8158b2f00b495bcc5871e58cfa4e8b2f60ff99a28f70ce6398214663ec9189bfbce6070ae27c246889d2f81063583206d36b16bad762f6ddcaa0d794c55232e7eb3d734a5c57efd8b2d88fe98c1b3f11460418ef36a5ff8db8456d101337d62d4c6d0a3801bacded4854b559e130ca21150bab6c80425d871f5470c98618914c4231441ba868e156bb71c6f1a9c4551b81514ca4108a5a9af6f619a6d2a9c5ca9478b3e44d73bb1d0f42241569280f3497649d5d3419e90b6da9a6d4eb45323fe0d8bb7e0c2446379b1fdba2a2871e4ace08fbf89e8efc4a53843a331fa6e4b2701e9364725f9a36e0c66567734a284d9b494c86a24fadea345f7068fad0a67163b8d2d677e44e3cf162b3a4a146c4b7cf01d0bb5886d3db8cc304f4fb37279c84570f562869634cac82009186f03a8101c4cc7371fa456bc06f5b5812200df9344c04fbb1ded7b1aa1c4bad7ef5b9949727f492af2d76c22d7052b58ffbf3b2ba23179f875494fbca7ec3c84c2270986fa46a31ae33a36466bd7ac79ea3f32a027c926dbd47103c8fa50fd850b753fa4ace0450c848d105396b556f1506943c9e16cbbb3943b510734dcf7330d20532b0f0532bd48fd7ab93c74aecbe9ec844602174c2704bac93d83bbcc353049ed350c49d96380bff17a24767de6d7828a72c53a1fcd5eea2609ddfaa1125784e987e047107a4d85cbbb01afa0a992b2e7ec632ebd2bd90bbda6c6ed5a0a3e208d66cb8fca7227b7544f5493268142225b50a26a844145a488a8837836653b7eb25f139bc616f892a9b0070f89b48c5333cf8ad5b5f41229187d0c985f1eb8d2bf22adb1d9214fe50c1a592a171a442cf3aed491800db0bfacf3412fd4c041a2a54b254c6a60f55b82c1c11e1b059d6e12c7e77af4daed29b2c365fcdde1fd1a9c795183769cfb424dadc673ad42a829e3f37be1960a7b72184dec854e28b5417da40b705026138d06e55e05ee2ab070051a0bb2854e5a27d1fff48212b1d88bfde500b8ef404ced3cbe8490443dbe551e10495df45ff1961bb89683910a3c293a9f979f7b28730899957b7857cbaeb42e31131e8bf7b60f66bfed52f6433a960c5e2648f1feba69c28831343c1e6d522e8ae283608cc69b31063d1ebd5ef326cf3be051e47d310a49c0ec36aa20c376a5c44849d2ec00ac00a6165d86ce57013ce864533fdaeee0dc6e640317fc291ff8eaafcb29476623b4123593642b869fa9f3cbe057086aee687933807f8842bb7afacc1abef1073a264ae1ca267a09457e3f14beb2047f33e5b9b92b7dfff2dcade149a13e848a665cff72814b8cae31735672c50c98e1e794ef5307ee3dd7f07d2fe58568d57f5339bec19a9aa041c9f70f60becd7878806e3dc7a0fc0cf10b2c15ae3794b3b140a6271f72155fa2edf9cb009e5a78ed01e9a26ded84f1737ff32c0c53531f53c40fde7262bb64fbf1ef3d3645cbd4e520c8a3349c1ed02fcedc0e75726ff6b973a756440d697c684a872ad4cbe6e13cc805558caaf584e17da99465f02f4357671427bb8d48f1b5bcfe860b58c42061cc671245b70729713efd9007117f18e6ac97935bce1d562ca686b46a7a3d510eca7308a56c24b64dd1f05c5e40319cbcf396fbe169f5ab07051a8e868231b793a0ea3d5a7b7eb2dd4d04f904daa2d43d97a0e242084a36c2a1ff4ba312c28e698670b619899b9fb9a1d057e7f2c2cd489edae61f37d82fe07d3b927c4ff65e20f2250acceca0280e6481ee8a5589aa922b53c42aa592f9178d848da914d48ff60efe7caabcb4bd8996e175bc96a8d5faf54fd637bc064a32f1140e9c5c79669c5ab96de4508d7bd5011beaefcb8425fcb710cd25575de76c2da3ecc754b2ace3e6322be6983b17c1765ad088c92bd88758709bd91db531be2c1d3123e128924bf0fc8f901358f7b5e3ee11a497407a3fd88c54654c0a41bf8d8d23d8f9103972b934c8c787ec7aa84b217947daf703ec3fd0a01762bb17dd1d1dd0be42bd62a6f6b473228b8ab921acc952d8697e32639457009ad139d5c40a25795c44b591c50a0614f56a046356bb9caf16cc6a38b21da8b6598db5223f63959c384f0b2dbba1080e668ec01aeb5b6807bd2b40fd98574d16d4f366a97d7c93a6ad4c6a08de87e50cefa8a595c5c56ece2ee7a95ef652fe70fde64962ef0ced543ab92f8acd8fe492de15e9de3ab010f", 0x1000)
poll(&(0x7f0000000300)=[{}], 0x1, 0x0)

11:19:43 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x434, 0x3f3, 0x2, 0x70bd28, 0x25dfdbfe, {0x10, 0x2, 0x1c, [0x5, 0xe0, 0x9d, 0xcf, 0x1, 0x47, 0xfffffe00, 0x2, 0x8, 0x0, 0x3f, 0x3, 0x18, 0x3, 0x5, 0x6, 0x3, 0x8, 0x3, 0x9, 0x1f, 0x1, 0x2, 0x7f, 0x4, 0x101, 0x400, 0x9fd, 0x6572, 0x1, 0x4, 0x8001, 0x5, 0x800, 0x6c8, 0x9, 0x401, 0x3, 0x2, 0x4, 0x800, 0x80000000, 0x6, 0x3ddd37a9, 0x5, 0x81, 0x8, 0x7, 0x0, 0xe00, 0x200, 0x623e, 0x80000001, 0x8000, 0x9, 0xe989dc7f, 0x0, 0x1000, 0x1, 0x5, 0x7, 0x9, 0x7, 0x9], [0x8, 0x1000, 0x7fff, 0x3, 0x2, 0x4, 0x80, 0x7ff, 0x0, 0x1, 0x7, 0x6cfe, 0x6, 0x20, 0x401, 0x100, 0xffffff45, 0x1000, 0x7, 0x1, 0x1, 0x8, 0xb5, 0x3, 0x1f, 0xfffff000, 0xc30, 0x2, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x7, 0x79, 0x7, 0x9, 0x3, 0x3, 0x7d, 0x8, 0xfffffff8, 0x6293, 0x5, 0x100, 0x3ff, 0xfff, 0x401, 0x101, 0x6, 0x8001, 0x8001, 0x40, 0x800, 0xff, 0x7, 0x10001, 0xb30, 0x1, 0xd92b, 0x7fff, 0x9, 0x4, 0xfffffffb], [0x9, 0x9, 0x7, 0x4, 0x1ff, 0x7, 0x5, 0x80, 0x1, 0x56c, 0x5, 0x1, 0xa20, 0x100, 0x1, 0x20a, 0x7, 0x2, 0x91, 0x9, 0x3, 0x0, 0x7, 0x3, 0x1ff, 0x101, 0x4d, 0x3, 0x5, 0x0, 0x3, 0x3404, 0x401, 0x7ff, 0x0, 0xde8, 0x0, 0x3ff, 0x7, 0x0, 0x81, 0x3, 0x8, 0x45, 0x5e2, 0x8000, 0x1, 0x6, 0x0, 0x3f, 0x81, 0x10001, 0x7fffffff, 0xad1, 0x8, 0x0, 0x6099, 0x80000001, 0x52ac, 0x1, 0x7, 0x9, 0x401], [0xffffffff, 0xfffffe01, 0x2, 0x1, 0xcc4, 0x323, 0x280, 0x6a, 0x7, 0x5, 0x2, 0x80000000, 0x4000000, 0x1f, 0xfff, 0x2, 0x1, 0x8, 0xffffff42, 0x0, 0xfffffffb, 0x3f, 0x8, 0x40, 0x0, 0x6, 0x7ff, 0x5, 0xef0b, 0x7, 0x7, 0xd45, 0x2, 0x6, 0x9, 0x5, 0x98, 0x1, 0x6, 0x81, 0x4, 0x9, 0xc83, 0x8, 0x7, 0x2, 0x10001, 0x1, 0x0, 0x8, 0x0, 0x5, 0x80, 0x7fff, 0x9, 0x9, 0x1f, 0x2, 0x6, 0x7fff, 0x2, 0x9, 0x8, 0x20], 0x13, ['\xcd!-\x00', '\x00', '+#!\x00', '[\x00', '%//!)\x02\\\x00']}, ["", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x2405c800}, 0x4000880)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:43 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = dup(r0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
close(r7)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000001c0)={<r8=>0x0, 0x100, 0x20, 0x7, 0x4}, &(0x7f0000000280)=0x18)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000002c0)={r8, 0x0, 0x53c, 0x20}, &(0x7f0000000340)=0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r3}], 0x1, 0x0)

11:19:43 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$kcm(r1, &(0x7f0000000940)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x1, 0x1, {0xa, 0x4e24, 0x10000, @private0={0xfc, 0x0, [], 0x1}, 0x32}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="1238ce72fb21bb8a23c8d623cba098ed7d5dbbd80b71d4f9ab52835d0abdf28d45ce8f7936e5cf2a41948de199c75e1b85ecac9d76b48a401dd04c6a2745faa129dc9350cf6a890efc257b099fe54066e3938bdbbc5959d5950bf57139a4b1a2e98d5a44a53260d957232b1552c3fb33409253525eedcbf7a95d02de88b805040d07dd4f73961fae82b6fbbf76565be922aeb80e31dbd35f0cd3e96e39ceebe8e10654d53bb81bc19b5255d22b4c9167e39bc5", 0xb3}, {&(0x7f0000000380)="1bc6cd7dbfe263fe4f45a233486d6d2ac5c9674e2a1a1e9d65e763fa78c748517943dc38e0f408e8f12d7e93acefd410e0c33ee7e95aeab6832108552fc4acba6889d1f7172a570a59b0a2f0478f1264fc614977f7ed3570ad8ce04bf4ba92045beff84a73af64b7d059f1628dcd318d1698ad962e3b35e495e3021cce8b5dbd3c3760cb990a76a14c84f0b429722b9629bc4285e3cff6ed6f3d2876e13c67e82f4b117d5aaceb35", 0xa8}], 0x2, &(0x7f0000000440)=[{0x70, 0x115, 0x12, "22959fe0fe98a5b0d4b69158e376e73db9b5d9600dc061509b76629c636225173c01fe958338eeee572e12c0c1092258b99b2e0c55b370b878619dfaa92dda4b0a07b0876c69c0f90a0ad23731571818ad6d9fa2f6ceee49176e"}, {0x88, 0x109, 0x3ff, "1b3770fb4478f692e828cdb967597d1accdbf3f104822b1b1c0d759d51635ade68417fdbba633ed6fbfde8429be6488fcf4a317358654ca95524ea07f802c96dee60320a5d1f2ed511127976ff70cea181647cfeb1463e2a902f892fc4a5fca9cabc4fec55cddc9f2fbea3cb6e23c525058fae2622"}, {0x108, 0x6, 0x2, "b1192527c9f1dfe7d604df10a08276f7e8dc5e23725213e7a0254c83229e988fc1f43066ba161bd47fd6ed4cb0db6e6f77cf8a7ffff826e5c40fae9cd53ac60daa3716dadc9433e9ce8a6a11dd2ada29d3085978652a383bcba90898207ec197306fca114ef7a9ef1b667ffdadf13ee1b10ef259e361f66346aadb13e0ae32f5482ddc150f182384afb60d6e719d52a10ae9b2571e7dfa73b5093f83b6dc15118c4ba8af52fdd86b9954ebf95d7f57b82f19205c40760cb91102488f502537aca0627865f740d6242f0c53742fa92c4b37da1925fb72ac4949f4af7860d9fae996ead3debfdbea2632327921b6ae5752ec7eda"}, {0xd8, 0x102, 0x4, "d4c3528ad1bff738f81aff539c11ee8ea2de9883c47d22891269d6d50c748d9c81cd6ab17be0ba126b9d869705dd1ddd1400255df38146ff68ad4910b4ba822fb2f73cfbd58cc7b75fc3c0ef3ab1fb20c6efef7fd6cd3f971e1916b8c478d94f05a1bb663bf188c377a892e7b6de28d3f466aa56c33135da9f19751e7588159d8defd78661e3a9eb3b446c4a846491ed41bbf35799c95278ac7c86a9c7f20e6c07218b90f940e069de3f04950ec2dab2c232c98244c40a4d4ca70546e55ef2aae4ebc07828"}, {0xc8, 0x10f, 0x3, "2ef21c069bea7ae62c7a11037a9879e3bff464a1666e4b146974683e3171c268dfb95714b671ddc4e34207054340a71672190836ba2dfdb657776a14b2347228deac1d5322d40232509d44c354778718e6906c4c87e3f68780a8403fe8e885ea8d0d506eec16f7df6b59a9c717c78e0de18210aaf01a426e9ccc454c78cf5886f053781d428a83b3ea9f8809c78318b0e971baa108a5fe96317606f01b98d5195bc5fd8998c45e63dbd65f49b8343900c76c84289f"}, {0x20, 0xff, 0x3b0, "fd67a611e1e3a11220087c"}, {0xc0, 0x10a, 0xfffffbff, "964a1013d8cf394731f494e971a60ba11a0bad9da7e358745a63394c561301f63cc26bc6e20ce4e8c69dcf6b82078d24dbee0ead3d8f6361e8653377ff89fe50fec0ba8707eb8112956f8b18c5699264e71e4770f47844f5cae35f5e2130c2bbada0592e390495cad2374fdb893e2c64307b16fac3c24d1558bdb59a39fa7326c274d0a8ebb6c212dba327a008f2fa2cf189349760e5c487f7e658bff4b7bb5580dcf990e845bb38d4fd29"}, {0x70, 0x1, 0xffffffff, "b4a602ee0281bbab049fdba6d971a653c70a3d6586c787a99b4ddbfc8f26729a292faf04787e71cf785df64e96511714c791e21b21cd2954f93f844d068ef2ece947f83c33d8984265d210432df54100bba2cd3df8ad0ac301c14f"}], 0x4f0}, 0x20004040)
prctl$PR_GET_FP_MODE(0x2e)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000180)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7\xd7\np*>9\xbd\xb2\x18\xdc^\x8ayQ|\\#I\xf7\x1f\x15K\xea\xa5\xc6\xd3\x88p\xb4]\x87\xc4\x90\x83\x06\xb6\xc44\x05\xf6{|xyi\x92e\xbc%\xa9\x91^\xa6Z\xf7\xbb\xa5\x11\xbd\xd9\xec\x9e\xf5\x7f\xd5\xb8\xf8~\x94%\xe3P\xecT\xd5\n^\xbc\xf9\x99\xc4\x93\xe032\xba\xabe\xbf\x00P\xd4W;\x91\t$\x8cV\'\b\xbf\xf7\xb1\xdb\x06\x02\x89T\xe5,\xd0]\xb7\xb6\np\xba\xc3\xdd\x98\xd6\x81\x18Kt\xc5\x148=Gy1W\xe5\xbe\xdf\xa4\x01VA!\xb88$\xb0f=\b\a\xe0\x06U\xc5\x9a\xbc\xe3\xd4U\xfe\xbbO\xc0I\x9a8')

11:19:43 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x7f)
write(r2, 0x0, 0x0)
poll(&(0x7f0000000000)=[{r1}, {r1, 0x3}, {r1, 0x104}, {r2, 0x1080}], 0x4, 0x0)

11:19:43 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x8}, &(0x7f0000000040)=0x8)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x401, @mcast2, 0x8001}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="cd9d23f2839686b3775d31a311dabe42fa5293c0d8b7aa76c257b40de6548de917efe32585f2d54f7db35c42a412f87e1645d9bbcd6dfe09109863e74d450c0ecb4dd27c93f12ff96eeb790ef4a0c564aea6d7340a5a861f4cbdda680f6f2765856635e1219265983909da57cbb6bd", 0x6f}, {&(0x7f00000000c0)="c6ae88b287bf2aad35", 0x9}, {&(0x7f0000000280)="6d9881c5008a72ef76b2a7424bf6f1759552293f8b5aa1e38f55b1e8a779f2d40e4c9e06c847ef9c9b1a036b65e5976d6ab1a93460fb443b1257ded611de9fc6546707075b041503bb81062d67d42d3ad744d7547e283b64bab9bdb4b4b1bd75b4eed0e70127d3b7e787f0334489ea7d0946a925b29daa03d79509a6fd58669d6116af75cd81b094bd6b12a3aa60e3bde238f44cd6d876a26921e950153fb7b53db2c03f89ac15f97868b590405d074eab94c6fb7e9d5fdde87d3ef4855842733c1594a4ec52379f33612328b9565e28d7925179f3eef7c14b551487", 0xdc}], 0x3, 0x0, 0x0, 0x2000000}, 0x881)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:43 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x4, @empty, 0x2}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @local}], 0x6c)

11:19:43 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000480)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x9}, &(0x7f00000000c0)=0x8)
r4 = fcntl$getown(r0, 0x9)
r5 = getpid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r5, 0x80000002, &(0x7f0000000100)={0x39})
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
close(r7)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r8 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r8, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r6, 0x7, r1, &(0x7f0000000000)={r7, r8, 0x88})

11:19:43 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x0, 0x7e, {<r6=>r2}, {r5}, 0x8, 0x100000000})
r7 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r7, 0x0, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r8, 0x0, 0x0)
kcmp(0x0, r6, 0x2, r7, r8)
inotify_add_watch(r0, 0x0, 0x200000a1)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0x81, 0x35})

11:19:44 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
recvfrom$llc(r1, &(0x7f0000000000)=""/52, 0x34, 0x2000, &(0x7f0000000040)={0x1a, 0x104, 0x7b, 0x7f, 0x7, 0x6, @remote}, 0x10)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7)
r3 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r3}], 0x1, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)

11:19:44 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
r3 = socket$l2tp(0x2, 0x2, 0x73)
write$smackfs_ipv6host(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9a)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0xfffffff7}, 0x8)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@free_buffer, @register_looper], 0x0, 0x0, 0x0})
ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f00000001c0))
ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @remote}, {0x306}, 0x46, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth0_macvtap\x00'})
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r5, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000340)=[@request_death={0x400c630f}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x1, 0x40000000000001}, @fda={0x66646185, 0x6, 0x1, 0x10}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:44 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = getpid()
r3 = getpid()
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$KDSETMODE(r4, 0x4b3a, 0x0)
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
sendmsg$netlink(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000280)={0x12bc, 0x18, 0x100, 0x70bd2a, 0x25dfdbff, "", [@nested={0x14, 0x25, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x9a0}, @typed={0x8, 0xb, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0x7b, 0x0, 0x0, @pid=r3}, @nested={0x1004, 0x68, 0x0, 0x1, [@generic="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"]}, @nested={0xc, 0x56, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @u32=0x8}]}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=r6}, @generic="fda5ddaaa6eafdc02a05ecb9053800a0fec216d6e36edfaa88da03b27ff0f219b7e3847a8f3ea7faa931b019092595e9c1e59586a62d20336e93bc30d9aa0e8bcc73b11531ff8ed1e168b9631d7d9828cf721fefea9d961bd968409b78d98566e17da53d363198fe8186613b2b706ead6a72a8190e7689f4e10871e71ab61586325d4b3ee1197fb510858cd6a19badb75eb14d55b377101586663a1f9100df21f4aa589930ce41ea0b228a0b3fa00d74a6d4b56ed736254d34754a516d5f291ca031a1948024bea63f012ab8c4ed4886bcd574b3931c083dcb0e011442a8315fe8ecc09533ab55ace195e58cc39d7059247baf2e02f519", @nested={0x178, 0x46, 0x0, 0x1, [@generic="a78f2b02a306eb0b3d6e164076c41c", @generic="a6f5797c07f9f503485b92401ab17f76727c5cf6c103468fe390", @generic="aa5e141279f9d9032db8c1cd659d10ee4df0dec2be71bd51c251d7a34b1648337bf2a52ac1d1dd08147026dc5b63f23715de9482bf25c077d849377d9f5897789a0b4258bb6f969a2992f3a5195c0e9497d8f24c972da1d5e15afd40fa1bc7f0b908ffb9c461ec81b4d004050b6d74ca88f6e0477d15cec6afeda7f9db76e7a94bf52dcdfcd91a82418e4e8511cbf6c56fb157a5d516535bc76877da14932301e01ba2dbe91aa55060fe560f5daf4b41edda39f768cc8c2b3e62f9318597273a691f06d207b2f848851571877dae4a7c557f2ab8b1", @generic, @generic="5f6245517230e630b65300b468164d5171456bf7140cf17d1793b8d9c8a928459550ef6d65d90b6992a77436ef654c063c915aa9432d10c701f5009fa5c1fc6dfbf0f32c81e0cc5c8ff70a4f90e0d6e9cfa0f1f4f3da66ef6655c6bd970d4c70c7da1e79c81a83bd3e0b9a2973f7c83b503582dc1207"]}, @typed={0x8, 0x86, 0x0, 0x0, @u32=0x6}]}, 0x12bc}], 0x1, 0x0, 0x0, 0x4040880}, 0x10)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
close(r7)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f0000000080)={{0x6, 0x7f}, 'port1\x00', 0x20, 0x11405, 0x95, 0x200005, 0x3, 0x1f, 0x400, 0x0, 0x2, 0x8})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000080000000000000000000b630400"], 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x27000298)

[  837.034319][T20114] net_ratelimit: 5147 callbacks suppressed
[  837.034326][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.056393][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.101194][T12324] binder: 12321:12324 ioctl 80047453 200001c0 returned -22
11:19:44 executing program 0:
unshare(0x20000400)
ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000040)=0x54)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xfffffffffffffffe, 0x8000}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x7)
open_tree(r0, &(0x7f0000000140)='./file0\x00', 0x800)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={<r4=>r3, 0x7}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r4, 0x4)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:44 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000000, 0x80000)
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r6 = dup(0xffffffffffffffff)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r6}], 0x1, 0xfffffffe)

[  837.309765][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.319476][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.329158][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.338606][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.347683][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.360027][T12333] sctp: [Deprecated]: syz-executor.0 (pid 12333) Use of struct sctp_assoc_value in delayed_ack socket option.
[  837.360027][T12333] Use struct sctp_sack_info instead
[  837.380097][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.403865][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.423652][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:44 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x3f, 0xe, 0x4e4a})
inotify_add_watch(r0, 0x0, 0x200000a1)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000100)=""/12)
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x24c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "792edb6ff6f638e646af40493a9e5e4e66b491cc8d"}}, @TIPC_NLA_NODE_ID={0xae, 0x3, "f1ace29af4c4cc442e11f8f6965a7953b9f52e6a4b21c4c3c2260b6416a4dd3fdda70e14c3ffd6e9e991b78a19a3f0b24a938b8827399999641dcd4a5c6951e419a221dd58521ef75946586862f3a6474fa2a9425089062061acaf4c29978961d4eaf2708cc76b5f6b8f375aeb9570b47e42f3ef1dd87ebeb0bc65a081fe8b78e9097418ff84fb2603e5c7ee3785c7d555f274e25fdc986d30cb4574ef80301dbe01e83eddad91710ad5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e77280a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ce}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4d9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010)

11:19:44 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
close(r1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x4880)
close(r0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000})
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:45 executing program 3:
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

[  837.901388][T12336] sctp: [Deprecated]: syz-executor.0 (pid 12336) Use of struct sctp_assoc_value in delayed_ack socket option.
[  837.901388][T12336] Use struct sctp_sack_info instead
11:19:45 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:45 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000))

11:19:45 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
unshare(0x72020000)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000))
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
close(0xffffffffffffffff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa1000809)

[  837.992538][ T9541] tipc: TX() has been purged, node left!
11:19:45 executing program 0:
unshare(0xe010b00)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffe71, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x593a2964eb05888e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x2, 0x18}}, &(0x7f00000000c0)}, 0x40}, @register_looper, @request_death], 0x0, 0x0, 0x0})
recvmsg$qrtr(r1, 0x0, 0x0, 0x40010100)

11:19:45 executing program 4:
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000100)=0x2, 0x4)
unshare(0x10050500)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="1236e2af8256f6b4bde872d3", 0xc, 0x2})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pidfd_getfd(r1, r3, 0x0)

11:19:45 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = getpid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x80000002, &(0x7f0000000100)={0x39})
r3 = syz_open_procfs(r2, &(0x7f0000000900)='net/ip_tables_matches\x00')
setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000940), 0x4)
inotify_add_watch(r0, 0x0, 0x200000a1)

11:19:45 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/217, &(0x7f0000000100)=0xd9)

11:19:45 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8b46}, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x1e77, 0x6, 0x400}, &(0x7f0000000040)=0x10)

11:19:45 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000640)=""/249, &(0x7f0000000180)=0xf9)
syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x3ff, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000080)="2215091c1231f11b89f53d9779deb7d810ad4f9eb4fac2e0578ec92d5c968b1c7dd357e546a3317f3a373e5e2da89a4529c90c4a23af921f980756c23b7b5b3cf3addf64668a10c8a38e0d714c057ec415cf51d34084878f6afdf00f1ec5d2da4845450e7e8d77690b8a2951a11a2286cdbfc6f5371f4a574693c4696ab9319304b748830bb2d5bf569758006239ba7a1998af2bc7b445a7bbc12964ea623c87701b34485a912952c315ca0f686caba4c4c389c674d38ee495422a5c560c19d7b593e051f4a583f6", 0xc8, 0x1f}, {&(0x7f0000000540)="02b18ca7bdfc77bc73f5cd65c0375ddc6ebe337b6e8c722d3aec606655dca0211c1db4e6dcb907c7bc1f6738421a468c920fa5c0a26ea5b111bb84fef4134cdf983a56f6d71de59788a0d8846fd7fd0f67c0d17cc5d7a080f9a83af55c6b7be49cbc2ba2882c66f59598905ff5fbef6ea79e569e2098940a9f6142e33c237116bd152117d6fe7cfa8ab306b3f1fa52c4c9a9748e56fc18f28ab13fc932a680d40baedb47b89e0f15152a3568969c73f62cba09f72d9ad8b592fc10bed13087bf9eb953e29a4db2b58939e98cf3e46dcb262510e6300b6ee18adf6eedaa83879c6756d7e7d0eb5a0c2938834a3b44c1", 0xef, 0x6}, {&(0x7f0000000240)="522c28a7cd48acb2ed8eda65c9ae587b4ed85750aaef5f59d5e417035cc9b7561049d61049a7a7ea9aeddc1d0363d2fef5a4daedb08839d4d60dbb149d5d2b9bf7ef803064b0d72b312cab0a9c03a2e9ffbae1", 0x53, 0x2}, {&(0x7f00000004c0)="94d3addee4ef0854ac9e4882e42e501b852b9aee54af6950729e7af3a91a9247d225884ffdf43ac2187da40a081bcbae509fa566b7a5003d4f1bf376e3f5b8e0b77d02da799d", 0x46}, {&(0x7f00000002c0)="533dc96fdcea05b1fbfda5b56d973c486c292c2ec502dd36508d115d7caf57173d12975d4d", 0x25, 0x1000}], 0x5000, &(0x7f0000000440)='#*&(+*\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000480)=0x20)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pidfd_getfd(r2, r3, 0x0)

11:19:45 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
inotify_add_watch(r1, 0x0, 0x200000a1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000140)=0x4)
quotactl(0x1, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)="fd1dd14fc831e4802d61f2a5248733b9506467dcee895f53b449389c89f2392fcc21829be353109231db965a2d0f4ddc41d1744811b22e438fea8644248b459ab7ba20d854f7ccf54a2c9457bc0a7c931f47f52a1abe86cf075bd8ff6bc15713a747b15b9c")

11:19:45 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200001, 0x0)
write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x6, {0x8}}, 0x18)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
fremovexattr(r4, &(0x7f0000000100)=@random={'osx.', '{@#,!\x00'})
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0)

11:19:45 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f713b08c8f0be835fcfbc641d1835d86934af4f6aafee85b31d2c65c0eba0f630c400000"], 0x0, 0x0, 0x0})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4, @loopback, 0x2}, r3}}, 0x30)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000180)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x2})

11:19:45 executing program 1 (fault-call:2 fault-nth:0):
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:46 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:46 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={<r3=>0x0, 0x5c, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x3, @remote}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}]}, &(0x7f00000002c0)=0x10)
r4 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r4, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={r3, 0x400}, 0x8)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
r5 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x40000)
ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000040))

11:19:46 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x2, &(0x7f0000000080)={r0}, 0x8)

11:19:46 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x50000, 0x0)
r1 = getpid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r1)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r3)
tgkill(r1, r3, 0x41)

11:19:46 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x3, &(0x7f0000000080)={r0}, 0x8)

11:19:46 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x4, &(0x7f0000000080)={r0}, 0x8)

11:19:46 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80000, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
pidfd_getfd(r1, r2, 0x0)

11:19:46 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_vlan\x00', 0x8000})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={<r3=>r2})
getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

11:19:46 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x5, &(0x7f0000000080)={r0}, 0x8)

11:19:47 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x6, &(0x7f0000000080)={r0}, 0x8)

11:19:47 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r1, &(0x7f0000001400)=[{{&(0x7f0000000140)=@xdp={0x2c, 0x1, 0x0, 0x8}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="d4ecfd9ffbe76bdd7ba8bdb664b4ef9082ec41c7a8ee93bc625b505223ff9f15337da60d1b782a4ede8e69400c86a8f3e3b7a8b0f8aba0b805e555c012eaacebb0e4723f913eb3a613e3ae68423982d667ece1801db48c74585838c925c6f97de364464108447062b76c5060c023ffc904b134f40143beb00a93352a201c1fd602104b4be02bf7e867c0659df3dfe662b7ca357916595f56aaf33ba6244b354304ae70ac3c134f1c1ec7e31b4f2ce0fe76e542f40398ffd8c3b9545f2a312e6dcfdd7aefdce635bcde94497dc17a3160d255adc89906a5c492e47a6f3df92f99f16933eecdc61896b4356ec6c558", 0xee}, {&(0x7f0000000380)="4eb3ab0246e9c29848e178afadb6f36f1aa824452037ef7b144d1295a1b30099b03fd62c558d51edc9f679a1c71e12ba9f389514881348da4c572c6e2e4a7302f012dfdae4fcffaedcd80716d87a7293d4cde9a8e9686754051b419f0935dde13502f78a7fed82fd0745f059e6a58dc35a5e6a58090e884da4671b", 0x7b}], 0x2, &(0x7f0000000400)=[{0x48, 0x104, 0x8001, "354d01a31dd9f308a30957d0b11245b6772ee667fe72131a5a1962cd1d2d87b4479840dc55074915de190f50cc3fc0160c14b55a99a6da"}, {0xa8, 0x214, 0x2, "31cac447c645f4319781c91664e8e421d54a30b8fcecadc0bbfb3e2897fb45e2d3d9ab67f568ac203ac4f185208c9d349d9a0d6915572687ac5a2e74756a14d05a2da7ef7015afd3dd7a5a01bdae04699c7a3b96582af1df4c12a81effdd04ce254080207f8676d2d66911f511d855d3d086017195f850213d956b0295fd6e0279acbb5bd97e631b962729f0dfa503586dc7b1ad6f"}, {0x108, 0x117, 0x3, "09c9ded4fddff65c692ababda9a54976277905210759ebc671e49df78a1a094d424df023db212d42c21fb11e43bcf5f586d582a3014ea910d6976706c961dad218e3e552ab99cc09e000dbf0f6811b174442e9ca3392a684a925778a3cd20d323efdec1b7e1fd2d911283a13e8c0158d054666bec58a84f6fec5ccace93384bfe732209511e3f4d41580209932087e5dfdac0853c1c155be5613756a16d055d0a1e30e47497c6473444e8f767da156688bb69c22ab886fed728c31da8532eb1cd4461669187c8ee6cf7496906998303dd623d2081926244a08b650d84fef4072473d0475cf37ae8f0456ab5c315b5b3aea502d57bda2c3"}, {0x88, 0x3a, 0x0, "7215ecf7cda7f56f29ec5c2936505d90b909b401526d484a3321335e70c35c31c6b19b36906c34a0bd3bca66b9657d50335fcffdc01d2df09ff8b9351b3667885aa26b4beab71064dbb2a9a5d297b7b34de5dddd2b864f06e745cc4add26a8db9ea054223da12ed14d8d92f474e2dc7d54be"}], 0x280}}, {{&(0x7f0000000680)=@in={0x2, 0x4e24, @remote}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="030000000000ebff0801000009000000dad09a8331fa4d7baf73b111029d34683173e5d36546c2e66dd11121fe162a827ecb2bee777c59e9a9c1d7215df8762d8d43a1eb9a557ae4e8f07ca185f456523f6d170000000000e0000000000000000520d3ea3f000000b2bf2865de1211b0ce3afd81d34484cca8d6f9dc8c750fe24a6e8a265e353b5e8420d29b6f2b9518f81cc8d251961d77be785c88a2ff35edaeab4521be864182d10a5b063b1e82d03a293487c93f1eb444174437c697c4b37968302ee08d7136293d5f632867f7fceebaa97b2438c317c9e998da1f8fd550116cf47ad93658b83c6c0c50db51ddccafae6e484702caa0819222e2bcd388ef79c0a5ef7293544d21e0c0a8ad0e0312126f4417adfdc2242a6d7899b74cb3c683d40ea32c55dfea09ea9c5058702d31cd704b45a5b5a3b266174df9140000000000b38e74f2fa62f6a76414088b60b53820960b928829b02fe01ab7a67379390151fbacd594d43af53394"], 0x138}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000880)="2be94c8a29154e11f5791355ba4776a166548cfe6aec6497d7087b9be849970b5feea3cfa73200133f6e6ce67b6652a0407cc32dfe3f12b588b35ad940cfc264e4c7a6c3dbbe190390fb52402958fa37bea74ead2e581e2994eaef9aa384cbd402c12803fbe2313aa3a538bfc4234f5143ab48a477464c57c627d3078efad7123ba38b44124254d9545058d2d1", 0x8d}, {&(0x7f0000000940)="940684a90dd4312d975adfbde4e41c935a98ba9e12b72454ab5c6cbc209c3ab7a3872d749201ea3c031d82474df59b0a977f97605a5a8a4723352a1cd3229af4046036ef8514d27bf6381a42a4d04e39aad1127b1257893d755ad479a4657c8d43bf63bd6744ac55e73a0f81910d8019f0183c6d57004bf42a259acb837958abd7080ff565c8b6a333321a42", 0x8c}, {&(0x7f0000000a00)="0995da36697bbeabf9b6490bdfbdd8a9076c4952d6379f8109db5dcaa2efc0e3967b1116465ef88c8d64fc646cdcdd042a9657ad7a2822810071610c743f40827cb689d23d24aab207d256c110f79bfbf8624363149d505c15229321d945b8799891b1c2549696be1cbeca5222a859ad963aa0819d55c2118ed7d6239d569e9e46867192f9b9ef1e9fb8beb815f942693c65f508e6332aaf411c7dae03da975ab3142b2a2daa7faf958124db0888cfc7a6659ebab6e22b95b47baafe693a8767b1383b26cd1c3dddf5ac2518a7b3dbfa8c990ef9", 0xd4}], 0x3}}, {{&(0x7f0000000b40)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}, 0x4}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="222eb1fdad8a44431e471d6b5c5d1646885f5041362d54964decb6939d5b93e93644b103fdd26291e74d33c1283cdf213bd2624c8afc6f600b293b30b4c9ac754585a2e079f67eba6b2f13e3e2d6907733767984b7c7bcb5e1e8d142883c2988428a0f4ef1aa5a8fa65ae605130a479d649c848e7a9d409759ba1454dec194a94b46d019a492f16bbe915ee1635d5c6fc6a28a29164df551d65cedd41ec152d819b38aa7585b99c4176bfd8ef903c8646453e6543d722629e99d5f5cd0a173f7d776bd552c690360e2034af1e2ccf93704e905d47cd05faa14fcb8bde534a14e6a75508ce3fc8cd06e", 0xe9}, {&(0x7f0000000cc0)="ac0c319663f1a153ad9ea97773d2ed539271f47df45419b38065d1cc4a1447f8533d3879314563db1981addf3823a7535be171e9c17f976a84dafda3d0f7bdc90eafb31d26ac9f857da237df1f2a0d977f8f81", 0x53}, {&(0x7f0000000d40)="0c71cd1c0af07afb41789e0bc9f86a70aa3dabfd70d766433822d8479e471a66a994c6", 0x23}], 0x3}}, {{&(0x7f0000000dc0)=@nl=@unspec, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e40)="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", 0xfb}, {&(0x7f0000000f40)="ee8d27a66ba8dfc11b741c7c760960643fec321933fcd2ed90406a51cad4cc75bb6ce59b098c844ca0ca684c69057ff348b200a5d890bd2b043adc25a838cbe2ec04b254e8bcba5d5a0c6f609fcf6efc3bccae8fef3afbf712df9defa37ec36bea34b9c1ff1561a56e1a835ad6cf2de345108478e4aee4a26a40824256fe07", 0x7f}, {&(0x7f0000000fc0)="55ac5005d6766625455add6f8c0c0a773d7378ca8c643ba057610a62433102449b34bed4adc17cb21fa28ae4ceb9f434c71acfcba65ebf6a179bbea195cea96d6eb733806c33a3ff1c12492e4402c2c689c42ffa88ac9f08244c54bcb3c2741721eb03614cbc3d31d2393297db5e7d8f3b27a15bdd8a1ecba69b00d442628e0626308af687d975cf79b2c5d70a77f1d84fa73dd52dbabfbe45143a3f1810185c13dfb8b97974", 0xa6}, {&(0x7f0000001080)="945e61545cf647e308a77b59a0569144648ee2a38bbd401c7050153cba9cdba0205ecb101381331e19fd7d82992debcbe624a87b72f8104fa7630a68aa7a1676af93dc5a0e15b3dcf8bb4f46cc0291485826016b6a9d654634bc1933651360", 0x5f}, {&(0x7f0000001100)="625994a9c8168db0e7a42c05ddf3d1419d80d0770f572a7dc582dd5ad05dd0116c05da8527bf221bc60230ec", 0x2c}, {&(0x7f0000001140)="f1ad9534f126475d5bde447c227061343f8a30cc5db3344a775df240a1a1f0b77f94e6e42683b4acf8379c65ec9515f89781f693f955efa15b53b7d4f2425d5a374918184e22a2b1a19717e7c0b73f574e028378cb5c34d320ec3bdce18b61ea1193f9819641b7be4ceee8656fb7edae1af18298ce12bf217dd64d33d38cb4a4dd4beb67a3c8d08c65ccc858fddd492053b2383080a86638dda8", 0x9a}], 0x6, &(0x7f0000001280)=[{0x70, 0x139, 0x42, "2a2a83a335f8f9ebe56741846051167afa4ee6853f9be7976bdeb15da6f5b31d9e0b1fc57944389fef867f0ff84445985b1dff496b45ff38743e92a1af9abc9c259f466478bc95bcf8bf014fd4d7ef0e3ee9be387d6b714b6f784b691e90da"}, {0xc8, 0x110, 0x40, "3247b41c73b36085504dd45865e6fbce260ca0f05c64f62d77859bd70643f61f5adab3f9d7958aad760914348612e4e73e05030c4c163c717d47f5d651d752fdf8e3d12de63a1468538d1fdedcfe9daa195696bb471f05e7b9d59a876d9303416bceb4f6aff0fec282c9938a65a5c6e73bb8a969f6dfef71e74357e723a4794af49615c736a7d8f02e658253fc76ddc0fcd96b3dd7f0501760ef96fe5c535da281089525187309e33c1caa1d694b7ac6a3d8bc475e5e03"}, {0x48, 0x11, 0x1000, "b2f33a0e5c350134e1134010e44a1f0bc678b7751a7ccc0472ea045b623a1d2292cdebcd0251cd2237ab33a853deaae2eca3"}], 0x180}}], 0x5, 0x4004080)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4}, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0x2f, 0x6, 0x200}, 0x10)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000080), 0x4)

11:19:47 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x7, &(0x7f0000000080)={r0}, 0x8)

11:19:47 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x8, &(0x7f0000000080)={r0}, 0x8)

11:19:47 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:47 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x9, &(0x7f0000000080)={r0}, 0x8)

11:19:47 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4008010)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:47 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0xa, &(0x7f0000000080)={r0}, 0x8)

11:19:48 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0)

11:19:48 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000080)={r0}, 0x8)

11:19:48 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4)

11:19:48 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0xc, &(0x7f0000000080)={r0}, 0x8)

11:19:48 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/6)

[  841.106409][T12483] smc: net device dummy0 applied user defined pnetid SYZ2
[  841.119603][T12489] smc: net device dummy0 erased user defined pnetid SYZ2
[  841.137131][T12489] smc: net device dummy0 applied user defined pnetid SYZ2
[  841.185718][T12483] smc: net device dummy0 erased user defined pnetid SYZ2
11:19:48 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0xd, &(0x7f0000000080)={r0}, 0x8)

11:19:48 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[0x0, 0x0, 0x114, 0x0, 0x7], 0x0, 0x100003fd, 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86 \x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7~S\xc9\xfe%\xfd\xc9\xad\xe3\xa5<Z!\xbd\x88\xc2\x99\xe1\xa3\f\xf3a2\x975\x02d\x8e\xaf*\x80\x80>\x9a\x8d<j{\xe8\xa9\x96')

11:19:48 executing program 0:
unshare(0x200)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x7, 0x2)
write(r1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630b5cba3b116300"], 0x0, 0x0, 0x0})
read$midi(r0, &(0x7f0000000240)=""/236, 0xec)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x8020001)
r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[<r5=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800, r5})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)={r5})
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000000)=""/147)
r6 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x2)
write(r6, 0x0, 0x0)
close(r6)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:48 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0xe, &(0x7f0000000080)={r0}, 0x8)

11:19:48 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xfff, 0x2, 0x4, 0x1000, 0xe68, {}, {0x4, 0x0, 0x3f, 0x3, 0x93, 0x0, "4e7152d6"}, 0x80000000, 0x2, @userptr=0x3, 0x5a, 0x0, <r1=>r0})
r2 = dup(r1)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x100, 0x0)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00')
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x64, 0x66, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0x3, 0x3}, {0x4, 0x10}}, [{0x8, 0xb, 0x7fc00}, {0x8, 0xb, 0x2709}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x690}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x10040010)
r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x2000, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229e77000fbdbdfceda1000352b29e9fe3ae006ebde0a0bb085652d0473d52d7822d619811dff660578e6b2add9de07889fb232d7b3cb39f33bc6137fd3d98964a73f99140fa91dc8f4e33ef5a04f3f375235e57d08be8ceee3daa6583a3db616733d34d667c4b0e9096e4c52b4138bda5b533d5c80a6fa21b556dd432ec9009c8ad17dab085267d57bd2fde5694837d2c52151db2adeea2e7b38f3", @ANYRES32=r7, @ANYBLOB="08000500ac1414aa08000700", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x3)
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delroute={0x1c, 0x19, 0x8, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x80, 0x90, 0xff, 0x4, 0xfd, 0x9, 0x300}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x7b84202c2ce48b18)
unshare(0x20000400)
poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0)

11:19:48 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4901, 0x4c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x3, @empty, 0x48000000}, {0xa, 0x4e23, 0x1, @mcast2, 0x6}, 0x8d2d, [0x64, 0x80000000, 0xa0, 0x80, 0x7fff, 0x8001, 0x8, 0x488f]}, 0x5c)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:48 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0xf, &(0x7f0000000080)={r0}, 0x8)

11:19:48 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0})
epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x10000, &(0x7f0000000080)={[0xffb]}, 0x8)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x105100)

11:19:48 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x10, &(0x7f0000000080)={r0}, 0x8)

11:19:49 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x11, &(0x7f0000000080)={r0}, 0x8)

11:19:49 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x12, &(0x7f0000000080)={r0}, 0x8)

11:19:49 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "2b4faa4cca8a36e041e670eef81a18db9cf2247430c66c0b60b28e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1d35fc1876ee667f4ee367e46b8e3f0774d0e0609f9358ff"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40480c5}, 0x4040811)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r3}], 0x1, 0x0)

[  842.147402][ T2651] net_ratelimit: 6168 callbacks suppressed
[  842.147410][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.161860][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.170333][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:49 executing program 4:
unshare(0x20000400)
clock_nanosleep(0x4, 0x0, &(0x7f0000000000)={0x77359400}, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080020010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x10, 0xb8, {0xb8, 0x24, "a15a815e81e881b93d7bddd57e41ab891ef706d35dc717a46808b608b16576db9dca03527b581c84f25a7cfdf1f806a360928814ef2d99845bef6dafafc78f7a8add4988513cba9102afea8cba111f66b4b87c36ebc7e832fdfd2aab04e286e3df7154a12fabda939ea5b6fe5c620234cab58c95ccce942ec914c53d37b4d4725b7c4ec0ca091a5c6873be9823a132d58468215c5a75ad5104eeb2835e478cebde099a599e1162a2bafa2e74240623c87f6e083e69dd"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:49 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x13, &(0x7f0000000080)={r0}, 0x8)

[  842.235723][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.259943][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.307178][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.327225][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:49 executing program 0:
unshare(0x26030a00)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x1010, 0xffffffffffffffff, 0x8000000)

11:19:49 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x14, &(0x7f0000000080)={r0}, 0x8)

11:19:49 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x6, 0x1}, 0x7fffffff, 0x40, &(0x7f0000001440)="eb2f5b5e61da5620bc8d09c97b52b45db31c1959e0adfbcc15c0daa890740d626d770743123c6efaaf6c0309d6c318b3006aca28172235ef0ea07b31978bf9ba9feef4cac9497f701974a7c6998313de3bdb0f697627a2c2b30fc60818b8bca85d5227e6f7bc77a38857961a60b9232d5f7cfcb5cd233a23edff31ba1eaa9afb63e431cb6950e3086062be7583103faf764f2a718deb10f2397366dd59b33094e079e08f15060b373b921156", 0xfffffffffffffef7, 0x3, 0x1ff, 0x0, 0x0, 0xee75, &(0x7f00000004c0)="fab126b4bf431fcfe0614d8ecca8a930167bc33c0580e32144159839c85eebdecd096c5ac3b8f64366cb19a4ff20d7aacf0165a1170626367328e35b299a7c677d570b09ddbee6113e410258d50b6a07f1ee7cd1470b42884d2a0f523b0f7c1f5a2a0e95da61ca60fbb8988a2502b9b1b7d48cf4f8eeca39c9e9593bbd0015e946ade6c9fde83fee"})
r5 = dup(r0)
unshare(0x20000c00)
poll(&(0x7f0000000300)=[{r5}], 0x1, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r7}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e24, 0x5d2d, @private2, 0x2}}, [0x7, 0x1, 0x7da, 0x1000, 0x18, 0x7cd2, 0x80000000000000, 0xffffffffffffffc1, 0x6, 0x7f0, 0x0, 0x1f, 0x3ff, 0x0, 0x1]}, &(0x7f0000000140)=0x100)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x1)

11:19:49 executing program 0:
unshare(0x26001100)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$KDSETMODE(r3, 0x4b3a, 0x1)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xfffffffffffffd4d)
connect$packet(r1, &(0x7f0000000140)={0x11, 0x1b, r4, 0x1, 0x4, 0x6, @local}, 0x14)

11:19:49 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x15, &(0x7f0000000080)={r0}, 0x8)

[  842.587044][ T2651] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  842.685838][T12586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.718270][T12586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:49 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x16, &(0x7f0000000080)={r0}, 0x8)

[  842.743157][T12586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:49 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000000))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0xfc, 0x4, 0x4, 0x2, 0x1f})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x9, 0x0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffef3, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000080)={0x0, r1})

[  842.846941][ T2651] usb 5-1: Using ep0 maxpacket: 16
11:19:50 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x17, &(0x7f0000000080)={r0}, 0x8)

11:19:50 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1}, 0x5a)
openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ppp\x00', 0x200, 0x0)
sendmsg$can_j1939(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f0000000080)={0x0}}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r4 = syz_usb_connect$uac1(0x3, 0x101, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x1, 0xba, 0x5, 0x58, 0x4}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x6, 0x2}]}, 0x2, [{0xf0, &(0x7f0000000300)=@string={0xf0, 0x3, "4e630a35264eadbe8ff4cc161a7758b522d0615af9231dcd123ed081cfde589aa0aca68d80d07e4dc56a0de3bc105b7eff0ae12fb2e43a1870077f7b5c3e12fb273ed0a85c0c4865d38e4e04e78428bfe26d3d03c558cc093e3bbc8fb3c6ab95274011d4577de813f75ef064ca97bb3fd14223ca292a174703b1aea44cc5cf13027c5904d7e4885a04882807aa04bcabdd27b2bf945593f78e639abe63f1735f5e87d730886826ca134d262ec2bf3171e4fa79b5e642d508a8b104363d1993a942f835b783b4b86650e3c7836a382d201d458e33acb447d03cbf6bdf397baf27f5382712921c307cc5823ade6581"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x447}}]})
syz_usb_ep_read(r4, 0x40, 0xef, &(0x7f0000000480)=""/239)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000680)={0x8, &(0x7f0000000580)="6819c28688248db666a90129f8eebe2be2f17241ea318509604002899d11d842a534c69804d45d4bf0a973dd5eeba1bf88c68226893cfa0798787bfef267eec8b060c657c5340c4bd189baffeebaacf7adee5d55c9c2953ecbb47cfa100b977f2adfdd5d079acb4cd655a16dd3a3b8e86fd9250e4eaa17f18add985ae83e72490839d47b14b83033aeacd51bece3a4ebdedfb611961234b5791b68c89446726fb287fc2a512b70487992b525b69c2818f18d099e86b2461a1036e21591c246ea65e514a4a04faf2d6966f2bfcd1bda042a3dab7706148a054bdd"})
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="4000000063232056db32f016e22e34bebe737e03ad21b358f1b9e14a47d9f06d9c5bf16c6ac4a3006e134dbde131973ec44d339752d0db92380811e910fed8419bec0053e7", @ANYRES16=r6, @ANYBLOB="020005000000fddbdf25020000000800020007000000080007000a01010214000500fe8000000000000000000000000000bb0500010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x28000)

11:19:50 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

[  843.087320][ T2651] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce
[  843.108348][ T2651] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=32
[  843.153284][ T2651] usb 5-1: Manufacturer: syz
[  843.170577][ T2651] usb 5-1: SerialNumber: syz
[  843.197177][ T2651] usb 5-1: config 0 descriptor??
[  843.251986][ T2651] i2c-tiny-usb 5-1:0.0: version 63.ce found at bus 005 address 021
[  843.336858][ T7771] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  843.596801][ T7771] usb 6-1: Using ep0 maxpacket: 16
[  843.676937][ T2651]  (null): failure reading functionality
[  843.797049][ T7771] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping
[  843.816136][ T7771] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  843.836970][ T7771] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  843.856217][ T7771] usb 6-1: config 1 has no interface number 1
[  843.866358][ T7771] usb 6-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  843.896854][ T7771] usb 6-1: config 1 interface 2 has no altsetting 0
[  844.097023][ T7771] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  844.116784][ T7771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.127894][ T7771] usb 6-1: Product: syz
[  844.132083][ T7771] usb 6-1: Manufacturer: ч
[  844.146899][ T7771] usb 6-1: SerialNumber: syz
[  844.167143][T12565] udc-core: couldn't find an available UDC or it's busy
[  844.194968][T12565] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
11:19:51 executing program 4:
unshare(0x4060e00)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x189180, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

11:19:51 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x18, &(0x7f0000000080)={r0}, 0x8)

11:19:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c40000000000000000000005061518d806d"], 0x0, 0x0, 0x0})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x717, 0x6, 0x8, 0x7, 0xf6, 0x2, 0x6}, 0xc)

11:19:51 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff})
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x6, &(0x7f0000000340)=[{&(0x7f0000000080)="d1de6dcb5f482b7653696f08989fb45379eb4c0006e72d69e3e931693c901d3c6a207b886fd5d56c89e829259157828113b4543707a87c546121350d63f2197d6f3c305aad967bca16409f320da1cfdd6e4357ba00bbd6dbef8c7392465c37b493b02a9beb905194", 0x68, 0x2}, {&(0x7f0000000100)="9fc1ab444bb6fe8f9b604e0751e63b4e7eb8e2d36715b94f1f053246fe1e2037f3d6f0c62d4d18f19892c3a9338183c626fdf052dfc80f6fe506d65627fa5ff4", 0x40, 0xc83}, {&(0x7f0000000140)="16", 0x1, 0x6}, {&(0x7f0000000240)="07e12187790d12e8b0773e6a16368d9f5479af20c41dc8ac5cbdb0066f49815d4e033b47542587cd5b0fc1877f2a1dcb68b89fdd045294d97ddcf0c893e302aa8bc518e3bd7d93535ac72f8a4f94cc49a3b788536bf438c25064b48da93d51337236e79f9efd51165a0d6191c3583ecf51c62f867f4a6ce8ef16d3181f35d101cb1cefeb1ed6e4b8fc744a3db44af889c7380bb187dea82921578a05fc00efd44476b28b8ea0fa086d0800c38eb0efa0bc938c36054d265909fd3a0b3e2e333279b3172b6d47317e62dfa649508e3f1491299b90161f1465871073134cd3c50e3a", 0xe1, 0xd934}, {&(0x7f0000000180)="e761fec29576fc7d5ada55948307cef865b76daf378863d58c", 0x19, 0x8}, {&(0x7f00000001c0)="615b59728837f2c52bbcfa9f928d28dc8af5fc61feba3a07e8e2a62f73033310f1584b4e9a1ab5bce890d6cfaba180ab5d07971a85c97a055e5770a54f16", 0x3e, 0x8}], 0x2082005, &(0x7f0000000400)={[{@quota_account='quota=account'}, {@quota='quota'}, {@suiddir='suiddir'}, {@upgrade='upgrade'}, {@hostdata={'hostdata', 0x3d, '+\\(['}}, {@localflocks='localflocks'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@errors_withdraw='errors=withdraw'}, {@hostdata={'hostdata', 0x3d, '$-\\@'}}, {@acl='acl'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]})
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000004c0))
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [], {0xffffffffffffff6b, 0x10}}, 0x7c}}, 0x20000008)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x5, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x84)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$unix(r2, &(0x7f00000029c0)={&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000000740)="e6347cdf12e0f9c1159f1fb3a75fa60c8ee4a0482f97ae6a292601a2ea504f3a2b4c7f96364430bc78435f8b42c807fff041e1c4f292d41f948c47a93ffa41682e79b373daab", 0x46}, {&(0x7f00000007c0)="c553615f", 0x4}, {&(0x7f0000000800)="a85edbc166d0c480c6683661fe82f47b1dadb822fc9bbb63daee17eea08641ccd3cb9bea912a81ce0664bd9428cc6e6237be825bdf4fdbee6ab0563d0f72ec87162d6f01c53f6ec4fe056e755654d0aeb75ffb0bc20de9559c8fd3e3adcc54e6b782fcaab96aab0a4587d13aa6", 0x6d}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="58265baa10b92477a53450c6e19e704a63914d35c173a9a112a555a07580741f735454e7035486d3567c6efad872be36dc24198e78147d9aa2647b01ffb2804e8b852dbf7728c9fd591927399b13faf0765e95e31029e3de0ec59700075d51c5292ab54d9b129fe3be45712eeeea693234341e58d4b95647a1f3928db985fc102f54493a93d7273d830b6f13dc", 0x8d}], 0x6, 0x0, 0x0, 0x8004}, 0x4000845)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x6, @mcast2, 0x10001}], 0x1c)

[  844.276865][ T2651] i2c i2c-0: failure reading functionality
[  844.290189][ T2651] i2c i2c-0: connected i2c-tiny-usb device
[  844.329507][ T2651] usb 5-1: USB disconnect, device number 21
11:19:51 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x19, &(0x7f0000000080)={r0}, 0x8)

11:19:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
getsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x7, 0x3})

11:19:51 executing program 4:
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x80000002, &(0x7f0000000100)={0x3d, 0xb1, 0x5f02})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200100, 0x0)
perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x8, 0x6, 0x1f, 0x5, 0x0, 0x1ff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x62f, 0x92, 0x9a2a, 0x8, 0x1, 0x40003, 0x8}, r1, 0x10, r2, 0x2)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
syz_read_part_table(0xffffffffffffff67, 0x5, &(0x7f0000001480)=[{&(0x7f0000000240)="a046e7d79ae0455c04b17e978916d852e4ac2bd290522de387ad86bd5e290340d5d95e4693a24fcb3791a4ba1722de11b2227087d9453b7eae60c40473452888d4769be9b712f80097bf957f5eecc29409d00081abe8e47129d7161dc819c121b10dd5e6a73d08aa8dc31ae3998c84af6bfa04e671f19e3cac715551f32b9872423a619efef8fe4f1a621ef91d006e430198cf0d7d365ac84311b32e1004feb7ef18443565b7424dffffb1309cb653ee09ade7001bb676", 0xb7, 0x4}, {&(0x7f0000000180)="41f3caa7fdfba24c8b4cfc658c92bca8de8d39c76d7da300d6cef69741b2c5d036edf0bab68176c2a5e1187d27982dbaa854c09c891ce42c34f76c6828996d987c32d751621c4484", 0x48, 0x1}, {&(0x7f0000000300)="2aba0a4226885866f03c7998d7bab0d8c5906d9e03b10ee27ec6e4e0fd11bf39d6d35ae9d3ab9224ad3f66c459f5c2a213bee101b1eb33f8ef071f568cce693d563a6d1bdb0f8563d748ca341d15e645ecebaa0c6fe3", 0x56, 0x9}, {&(0x7f0000000400)="5ea14e605fa9ec77a7afbd3a407740a94f3e88fa0052ab93262b1c6023cac45f1452456f1eb117b73356ab58446f37e81a44480cf898d63a3f6db90637dc1b02c53b84d1bd8d016724d784bf18804166de7be6009e406e312aa0b9a5372728ff1eb4d9584406", 0x66, 0x4}, {&(0x7f0000000480)="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", 0x1000}])
write(r4, 0x0, 0x0)
pidfd_getfd(r3, r3, 0x0)

11:19:51 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x1000, 0x4, 0x0, "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"})
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:51 executing program 3:
socket$kcm(0x29, 0x2, 0x0)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, r0)
pkey_free(r0)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9+\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x401, 0x1, 0x1, "cf3eae321f1ef34f3f9564bf0a924c5f8fe415b5617f6c145c3da92c6aa5d9ee", 0x41415270})
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

[  844.569343][ T7771] usb 6-1: USB disconnect, device number 12
[  845.186750][ T2651] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  845.434764][ T2651] usb 6-1: Using ep0 maxpacket: 16
[  845.636949][ T2651] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping
[  845.646154][ T2651] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  845.656773][ T2651] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  845.665766][ T2651] usb 6-1: config 1 has no interface number 1
[  845.672321][ T2651] usb 6-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  845.685445][ T2651] usb 6-1: config 1 interface 2 has no altsetting 0
[  845.847070][ T2651] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  845.856122][ T2651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.864350][ T2651] usb 6-1: Product: syz
[  845.868722][ T2651] usb 6-1: Manufacturer: ч
[  845.873220][ T2651] usb 6-1: SerialNumber: syz
11:19:53 executing program 0:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80600801}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x12ac, 0x12, 0x10, 0x70bd28, 0x25dfdbff, {0x2c, 0x3, 0x5, 0x2, {0x4e23, 0x4e23, [0x9, 0x3, 0x8, 0xed5e], [0x0, 0x0, 0x200, 0x5d38], 0x0, [0x40, 0x400]}, 0x800, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "b84cc23e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "a1deb90dc3242a95e67562d81b1487085f88f149c8b54777b816cec3b7c004550cfc3729d75ae1483edeb3960cde951d43b21c762cb83c5b7807f286887036c3e4dcfe6767bb7ed3698df31365df1e41c535f36296ee0b7732abab78e3014c4994bdc65622ed0a9d8da6f7854a1f43b74aac6607379045437cf5afacea8405db0968c6b4cb4b28365537d49021e304a902004fc0495081e22bd398b4eaef9863e428d5a559f61114649a50fe11a5b9ce69f3d2d0ae73ec0dacaad09f9223635a31a825c08f5693"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "d33386885dedef57c5509a06531b99aed7d63389d7319cd4adf8554f6d861b8006fd73afb3c21b61f3b64a2456d62f210dd1a30c3a5a366064daa500b99f04e6f9a9f84534324b712145f92a3a750e2f7fc85e6a5cc982821642988737416fa727fbdc6a3c926ba5dcceea8470e303f8a01732ce51b9c42d6fda3f59570e36809b1d263f0c343a59a2fd1373054a5411e4ed277d6cc86035ad8ef94f6cf4f065f9bfe9b3"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "41a1c13a2098353597e693f4854f0473e5a9581ab3baddc2fdac3ec8a895d7bec33af5b065583040a85a6f928e2206370920c8127a78d8226f0cc78c675c0711bd328e695fd9544aa081c20571ff0a1ae32714c22b98aa6879dcdaf603c8ba966fa58d0205ff8ebc740749b78f5129d9dab241293637aeed089c4009d6b24afac549639a9fff894680db04d42ea943ac2f113df1d3b2072560a30b531d768d038a861c89a2826d1c202fde7a3e90ad309938eae02e74a03c7e75056b7db2e34fa2917fd53add69c9fc6264e3985c83a49630bb54dde1173d"}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x81}, 0x4004080)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
splice(r2, &(0x7f0000000080)=0x101, r3, &(0x7f00000000c0)=0x6dabaaba, 0x7f, 0xc)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c4000000000e9000000000000000b630000"], 0x0, 0x0, 0x0})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r7, r7, 0x0)
fchownat(r0, &(0x7f0000000100)='./file0\x00', r5, r7, 0x1000)
io_uring_enter(r1, 0x7, 0x9493, 0x1, &(0x7f0000000000)={[0xe00]}, 0x8)
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x1a, &(0x7f0000000080)={r0}, 0x8)

11:19:53 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000000)={0xfffffff9, 0x2000000, "0abb89ad022ac2c76c7155da6830e649c00d9725c98c7bb7", {0x2, 0xab}})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x2009008a)
r2 = dup(r0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630cd47ca37cc67b0513000000fb17d650f552"], 0x0, 0x0, 0x0})
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000140)={0x2, 0x5})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000180)=0x88, &(0x7f00000001c0)=0x4)
unshare(0x20000400)
recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @private}}}, &(0x7f0000000900)=0xe8)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, {0x3f, 0x1, 0x0, 0x9f9}})

11:19:53 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000300)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x10}}, 0x14}, 0x1, 0xa00000000000000}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000)

11:19:53 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
socketpair(0x8, 0x2, 0x401, &(0x7f0000000300))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000380)=@add_del={0x2, &(0x7f00000000c0)='veth1_to_bridge\x00'})
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000340)=0x4, 0x4)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f630c400000000000000000006ce1397844ba40d4e956acb52a2fad64b7e715439e8f69cdb8afeee7be96c5a64f199dfd000000000000000000000000000000000000000000000000000092d685fdd774d0b661f04c047aba8dcb6cc39478718e06555697eebed2529b325d8627a2d50079f01e8e0b29d960b5b450468b6571e2712f9bfef38ff3bb114a"], 0x0, 0x0, 0x0})
write$P9_RMKNOD(r3, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x20, 0x2, 0x2}}, 0x14)

11:19:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x1b, &(0x7f0000000080)={r0}, 0x8)

[  846.109520][ T2651] usb 6-1: USB disconnect, device number 13
11:19:53 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x1}]}}})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000000))

11:19:53 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
r4 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil)
shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
recvmsg$qrtr(r5, 0x0, 0x0, 0x0)

11:19:53 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x8e0, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x4e24, @remote}})

11:19:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x9, 0x3)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x5940, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r2)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000002380)={{0x9, 0x3, 0x8, 0x6aac, 'syz0\x00', 0x4702}, 0x2, 0x400, 0x0, r2, 0x1, 0x3, 'syz0\x00', &(0x7f0000000280)=['\x00'], 0x1, [], [0x6, 0x7, 0x20, 0x1000]})
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0xd65d, 0x4)
r4 = dup(r0)
unshare(0x20000400)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000180)={0x1e15c4ba160211ed, 'veth0_macvtap\x00'}, 0x18)
poll(&(0x7f0000000300)=[{r4}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$nfc_llcp(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0x5, "d4d394341346bdfdf55c76be527c90d53fd6bfc779eb9f254f62029c3602aff62834a8e135c90a65ba8d83cd19a04748f2e58297bd3c02f03d05d3fadfd957", 0x1c}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000080)="51ebcba0a107813d1675efa5dfb74134a6b4fd5ef3c627e204c5f4c0f32f84cdf9a81ec000652517601ccca56a403301066dee8da5db5a358c1a284a689d8cffcfa7", 0x42}], 0x2, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1010}, 0x20000800)

11:19:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x1c, &(0x7f0000000080)={r0}, 0x8)

11:19:53 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

11:19:53 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x400008)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:53 executing program 3:
r0 = socket$kcm(0x29, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x1d, &(0x7f0000000080)={r0}, 0x8)

11:19:53 executing program 4:
unshare(0x20000400)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

11:19:53 executing program 3:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400)='mptcp_pm\x00')
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cachefiles\x00', 0x10801, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0, 0x0})
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x3ff)
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000600)={0x4})
r3 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x10010, r3, 0x2833e000)
r4 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r4, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockname$tipc(0xffffffffffffffff, &(0x7f0000000480)=@name, &(0x7f00000004c0)=0x10)
recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000440)={0x84}, 0x8)
ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000180)={0x28d, &(0x7f0000000300)="76297d4d2706a66066b2b7f5f0bd6170b36f41dc7b08819ce69d39b3ff72b0efd75a4eb8c0f45dc588b85ac0fe8221a7d76724925099345938ccb94779fdf226c962fe42e46d46e4008785aadf49eba120d45688ac09a8368e558864141e8731bf31220b1c8dca2312bda5a1a594725efea97546bd13d82865785d6c9f0d067661f414ce453ee467c65efb2b383634d083fb78fd93269e14aa907486c703f21a1ea58f7efcaa73a451b9be727bb5f1c1f997781c38f8ca5e3905720cc1ece5c503da8907416889eaf612f9528c2e62ddb238f539b23c7982de26eb45f7d2"})
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000020000000000000000000000000c9cba5687a450b00ffff0000ecd2d9f1397618bc9f504abc58f2ce2977c26cbb738faca8d880aaafac3fa324eaafea366e3b64906920203d38823a79188789cee902def3eb3a3b14b7a3113793e3d8a944108a05bc30d8dfe39ac281d01580cffdf9364f009ef514533a5470de2fd3099d0e5d255f6699cb6e0b71c23988fbd15a5fc49d88a13c57d69da50d6e87d9fbc1a8878bd04736fbd9e0a93dc9976862370929d57a66fc8bc8667e905180ee92230c13602632c6d78aa65ad7783c1c121fc9482a68fef68b5e51412961f8117d946dca6a4663b15eea005b56e33bd933344aeb4c4f6fabb08369924e6010b0bc3ee48adfe3e244755fad57794fe5a9171841eb6f9815700c6ee2701c96cb3d4968292e51628cd3f127d8a08ef3346b6bbb0624f25b57779d71a5e535ac810a780aa5d9078a2a15937af8c891c652c1666237865f8e11e64c233538524edd03c7c6f15be8c88ee083f71eca9630278603000000d819a4e83cd3ac387a3d018a4a148fee45b40d8b0c13d6bfcc0e088d4a2ae92c55261a7cddae45984123c3dd8bb6c7843444e2080c990f45c43635e70a5cd7b8fc6867d9278f34563d4067b1093cd4036b9c7570962256a62927a1"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:53 executing program 5:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x1e, &(0x7f0000000080)={r0}, 0x8)

11:19:53 executing program 5:
r0 = socket$kcm(0x29, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f6306400000000000000000000000000b6300001c36e4a2369df041504c439a0c25d4fb508f7c2b29091c368f227f075a8c97cb17dcc0"], 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@local})

11:19:53 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
lseek(r1, 0x20, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0xf1a}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000240)={0x0, <r3=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r3}, 0xc)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0)
ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000100)=0x37)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xffffffff, r3}, 0x8)

11:19:54 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
pread64(r1, &(0x7f0000000400)=""/216, 0xcb, 0x80)
dup(r0)
r2 = dup(r0)
unshare(0x20000400)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r4, &(0x7f00000004c0), 0x2bd, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @private1}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
mount$9p_xen(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8800, &(0x7f0000000200)={'trans=xen,', {[{@debug={'debug'}}], [{@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r6}}, {@measure='measure'}, {@fsname={'fsname'}}, {@obj_type={'obj_type', 0x3d, '^'}}]}})

11:19:54 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}], 0x60)
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:54 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:54 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:54 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000080)=[@acquire_done, @register_looper], 0x0, 0x0, 0x0})
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)

11:19:54 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x78)

11:19:54 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
shmget(0x1, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

[  847.186944][ T3835] net_ratelimit: 3095 callbacks suppressed
[  847.186951][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.346958][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.355229][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.363617][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.426891][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.435371][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4)

11:19:54 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x2)

11:19:54 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x20000088)

11:19:54 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x20100, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380))
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x125d, &(0x7f00000003c0))
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000080))
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x14200, 0x0)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000140))
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000340), 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201)
connect$nfc_raw(r3, &(0x7f0000000040)={0x27, 0x0, 0xfffffffc, 0x3}, 0x10)
openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/ptrace\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

11:19:54 executing program 4:
unshare(0x4c060480)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
r1 = accept(r0, &(0x7f00000004c0)=@can, &(0x7f0000000540)=0x80)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000580))
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

[  847.522360][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.545325][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.674347][T12847] IPVS: ftp: loaded support on port[0] = 21
[  847.752625][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:55 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400, 0x0)

11:19:55 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'virt_wifi0\x00', 0x8000})
unshare(0x20000400)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0xc00)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000140)={0x0, 0xa7e0, 0xfff, &(0x7f0000000100)=0x3ff})

11:19:55 executing program 0:
unshare(0x4000d00)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4)

11:19:55 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
accept4(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80, 0x80800)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x5, 0x41414270, 0x2, @discrete={0x6, 0x4}})
r2 = socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

[  847.808192][T12847] IPVS: ftp: loaded support on port[0] = 21
11:19:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4)

11:19:55 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:55 executing program 5:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200002, 0x0)
getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000040)=""/188, &(0x7f0000000100)=0xbc)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')

11:19:55 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000))
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
recvmsg$qrtr(r2, 0x0, 0xffffffffffffff1e, 0x2100)

11:19:55 executing program 4:
r0 = syz_usb_connect$uac1(0x1, 0xd1, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x4, 0x40, 0xa0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x1}, @as_header={0x7, 0x24, 0x1, 0xfb, 0x4d, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7afc, 0x9, 0x7, "1c732e61c765"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x3, 0x60, 0x80, "2e7a801e3fff81285d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x3f, {0x7, 0x25, 0x1, 0x41, 0x81, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9ba, 0x3, 0x20, "e433520d2ff35a2ae9"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x1, "0b181f", "7975c2"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0xec, 0x1, "008dad"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x2, 0x0, {0x7, 0x25, 0x1, 0x2, 0x81, 0x354f}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x0, 0x7, 0xff, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0xe9, &(0x7f0000000240)=@string={0xe9, 0x3, "82cb1e5a21a6bdcd6322615551201419cde67bc1c825324795fc6e23a437658c8fe56c79113171459528a5b4aaae0c6b00c0ced4ca4da3d6559a9ccda49f92d75e51ba2afb12c92936151a855dac915176fa73d34920da07120eeb45fb6e96daf80ed55ac7e948b4206f6404afa6eb7b0facb24ff4926d72b23010239f7e5b274a0dc652908cac177cf7f9cef755eeee70fc80c1676ce0ed65d937678c14654f4ce368d0a67b685483f784a50e42e082504be357b293fc9a84ec6e6754f7817bd7d83fa9108ab9f623fcdfd5d4f726f594256afbbfde5f1db271a1e8628e974873baf2d7b50669"}}, {0xbd, &(0x7f0000000340)=@string={0xbd, 0x3, "d925fe917cf197515870938007141457e21ef019f67143cf3e7bf412479e20d263e03c6e4fd24052296b23d215adb2efdb3011300e1e05b4aadd3674e4c238d4cdde88806fa3790b98b125a58b2b2573b83e947a8f40767efde6c1d1381dffc31308d5d30349b6c6662a33cdfdf5377327596416fc3741602e789b5a25520d6d6e59f782123d71425ccdbed6717b9b5999c2810bb4fbc86d06e25a8f48c9f00944b594e6bb0e3f725b15d26ffa91d421d0eb0b576e39453f2c37ac"}}]})
syz_usb_control_io$uac1(r0, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0xe, 0xed, {0xed, 0x21, "b2ebdfcff8bcc11467d5aa2b869c21edb23aa695cfe9931557272ffa5c96d2165234cb4f49bad0eba08df904dce82c37432148fba9639c90fd625cd1fa2d08f1b6afa890204aaf110dcf69cde1be08165abd864fc37eeda25d1e69730a7274c00d3512b24984712ce4ffb448b4005f693ea82168d17fe6862d7e123baf9189f957e422a0450c5f305681da6e91da160b1b2792c6726fcd57ba35951b19d6ee103fd3f48abbb9579f22a4d76d24f897f05f4a89933b7231fc77f8098560c030579475b2a4d4e587687eb78374cd1254fe172f4607a52d82cc82cf92bba9b9af29e59794a8d78df23775393b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0x8, 0x3d, "bf68ac2af8edd7e147aa64dea7da1940cf29c6b69a85ba73cb6dc7b7ca3c98f84f51fed5d925f1f734a0dca9b8bca77312c90f202b213d372bcd6b61f4"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000640)={0x20, 0x81, 0x2, "4fb0"}, &(0x7f0000000680)={0x20, 0x82, 0x1, "ea"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "f564"}, &(0x7f0000000700)={0x20, 0x84, 0x1, 'B'}, &(0x7f0000000740)={0x20, 0x85, 0x3, "7dd03f"}})
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

11:19:55 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000400)={0x2, [[0xfffb, 0x9, 0x9, 0x5, 0x2, 0x90e7, 0xd27, 0x23a5], [0x7, 0x0, 0x7, 0x6f41, 0xf, 0x1f, 0x401, 0x5], [0x4, 0xffff, 0x3, 0x0, 0x1de, 0x0, 0x4, 0x3]], [], [{0xa1c4, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x24, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x61e, 0x9, 0x0, 0x1}, {0x5, 0x7ff, 0x1}, {0x1fe00, 0x3d, 0x1}, {0x401, 0x7f, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1000, 0x1, 0x1}, {0x3, 0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x1}, {0x9e, 0x0, 0x1}], [], 0xfff})

[  848.068823][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})

11:19:55 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
socket$kcm(0x29, 0x7, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000080)="7177eade593b813a5953cbacf8f21c4adb962e2fe83c5a8ab9ff756d928f30185094e9f720cd3a598b7e9fa5a70cb83803eb25c8c470cef28c1df05c24c6d9f6e7cb12bb0b452d9b3d06217c52ab31a478b25d2221abf3e6ec49748762a583fcef9921e8221d53b26b329e47b8f65f78785173702b5d0a12e153512e80b708bc3fc2293cd21942f6feddd771ffab9e09a836d12069444cae90fae849ee7aeef19b2a2c9800")
bind(r0, &(0x7f0000000000)=@can, 0x80)

11:19:55 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x6f, 0x28, 0x80, 0xf09b}, {0x1, 0x2, 0x2, 0x7}, {0x401, 0x7, 0x3f}, {0x0, 0x1, 0x3, 0x3f}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:55 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b63bc0003d8c7fb63d94848367acbd85094f5b3e83d5c99ee0ca9"], 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e22, 0xebc, @local, 0x80000000}}}, 0x90)
r4 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r4, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
readahead(r1, 0x5, 0x4)

11:19:55 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0xc8e2, 0xd, [{0x9}, {0xc}, {0xf}, {0x1, 0x1}, {}, {0x0, 0x1}, {0xe}, {0x2, 0x1}, {}, {0x2}, {0xd}, {0x2, 0x1}, {0x3}]})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x1ff, 0x7f, "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", 0x2, 0xff, 0x1, 0x0, 0x9, 0x4, 0x4}, r3}}, 0x120)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

[  848.266606][ T9541] tipc: TX() has been purged, node left!
11:19:55 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/213)

11:19:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)

11:19:55 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x4, 0xb, 0x26, 0x40, 0x0, 0xff})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

[  848.436529][ T2651] usb 5-1: new low-speed USB device number 22 using dummy_hcd
11:19:55 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0xb7, 0x6, 0x4})

11:19:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
pipe(&(0x7f0000000200))

[  848.696534][ T2651] usb 5-1: Invalid ep0 maxpacket: 32
[  848.856490][ T2651] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  849.106493][ T2651] usb 5-1: Invalid ep0 maxpacket: 32
[  849.112196][ T2651] usb usb5-port1: attempt power cycle
[  849.826413][ T2651] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  849.916500][ T2651] usb 5-1: Invalid ep0 maxpacket: 32
[  850.066391][ T2651] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  850.156471][ T2651] usb 5-1: Invalid ep0 maxpacket: 32
[  850.162125][ T2651] usb usb5-port1: unable to enumerate USB device
[  850.586400][ T9541] tipc: TX() has been purged, node left!
11:19:58 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44008}, 0x280040c0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x218, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x3ed}}}, {{@arp={@remote, @rand_addr=0x64010102, 0x0, 0xff000000, 0x8, 0x3, {@mac=@broadcast, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1ff, 0x6, 0x5aef, 0xfc00, 0xfffe, 0x40, 'macvtap0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x208}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x610, 0x1f, 0x1, 0x0, "73e82da89f2507af74d96f975a2bb6f5dc1a6f341343189ae575a2a24a07befdc85fb67d5565eab2199d8050097ecb90c103a9f3e1db82b8c7d2dba7313b7d22"}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0xff000000, 0x0, 0x3, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1ff, 0x400, 0x7ff, 0x0, 0x7, 0x5a, 'batadv0\x00', 'xfrm0\x00', {0xff}, {}, 0x0, 0x608}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x438)
set_robust_list(&(0x7f0000000100)={&(0x7f0000000080), 0x0, &(0x7f00000000c0)}, 0x18)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:58 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000600)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:58 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={r3, 0x5}, 0x8)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x7, 0xfffa, 0x94, 0x3, 0x9, 0x20, 0x0, "c8e4aad5d821377dd468b526a632d2d23fb9180c", "ce601bad0df09246e34d2b18e90dca0ad46b4758"})

11:19:58 executing program 1:
unshare(0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:58 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:58 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
accept$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@null, @remote, @rose, @netrom, @bcast, @bcast, @rose, @null]}, &(0x7f0000000000)=0x48)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:58 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
sendfile(r1, r1, 0x0, 0x900000000000000)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:58 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x220402, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xc)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:19:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:58 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000400)={0x2, [[0xfffb, 0x9, 0x9, 0x5, 0x2, 0x90e7, 0xd27, 0x23a5], [0x7, 0x0, 0x7, 0x6f41, 0xf, 0x1f, 0x401, 0x5], [0x4, 0xffff, 0x3, 0x0, 0x1de, 0x0, 0x4, 0x3]], [], [{0xa1c4, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x24, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x61e, 0x9, 0x0, 0x1}, {0x5, 0x7ff, 0x1}, {0x1fe00, 0x3d, 0x1}, {0x401, 0x7f, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1000, 0x1, 0x1}, {0x3, 0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x1}, {0x9e, 0x0, 0x1}], [], 0xfff})

11:19:58 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = dup2(r1, r0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0)

11:19:58 executing program 4:
syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="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", 0xff, 0x4}, {&(0x7f0000000240)="50379120f6af236ba58a7d02ac054c325318f68530e77685b719de92a4fabca344570b030a77bfa48c2c9e6d1ec0f42edce99323cda2a7bf7ad368b243194557f4ec989eeaf5c60b8c2b9e46857d5aa719f4628acd506b4c0c4428d69eb9b1ee511006f07b9c3ddbd7d1b74aec6e47adbbaa4263480bfb78a638eefb428afff585ba1ebefd094bbcbabb731e82c88926dafc405b9ccb3065eae73bed150dab99b1ee1bd7c7d02caf8c5bcddfc1118fc2969340d09de101486b2c48765ede5b94de", 0xc1, 0x7e25}], 0x40000, &(0x7f00000001c0)='#/-\x00')
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:58 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x10}}, 0x14}, 0x1, 0xa00000000000000}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xc0, r4, 0x100, 0x70bd25, 0x5, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xad}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4044805}, 0x8000)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:58 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000400)={0x2, [[0xfffb, 0x9, 0x9, 0x5, 0x2, 0x90e7, 0xd27, 0x23a5], [0x7, 0x0, 0x7, 0x6f41, 0xf, 0x1f, 0x401, 0x5], [0x4, 0xffff, 0x3, 0x0, 0x1de, 0x0, 0x4, 0x3]], [], [{0xa1c4, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x24, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x61e, 0x9, 0x0, 0x1}, {0x5, 0x7ff, 0x1}, {0x1fe00, 0x3d, 0x1}, {0x401, 0x7f, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1000, 0x1, 0x1}, {0x3, 0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x1}, {0x9e, 0x0, 0x1}], [], 0xfff})

11:19:58 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000400))
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes128})

11:19:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:58 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x2, 0xb0, &(0x7f0000000000)="cc4e0ae7e9f9160c964485f57d28acf2a4e83e607371275eed9f1e16ee6d56df3374c6a3a502903101f2c3b14cb7353444b0311bd7dbf1ebfa6f10976110ef3a769b2a8486cbb1a1a114699759688fd96cd5b272cb7318c376adb686b4f4f24d3a377ba08be115c43866af2ba999eed7764e3b4b52067286517676faee6be668eb1e26ee7e737ddc4159b505430352d8f03cf03cd3a482dceda19096fb668ed0abb786cf61db6c0f3f36a299d428cb10"})

11:19:58 executing program 1:
r0 = getpid()
r1 = getpid()
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000000000000000010000000b230000"], 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000180)={0x2759, [[0x6, 0x3, 0x2, 0x5, 0x80000001, 0x3, 0x80000005, 0x80000000], [0x10000, 0x9, 0x64c, 0x57b, 0x2, 0xfff, 0x4, 0xfffffff9], [0x30, 0x7ff, 0xdf8, 0x81, 0x3f, 0xffffffff, 0x3]], [], [{0x400, 0xfffffffe, 0x1, 0x0, 0x0, 0x1}, {0x1f, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xfcc, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x5f2f, 0x7b1, 0x0, 0x0, 0x1}, {0x849, 0x3, 0x1, 0x1, 0x1}, {0x7fffffff, 0x0, 0x1, 0x1}, {0x5, 0x0, 0x1, 0x1}, {0x317c, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x10001, 0x9, 0x1, 0x0, 0x1}, {0x101, 0x40, 0x0, 0x0, 0x1, 0x1}, {0xa1e3, 0x8, 0x1, 0x0, 0x1}], [], 0x8})
rt_tgsigqueueinfo(r1, r0, 0x80000002, &(0x7f0000000100)={0x39})
getpgid(r1)
unshare(0x20000400)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)

11:19:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:59 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
pidfd_getfd(r1, r2, 0x0)

11:19:59 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000400)={0x2, [[0xfffb, 0x9, 0x9, 0x5, 0x2, 0x90e7, 0xd27, 0x23a5], [0x7, 0x0, 0x7, 0x6f41, 0xf, 0x1f, 0x401, 0x5], [0x4, 0xffff, 0x3, 0x0, 0x1de, 0x0, 0x4, 0x3]], [], [{0xa1c4, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x24, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x61e, 0x9, 0x0, 0x1}, {0x5, 0x7ff, 0x1}, {0x1fe00, 0x3d, 0x1}, {0x401, 0x7f, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1000, 0x1, 0x1}, {0x3, 0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x1}, {0x9e, 0x0, 0x1}], [], 0xfff})

11:19:59 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3e, 0x1, 0xd6, 0x83, 0x0, 0x3e, 0x1, 0x36d, 0x40, 0x23, 0x67, 0x3, 0x38, 0x2, 0x561b, 0x9, 0x8000}, [{0x7, 0x7fffffff, 0x8, 0x9cda, 0x0, 0x100000001, 0x9, 0x7}], "c8dcb11007631f22c665b57ece5e896566aa676adc79ef71c9798228074291e2325596dc596c2228ab65ff0ab0d28034f4dc2773f9fe05613c607b852a98a3bc5b0ef9290005916b9d606fc1d376dbd35103376aea600e364a6bf4b1e8c75557a35f6a512277caf9eb4e56086b704afca05ecbffe374170b0785a02d5a97c0d703b2f63d2a77be1ef902d64016daaf7f0c4c6aa6529904707a57c255a57ce702449f1d8232b029e4f61355e549fe9263df3daa81fd029d4f94215db841c1648cf0498e3a10db189d406df9bca6d718aabc139febc64a4eea9d0a8da6cf02b741226671aba4f36648a76db038f3ae0287084be4f4cc6fd44e54", [[], [], [], [], [], [], [], [], [], []]}, 0xb71)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xb, 0x13, 0x1fa, &(0x7f0000000c00)="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"})
poll(&(0x7f0000000040)=[{r1, 0x600}], 0x1, 0x0)

11:19:59 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:59 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0xffffffce)

11:19:59 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)

11:19:59 executing program 1:
unshare(0x20000400)
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x90e, 0x2209c1)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x0, 0xff, 0xffff})
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x220800, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:19:59 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/190, 0xbe}, {&(0x7f0000000140)=""/110, 0x6e}], 0x2, &(0x7f0000000240)=""/213, 0xd5}, 0x21)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={r3, 0x42, "e48448f2f3014d9c84f5bda41a72e5a170c1e7944aa2ba3bce749f67378647a74d6cfd198e56ed7447f78fafca318e63895f961052b5818368ab567c33d2be68a217"}, &(0x7f0000000400)=0x4a)

11:19:59 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:59 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
poll(&(0x7f0000000000)=[{r1}, {r0, 0x2080}, {r2, 0x4546}], 0x3, 0x4)

11:19:59 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001a80)=<r3=>0x0, &(0x7f0000001ac0)=0x4)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002080)={'batadv_slave_1\x00', <r7=>r6})
sendmsg$nl_route(r1, &(0x7f0000002180)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)=@mpls_delroute={0x80, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x10, 0x10, 0x98, 0xfd, 0x2, 0xfd, 0xf29aaf1583c700e0, 0x100}, [@RTA_VIA={0x14, 0x12, {0x1a, "4c6a45ee415c94a82ae39f73b2e6"}}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x28, "14506eb878218a6b285d98cf93bf"}}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x7, 0xa7, r2}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8, 0x4, r7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x1ff, 0x8, &(0x7f0000001540)=[{&(0x7f0000000080)="cf5dd9bd971b8bec20ba42b06c20630aba1badc59a0690d926490d1e2259f63a27d5b6d3f22760eb89b2727054b1b35d06ab60c2845ca6ed65ed8dbe6f28a185955d1286506297420e98fc1dcce140b433ba7e461f451ff4d946cadc89c48e", 0x5f, 0x3f}, {&(0x7f0000000100)="f24d94a67e709203db37bc0ea0da7a2c2d5223df018def9a1e916fdd8329687f112d95260ee0670ce6022f676f676b463ba7f6", 0x33, 0x40}, {&(0x7f0000000240)="738ce1450587844876ee0d4a90b16a81be370c1c38baac5ca712ce0665b708e52cdd5c3d34662d2efe125bf93507c3a1d3eff4e8a9c92901b8bb4a88c82b75e9efb6b5c99c14954df0069e0628db37f3c66c94c8e04ddfe089a43b106b4c489111bc3758a9a39cf908a4ebe74037d2cdafd25773a9c3f34314a2961e4bc137e2e58a340944a379693a365da245dad7129b8cacbc750f9e1c1075107ffcf660ce58773cb4b562a82c662372ab7b98bd37050907859d9999767dbb958fe02eea97fcef71e04410d8ebd238e8f9e025893d1fbd2dd0870a441ad666e617baf4164eb39b961d70845d27e9784c93274b30dc", 0xf0, 0x7}, {&(0x7f0000000340)="b9f4b1882686ba6ae2aa89acc23a284094b5174a016c48b43575f0e7885efae90f16c6595957d5da412077e9fb6d48c19dd74350a9de366e53d29a240af9dea891760a0ed3a06ef5bfe35eefe96e63e7e7ffc2060643849f936bb83fdca49954f1eabc3704f00f162509d4172d79cf68b7a85ad0ea9dc6192852234bf9ef3ce36c97eaa533536d7f482c8e2eec516951a7be46a40f5666d4ef2fa577ea613b479f9bdcf6f7510354b4bbd1f8e31cf4d488861d0cb28a03e811c143dc520c5e6c63", 0xc1, 0xffffffffffffff7a}, {&(0x7f0000000140)="f52740e0490696e1c550ab8ef4849e8cc99829512efb44c9720fcf96f97b647fa9b683f97b98cb8ac3edc31bb79aab5989fb0bfe43cc508bfde1f039d1803f93862c2e58198d9b3565bbe005008a27ca7e85090404c9594352e50ca7bb6c161324d9d6f3a06880a8ca359113e47b1b9aa3164d9127c22ac6de6f3a4e14f27c3a1a36388f05b771dd16f4d5d0d565264f", 0x90, 0x200}, {&(0x7f0000000440)="231c3174121f4cfd456329e1cbdff706c8b65a90d45d16f050e7262c10c9766136a1a5ac4505af6080601d6ae27ef2e4db3a170e53372177d7b57a6b0a6309ce6d3bcb4fc4a5e56f14fef78837a63ae31ed288f71b214f9ad930fcd55e2dc22e77fed295facef89c85f5a85875082464c279db220627aa039eeb34245ea92dff1111e270d90fd3960d3ca3bb6931a16bb7eaa6a99408113c1fc621168b0edc0ac0e3", 0xa2, 0xff}, {&(0x7f0000000500)="2aaaefc237787aae71d789461924c5c8ce964930c546e9cb9dfc7999aac296e2efd702413d330b96e4db2a43e4abe41a0d77cf66c08529a7619716b2b8149babb9113b765a05ba6a2b103699d17631f948fa68f9049daf40b280efd311de53d2fae421b6f50f6bd067e90307d55c3f4d38f79139515e9e909cb04c46115d99a9c304531a1f3f6d10f97ee02ab95a5e09aee0ed8cc5844930d7f2b1270ae63b9d626acc6a0f11f1da5fbb7ce5c113ad53e873f4de3ed32ee9ae00ef397d14a899b37db8feaccb3e17fbe81d1af18cc1d914ef60ad58b830f8234e94559754083ddce3a44d3c5577e6d2a07f86bdf748834257462899bcbb3e5b646600f558139aaa9ca91a8e94c4cb35ab53ee3a1b9ccb176427720440cdd003c4677e6e59040fce65770e8070d4dd4f3b894231d414c4dd34a074510cca0511495ad4fa67a55fb2d901935483a0e0410cf09faec413de77099d38584a3f8cea6aa4bdc6ffcf4a87e32fceb5e5a2afcbda4b6d591be3579c5327739c02b6273c7dfd27e0ab4fe0b6b8a05b6ee271820cb74bf05c5fefc06beeca32895a8e810375b9fa60f1e964c020be04819b541f95fe4155529c4b69a7ce5f6f8d2b4365ec7f087a2b253c8f1ec86afba6f42ebfbd0b17df89643ad5a97df41a344e71ea5d00977d9a52a92bbc93e1448993d03e4c5b700c2d4ccf73473fec72bb7821c7ab7885ef9bbcefd1bbe99129466b45b2597cb401da2654e8f9d75fd7918c6659c503a3ef732fc3f4411f888c357e1cefd72a6e6b1d5a8d296d77927620915345b75e0e20506d77cf2d0fd60c2c3bb37399195a97f3c189bbebc1b60b5437a78af054f4ffde0c783e8967cbd4b1d3f8b06374b1bde28bc89ee0d013f4149eb03fac4573f52feffdd32e9e9565a7a7989a0267c1e2d3c5c55d58861f60e0988ad31922690305f80aa8d2a664253844c4b9923a0f8a7192eb315e2919c2a130dc06a085d15234a66f454dc884557ef9fbaa4ff086ddd66a737586af02bc594585ca6f0a51293d220efed9fd97145aa15f6a693d2b50d7f95b570ca920a7c8d3c3a730fd837bf268ea32de14a9fb84ac528183285e4703480fd844afc7d0fc7554f4b248b5311583c00866b2d50ca2d0a46241e21e957b3409d8e3a1cde14565773f3e6c8005bf2597690c11c5cfcc987825e637e5cc1898f1ba2674376fc9e77a0ed8ff1a4ff0065c335894db44a01803dd3643422e1a7ad88fa2b0d9d0157fa4fb74cbf32016e79a970358df9464e97cff7b3588a5ca44b3db07cf13e77271adaae35d3bbb4a782578375a1a74e48179ccdf0ac218c718d682b170dfbd6f78d1af2336f8d58941dc72158df8cea844e0a8e1ebf22a6e17fe0b99753c2057342038284d176689264b2a2e270b719ecac79182bbfbae892ce379eca330216ee82363e022388c42c15d1c78caaea2421cf359a67153d5173dd192003d833727c7123f008ba2896d3fd72da1afaa6ec42b3412ffca283e96505869855acc0a5a13ba0163d860b8e72460c66cc5e5577415a3c39bae78ad528f99dea9f9848047ee60239d6c278088076aada3b89d7edb0f99d48a8c01f47644ef550bb76c6dd10671c9e1d933b65ede6f19af2b3d0e4f316e7b26e336107aa410080e95cfff26b72f345e8956d8124114e1eadedb402325e546c33ef42f7cd3341039ee666eab8c0c6920d409a0243f5660ea7d45919068283524d5f4da6152dfbd4329820d6d58838ced54e1221a6bea2caa2edae3c8efce23a0e92feb2c4f83a3b04e88ec0a299de1b4ecbe00a693d4b62051c9686533a1b69defacaa1e2df2bb46918d4fd21f2394de77c4877c86821f5a859201302372622f866978f3e1b55edda36b03b34af6a41c51f36561a44e31671d6f26abba7e233f8e2938b2437c6d6f8c6cad2a37bdd4c01e296a163dc177f353f4082d996fe34bfbb32ac998dfae5d6a889af42f034c1d3fbd1677364d5607e1c30e3d7568b3acff6fafea68b753ba7d0c8274c671ade7a6e9f636120e1d19d4649b989edd156b44566e7104fb3a55224ea4279d33bd46dd8ee436d9078ca515320686af6a42ad6303241bfccff911c44e5a1034639d0017f50bc1fbe9e21622bde6f6ea58ffc275f9ab66cd46f2fbbd154c547599b280dca5796451c7bbfdcac26d6d83f57deb760486197d168626000f38e036e3c5ed95c536ebfba008493e603594b2c7047fd0a2329e7a921c9496a5e936515c9aaf47edf29e3e0be385e9150ace7adb785f17ff7c91441e3bd5983ede0ecf1d5e45771a6cf90f5ff4371e2eafca1e91634613f441a8e7cfc2b4768a1cd040d96f6fee85216aa0c5805d08d94cc528420316457e5366cfa0d2b1d3eb1e22f877cb8b0cb857d44b2e2319a0d5809718890d5b60543c86d0f1b7169e55ac8af8c27a8192c5de75dbb19ff2f2a129b3c172bd4a47d20429252e12441182040df8784b1ce01961028b167f244ed29d8c7faf8a80372870b0d203f878e522e39e251eb789184e0ced7aaf31d0d7fd38713abc5df0750b224d986201a963386efa7aed1551f51729c670dd01036c919fa0096b079ae1702688cab9e331cc4bce8e183fb45961f2bc9e88a73c4a6f7a6ed90574fc83df32194122e2bb320ed51f336b5b8f651d18a51065fb3e8d9e00a411b085bb4ef2213999eccba586c56d01ceeeb26fdb0b9a70c82b072a474778bb4042a208f6d86678021fffa324c90c8c97bbcc5e540aaadff8b50007f020fa97d9a01cb65ab5456a9a50b89eb0854effb854ec492b85cb6a7a4847e40a0ba78345f9dc0d7635bc8e7655890e0a7a8d9559b70e8ffd075e4a3a767c35f30720c07a76ab244b8c9004c9b9ded0fd30d04763fd2c9730692e5e82beef1dccdd81bb827b3b8afcdf86bf10e9b505531e7c25d6a5f7023b7e5941fb54250716dc69be1d64bd9a79541932269569eec551c6a2d404a66c1e8fec322271accf06eeb241b8e717012a520c598ae57aa3fa60bccfe373b7f5d82858976a09dddf86f47b43a228e9470669a4312327eb213e9cd6e1dbf475725114280c3439f415e3e7fa01b495f332407d3e38ea5a479bc0ed31af0c9cdc5150e3cb04b70d03858d39d3da0772342b7654873c2416f0d59f2efe0866f6ff622d75213f7afa45f0bcdf34181e49b8335d20c77352490afc5b952777c31f694bfbfc56272f3cd5e717e3c752bd9bba25d47b5bc519da492d09de2643b8f142373104e36450f7ddf770d2b1675fed0a88f785a6b42f737506bc22890bb344f6bc1cc1befc9ac288a8f8f4472fe74863414a0e8383672966691999e177b796afd97b92b61bbd3c158d3c98ef5322848e27a446ff9c04266925b429d25167d79ea01a785ffad33a164a7af8982e099fd1a86ae44aa62fcc0b8743be6275be8f3e3b3c1d936aa10028ef8dd03b77eb47fc0f54c13ab1d7ed1d26e12fb68919f34a4c93333adcc19297920b3b5b0ab48199603183fc0d2799c9359363580646630299498efa97a21f547e74a0d310b9ecb14d544faebb2b459fccb529e00207d0b8933ef8908f9f59735243d45068ba65275f24627459462fe0f9b023705f0e8afa0f2f7f5a537a1ae2394e0376ffe3d4a79cec766e7eb508958d7dbed269bc4c37360ec2f020fd7657801164a5cf048f526df2d950355124d193238589a1e7f5d86049a858bdf9e45f5a713a595bed62bbfb660c9680d59c0c12be0ddf53514e1bbf91d2a5825bf444360235e454cda2619b7fa0386fe3893f6a69f61d6fd300a20d27c42545fa55d42264ad7d80d97b2ab7905550b9ff0aeeed415473107c91b41a9f41f35d2283bd231494716f7031f5749fa08cc5c13b3591f2c70a3f7e6b7772898a1a671704794f290ea7fb2f2faa0903edc01dbe8e41931a4b82af052e5f03617d5be3f5205b83b3b02b9598fa02f9117c307beae6f5343f74835d0496b77842ef672c6749b46e3383fd77d142b57064b6bb7f696bf082684d0cddf6e336d5110eb6e978faf9516db1d7f0b2757f9456d536426a0773b31539dc69ee6edb4d6949008071270be876ebd8473ca21baddba56d729843116939977d124d2f99edff4970e778b2947de570753e405cd713453787d4f5d1fa00588b419798c35f7d5d3d9dd2326c31375eb12605b83642ec1baa478d6f61beeebb452434178955a64a46710ef515982b8530a895940bb858619fdef8838ca9724de7e5d8460fd10fedfe9a60ffd786af898bf513de5014e156d3304a34228cbd0e8c83658b6e6ae6279657611de77dce6456c26df7013eb3c49c2e32d112463cb2693a4589e246962c4b58f20d8278016f9b7f37df9ef7e8fb3ffd8ec6307f47d18b8a43dad4dcffff5e4e5e9ebee964233c5dc5c9a7318b24c0c9e12f18c6af7b4db4dfc06b08bd8ce765d59cde5ab78766a196cf16cdffb0dea247b05220bc0be64ae6d136b14b2c36f8e88c7a7c606caf9761e6f4cb85646ec725ef0e40113cb7d9318a7792e5d53557844b4d520b64fe5b4627ea315157ae72eef703ff54bce8520dfb90968c9573684171cfbc2f2815a11196d384bbb2e1c746aa012757386483f9e3b0cb4a2b072139ecc7c2aba7313bb27ba7ab50b0256e7ee93f42f0a5a7fac814815d3ba67c192a9f0944f06a8b0c5de1b526fa3c774f576c0cd4be23d7663fffab1cddf4b8fa51b68e365bd024d9ab767e56e636b9111a2e42146bc87adafea35610807316a71493407fa8567886b97385dedfedc07b0decdf5103afa5eb62f428ab920880a3be028a9b7a5fa7e34cd9c364193abd6350bc92129a2b0ac3a52d878e0fef170b099064c0533f095e1c2987a71501e8b562537dfde5ae798c8d441dcadd931a573f20e960adc314a88ca70a0ce9bb0c78c18cbe016744406749b402389b9a582ee41503eb753f942f8faf163d723103e501848338f5c7a627ee4130c0840522c83ff93f7f0dc7ada3c455bbc31081b2dc170ae6c81b37e9c9d476da25088e4df8a0ea1b77a1a1ccadb2ff576e78e6ed09898c5ef700368fc024e6375c7041ad85446c04385aefcb6cfa4bb8047d7dd2b07ddd5f008343b6fc1fba478e43e4d11911f2b5f29ef6bd8db84fb7386754a360db361ffd8e34d9de1128dd6b0575452199f469aeb6597213e26432db6f2f36b374d149c64ee499ec6c2e2059916592af71d235938235ab42a34424708a4feca5d13a0fac92dfca4d38f00686a774504654213de220210b3f563575a8ef9e5dfc8658e798dcfb77f369f8afc798d120e1159fe67588cee6d637608102e9793d9fdf3736bff75c8a7b01c561616aa92aeb727c01e3a5a55e070ee20db524f2cc48b84e3a51bcc4a1df2e3be8a09946d93727655cf22d1a922ff0bfa82c7db6013befa3ea703389f4daa84296e303eb4f2f7b59488d2016d7a157f76bf20f5208f43046945b71bf73c550aa16022f849f0c9d45a00ba8b57f6977c765983e695250035034a59845f086a23aacf3dee36dce00e57b10681a4137bfc74ed8a87cc49c8da6c928d18dbfb2128d8010d02829876a0208a59772bd4463eb8506904a76adddb4e6a05cfc0faae5fa54a4e3a0f6013912bab8020b6684c0bdcfe57467ef5e3333734092c50c6e337ee008b16f411bfe11f361f783dfc4cd2c5cc8025535709da8b280a192928b04beee91f10085473043f88aff00baa6a5886d7763535f8d3fef79e6911f32ec4c2cadea493f490c68a1aee714d06c2d863847d15ba5bf9bc3e666c4376d82dce3f3f843c7d5e5e651f38f5faf", 0x1000, 0x7}, {&(0x7f0000001500)="1507d150b3fe913e55", 0x9, 0x4}], 0x40ca0, &(0x7f0000001600)={[{@quota_quantum={'quota_quantum', 0x3d, 0x10001}}, {@rgrplvb='rgrplvb'}], [{@hash='hash'}]})
close(r0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)
ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000001640)={0x3, @null, r9})
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:59 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:59 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {0xffffffffffffffff, 0x420}], 0x4, 0x0)

11:19:59 executing program 1:
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = msgget$private(0x0, 0x0)
msgctl$MSG_INFO(r1, 0xc, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x0}})
msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/167)

11:19:59 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xe66, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="e2bc4505e4e276b476af200a511ebd0de5221ae63d430222855321a42b9c7d0d638d45f1c85d395df14434d46feff9bb178ecaf3e126e7b46885e0d79a346b3ef62032dd4fc3", 0x46, 0xfffffffeffffffff}, {&(0x7f0000000100)="91596891c883781a69e7924345d4f898d24813204acc0406a9dcfa0aa89f6dd5f522b0171516d35a43d27bf38d9c34f9b37b437eff3ec690ec76315d866c00f133f666f8d2db899695876f2a00"/92, 0x5c, 0x8}, {&(0x7f0000000180)="571bbfb3e07c1e5205e9339da01f019669f10012cae5603896a2cde2a0d500e9893f33fb0f3c04fa1c50cd377c53bfe9146c5a3837b97a", 0x37, 0x1}], 0x3410, &(0x7f00000002c0)={[{@nocompress='nocompress'}, {@nojoliet='nojoliet'}, {@mode={'mode'}}], [{@uid_lt={'uid<', r1}}, {@audit='audit'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute'}}]})
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
recvmsg$qrtr(r4, 0x0, 0x0, 0x0)

11:19:59 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c40000000000800000000"], 0x0, 0x0, 0x0})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x44004)
unshare(0x20000400)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100))
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={{0x3, 0x0, @reserved="cfd0485b4d01815af062f533d9c6b33f79e2fe7f38e174fcc3a73f849713955c"}})
poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0)

11:19:59 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
unshare(0x20000400)
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:19:59 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x0, 0x400d0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x1000}, 0x4)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xe29, 0x2)
write(r1, 0x0, 0x0)
ftruncate(r0, 0x8)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x7)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
socket$inet(0x2, 0x2, 0x7fffffff)
unshare(0x20000400)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000000c0))
poll(&(0x7f0000000300)=[{r3}], 0x1, 0x9ca8)

11:19:59 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x0)
keyctl$join(0x1, 0x0)
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@socket3={{0x28, 'socket\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:59 executing program 1:
rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x9, 0x10, 0x1}}, 0x20, 0x1, 0x0)
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x382c1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000000b6300000000000000000000009b307af8a1fda617cd943279f3e67e446d885b3fdbc59fbd04c50078a35dce60ae0653aa5e3fb4e0b574ac3848e7a91bdfb7b954847f947bd060f13b76dab37fb071114879660ac8c7616ee32fa9f65b7ef30710105baa1e1d5107265506076ce44e96144271a8c101767e165f69ffe11284"], 0x0, 0x0, 0x0})
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x1, 0x101, 0x81, r3}, 0x10)

11:19:59 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {0xffffffffffffffff, 0x420}], 0x4, 0x0)

11:19:59 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000))

11:19:59 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

[  852.557360][ T2651] net_ratelimit: 2079 callbacks suppressed
[  852.557367][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.571080][T13126] xt_TCPMSS: Only works on TCP SYN packets
[  852.571976][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.586065][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:59 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {0xffffffffffffffff, 0x420}], 0x4, 0x0)

11:19:59 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(r2, 0x125d, &(0x7f0000000040))
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0xfc52, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000000000000000000034000900020073797a3200000100140011800c0001007061796c6f616400040002800800084000000000080008400000000008000a4000000000081f505fa35dfad96a00054000000034140000001000010000000000000000000000000a"], 0x7c}}, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:19:59 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1)

11:19:59 executing program 1:
unshare(0x35020980)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8381, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

[  852.713699][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.722197][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:19:59 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write(r4, 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)

11:20:00 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

[  853.266487][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:00 executing program 2 (fault-call:3 fault-nth:0):
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:00 executing program 1:
unshare(0x20000400)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0xafc8f7baff846ac5)

11:20:00 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
fchdir(r1)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:20:00 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0xfffffffffffffffc, 0x40400)

11:20:00 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)

11:20:00 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

[  853.506371][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:00 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:00 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x5, 0x43, "45317b8d08ed55a6ec58092001a92ff33dae9842c13fd4d640e0681c814b72ca56ec9eb4e3aff2a080720b0f6c56631efe02d34e16f9a174d589569e3e62431d496205"})
ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, 0x5, 0x5, 0x20, 0x8, 0x1, 0x5, 0x3b45, 0x3})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:00 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:00 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)

11:20:00 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r5, 0x0, 0x0)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x248200, 0x0)
close(r6)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000000)="724996455c6a383a5c63759c53e92fc7733ffd8a838151e165bb5735ee593bb675346eadc9d6fd166a4a74d3e737039a1552ee0bff414afc3e0fcd1beee8d8f077986615d68d46bdbde25f3035a004721524a7875ab4a8814eedc491fd91f5413aca0a6b9fdc81e6a565c3650890741e9c48929661db9a5c90f01b71f52b0df84ea126abbcaadc224444725f6b90a9f3972a9debb3b63baf7ca12886d8478822b867b858594ea4cd1770627a9655adc0d5103b55a0ab9aff59b7a6e936bbab81fdbe87e114ea", &(0x7f0000000100)=""/210}, 0x20)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

[  853.596636][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.605073][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.616860][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:00 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r6, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x80010, r6, 0xace69000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa0100, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
pipe(&(0x7f0000000200)={<r8=>0xffffffffffffffff})
close(r8)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
statx(r8, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setresgid(r9, r4, r4)
fchown(r1, r3, r7)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)

11:20:00 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x2, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:00 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x8006, 0x6, 0x5e62e5b1, <r3=>r2}, &(0x7f0000000040)=0x10)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000140)={0x0, @reserved})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x7}, &(0x7f00000000c0)=0x8)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
pidfd_getfd(r5, 0xffffffffffffffff, 0x0)

11:20:00 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:01 executing program 0:
unshare(0x20000400)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x800, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x4405)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
recvmsg$qrtr(r1, 0x0, 0x0, 0x0)

11:20:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
close(0xffffffffffffffff)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)

11:20:01 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp={0x800, 0x1, 0x0, 0x0, 0x0, [{0x0, 0x1}, {}, {0x0, 0x3}]}}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x1}, 0x80, 0x2, 0x3, 0x1ff, 0x3, 'syz0\x00', "747614b4709c4eb0656fee60fd3820f76b904b0978e1d18ad9572a2fa1c4c27f", "92016ba67132ebbd51ff40d9476e1909cf7250cd8b3c9dea0db34e13855d8bad", [{0x101, 0x401, {0x3, 0x5b}}, {0x7, 0x4, {0x1, 0x1f}}, {0x4078, 0x3f, {0x3, 0x83}}, {0x4, 0x800, {0x0, 0x478bf7db}}, {0x4, 0x101, {0x3}}, {0x0, 0x1, {0x3, 0x7}}, {0xfff7, 0x6, {0x0, 0x8}}, {0x8, 0x7, {0x1, 0x8000}}, {0x5, 0x1000, {0x3}}, {0x6, 0x9, {0x3, 0x3}}, {0x7, 0x7, {0x1, 0x400}}, {0x3, 0xf28}, {0x1c44, 0x3, {0x3, 0x3}}, {0x8001, 0xa36f, {0x0, 0x1c}}, {0xfff, 0x200, {0x2}}, {0x6, 0xfff, {0x2, 0x4}}, {0x3, 0xb707, {0x3, 0x6}}, {0x59, 0x3, {0x0, 0x7fffffff}}, {0x0, 0x1, {0x2243abf095aca0f6, 0x1}}, {0x4, 0x149, {0x3, 0xffff2952}}, {0x1, 0x7, {0x2, 0x4}}, {0xba3, 0x0, {0x1, 0x4d9}}, {0x8, 0x4, {0x3, 0x3d5}}, {0xffff, 0x9, {0x0, 0x27eb}}, {0x618, 0x1}, {0x8, 0x5, {0x0, 0x4}}, {0x7, 0x8, {0x0, 0x7fffffff}}, {0x1f, 0x7, {0x3, 0x8}}, {0x2, 0x1, {0x0, 0x29}}, {0x1, 0xff, {0x3, 0x2}}, {0x20, 0x40, {0x3, 0xff}}, {0x100, 0x2, {0x3}}, {0x3, 0x200, {0x1, 0xffffffff}}, {0x7ff, 0x0, {0x0, 0xfff}}, {0x6, 0x6, {0x3}}, {0x1dc, 0x8001, {0x1, 0x6}}, {0x5, 0x40, {0x1, 0x3}}, {0x2bb7, 0x5, {0x3, 0x2}}, {0x7, 0xfffb, {0x1, 0x391}}, {0x5, 0x101, {0x0, 0x1b}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x2, 0x8, 0x0, 0x3, 0xc, 'syz0\x00', "4eb21fce8383b7663e83ccb52ee9f33954b7874407f0ea218382a466be6c2b6c", "7c76b1e4b346d34c19a5c389737b33eb33f61634d400cfa12575016958d00025", [{0xf66d, 0x400, {0x2, 0x1}}, {0xadf, 0xfffc, {0x3, 0x7ff}}, {0x200, 0x4, {0x0, 0x7ff}}, {0x48, 0x1, {0x2, 0x1}}, {0x8fe, 0x2, {0x0, 0x10001}}, {0x1, 0xff, {0x2, 0x77}}, {0x200, 0x8, {0x2, 0x1}}, {0x80, 0x5, {0x2, 0x8cb5}}, {0x1, 0xffff, {0x0, 0x3e5}}, {0xdc8, 0x91e9, {0x3, 0x20}}, {0x101, 0xff, {0x3, 0x2}}, {0x4, 0xf8d0, {0x3, 0x2951}}, {0xfe, 0x1000, {0x1, 0x1}}, {0x3, 0x1e, {0x1, 0x1}}, {0x8, 0x8993, {0x2, 0x6}}, {0x40, 0x8, {0x3, 0x10000}}, {0xbe, 0xd575, {0x1, 0x8}}, {0x237, 0x6, {0x0, 0x4}}, {0x7e5c, 0x0, {0x0, 0xbc2}}, {0x800, 0x2, {0x0, 0x200}}, {0x20, 0xb241, {0x2, 0xfff}}, {0x1f, 0x9, {0x2, 0x9d}}, {0x7, 0x0, {0x3, 0x9}}, {0x8000, 0x800, {0x2, 0xcf}}, {0x8000, 0x20, {0x1, 0x40}}, {0x0, 0x8, {0x0, 0x11ec}}, {0x6, 0x8000, {0x0, 0xff}}, {0x4, 0x5, {0x3, 0x3}}, {0xff, 0x3, {0xd099da6bc9927dee, 0x82}}, {0xffff, 0x400, {0x3}}, {0x1, 0x8000, {0x2, 0x5}}, {0x3f, 0x8, {0x2, 0x5}}, {0x1c2, 0x8d, {0x2, 0x5}}, {0x7fff, 0x16, {0x3, 0x4}}, {0xdf, 0x6, {0x0, 0xfffffff8}}, {0x9, 0x7f, {0x2, 0x401}}, {0x3, 0xe4ac, {0x0, 0x10000}}, {0xfff7, 0x7, {0x3, 0x720b}}, {0x9, 0x4, {0x1, 0x5}}, {0x81, 0x3000, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x9, 0x3, 0x8, 0x9, 0x10, 'syz1\x00', "cc0c08decd52fe47dd03603a6ed450cdde35789f3b75917ce76bde122b3ced8e", "6296cdf3360f55958b661aa347911b3c727ff36a3e6a29835f4d306ba3096bdc", [{0x3, 0x499, {0x3, 0x101}}, {0x101, 0x74, {0x3, 0x1}}, {0x5, 0x8, {0x0, 0x2}}, {0x1, 0x400, {0x1}}, {0x0, 0x80, {0x0, 0x1}}, {0x0, 0x8, {0x1}}, {0x7f, 0x1, {0x3, 0x1ff}}, {0x1f, 0x0, {0x2, 0x9}}, {0x40, 0x7, {0x2, 0x8}}, {0x8, 0x0, {0x0, 0x3}}, {0x781, 0x1000, {0x0, 0x20}}, {0x0, 0x101, {0x2, 0x6}}, {0x1, 0x4, {0x2, 0x4f}}, {0x2, 0x8000, {0x0, 0x12}}, {0xe0a, 0x5, {0x2, 0x81}}, {0xffff, 0x77, {0x1, 0x1}}, {0xbc7a, 0x8, {0x0, 0x1}}, {0x7ff, 0xfffc, {0x0, 0x1f}}, {0x1, 0xfffd, {0x0, 0x2}}, {0x9, 0x3f, {0x1, 0x800}}, {0x53, 0x100, {0x3, 0x100}}, {0x7, 0x0, {0x3, 0x7f0}}, {0x5475, 0x5, {0x3, 0x1f}}, {0x3, 0x3, {0x1, 0x7f}}, {0x7d, 0x40, {0x1, 0x920e}}, {0x1000, 0x3ff, {0x1, 0x64b07d96}}, {0x7ff, 0xb3e, {0x3}}, {0x29, 0xa00f, {0x3, 0x2}}, {0x7f, 0x4b8, {0x1}}, {0x8000, 0x5, {0x0, 0x3f}}, {0x7, 0x0, {0x3, 0x3}}, {0x7, 0x2, {0x2, 0x200}}, {0x1, 0x0, {0x3, 0x1}}, {0x3, 0x200, {0x0, 0x9}}, {0xffff, 0x3, {0x3, 0x1}}, {0xd5, 0x2, {0x2, 0xffffffff}}, {0x4, 0x2, {0x1, 0x1344}}, {0xc60e, 0x4, {0x2, 0x12}}, {0x3f, 0x8000, {0x3, 0x6}}, {0x32, 0xfff, {0x0, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x21, 0x5, 0x1, 0xfbff, 0x23, 'syz1\x00', "0c601225a328316a1cbe92b90748f506516c364d99f6c7c6a1f62a1a6cef2d6b", "cbfef7430102cfa2b292f31c22fdfd91992d47e4270548941f864cf7335b6524", [{0x1, 0xbd36, {0x0, 0x9}}, {0x62d, 0x0, {0x2, 0x9}}, {0x3, 0x1, {0x0, 0x7}}, {0x21, 0xf00d, {0x2, 0x10000}}, {0x8, 0x1, {0x2, 0x100}}, {0x5, 0x8, {0x2, 0x6}}, {0x7, 0x2, {0x0, 0x3ff}}, {0xc0, 0x598, {0x2, 0xffff}}, {0x1, 0x5, {0x3, 0x9}}, {0xff8a, 0xe9f, {0x1, 0x4}}, {0xa3f, 0xfffa, {0x3, 0xe8a2}}, {0x5, 0x8bb8, {0x2, 0x800}}, {0x7, 0x1000, {0x1, 0x1}}, {0x2, 0xfff, {0x0, 0xfdd}}, {0x7, 0xb30a, {0x2, 0x400}}, {0x7, 0x1, {0x3, 0xfff}}, {0xfff9, 0x2, {0x1, 0x6}}, {0x6, 0x1ff, {0x3, 0x2}}, {0x2, 0xfff, {0x0, 0xd7d6}}, {0x8000, 0x8, {0x2}}, {0x9, 0x6, {0x3, 0x7}}, {0x40, 0x20, {0x0, 0x9c}}, {0x8, 0x3, {0x1, 0x10000}}, {0x1ff, 0x4, {0x1, 0x378}}, {0x7, 0x0, {0x0, 0x5}}, {0x8000, 0x9, {0x1, 0xfff}}, {0x7, 0x3ff, {0x0, 0x4}}, {0x5, 0x4, {0x1, 0x6}}, {0xa3, 0x1, {0x1, 0x86}}, {0x2, 0x20d, {0x0, 0x8}}, {0x4, 0x400, {0x3, 0xfffffffa}}, {0xff24, 0x7ff, {0x2}}, {0x97cd, 0x5, {0x0, 0x8}}, {0x6, 0x81, {0x3, 0x3}}, {0x6, 0x7, {0x0, 0x800}}, {0x7, 0x1, {0x1, 0x1}}, {0x9, 0x8, {0x2, 0x7b8}}, {0x1f, 0x100, {0x0, 0x6}}, {0x8001, 0x0, {0x1, 0x200}}, {0x2, 0x6, {0x1, 0xe0d3}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40008040}, 0x24000010)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f00000001c0)=0x401, 0x4)
ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x80000000, "99d019ee3c2d27c07d72ea90a10c3a81b7445538849e07f8db7d06d67ee20c47", 0x2, 0x1})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x44)

11:20:01 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x3, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:01 executing program 3:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:01 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x5)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "40ef0dc4ec364127eb42bd55cf7b3b424bb1d82632f940056defb6cf9488d4913b71339c9166c414678dc0afd70d27a9f01777c09b05e2115d837bd34f1e0207c2e82a4d3750f829d0819600e5fea0800022d3d936eff879759dc8c7ccb6c66743e5df95de9cdaa885263470ca152a8a37260ce2a614bb5e13ec81ea07a0692b34a8b0d3e0593b24be060e5a7e20b003449d2ee4776359c24b72886100edf558d4bd38284a0dcf3e0251cbbdc87fcbe0521e82bba5bb91d67e"}, 0xbd)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r1)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x9})
recvmsg$qrtr(r1, 0x0, 0x0, 0x0)

11:20:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x10001, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {r4, 0x3}, {r5, 0x420}], 0x4, 0x0)

11:20:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630ced5f000000000000000000000b630000"], 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4620, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0xfffffffffffffee7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x202, 0x2, 0x9, <r6=>r5}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r6, 0x4, 0x30}, &(0x7f00000001c0)=0xc)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r1, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/37, 0x25, 0xffffffffffffffff}}, 0x10)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)

11:20:01 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x311000)
ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000000c0)={0x0, 0x9, 0x7e7, 0x80, 0x2, 0x6, 0xffffff01, 0x7, 0x4})

11:20:01 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x4, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:01 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x2, 0x4)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000000)={0x7ff, 0x0, 'client0\x00', 0x2, "004542a8e1ca22d9", "9192860469bb9dcb973fdccc1db7b05e047b35b2c889984129d08c32d39b835d", 0x5, 0x1})
close(r2)
recvmsg$qrtr(r2, 0x0, 0x0, 0x0)

11:20:01 executing program 3:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
pipe2(&(0x7f00000002c0), 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {0xffffffffffffffff, 0x3}, {r4, 0x420}], 0x4, 0x0)

11:20:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:01 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18)

11:20:01 executing program 3:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:01 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c0000000000000000000000040000000000"], 0x0, 0x0, 0x0})
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1)

11:20:01 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x5, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {0xffffffffffffffff, 0x3}, {r4, 0x420}], 0x4, 0x0)

11:20:01 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = getpid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x80000002, &(0x7f0000000100)={0x39})
ptrace$peek(0x2, r2, &(0x7f0000000000))
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:01 executing program 3:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:01 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x7, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:01 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8, 0xf7}, 'port0\x00', 0x28, 0x30018, 0x3f, 0xb2, 0x10001, 0x3, 0x10001, 0x0, 0x2, 0x5})
recvmsg$qrtr(r0, 0x0, 0x0, 0x0)

11:20:01 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {r3, 0x2}, {0xffffffffffffffff, 0x3}, {r4, 0x420}], 0x4, 0x0)

11:20:01 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x88200, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:02 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x4, 0xffff8001, 0x2})
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff)

11:20:02 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
unshare(0x20000400)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r3, 0x420}], 0x4, 0x0)

11:20:02 executing program 1:
syslog(0x0, &(0x7f00000000c0)=""/128, 0x80)
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:02 executing program 3:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:02 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x8, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:02 executing program 0 (fault-call:3 fault-nth:0):
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:20:02 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r3, 0x420}], 0x4, 0x0)

11:20:02 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x9, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:02 executing program 3:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:02 executing program 1:
unshare(0x20000400)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x8)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
socket$nl_sock_diag(0x10, 0x3, 0x4)

11:20:02 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:20:02 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e23, 0x3f, 0x4e24, 0x0, 0x2, 0x80, 0xa0, 0x2f, r4, r6}, {0x6, 0x1c21, 0x0, 0x5, 0x9, 0x7, 0x5d12, 0x400}, {0x1, 0xfffffffffffff800, 0x4, 0x8a56}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x51}, 0xa, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x3500, 0x3, 0x1, 0x3, 0x101, 0x8c70, 0x7ff}}, 0xe8)

11:20:02 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r3, 0x420}], 0x4, 0x0)

11:20:02 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:02 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xa, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:02 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000)=0xf, r1, 0x0, 0x1, 0x0)

11:20:02 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:02 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x25, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/37}, &(0x7f00000001c0)=0x78)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r3, 0x420}], 0x4, 0x0)

11:20:02 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
unshare(0x20000400)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:02 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:02 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xb, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:03 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000)=0xf00, r1, 0x0, 0x1, 0x0)

11:20:03 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)={0x96ec, 0x6, 0x4, 0x800, 0x9, {0x77359400}, {0x2, 0x0, 0xc, 0x3f, 0x7f, 0x64, "a549401b"}, 0x1, 0x1, @fd=<r2=>r0})
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

11:20:03 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c400000547bd966f85299cf72c8e9a6e0159700000b630000"], 0x0, 0x0, 0x0})
unshare(0x20000400)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r3, 0x420}], 0x4, 0x0)

11:20:03 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:03 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xc, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:03 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000)=0xf000000, r1, 0x0, 0x1, 0x0)

11:20:03 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
unshare(0x20000400)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r3, 0x420}], 0x4, 0x0)

11:20:03 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x143}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:03 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

[  856.362434][T13380] ptrace attach of "/root/syz-executor.4"[7149] was attempted by "/root/syz-executor.4"[13380]
11:20:04 executing program 1:
unshare(0x20000400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x586c0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x105000, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x1258c2, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8)

11:20:04 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xd, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000)=0xf00000000000000, r1, 0x0, 0x1, 0x0)

11:20:04 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
pipe(&(0x7f0000000200))
unshare(0x20000400)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r2, 0x420}], 0x4, 0x0)

11:20:04 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:04 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x26c, r2, 0xf, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x805a3c}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x56, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6524}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x50}, 0x40000)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:04 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xe, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:04 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x1)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r3, 0x7f}, &(0x7f0000000040)=0x8)

11:20:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000)=0xffffffff00000000, r1, 0x0, 0x1, 0x0)

11:20:04 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1)

11:20:04 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xf, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:04 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendfile(r0, r1, &(0x7f0000000280)=0xf, 0x7)
unshare(0x20000400)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r2, 0x420}], 0x4, 0x0)

11:20:04 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:04 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/108)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

11:20:04 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x10, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x300, 0x0)

11:20:04 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
unshare(0x20000400)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r2, 0x420}], 0x4, 0x0)

11:20:04 executing program 3 (fault-call:3 fault-nth:0):
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:04 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x500, 0x0)

11:20:04 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:04 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:04 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x12, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0xf)

11:20:04 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:04 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x4, 0x7b, &(0x7f0000000000)="e537d2c765744593331f992f3d1355807f5c7a70da1821e7a198ab4d7f383475d4f203312682c8c44e69c2a38a1dc14a4ca530c3610c843a4656996021f3dd0d6c8b47347c6b2bdb7566e65c74e33e8cbe14cd8741990c939e19dd8d9b64b108950c98a9025cf9fad3a998968f406648954f537878aec160ddfcc8"})
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:04 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff00000000, 0x0, 0x0)

11:20:04 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x13, &(0x7f00000000c0)={0x0, r0}, 0x10)

[  857.666125][ T7771] net_ratelimit: 3106 callbacks suppressed
[  857.666133][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0xf00)

11:20:04 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0xffffffff00000000)

11:20:04 executing program 5:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

[  857.746295][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.754819][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.763757][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:05 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req={0x4, 0x1, 0x2, 0x1}, 0x10)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80000)

11:20:05 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x14, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0xf000000)

[  857.912074][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.921052][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:05 executing program 5:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:05 executing program 4:
unshare(0x20000400)
r0 = gettid()
migrate_pages(r0, 0x7fff, &(0x7f0000000000)=0x1000, &(0x7f0000000040))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x383002, 0x0)
close(r2)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0ff28e6a548be8b9cec7f6c6e4eb6305816161000000000000ff0000000b630000"], 0x0, 0x0, 0x0})
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x141401, 0x0)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000340))
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xd5, "ce9dea3370b8c062cfbf18d6d5efdbeadd09990b9c1b8dcfbe4c32040b4c6abdcd9a6fac9f2aaf941130979fc79826f05c47efe7ca6b7add04bc4792d6db90caf0a10d63ef7adee27819bc959bbc70c72b3ac50b5b3d3e2069eea0b1b21a519ac4115922311a90ab3ea6d34ce265f768cda5f935acb1ca36624439e77b9b96a666d37b5e95a6fb925d0257b3b186a9362243ae0d21b11e56be7670ee1e567b126f6b8572cb85e3770962cb99d50ce0685e5e74ddcd823c2ad6a4bada29f836c4a430e958dc1f44893be9a12a27b0db4b7389abc4ee"}, &(0x7f0000000180)=0xf9)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
setuid(r6)

11:20:05 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'tunl0\x00'}})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/162, &(0x7f00000000c0)=0xa2)

[  857.992514][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:05 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x15, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:05 executing program 5:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0xf00000000000000)

11:20:05 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000000)={0xe, {0xa, 0x1f, 0x7}}, 0xc)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:05 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:05 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:05 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x16, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0xffffffff00000000)

11:20:05 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

11:20:05 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:05 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x17, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:05 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
syz_open_dev$tty20(0xc, 0x4, 0x0)
pidfd_getfd(r2, r1, 0x0)

11:20:05 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
r2 = socket$kcm(0x29, 0xf, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0})

11:20:05 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x18, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:05 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0xa3, 0x90000000, 0xe923, "1069f8e77e7944825cdd2cccc666c8a6c37cbcf3a6be14cb1fa8fcd2dcd32a24a2ecb4cdbe87fee775645fb0da76aaf82803dffade16930f7c62ba4e0243f84a9f3d9e2297f46899a7def62d4e232556f331e9a7734c659890fba9dc0a5e740342fb522fad73423da1438d5d47d11859e072515887d918268723a027cb06bef65cd0f9a6f0c49863ecf000639e37b6c11a18966df8fd29f4b8f76bffa30943a7a44553"})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0xff, 0x200, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x3f)

11:20:05 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:05 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b63f3ff"], 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)={0x2f, 0x3, [], [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x20)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r2], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00012bbd7000ffdbdf251100000008003b00080000001b714ed6db5421334ed7b13eb94ec5457b864112e35fcd3af0ca3a9325e770f99035e797850bae081a35b064658ae7f0a278124e120ae077637e9d4dfe175439bd0cfbeb9e985637cbaea63baf85a132af5ffb9e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r3, &(0x7f0000000000), r4, 0x0, 0x1, 0x0)

11:20:05 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x19, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:05 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getpeername$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

11:20:05 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:05 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x101, 0x46cb01)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
r2 = getgid()
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_virtio(&(0x7f0000000080)='syz\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x820, &(0x7f0000000400)={'trans=virtio,', {[{@cache_none='cache=none'}, {@nodevmap='nodevmap'}, {@version_9p2000='version=9p2000'}, {@msize={'msize', 0x3d, 0x4}}, {@mmap='mmap'}, {@aname={'aname', 0x3d, '/dev/video#\x00'}}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@cachetag={'cachetag', 0x3d, '-/-\',.{-['}}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@dont_measure='dont_measure'}]}})
write(r1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x1, 'veth0_vlan\x00', {}, 0x5})
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x1, 0x3, 0x2, "548b05154045f7ded70d898f50f2e6a04cf6d2d12badc393673be082f33af3f9", 0x30314742})
prctl$PR_GET_SECCOMP(0x15)
write(0xffffffffffffffff, 0x0, 0x0)
pidfd_getfd(r5, 0xffffffffffffffff, 0x0)

11:20:06 executing program 0:
unshare(0x10000)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

[  858.786389][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.794755][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.805966][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:06 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0, 0x420}], 0x4, 0x0)

11:20:06 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1a, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 3:
unshare(0x20000400)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b6300007e722afdaa56cb6bdaf7e24fe775d77513e881cbb50de8fe81"], 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r1, r3, r4, r1, r5]}, 0x5)

11:20:06 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x2, {0x9}}, 0x18)
close(r0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

11:20:06 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(0x0, 0x0, 0x0)

11:20:06 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={r3, 0x9e, "9162de0725cf4d18c97b439e06bac120ff218886a28935d5530c25fe4397555bf2a1054bc7ea3df53985cd24e0658a2573e6082f805965fa4a5030d91512648000068cc7f14940f3f8bedbe9a862f8aa765ae6ec295fe67bb55e0dbe9d295144ccd66fd0c0720e5f6f51d0cd2048fbe778e9abc3123a966b056efe50bec9af8634c90a76f26ecec255db0ea74b787c7bc5d5480a7d069efef08b4791554c"}, &(0x7f0000000100)=0xa6)

11:20:06 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1b, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 3:
unshare(0x20000400)
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x6, 0x4})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x2, 0x0, 0x0, 0x8, 0xe5c7, 0x8}, &(0x7f0000000080)=0x20)
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

11:20:06 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(0x0, 0x0, 0x0)

11:20:06 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1c, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 0:
unshare(0x32050380)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:20:06 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(0x0, 0x0, 0x0)

11:20:06 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1d, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0xc}, 0xe40b, 0x81, &(0x7f0000000040)={0x40, 0xc, 0x643, 0x2, 0x4}, 0x8, 0x92, 0xa3, 0x0, 0x7, 0x101, &(0x7f0000000080)='I'})
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x100000000000004, 0x4)

11:20:06 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}], 0x3, 0x0)

11:20:06 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1e, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 3:
unshare(0x28000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/148)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:06 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
splice(r2, &(0x7f0000000000), r1, 0x0, 0x1, 0x6)

11:20:06 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:06 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}], 0x3, 0x0)

11:20:06 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x21, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:07 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:07 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}], 0x3, 0x0)

11:20:07 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:07 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000000})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:07 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:07 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x420}], 0x4, 0x0)

11:20:07 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x78)

11:20:07 executing program 4:
unshare(0x20000400)
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:07 executing program 3:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x20, 0x80, 0x1, {0x22, 0xd3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5e, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x8, 0x8, 0x10, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x5, 0x1}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x31, &(0x7f0000000440)=@string={0x31, 0x3, "6653d61e41a67683bf1da3446a3c593514fda5ef5b82538ce0bc9cfd3ebf590a70230a8a5f8d157a79ecac2ccc6445"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "ceb4e166197f068a4bdd41bcfd1be8f9c5085dcce4a7d0a61928170613b084cb6d27d220f4e5fd2ec84cf139a1569a0e3479fe686f46e4957e708606cd1af3c1e81fb948e34a70fa8b1b1a42e37eecdec9f2419a8ac76c10677eff19501e76846153983768204271ccfacde89caa3a60f84f60987dbcb992c782eaec14c33414b591ab6de4cbbba50b48b197bbb49713df8632064c593e50dd5b5f5648074f97164531e7fc1e3a0ff0acf9bae95abb7c8ddd4fa12878424c7625"}}, {0x57, &(0x7f0000000780)=@string={0x57, 0x3, "3db8c2fc664f42ff30bb688978c3b78f2cea1126a0a0eee3d660e58a557ac0aa3c75e363fef96ebc7f0b071022ff0034643643c7e46371e68c9627d870f48dba1cfef9475ef19b166c4f10b2ee3255cac4582e2641"}}, {0xc2, &(0x7f0000000500)=ANY=[@ANYBLOB="c2031c6be1c4f500e4441578495921e1731df16747319f30c6ce78a5b98ae70cccb1124c15202a34b5d112d22ac112aa210999516a46b88ca8fc3959258bfb1302c28692e68c8af90c68e06735bbdb99566b83b506b24665f5614f9a26d6b1aeebb953bba6f4ac725e6179f25f836f4228bb03445e5bc0aebbf9830ba3e521566b26f0a3f3e68bc8b70a8a16e20a920a4e26cd1b166edeeb503328fced4cc5940c75a437057aca2f6f3bb61003ad0e1ae8187103d3bc8ca0b1861ae5b7a5d3c650af"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}, {0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="6325615cce97b763"]}, {0x6, &(0x7f0000000680)=@string={0x6, 0x3, "78771354"}}]})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)

11:20:07 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x420}], 0x4, 0x0)

11:20:07 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x200000d0)

11:20:07 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xbae5, 0x32315258, 0x3, @stepwise={0x81, 0xfff, 0x0, 0x80000001, 0x8, 0x1000}})
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
r3 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x80000}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="862b0812116ec65151bf672f22e1ed498028c56b1d890e", @ANYRES16=r5, @ANYBLOB="00012bbd7000ffdbdf2515000000740005801c0002800800010014000000080002000400000008000400010000000800010075647000080001006574680044000280080001001400000008000400020000000800030006000000080003000500000008000200000000000800010015000000080003000400000008000300ffffff7f"], 0x88}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040))
write(r2, 0x0, 0x0)
splice(r1, &(0x7f0000000080), r2, 0x0, 0x1, 0x0)
socket$kcm(0x29, 0x5, 0x0)

11:20:07 executing program 4:
unshare(0x20000400)
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:07 executing program 4:
unshare(0x20000400)
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:07 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x8d62)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:07 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x420}], 0x4, 0x0)

[  860.565680][ T2478] usb 4-1: new high-speed USB device number 16 using dummy_hcd
11:20:07 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:07 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x3}, {r0}], 0x4, 0x0)

11:20:07 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/61, 0x3d)

11:20:07 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x2, 0x2)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x52, 0x6, 0x0, 0x7}, 0x10)

[  860.855718][ T2478] usb 4-1: device descriptor read/64, error 18
[  861.250673][ T2478] usb 4-1: device descriptor read/64, error 18
[  861.525654][ T2478] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  861.811671][ T2478] usb 4-1: device descriptor read/64, error 18
[  862.235565][ T2478] usb 4-1: device descriptor read/64, error 18
[  862.365742][ T2478] usb usb4-port1: attempt power cycle
[  862.945869][ T3835] net_ratelimit: 1052 callbacks suppressed
[  862.945910][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.945998][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.968423][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.977168][ T2651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.085574][ T2478] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  863.110093][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.118598][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0x6, 0x2, [0xd3b3, 0xffff, 0xbb, 0xf656, 0xc3], 0xfffb})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:10 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:10 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {r0}], 0x3, 0x0)

11:20:10 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f630c40000000000000000b630000fa5b9f4f8071f45c0000acaf2a84670a76700c387dc053bb7be63e87f9a72c5da036e728cf6338642ec86b0ffc3a9b3d61bbd1f5b3c929a2ee9b7f458078a09f5ba4f2e5a3327df64486e0c3ea6632c1b2e5e09fa7cbb901d6111f1aa63f60d28e2654f2b6f533e93208a657b794a6bdd29e4d973ba85edb61c2c194394e456f52af9404a987a4615c3ac23e42094bc253d924d4c31fe19b8086f2cc9108891d0c0000000000000000"], 0x0, 0x0, 0x0})
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0xb, 0x5, 0x7f})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
accept$alg(r2, 0x0, 0x0)

11:20:10 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x0, 0x80, 0x97, 0xa4, 0x7, 0xff, 0x98, 0x40, 0x3f, 0x7f, 0x1, 0x3, 0x80}, 0xe)

11:20:10 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008055}, 0x0)
unshare(0x12020000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)

[  863.255664][ T2478] usb 4-1: device descriptor read/8, error -71
11:20:10 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000000c0)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r3, 0x0, 0x1, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x208000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x2, 0x1, 0x212, 0x0, 0x80000001}, 0x4, 0xfff, 0x100})
ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8)

11:20:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xcb, 0xa0)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c40000000000000000080eb74b9beeb997569a2d80aab92388fa0db92e427b77d5e78fb4e39c9484902522a124c5bd89b3f4041f28e7d0aa1b43843e9ffdf1d0fd522fab00df09e567a07ed79fba1ba9cf4d2da94862999c22d383cb1026ce7f402986e0a4c6e61fce274a59b18716ae5791ae645e4e050d441981c38d0c6c374bab9e1bce7c824990ae2d3b4f4d4954e77c212b39cdcff564710c061cbd8d1764bd62cc8e1a3"], 0x0, 0x0, 0x0})
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x6, 0x2, 0x3, 0x8, 0x7, 0x6351})

11:20:10 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:10 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {}], 0x3, 0x0)

11:20:10 executing program 1:
unshare(0x20000400)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2ec}]}}})
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1b, 0x40000)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x1, r2, 0x1})

11:20:10 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x28}}], 0x2, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000400)={0x7, 0x9, 0x6, 0x1, 0x8, [{0xfffffffffffffff7, 0x5, 0x1, [], 0x1}, {0x0, 0x80000001, 0x10001}, {0x200, 0x6, 0x0, [], 0x200}, {0x7, 0x0, 0x0, [], 0x100}, {0x80, 0x7fffffff, 0x3017, [], 0x1808}, {0x100, 0x157260c, 0x80000001, [], 0xc08}, {0x200000000, 0x10001, 0x7, [], 0x2}, {0x100000000, 0x4b6, 0x1000, [], 0x3c83}]})
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r3, &(0x7f0000000000), r5, 0x0, 0x1, 0x0)

[  863.465709][ T2478] usb 4-1: device descriptor read/8, error -71
11:20:10 executing program 4:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:10 executing program 2:
unshare(0x20000400)
r0 = semget$private(0x0, 0x3, 0x0)
semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}, {}], 0x2)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/54)
semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000100)=""/63)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10)
chroot(&(0x7f0000000140)='./file0\x00')
socket$unix(0x1, 0x2, 0x0)
close(r1)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r1}, 0x10)

11:20:10 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {}], 0x3, 0x0)

11:20:10 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

[  863.569045][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.588026][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:10 executing program 4:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:10 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
r2 = msgget(0x1, 0x10)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000040)=""/162)

11:20:10 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x2}, {}], 0x3, 0x0)

11:20:10 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:10 executing program 4:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:11 executing program 0:
unshare(0x20000400)
r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
splice(0xffffffffffffffff, &(0x7f0000000000), r0, 0x0, 0x1, 0x0)

11:20:11 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {r0}], 0x2, 0x0)

11:20:11 executing program 1:
unshare(0x20000400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x40)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)

11:20:11 executing program 4:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

[  863.985947][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.994533][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:11 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {}], 0x2, 0x0)

11:20:11 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000140)={0x400a, 0x9, 0x7, 0x4})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r4], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x50}}, 0x0)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:20:11 executing program 4:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:11 executing program 1:
unshare(0x20000400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x404001, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2, 0x40)
ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x1)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:11 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {}], 0x2, 0x0)

11:20:11 executing program 4:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:11 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/4096, 0x1000}, {}, {&(0x7f0000001300)=""/62, 0x3e}], 0x6, 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000013c0)={{0x2b, @broadcast, 0x4e22, 0x5, 'sed\x00', 0xa, 0x800000, 0x5d}, {@local, 0x4e21, 0x2000, 0x2, 0x6e89, 0x200}}, 0x44)

11:20:11 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {}], 0x2, 0x0)

11:20:12 executing program 5:
unshare(0x20000400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

11:20:12 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:12 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x301000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0)
fallocate(r1, 0x28, 0x3ff, 0x1)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:12 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{}], 0x1, 0x0)

11:20:12 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:12 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200))
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000006e000000000000000000000b63"], 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x3, 0x9])
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCCBRK(r2, 0x5428)
write(r1, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
splice(r4, &(0x7f0000000000), r3, 0x0, 0xfffffffffffffffd, 0x0)
clock_nanosleep(0x4, 0x0, &(0x7f0000000080), &(0x7f00000000c0))

11:20:12 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:12 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{}], 0x1, 0x0)

11:20:12 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xe4, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe866}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5cc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @remote, 0x1000}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40884}, 0x4000080)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r3}, 0x10)

11:20:12 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:20:12 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

11:20:12 executing program 5:
unshare(0x20000400)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0)
poll(&(0x7f0000000040)=[{}], 0x1, 0x0)

11:20:12 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

11:20:12 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x20, 0x80, 0x1, {0x22, 0xd3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5e, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x8, 0x8, 0x10, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x5, 0x1}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x31, &(0x7f0000000440)=@string={0x31, 0x3, "6653d61e41a67683bf1da3446a3c593514fda5ef5b82538ce0bc9cfd3ebf590a70230a8a5f8d157a79ecac2ccc6445"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "ceb4e166197f068a4bdd41bcfd1be8f9c5085dcce4a7d0a61928170613b084cb6d27d220f4e5fd2ec84cf139a1569a0e3479fe686f46e4957e708606cd1af3c1e81fb948e34a70fa8b1b1a42e37eecdec9f2419a8ac76c10677eff19501e76846153983768204271ccfacde89caa3a60f84f60987dbcb992c782eaec14c33414b591ab6de4cbbba50b48b197bbb49713df8632064c593e50dd5b5f5648074f97164531e7fc1e3a0ff0acf9bae95abb7c8ddd4fa12878424c7625"}}, {0x57, &(0x7f0000000780)=@string={0x57, 0x3, "3db8c2fc664f42ff30bb688978c3b78f2cea1126a0a0eee3d660e58a557ac0aa3c75e363fef96ebc7f0b071022ff0034643643c7e46371e68c9627d870f48dba1cfef9475ef19b166c4f10b2ee3255cac4582e2641"}}, {0xc2, &(0x7f0000000500)=ANY=[@ANYBLOB="c2031c6be1c4f500e4441578495921e1731df16747319f30c6ce78a5b98ae70cccb1124c15202a34b5d112d22ac112aa210999516a46b88ca8fc3959258bfb1302c28692e68c8af90c68e06735bbdb99566b83b506b24665f5614f9a26d6b1aeebb953bba6f4ac725e6179f25f836f4228bb03445e5bc0aebbf9830ba3e521566b26f0a3f3e68bc8b70a8a16e20a920a4e26cd1b166edeeb503328fced4cc5940c75a437057aca2f6f3bb61003ad0e1ae8187103d3bc8ca0b1861ae5b7a5d3c650af"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}, {0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="6325615cce97b763"]}, {0x6, &(0x7f0000000680)=@string={0x6, 0x3, "78771354"}}]})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)

11:20:12 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {r1, r2+60000000}}, &(0x7f0000000080))

11:20:12 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r1, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:20:12 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

11:20:12 executing program 1:
unshare(0x20000400)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@ax25={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x4}, 0xfe}, 0x18, &(0x7f0000000340)={&(0x7f0000000280)="cffdbd481f61241318830abb8ef652769e2c60bab95e43a80b1d3cbea94a85dcf54a040f7224e8e0913c146ea1bd2a5d979dcddc750ffc436879a582803175a517d025d0dab46676d2cddf23947281d7dd3e5c7cfa57b6eda1264f742bc94ed7d381c29067ecfb20e6caa7ac47c8b0273917d3c63192dc9791d2c224143bfa643cb0beaa957f180ddc2b9a0ff6f054090a9ed516ac9ba283e5d9d42ba1bc0f8907e1d6c343c3373d1b12a27ce469cfc344def3e713dfbfdb", 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x40400d0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x303140, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000004aaa0000000000000a58000000090a01010000000000000000000000000900020073797a3200000000140011800c0001007061786c6f6164000400028008000840000000000900010073797a310000000008000a40000000000800054000000034140000001000010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x20000814}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x10}}, 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8000000}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000000)={r5, 0x41})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)

11:20:12 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3ffffffffffffd, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:20:12 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:12 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200800, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b630000f651afd16b19acfb07e92514e456523b650b70551b1842ad4dee3891582059fe31fff32987fd142568f771c1bebf7eaedcc2860cb2b20787770d61dc9b298b76a0bab544fa6abba98833134ca95a8fe1d12640bbe21fdb7730cdab31a9672532f5fc96450431b320e93fe80f9e6b874f38bf28da304df76f102cab723d2a837f83c60cc2601df5934ffc2f0d8e1d4819aa110586af30920122cf4c74427b619a1544fef3377100"/196], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={0x0, r2}, 0x10)

11:20:13 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

[  865.891205][ T2627] usb 6-1: new high-speed USB device number 14 using dummy_hcd
11:20:13 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r1, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:20:13 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:13 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000d40)={0x7, 0x1})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
personality(0x400000d)
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
accept4$nfc_llcp(r3, 0x0, &(0x7f0000000bc0), 0x80000)
r4 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r4, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000001c0), 0x4)
sendmsg$rds(r2, &(0x7f0000000b80)={&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000d00)=""/47, 0x2f}, {&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/141, 0x8d}], 0xa, &(0x7f0000000a40)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000007c0)=""/186, 0xba}, &(0x7f0000000880), 0x48}}, @mask_fadd={0x58, 0x114, 0x8, {{0xbc, 0x9}, &(0x7f00000008c0)=0x4, &(0x7f0000000900)=0x8000, 0x0, 0x8001, 0x6, 0xf73, 0x3, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x498, 0x1}, &(0x7f0000000940)=0x46c083a1, &(0x7f0000000980)=0xab, 0x3, 0x4, 0x4, 0xe96, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x200, 0x40}, &(0x7f00000009c0)=0x6, &(0x7f0000000a00)=0x1, 0x3, 0x1, 0x8, 0x1, 0xf, 0x9}}], 0x138, 0x20000000}, 0x20040800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c80)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000c00)="90987c9afdd1ba3987378a94f9225d87c7d6a301ca967b1e3db47e2e2646b64faca348ff4dbedf8613086bd19f261c6b3a80438362da6f1ec69b715dabc7ca2f900ddd0ec966452aa9b2bf6554fe3c7f60e2ecafed887c1d3fd492951f2793ed57a9f8b64c3bcf", 0x67}, 0x68)

[  866.195396][ T2627] usb 6-1: device descriptor read/64, error 18
[  866.605286][ T2627] usb 6-1: device descriptor read/64, error 18
[  866.885303][ T2627] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  867.165265][ T2627] usb 6-1: device descriptor read/64, error 18
[  867.571209][ T2627] usb 6-1: device descriptor read/64, error 18
[  867.712267][ T2627] usb usb6-port1: attempt power cycle
[  868.147588][T20114] net_ratelimit: 2074 callbacks suppressed
[  868.147596][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.161907][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.170441][ T2654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.312755][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.321230][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.445230][ T2627] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  868.475354][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:15 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x20, 0x80, 0x1, {0x22, 0xd3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5e, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x8, 0x8, 0x10, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x5, 0x1}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x31, &(0x7f0000000440)=@string={0x31, 0x3, "6653d61e41a67683bf1da3446a3c593514fda5ef5b82538ce0bc9cfd3ebf590a70230a8a5f8d157a79ecac2ccc6445"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "ceb4e166197f068a4bdd41bcfd1be8f9c5085dcce4a7d0a61928170613b084cb6d27d220f4e5fd2ec84cf139a1569a0e3479fe686f46e4957e708606cd1af3c1e81fb948e34a70fa8b1b1a42e37eecdec9f2419a8ac76c10677eff19501e76846153983768204271ccfacde89caa3a60f84f60987dbcb992c782eaec14c33414b591ab6de4cbbba50b48b197bbb49713df8632064c593e50dd5b5f5648074f97164531e7fc1e3a0ff0acf9bae95abb7c8ddd4fa12878424c7625"}}, {0x57, &(0x7f0000000780)=@string={0x57, 0x3, "3db8c2fc664f42ff30bb688978c3b78f2cea1126a0a0eee3d660e58a557ac0aa3c75e363fef96ebc7f0b071022ff0034643643c7e46371e68c9627d870f48dba1cfef9475ef19b166c4f10b2ee3255cac4582e2641"}}, {0xc2, &(0x7f0000000500)=ANY=[@ANYBLOB="c2031c6be1c4f500e4441578495921e1731df16747319f30c6ce78a5b98ae70cccb1124c15202a34b5d112d22ac112aa210999516a46b88ca8fc3959258bfb1302c28692e68c8af90c68e06735bbdb99566b83b506b24665f5614f9a26d6b1aeebb953bba6f4ac725e6179f25f836f4228bb03445e5bc0aebbf9830ba3e521566b26f0a3f3e68bc8b70a8a16e20a920a4e26cd1b166edeeb503328fced4cc5940c75a437057aca2f6f3bb61003ad0e1ae8187103d3bc8ca0b1861ae5b7a5d3c650af"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}, {0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="6325615cce97b763"]}, {0x6, &(0x7f0000000680)=@string={0x6, 0x3, "78771354"}}]})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)

11:20:15 executing program 1:
unshare(0x20000400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a01010000000000000000000000000900750073797a3200000000140011800c0001007061796c6f61640004000280080008400000000009000108000a400000000008000540800000000000000000e5700a"], 0x80}}, 0x841)
bind(r0, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000180)={{{0x5}}, 0x16, 0x8, &(0x7f0000000140)="937d0c774fc7375021a469636a26fbfde6fdffe3d083"})

11:20:15 executing program 4 (fault-call:3 fault-nth:0):
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:15 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x400, 0x4})
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
splice(r3, &(0x7f0000000000)=0xfffffffffffffffd, r1, 0x0, 0x21, 0x0)
fcntl$getflags(r0, 0x40a)

11:20:15 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = semget$private(0x0, 0x3, 0x0)
semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}, {}], 0x2)
semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000180)=""/54)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/252)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:15 executing program 3:
unshare(0x26010400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000))

[  868.535401][ T2627] usb 6-1: Invalid ep0 maxpacket: 0
11:20:15 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x60c, 0x12, 0xa76aab745009c26f, 0x201, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x6}, [@nested={0x38f, 0x3e, 0x0, 0x1, [@generic="271bc26d5b9e8d3d86df0177bfdca069cac229225b6cefc3969e093a3f8ae022f0cc99763c55a8bc13ae90563d572aec7a9042923385075f0f9ca1be225c778822739191c59393201dff737e4c80a0b0ed9e1480bf9ea2b4a5e5b2c037fa0c7181c13c76f95665424ba74963113252eddac4248e899996086b33f0ffcfc8ab741305faa81f12f05449d2aca752af7f3991f795eea82796c8fe529b1a91bb663ed00efdca4a2491c3d4982f5c71a82a59485a174375b00cf8db310954cf90c79f5e7fff1a6c0e08abbe049c93bccea83294f5cb90e30a80539cabd70aaae4663543555efbdb940d9b9ceffd60a1e530", @generic="f42952dab66bffb404dbbf9935a37d878436e5e8eefd5bba919e5caeb4cac96ae1fbadefd8a382a12419bff0af015264ba28c9fa3ae87ce8d99eb850ea19b8d8d5dc1696ba83b5b13a0ef513059b30f4c4f16a1ebbe5a436172fbaca98104e2c4ae9f3f70f32b678872f85760de1df1ea923f65d425817346609cf20986959c3f3a3edce04c0c25ccde0fd09ee4df0a5a713f5d1ff9c7f6d92f1e72ad283ee472110dfeee0213cbbf47dcc", @generic="2178609ef05b2c3f0d0103416976b079e1af1a77c2eec763e0b1f9e7a0377c3e0017e73497312aeeaa6df6434813115bc1bcc2272feca2c635ede31236abdf9788f6891d05b827afa47256b2b4098113491a2aa6a56e05bcf64b62a269aa2f65d534597850a12f5d1defb6d03e03c4c8b0437772ed3c91ee48ba654378303b050de27c00ca35858f7b79b608", @generic="51a5a7542fb17f7c0489ae1478206b161d57b4f0596b5ee201807fa1076441e2360f2c46019ee74b59749f16056769b9bf2c109aa68881359612", @typed={0x8, 0x4f, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@remote}, @generic="38db99fc310e38202bb44e5eb3f4f67fd8e6a3720ffe21af3a40fe6df6c22b36f9203c9310d125c0c23b3b75e7313a1d2614", @typed={0x8, 0x96, 0x0, 0x0, @ipv4=@broadcast}, @generic="2d3a95229b6cc60bf3872561bb64e1391f41ec98e19435c2b6e5718e1de532449c812502408ce86d1b48512246e574ca3632d95425a8d34b930378c0ec78ce295d990b8f2744856105a32247af5ee381f6e84ff3e44d21122163d0fbd8735f0a4a89213a538361ed862c7ea704a32fc3be1a19f3870fb55d508d0ac84bdd423322cae1b5845b61a099e560bd94622be98ce5a714063d73b41b33822a0d0c47956024b73836d0af37bc27333c5e320bfecbcd9ec2d0be26f77fc9fc600ccf51c6b3183fc9a861a91e3dc4265ca2"]}, @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="b70b4fd5e1d459ef7e7feb27068cca925cd4de40f52dc114e2d1e8f26fd80a1214084015fbaa389b42cccab902b58c54f0de77766d82cc43d019417da88d5f617b974206e9eebcd58e71dc8f270681f55e1d942a013cbea7639199128b4e0d480bc7d10390a7200fff534b4478856a8d98726164de09d68dd023bc1e3cd6f784cdf2b8ecc685f6781831fa2d939105386a6e997598d2aa489ec97b1065562a78608cb6623e21c42de3637fe8d16b559965646195a334064f687a7b2d62794a", @generic="214165a60dd67c1bf0a030ee3ff0a6720eccda908de38a7bcf574cd648df920d9c20b050653bb0a9b498bf6bb0c5ea0173d352a3a3c38b46ae56745b56b74f38a59b12bbe7f04d1349b77d67f0ece498e3f3df22d9ead59f59e24874325e429f5c1532305dbaa96de9564522e4423b0b701e483486d19874db02d92d69dab2a3d26ef546696fb6e018632de2ce5dce71596d3ce30ef9699e42014fe941bd6a454fcf4828518bcf94a4a43ca058273b301dd4283618ed3d39e96edfe54b76812098c22043eb10ad111054ffd10bb93ab263460aabb73b149957fc6d20797254b3c0bbbc7e47757ed1a3d0360d29750c63", @typed={0x8, 0x2d, 0x0, 0x0, @fd=r0}, @generic="450118874550ca6e11af9b5dd807c01c1ad8061821053c2bf3b34f2c77d2f0b6d17dc051a2a595c3df5c8ca62f1f18646b8e92995d7a8a691d1acd505fd0613067b4ce8d5070edc35cb2cf0ad283bbd0a91f037d5172ca81ee4d1628a90ccb2051112ed7b5a33d1bb3079b29dd0b9bbc210281246dc2acb3ffa6cb037fff31cdc16dd780257a4920532914e9c122a5f4af5e1248225ca58f0c0da185691e473a4296d38d7954c6488d"]}, 0x60c}, 0x1, 0x0, 0x0, 0x4000040}, 0x50)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:15 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:15 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xff}, 0x1)
unshare(0x20000400)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:15 executing program 3:
unshare(0x2c040580)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10)
ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x0, 0x7})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f630c40000000bf2c72c13ef3e620810000000000000000000b6300004289369d6cf70b71a1d8f94c9be6da95e78301484c0000000000000058099e1d12d1b5aa2dfa578900f88dce3163c280b7c9bdfb0e61081ceb48467c2f66ec0a598ae249620a4d46b552e41246942e607550dfd7050a2260242d9275538b6b73"], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x6, 0x2, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x101})

11:20:15 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VFIO_GET_API_VERSION(r0, 0x3b64)
unshare(0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xcd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x87}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff0664}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x4)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r2, &(0x7f0000000000), r3, 0x0, 0x1, 0x0)

[  868.705296][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:15 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xc8}, 0x1)

[  869.005172][ T2627] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  869.035519][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.095479][ T2627] usb 6-1: Invalid ep0 maxpacket: 0
[  869.100878][ T2627] usb usb6-port1: unable to enumerate USB device
[  869.195575][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.204779][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:18 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x20, 0x80, 0x1, {0x22, 0xd3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5e, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x8, 0x8, 0x10, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x5, 0x1}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x31, &(0x7f0000000440)=@string={0x31, 0x3, "6653d61e41a67683bf1da3446a3c593514fda5ef5b82538ce0bc9cfd3ebf590a70230a8a5f8d157a79ecac2ccc6445"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "ceb4e166197f068a4bdd41bcfd1be8f9c5085dcce4a7d0a61928170613b084cb6d27d220f4e5fd2ec84cf139a1569a0e3479fe686f46e4957e708606cd1af3c1e81fb948e34a70fa8b1b1a42e37eecdec9f2419a8ac76c10677eff19501e76846153983768204271ccfacde89caa3a60f84f60987dbcb992c782eaec14c33414b591ab6de4cbbba50b48b197bbb49713df8632064c593e50dd5b5f5648074f97164531e7fc1e3a0ff0acf9bae95abb7c8ddd4fa12878424c7625"}}, {0x57, &(0x7f0000000780)=@string={0x57, 0x3, "3db8c2fc664f42ff30bb688978c3b78f2cea1126a0a0eee3d660e58a557ac0aa3c75e363fef96ebc7f0b071022ff0034643643c7e46371e68c9627d870f48dba1cfef9475ef19b166c4f10b2ee3255cac4582e2641"}}, {0xc2, &(0x7f0000000500)=ANY=[@ANYBLOB="c2031c6be1c4f500e4441578495921e1731df16747319f30c6ce78a5b98ae70cccb1124c15202a34b5d112d22ac112aa210999516a46b88ca8fc3959258bfb1302c28692e68c8af90c68e06735bbdb99566b83b506b24665f5614f9a26d6b1aeebb953bba6f4ac725e6179f25f836f4228bb03445e5bc0aebbf9830ba3e521566b26f0a3f3e68bc8b70a8a16e20a920a4e26cd1b166edeeb503328fced4cc5940c75a437057aca2f6f3bb61003ad0e1ae8187103d3bc8ca0b1861ae5b7a5d3c650af"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}, {0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="6325615cce97b763"]}, {0x6, &(0x7f0000000680)=@string={0x6, 0x3, "78771354"}}]})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)

11:20:18 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x2, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:18 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = semget$private(0x0, 0x2, 0x1b2)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000080)=""/153)
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffffffffc00)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:18 executing program 0:
unshare(0x30040e00)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000001c0)={0x9, "f11e5a"}, 0x6)
write(r2, 0x0, 0x0)
r4 = pidfd_getfd(r0, r2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:20:18 executing program 1:
unshare(0x30000d00)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000))
getcwd(&(0x7f00000000c0)=""/4096, 0x1000)

11:20:18 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c4000000000000000001000feff0b820000"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2000, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x2f, @multicast2, 0x4e23, 0x0, 'wrr\x00', 0x37, 0x8, 0x3b}, 0x2c)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)={0x0, r2}, 0x10)

11:20:18 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x30000, 0x0)
sendto$inet(r1, &(0x7f0000000180)="7ce5df9b2cfd62f69366adc2ca77ba4890f59f58b143060cbc2366597f99218b681607679e0c919645559702938dd11eb8029f7bebb8c1a24d94b7bf4d9c7937ceaa5a0a16111fc4a4eeda8b45e8e962a9597e87152e9cd4", 0x58, 0x40, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000240)=r5)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
r7 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r6, &(0x7f0000000000), r7, 0x0, 0x1, 0x0)

11:20:18 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000740)={0x77359400}, 0x10)
setuid(r2)
newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x400)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000600)=<r5=>0x0)
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x7, &(0x7f0000000480)=[{&(0x7f0000000100)="9556e1f96437d073b8ce34844b647c356a50d7fac0d5f813fb7f0a343f9f497d789da1c77d3896ce85e95a0b2ae64cb2a8d4157908f8d656579d20f3214d2ae15c651c4fb4bf410c15f832b45dd6b7d6a7ffc7d9f499068471c76f6002998c0376d417fef045f1b608e32f29a9254c327a62e783ed1f36b3be2ae318280eef671c51b3d836f7028f6e4f47fb14994b531a15d1eac6c704a17a7941cccc237c26ab0ea1ec4592253990cb416ef04165ca10659c8eff2a", 0xb6, 0x8}, {&(0x7f00000001c0)="8fbc35cf5f39169ea4c15144fcd9c800a7e21ea86a8b3fd3b5c13ebba2c15ed91798842c7984ad82b4d6b6b7d76d7c64c9f2880defbe56b2aeaafc3acb8111f7edb6aeb9f9845ee28cdc02c5ecb15c9a8d9739fe1bb73c4ede558f7e171774f9ed53cc6142bbb0a916db87928f4b8e4f6209", 0x72, 0x1}, {&(0x7f0000000240)="98a1e2df040f83ddb890377e91ced87b716d34607149f29a7be63a227c2481966c72cef5d27669dcf5f644551b25d502749c579ba8e83c5288a0e6ec577a04f7aa29fef6b1e44a267200a6ec52cc89f6f24cbcf79119a53084b16c3401b94478d7be153afba4183a44acafcf8336985f5e3cb56db42fc5035f7fba58e063", 0x7e, 0x800}, {&(0x7f00000002c0)="9a78be0f95a58ca5d9cfddaf06d44a7021c11c41bdca141ea23d2ad2dacc16a20b2ab9ae894e67a9434f456eda76f966c58e76136b1fcc1b8c60a620899740ed82d12b2e9564", 0x46, 0x1}, {&(0x7f0000000340)="b307a492e627a78356921f3c4d0f1cfac4621f93e8b7b0b61ac13ecae65c95f65b77bdd422ebf974f0d387e2755d237606647e6bc0a6403fc5ca", 0x3a, 0x1}, {&(0x7f0000000380)="c375c1f9e7438b3b3951515d573dafbbf450113c1b1be15c510a2441037a1ddbe51160471c4fdcface15701c61d0e88886d0003d87b4d4b29bc62f135801dbcb96d91bd5bb665ac5604c4ae9dceab266d011e1168983b5798585ecb7", 0x5c, 0x80000001}, {&(0x7f0000000400)="a978cf9ee3cf0425ceb6c95207d653d156d1a926d6fb25a3d64fa492cdf321f61992abdb8c8e08921efc596089de6df495010c2032ac791ad6e0afee5f45cf7f74142eade5cabeafa7421ce2eb3a85b457645e40c5f07261f78782534de291ca2463a93fc2dae4674e0eca703d73f2203d462717e464", 0x76, 0x8}], 0x800, &(0x7f0000000640)={[{@noacl='noacl'}, {@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x839}}], [{@euid_gt={'euid>', r2}}, {@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'*.%'}}, {@obj_role={'obj_role', 0x3d, '[+,'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash='dont_hash'}]})

11:20:18 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x3, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:19 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x4, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:19 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
accept4(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000000)=0x80, 0x800)
getsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x4)

11:20:19 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r2, r2, 0x0)
getgroups(0x6, &(0x7f0000000280)=[0xee00, 0xffffffffffffffff, <r3=>0x0, r2, 0xffffffffffffffff, 0x0])
getegid()
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r5, r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r7, r2, r3)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[], 0x6c, 0x1)
close(r0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r8=>0xffffffffffffffff})
close(r8)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={0x0, r8}, 0x10)

[  872.085133][ T7771] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  872.375011][ T7771] usb 6-1: device descriptor read/64, error 18
[  872.785010][ T7771] usb 6-1: device descriptor read/64, error 18
[  873.074955][ T7771] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  873.185188][ T2554] net_ratelimit: 2076 callbacks suppressed
[  873.185194][ T2554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.344903][ T7771] usb 6-1: device descriptor read/64, error 18
[  873.352530][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.361092][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.369597][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.505050][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.521215][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.745051][ T7771] usb 6-1: device descriptor read/64, error 18
[  873.865102][ T7771] usb usb6-port1: attempt power cycle
[  874.385376][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.394023][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.403535][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.544969][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.584849][ T7771] usb 6-1: new high-speed USB device number 20 using dummy_hcd
11:20:21 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x20, 0x80, 0x1, {0x22, 0xd3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5e, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x8, 0x8, 0x10, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x5, 0x1}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x31, &(0x7f0000000440)=@string={0x31, 0x3, "6653d61e41a67683bf1da3446a3c593514fda5ef5b82538ce0bc9cfd3ebf590a70230a8a5f8d157a79ecac2ccc6445"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "ceb4e166197f068a4bdd41bcfd1be8f9c5085dcce4a7d0a61928170613b084cb6d27d220f4e5fd2ec84cf139a1569a0e3479fe686f46e4957e708606cd1af3c1e81fb948e34a70fa8b1b1a42e37eecdec9f2419a8ac76c10677eff19501e76846153983768204271ccfacde89caa3a60f84f60987dbcb992c782eaec14c33414b591ab6de4cbbba50b48b197bbb49713df8632064c593e50dd5b5f5648074f97164531e7fc1e3a0ff0acf9bae95abb7c8ddd4fa12878424c7625"}}, {0x57, &(0x7f0000000780)=@string={0x57, 0x3, "3db8c2fc664f42ff30bb688978c3b78f2cea1126a0a0eee3d660e58a557ac0aa3c75e363fef96ebc7f0b071022ff0034643643c7e46371e68c9627d870f48dba1cfef9475ef19b166c4f10b2ee3255cac4582e2641"}}, {0xc2, &(0x7f0000000500)=ANY=[@ANYBLOB="c2031c6be1c4f500e4441578495921e1731df16747319f30c6ce78a5b98ae70cccb1124c15202a34b5d112d22ac112aa210999516a46b88ca8fc3959258bfb1302c28692e68c8af90c68e06735bbdb99566b83b506b24665f5614f9a26d6b1aeebb953bba6f4ac725e6179f25f836f4228bb03445e5bc0aebbf9830ba3e521566b26f0a3f3e68bc8b70a8a16e20a920a4e26cd1b166edeeb503328fced4cc5940c75a437057aca2f6f3bb61003ad0e1ae8187103d3bc8ca0b1861ae5b7a5d3c650af"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}, {0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="6325615cce97b763"]}, {0x6, &(0x7f0000000680)=@string={0x6, 0x3, "78771354"}}]})

11:20:21 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
signalfd(r1, &(0x7f0000000000)={[0x4]}, 0x8)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(0xffffffffffffffff, 0x0, 0xcb6fe32c3c9bd513)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
write(r3, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000080)={0x0, 0x9})
close(r3)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:21 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x5, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:21 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
accept$ax25(r0, &(0x7f00000000c0)={{}, [@default, @netrom, @netrom, @null, @null, @rose, @bcast, @default]}, &(0x7f0000000000)=0x48)

11:20:21 executing program 2:
unshare(0x28000780)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00')
ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0x7, &(0x7f0000000040)=0x1})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$smackfs_cipso(r2, &(0x7f0000000100)={'net/ip6_tables_targets\x00', 0x20, 0xc, 0x20, 0x3, 0x20, [{0x88}, {0x15}, {0x14}]}, 0x82)

11:20:21 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x1, 0x0, 0x1, 0x9, 'syz0\x00', 0x5}, 0x3, 0x0, 0x1b, r3, 0x5, 0x6, 'syz0\x00', &(0x7f0000000040)=['\x00', '@\x00', '/dev/video#\x00', '/dev/video#\x00', '/dev/video#\x00'], 0x27, [], [0x8, 0x2, 0x0, 0x7]})

11:20:21 executing program 1:
unshare(0x4b5179e608f7979f)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

[  874.704882][ T7771] usb 6-1: device descriptor read/8, error -71
11:20:21 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendto$netrom(r0, &(0x7f0000000000)="dc300f52b213b8bcefb975b45484b35ebb936eda1a321d1f53da71796575bef6fea024863d7bbc10a4a48add092489e82ec67e4980a021eeb673a87a112c362bad6a16c89f997c00c3933156f3b7638ed2f1bbe4cc5212706bbab90198cecefb60cb822506bc372e14424c8eb65649ad9745530e7b24b9dddaf30a8c7154742d6b313624a49b534a4b721410fa1ab3a870dbeca70e10", 0x96, 0x4c891, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

11:20:21 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
splice(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x0)

11:20:21 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:22 executing program 1:
unshare(0x20000400)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000000c0)={0x81, [0xfffff177, 0x9, 0x4], [{0x6, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x25, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x8001, 0x0, 0x1}, {0x2, 0x3ca, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x6, 0x1, 0x0, 0x1}, {0xd314, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x9a, 0x1, 0x1}, {0x81, 0x1}, {0x2, 0x7}, {0x7, 0x40, 0x0, 0x1, 0x0, 0x1}, {0x80000000, 0xb5, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x100, 0x0, 0x1, 0x0, 0x1}], 0x7})

11:20:22 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getdents64(r1, &(0x7f0000000240)=""/4096, 0x1000)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

[  874.924951][ T7771] usb 6-1: device descriptor read/8, error -71
[  875.414830][ T7771] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  875.524893][ T7771] usb 6-1: Invalid ep0 maxpacket: 0
[  875.530956][ T7771] usb usb6-port1: unable to enumerate USB device
11:20:24 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)

11:20:24 executing program 3:
syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='.\x00', 0x4, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="e51570e9180d1a4ed54bcd286dff1e34117dddf9e1be65362ff72d4c50f5e6b9bb0be932af01e6d6bb1fff0eb272a872586868869a50ef187ca0018685affb0672efd5b7c930abfd7e3d59155af3f3b380c52172292ab5ac24ccdc6fe8cbc77213", 0x61, 0x2}, {&(0x7f0000000100)="790194e335374120410da1f41fb1d846339409570e85318f28cd1b064608ed8316a60eb9e11bad71209cb9133a0075b75310d331af8ab25dcd823fe87ae795d14cbcaf5ea7796aa046050fc4343df286d832f9d30028af0b3a7737f868d01101a3f071aaffc4637f75e5f6474c", 0x6d, 0x7}], 0x102e004, 0x0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000030705000000000000000000050000030900010073797a31000000000c00024000000000000000080c00024000000021000000070800054000000001"], 0x40}, 0x1, 0x0, 0x0, 0x80e0}, 0x4d801)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
readv(r3, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/80, 0x50}], 0x7)

11:20:24 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x7, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:24 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
pipe2(&(0x7f0000000080), 0x4000)

11:20:24 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x8, 0x3c])

11:20:24 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x59, @mcast1, 0xfff}, {0xa, 0x4e22, 0x7, @private2, 0x6fb}, 0xf0, [0xfffffff9, 0x2, 0xc, 0x80000000, 0x4, 0x0, 0x0, 0x401]}, 0x5c)
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400000, 0x0)
r4 = socket$inet(0x2, 0xa, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000100)={0x0, 0x3f})

11:20:24 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x8, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:25 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f0000000200))

11:20:25 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
splice(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x0)

11:20:25 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000001100)={0xf62fffb, 0x7f, 0x70, r1, 0x0, &(0x7f00000010c0)={0x990906, 0x8036, [], @p_u8}})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = dup2(r3, 0xffffffffffffffff)
bpf$ITER_CREATE(0x21, &(0x7f0000001140)={r4}, 0x73)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f00000000c0)="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", 0x1000)

11:20:25 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x9, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:25 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

11:20:25 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0xa20000, 0x65, 0x0, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a090a, 0x9, [], @value64=0x7fff}})
ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r3, 0x0, 0x1, 0x0)

[  878.194644][T14070] net_ratelimit: 660 callbacks suppressed
[  878.194651][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.232691][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.270746][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.289542][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.307090][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.319700][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.329985][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.339116][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.349660][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.359957][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:25 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000040))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0xc1000)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:25 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x86f02, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:25 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xa, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:25 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

11:20:25 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @loopback}, 0x94, 0x0, 0x0, 0x0, 0xff1a, &(0x7f0000000280)='vxcan1\x00', 0x3ff, 0x200, 0x4})
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r4, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000180)={0x7f, "500d2027e457adfa95ac2c5bf4dcdafe1cc087da1de5f2f4ddaa26eefc37a559ec3ab380fabe25eb738a7ecf1aaf6d1bc08d8dac568cf7b2cfba008ac2df0901"})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xffff, 0x2, 0x1, 0x4, 0x3, 0x404}, &(0x7f0000000080)=0x20)

11:20:25 executing program 2:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r0, r1}, &(0x7f0000000480)=""/220, 0xdc, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-avx\x00'}})
r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0xc, 0x0, r4, r3, 0x0)
r5 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#-!{$\x00', r3)
keyctl$search(0xa, r2, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, r5)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r6}, 0x10)

11:20:25 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xb, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:25 executing program 3:
unshare(0x20000400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
setsockopt(r0, 0xe2f, 0x7f, &(0x7f0000000240)="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", 0x1000)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

11:20:25 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

11:20:25 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e0000004a000505d25a80648c63940d0a0080000e0000000200a06d053582c137153e37090001800300d1bd0000", 0x2e}], 0x1}, 0x0)
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000000000000000200000000b630000"], 0x0, 0x0, 0x0})
write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {0x5, 0x7ff, 0x800, 0xf000}, 0x4e, [0xbcb3, 0x2f, 0xffffffff, 0x9, 0x3, 0x0, 0x200, 0xffff, 0x6d1, 0xff, 0x67f, 0x8000, 0xbc1, 0xffffffff, 0x4f42, 0x14, 0x1c000000, 0x1ff, 0xfffffeff, 0x7, 0x3, 0xfffffff7, 0x0, 0x2, 0x8, 0x5, 0x3, 0x101, 0x7, 0xfffffffa, 0xa38, 0x1, 0x2, 0x2, 0x1000, 0x1, 0xffff, 0x7f, 0x39ba, 0x0, 0xfcb, 0x4, 0x1b6b, 0xc013, 0x9, 0x4fd, 0x3ff, 0x81, 0x7fff, 0x2, 0x8, 0xb1, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x4, 0x6, 0x3, 0xfffff261, 0x1, 0x2, 0x6, 0x7fff, 0x6c1], [0x3f, 0x3, 0x401, 0x0, 0x3ed8, 0x3, 0x6, 0x3ff, 0x400, 0x1ff, 0x9, 0x0, 0x6, 0x2, 0x8459, 0x500000, 0x7, 0x7, 0x1f, 0x200, 0x3ff, 0x0, 0xc3, 0x5, 0x80000001, 0x5, 0x800, 0x6, 0x2, 0x6, 0x7, 0x1, 0x401, 0x3, 0x9, 0x9, 0x1, 0xd6, 0x2, 0x7fff, 0x3, 0x1f, 0x3, 0x200, 0x100, 0x2, 0x8a1, 0x9e, 0x2, 0x6, 0x5, 0x80000001, 0x0, 0x5, 0xc50, 0x1, 0x8001, 0x5, 0xffffffff, 0xfffffc01, 0x7fffffff, 0x9, 0x2, 0x80000001], [0x6, 0x1, 0x9, 0x5849, 0xfffffffe, 0x80000001, 0x2351077d, 0x3f, 0x7fff, 0x8, 0x1, 0x0, 0x2, 0x2, 0x2f64, 0x2, 0x0, 0xfffffff7, 0x6, 0x0, 0x9, 0x7, 0x0, 0x3, 0x8, 0x4, 0x8001, 0x100, 0x800, 0x8000, 0x9, 0x800000, 0x6, 0x3, 0x3, 0x7, 0x3f, 0x7f, 0x0, 0xf1b, 0xa4, 0x5, 0x9, 0x1, 0x80000001, 0x74ac, 0x0, 0x3, 0x4502, 0x6, 0xa3d8, 0x92, 0x6, 0x0, 0x3c3dcdc, 0x9, 0x56dc, 0x10000, 0x300000, 0x20, 0x7fffffff, 0x3, 0x5878abd3, 0x40], [0x10000, 0x390c, 0x1, 0x2, 0x3, 0xfffffffd, 0x6, 0x5, 0x9, 0xe0, 0xdf2, 0x1, 0x3f, 0x0, 0x7, 0x5, 0xcfc, 0x4, 0x1ff, 0x7, 0x3, 0x9, 0x6, 0xfff, 0x7, 0x3ff, 0x3be4, 0x2, 0xbe1, 0x101, 0x3c1, 0x5, 0x0, 0xc4d, 0x2, 0xca67, 0x401, 0x200, 0x100, 0x3, 0x0, 0x7fff, 0xfb21, 0x101, 0xffffffff, 0x1, 0x3ff, 0x8, 0x8, 0x32f, 0x0, 0xee, 0xcf, 0x3, 0x1, 0xd1af, 0x2, 0xfffffffb, 0x9, 0x5, 0x7, 0x0, 0x4, 0xea53]}, 0x45c)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)

11:20:25 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xc, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:26 executing program 1:
unshare(0x20000400)
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x4, 0x5, 0x46a, r3}, 0x10)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8)

11:20:26 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x8, 0xbdf, 0x221, 0x5, 0x63, 0xffff8395, 0x5, 0xf7c00, 0x1f, 0x7, 0xeda, 0x7ba, 0x8, 0x5, 0xf58, 0x5, 0x80000001, 0x200, 0x2, 0x3, 0x8001, 0x0, 0x8e4, 0x2, 0x5, 0x0, 0xffff, 0x7, 0x0, 0x8, 0x21d, 0x8001]})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:26 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
unshare(0x20000400)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

11:20:26 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06a48c605827478c00"], 0x0, 0x0, 0x0})
write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000080))
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:26 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

11:20:26 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$RTC_AIE_ON(r2, 0x7001)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:20:26 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xd, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:26 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)={0x2})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:26 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

11:20:26 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x1, 0x0)

11:20:26 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x4, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x6, 0x3, 0x9, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x0, 0x1ec1, 0x2, 0x6}}, {0x1f, 0x4, 0x0, 0x0, @adapter={0x0, 0x200, 0x100, 0x2, 0xff}}, {0x78d, 0x1, 0x0, 0x0, @sint={0x50ceeee, 0x930}}]})
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

11:20:26 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:26 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0))
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x3f)
splice(r1, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:20:26 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xe, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:26 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
io_uring_setup(0xb47, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x3, 0x365})

11:20:26 executing program 5:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
timerfd_gettime(r1, &(0x7f0000000080))
unshare(0x20000400)
r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

11:20:26 executing program 0:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x3, 0xfffffffe, 0x2, 0x7fffffff}, 0x2, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffff648, 0x3f, 0x6, 0x6})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:20:26 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000000c0)={0xe2, "4518e15bb063f377ed41bf5e5a8e2689dfb8332b0217bb93741a1f3d581d7e26", 0x2, 0x20, 0x5, 0x80, 0x2, 0x3, 0x101, 0x3c3e})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:26 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0xf, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:26 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}, 0x5c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0xc10, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4881}, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c4000000000000b630000"], 0x0, 0x0, 0x0})
ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x78c, 0x800, 0x7})
unshare(0x30030000)
close(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:20:26 executing program 5:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80b02, 0x0)
unshare(0x20000400)
r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

11:20:26 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)

11:20:26 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x10, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000))

11:20:27 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0xbefbeee02faf9e08, 0x0)

11:20:27 executing program 5:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0)
unshare(0x20000400)
r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

11:20:27 executing program 1:
unshare(0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:27 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b630000fe0bb2fb7b3c553e7bbb54197e22f4e96056a561895fc12eb7c41df765f82a2b87ee891830fe09e77e9ecf258081429256582122399f2936670fd92ea9e12c4c7455762f5e8ae0f03922d30b121e5d027dda3d30d109cb7a62b98d390290a7b3ab870847bbeac5c475c3839f4f0711bc2ba27a0b5adc3338f77e2913713e98b808801548bb8f79b66edee0a791a385c3cd2d5ff1fafbf0a245c6ab48e08e820ae79cf0a0989f64bd76b2d2cb9d416f56e027968ac91fb0b5036d43a2b873b745c751a7c8269c2b504ec9af65"], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000080)={{0x3, 0x2, 0x57, 0x1, 0x4}, 0x2, 0x7ff})

11:20:27 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x80000)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:audisp_remote_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x98}, 0x1, 0x0, 0x0, 0x851}, 0xc4)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x90}, 0x4004085)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000840)=0x2)
faccessat(r3, &(0x7f00000007c0)='./file0\x00', 0x10, 0x200)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000800)=[@request_death={0x400c630f}, @register_looper, @register_looper], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000540)={0x6, 0x0, [{0x10000, 0x25, &(0x7f0000000000)=""/37}, {0x80000, 0xf2, &(0x7f0000000100)=""/242}, {0x4000, 0x4, &(0x7f0000000040)=""/4}, {0x10000, 0xd2, &(0x7f0000000240)=""/210}, {0x82df5de2e7dfd772, 0xf9, &(0x7f0000000340)=""/249}, {0xd000, 0xfa, &(0x7f0000000440)=""/250}]})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r6}, 0x10)

11:20:27 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x12, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 5:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
unshare(0x20000400)
r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

11:20:27 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:27 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)

11:20:27 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x13, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20880, 0x0)
close(r2)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200))
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0)
splice(r2, &(0x7f0000000000), r0, 0x0, 0x4b6, 0x0)

11:20:27 executing program 5:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
unshare(0x20000400)
r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

11:20:27 executing program 1:
unshare(0x8060080)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r2, 0xffffffff}, &(0x7f00000000c0)=0x8)

11:20:27 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x401, &(0x7f0000000040)=0x4)

11:20:27 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x14, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 5:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200))
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:27 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200))
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
splice(r1, &(0x7f0000000080)=0xf7fffffffffffffd, r0, 0x0, 0x3, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
recvfrom$phonet(r2, &(0x7f00000000c0)=""/188, 0xbc, 0x1, &(0x7f0000000000)={0x23, 0x4, 0x0, 0x1}, 0x10)

11:20:27 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000000c0))

11:20:27 executing program 3:
unshare(0x10000000)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000000)={0x5, @output={0x1000, 0x1, {0x5, 0x4}, 0x1000, 0x21c}})
close(r0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000400)=@tipc=@name, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, &(0x7f0000000500)=""/253, 0xfd}, 0x0)
fsetxattr$security_capability(r3, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x80000001}, {0x3, 0x1017}], r5}, 0x18, 0x1)
r6 = getpid()
r7 = getpid()
rt_tgsigqueueinfo(r7, r6, 0x80000002, &(0x7f0000000100)={0x39})
migrate_pages(r7, 0xfffffffffffffffd, &(0x7f0000000100)=0x133, &(0x7f0000000140)=0x3)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:27 executing program 5:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0)
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:27 executing program 2:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000400)={0x0, @reserved})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0b63000000000000000000000000110000000095b6d992bfdde727c7e3838d0c5c11ab95015eb78e182e81519a0a29a4dfda9fa53677598f18b0ea13ee7011157ff3558e908e0696f59de58938271a0560fe667a7cc222bc719186dd361be5b0dfea8eb75639e7d8c8f0ce74f5b16042a983d7f46810aa671a64843b735673b4c7327124447482e590f00e6d72a9a47a0e717efe9198353f9e6a22c9e362"], 0x0, 0x0, 0x0})
write$P9_RRENAMEAT(r1, &(0x7f0000000240)={0x7, 0x4b, 0x2}, 0x7)
unshare(0x22030080)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000180)={{0x2, 0x0, @identifier="d310859ebc8ca5d5607b607aa0e64255"}})
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x80000005)
close(r2)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa9}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x140008c0}, 0xc000)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r2}, 0x10)

11:20:27 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
fadvise64(r1, 0x3f, 0x1, 0x0)

11:20:27 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x15, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040))
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8800, 0x0)
write$smackfs_labels_list(r2, &(0x7f00000000c0)={[{'#'}, {'/dev/video#\x00'}, {'/dev/video#\x00'}, {'/dev/video#\x00'}, {}, {'/dev/video#\x00'}, {}, {'[,*+./]/'}]}, 0x42)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r3, 0x0, 0x1, 0x0)

11:20:27 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={<r5=>r4, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, [0x7fffffff, 0x0, 0x7fffffff, 0x800, 0x7, 0x2, 0x5, 0x0, 0x401, 0x342, 0x5, 0x3, 0x800, 0x0, 0x5]}, &(0x7f0000000100)=0x100)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={r5, 0x97, "65833abc55f40f2a087087b069d2bb2fa9df13c2ed330508ab987ef4b9d9aa13e258f95df2915bb18d447cc965e05ca6986d56d335623c83f821bf767f72089997dda2123d1ac47629c8c3538ec0c222d02b7491e892c1799cd73d0382f89b11a13f7245e768a8a261196a77e3c37a6e975e9fa5b82ec3141ff2c5e6205f753f98f9a96c2ebd197042a4433968173ced840ac954a1a0ac"}, &(0x7f0000000240)=0x9f)

11:20:27 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:27 executing program 2:
unshare(0x22000500)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x16, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:27 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r3})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:27 executing program 5:
unshare(0x0)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:27 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000140))
close(r0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x20}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f630c400800000000000000000000000b630000ab70f101181077d36131c1e81e41bf56d6ada906ddfc0dcd1a01114b913b3ca5e9211126b0dbbf79e91f4b77c392afd3222318675c848696c05169801402541fe18db6227e3adf8daa926201b05f8eaf682dd26fc04b2303b8969853f7360428edd040a3254589283910c6257db3c7891db853303a16a65c588564ba24f01ac1b5dd2ca6583ebe352743f1e215ffd2b65dcb4148212b901494028301833e99f827f7a0040130748c99f8a2895a0f3fd9ffba4ed994b32fc3db8391d349a7fbd086181482a48480bdf77665aba1f77ede8df70a81d6b9f0c6130537f5a443499d20099f5a9bed804d74fcb6005ada5e5b9bbb9b21c1de218d238026ce4923c049a118b0999ab489975ad4f87d39c18faf83322222323a3e069e4fe0d6dc986473ab1f85ed7430d24b26f00413b91d2bc1e5cc3d87543d44120ebb1fad777e93f8d27ff5f32d0b3bd8f6e57b928cb4dc345358820d9d8d9b72453d3969818e048790229c0e763e1540fbf2fae1daf435433e80f4b50f3839713f3b9cb97b151a27e56e267798d5a71b7d62c72aeea7ad1aaf74f8c08a298dc845c21d6baa19de33edc89bcd2f5b234b44d087c5186a992bf9cc76ace67ae7ec7ec9e32544c46f835cacfb158d4ffb192f8308ff11dfd2568aab5711e980f69d6fdee2077ad8e554c58ecb52ec50a131553095d8936a6e8523d64cd19ef00a6fdebe3a283aa613ba407838c938c29dc1f93e4fbd32c3cb8a7a13df3b72ef3e329a50f5a2fbdf3d5208776e2f8f9a77d40d562d185518d403683469df9adf886f93309c4ee977f20cab725f08889a16e27c0540cdde5d557655c15071593fc2de711af97b8f5bf1bdb2c81b2ded7b21723062065bbca8d80d804c730174a838a7f24d3843f59968fbc33646c7400228fb9a59e5b4768ac43022bb271430bb4b2a5184fde6871a6ac3d15432e9fe7623497fc4a3c4afe6437b67a3090e0a3b325ef06512761d22f82502d97fcfa0e3b97de030dfa173f4e2574dd0895d4f716ddcb9f188c99b0ab96e32957a5440456aaf69208f5ac3e043da975021489642"], 0x0, 0x0, 0x0})
write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x18, 0x0, 0x7}}, 0x14)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r4, &(0x7f0000000000), r5, 0x0, 0x1, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x88000, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1)

11:20:28 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x17, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:28 executing program 5:
unshare(0x0)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:28 executing program 1:
unshare(0x20000400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(r0, 0x125d, &(0x7f0000000040))
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)={':Q&*(-$&*'}, 0xa, 0x3)

11:20:28 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x2814, 0x4)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1290, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x82, 0x3, "590b2249598730f635289c88f986fd09e5702f38e194cdb00e178e42f032666343bd70df90d73e6bb6efb459da6c9ac57b98cbc33e1e7df20b86cec591ce14abb38958f13d346c304d4e95131572805c8ac7dc27a1f28de12daeac1b937704774bf352fdb01f7939f0e3299c8c5a2d2cfd65e7468a897f4091df4e689630"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8d52e00a86a6ec414ee76cb6470c4d2ea2cdc7f8eb443549bbaec32a177fc0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4e9a92a87c7184f08696465d3068df5cd8159fcb"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "5cb4b64f98bf210e8cf9741de77581e91cc2f3ed96c5cdf0547d35"}}]}, @TIPC_NLA_NODE={0x10ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b95f86eebd8ca411ae448222b2aa19bc1041e708845e80bde923e2ed"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "96732722ff8b3c6a536eb382d0bc6710f272abbee9fe3223547e32ba4453"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5d2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

11:20:28 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)

11:20:28 executing program 5:
unshare(0x0)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:28 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x18, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:28 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x20, 0x6, 0x9, 0x16, r1, 0x800, [], r4, r6, 0x1, 0x5, 0x3}, 0x40)

11:20:28 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0x6)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x68)

11:20:28 executing program 3:
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x22, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r0)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x51, 0xe9, 0x0, 0xff, 0x0, 0x7, 0x4008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x89, 0x3}, 0x210e, 0x101, 0xfffffffe, 0x9, 0x55f, 0xffffff7f, 0xff80}, r0, 0x2, r2, 0xa)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40200, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000024000b1400"/20, @ANYRES32=r7, @ANYBLOB="af224353eeaf8028b4f2edf2377d00000000ffff0900010000000900010067726500000000001400020010000300010000000000000001000000"], 0x44}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@remote, @empty, @dev={0xfe, 0x80, [], 0x1d}, 0x4, 0x400, 0x1, 0x100, 0xef6, 0x910040, r7})
close(r3)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)

[  881.299006][T14351] Unknown ioctl -1070571007
11:20:28 executing program 1:
unshare(0x20000400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

[  881.329114][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  881.340009][T14355] Unknown ioctl 35083
[  881.348941][T14358] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  881.358886][T14355] Unknown ioctl 35083
11:20:28 executing program 0:
unshare(0x20000400)
connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x7}, 0x10)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000400)=""/4096)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x121000, 0x0)
write$smackfs_logging(r3, &(0x7f00000000c0)=0x1, 0x14)

11:20:28 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:28 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]})

11:20:28 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x19, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:28 executing program 1:
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10)
unshare(0x20000400)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:28 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x3, 0x1, 0x1, 0xffffffff, 0x0, 0x401})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:28 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:28 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="5a0000000001006405b822c47860dce601006579e6000000001c00000080000bf176317fb552d0e64639053fb80f1c1847994995ec495f03886fe53b295ea0cfe634bbcf4f246489dec6d4623670a3868652b7592e04f20b089b4ac1851fbea9548ae949b2f166bd9060ffdcc7510f03c7978f3ccda9a0819c495c7c3888a1806839dd223df911339592e2edb328b2fc4548e71895aba9676dfd1527284aaa1eb647e2d3f23c2f0b33fa006d01d52671a157b8a7619d6c54744f8c6d85d065a06021b29c03f163fe5a72c9c2fb7c210a9a033dff911cd58e8ddbd5488e75689ad289ef39e24927a26e"], 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4040845)
unshare(0x20000400)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:28 executing program 3:
unshare(0x20000400)
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0xab, 0x1, 0x6}, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}])
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)

11:20:28 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1a, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 2:
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x80000002, &(0x7f0000000100)={0x39})
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/uts\x00')
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)={0x0, r2}, 0x10)
r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8000)

11:20:29 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000040)={@fixed={[], 0x11}, 0x5, 0x1, 0xfffd})

11:20:29 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1b, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)

11:20:29 executing program 5:
unshare(0x20000400)
openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

11:20:29 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x28c02, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x7f)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000180))
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r7}, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r7, 0xfff}, &(0x7f00000000c0)=0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:29 executing program 0:
unshare(0x20000400)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/4132], &(0x7f0000000080)=0x1024)

11:20:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1c, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 5:
unshare(0x20000400)
openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

11:20:29 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1d, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x4, 0x80, &(0x7f0000000000)=0x5})
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000680)={0x2, 0x2, 0xffffffff, 0x8, 0x61a, 0x3})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/38, 0x26}], 0x4, &(0x7f0000000480)=""/201, 0xc9}, 0x2002)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x1f, @private2={0xfc, 0x2, [], 0x1}, 0x100}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, [], 0x40}, 0x85}, @in6={0xa, 0x4e21, 0x33, @private2, 0x8}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @local}], 0xa0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xfff)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)

11:20:29 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x33, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x12, 0x8, 0x38}, {@loopback, 0x4e20, 0x10000, 0x4, 0xa1, 0x3}}, 0x44)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:20:29 executing program 5:
unshare(0x20000400)
openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

11:20:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x1e, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x4, 0x0)

11:20:29 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffffb)
unshare(0x20000400)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:29 executing program 5 (fault-call:2 fault-nth:0):
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x21, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:29 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:29 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c4000000000"], 0x0, 0x0, 0x0})
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4416f50000000b4f04d3558f00"/23, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010067726564000000001400020010000300010000000000000001000000"], 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@private2, 0x2c, r4})
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r5, 0x0, 0x1, 0x0)

11:20:29 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x4, 0x10}, &(0x7f00000000c0)=0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000140)={0x2, 0x200, 0x80000001, 0x6, 0x3, 0x8001, 0x80, 0x101, 0x1, 0x0, 0x3, 0xff, 0x8, 0x7c19})

11:20:29 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x2, 0xd, r0)

11:20:29 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x78)

11:20:29 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x3, 0xd, r0)

11:20:30 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b63000073389582ab409cb817da711270afe691bfa36c4165b8a17c150f32ee114fe22eff8ccb90496ccefce59638f5de51570a154bc2ca3ad9d175d32a02809fbf62bc895505b531fe432e8dbd480a97a3f785044f7a8317e938919eeb68dbbb3d2218d09f5279744989283b60ac496998d0680eda9e933e915c0669635986e1da23ae876f45710182117d15215ed349ac129aa213"], 0x0, 0x0, 0x0})
statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x10, &(0x7f0000000080))
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r1, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:20:30 executing program 1:
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80000)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4)
unshare(0x20000400)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)

11:20:30 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x200000d0)

11:20:30 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x4, 0xd, r0)

11:20:30 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
unshare(0x20000400)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040))
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:30 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
connect$llc(r2, &(0x7f0000000040)={0x1a, 0x13, 0x3, 0x3, 0x5, 0x1, @multicast}, 0x10)

11:20:30 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x7, 0xd, r0)

11:20:30 executing program 4:
unshare(0x20000400)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x800, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='-/\x00', 0x0, r1)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:30 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x8, 0xd, r0)

11:20:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040))
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r2, &(0x7f0000000000), r3, 0x0, 0x1, 0x0)

[  883.204422][T14498] net_ratelimit: 1878 callbacks suppressed
[  883.204429][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.236327][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.258667][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.301530][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.346387][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:30 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "5c7c18ed243d389d", "7067db6245b3469767acbf96a0c12fe9", "885f4883", "737e05e04974242b"}, 0x28)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:30 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0xd, 0xd, r0)

[  883.386666][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.416451][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:30 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080))
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x4}}, 0x18)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

[  883.448483][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.484274][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:30 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0xe, 0xd, r0)

[  883.543485][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:30 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000100)={{0x3, 0x1, 0x5, 0x2, 0xffffff03}, 0x2cb0, 0xe1, 'id1\x00', 'timer0\x00', 0x0, 0x62, 0x99a, 0x2, 0x6})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='posixacl\x00', 0x0, 0x0)
close(r1)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x80000, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x8, 0x1, 0xff, 0x9, 0x2})
getrlimit(0x7, &(0x7f00000002c0))

11:20:30 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0xf, 0xd, r0)

11:20:31 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x280000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:31 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2, 0x1)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x210200, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000001c0)={0x2, 0xffffffff})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="54040000", @ANYRES16=r2, @ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x80}, 0x10)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x0)
close(r6)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r6}, 0x10)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000400)='/dev/capi20\x00', 0x20000, 0x0)

11:20:31 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)=""/203, &(0x7f0000000140)=0xcb)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
ioctl$FIBMAP(r2, 0x1, &(0x7f00000001c0)=0x9)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000180))
splice(r0, &(0x7f0000000000), r3, 0x0, 0x1, 0x0)

11:20:31 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x10, 0xd, r0)

11:20:31 executing program 4:
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:31 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x15, 0xd, r0)

11:20:31 executing program 4:
unshare(0x24008400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:31 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x16, 0xd, r0)

11:20:31 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0))
unshare(0x20000400)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000140)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000100)="e04ac39f3f4ba64ba53361e8266faeac442d193768ccda9c5e576d2c7eafc2")
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8)

11:20:31 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x17, 0xd, r0)

11:20:31 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x18, 0xd, r0)

11:20:31 executing program 4:
unshare(0x20000400)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0x6, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x101}], 0x0, 0x0, 0x7}}, 0xffffffff})
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xffff8000, 0x4f454859, 0x8, 0xffffffff, 0xb816db5690e57821, @stepwise={{0x800, 0x1bce}, {0x4000000, 0x2}, {0x7f, 0x5}}})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(r1)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sctp\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c83280278000100", @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000060001000b00000008000900000000001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f0000000000000000000009000000000000"], 0x5c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040050)

11:20:31 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x19, 0xd, r0)

11:20:32 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x3e8, 0x200, 0x70bc2b, 0x25dfdbfd, "", ["", ""]}, 0xfffffffffffffdcc}}, 0x0)

11:20:32 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x1a, 0xd, r0)

11:20:32 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x1b, 0xd, r0)

11:20:32 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x0, [], [{0xffffff7f, 0xfff, 0x81, 0x0, 0x1, 0x101}, {0x8, 0x9, 0x3, 0x1, 0x5, 0x7fff}], [[], [], [], [], [], [], []]})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:32 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07630c400000000000000000001000000b630000"], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)

11:20:32 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x1c, 0xd, r0)

11:20:32 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)
unshare(0x40400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
shutdown(r1, 0x1)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20c300, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x4cc0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000180)={0x7})
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)='team0\x00')
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))

11:20:32 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x1d, 0xd, r0)

11:20:32 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$KDDELIO(r2, 0x4b35, 0x80)
ioctl$BLKRAGET(r1, 0x125d, &(0x7f0000000040))
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:32 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x8)
ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000140)={0x1})
sendto$phonet(r0, &(0x7f0000000000)="699a64f8ff19276e6f0ac1d03de6e30f31253114259c96d63893431966eb3134fe935798f0de0870eb6cfacfa6f1872a67dcd46b25b66b0c431c8ee875455fe72244c4b7e7c3b4eefdb876", 0x4b, 0x0, &(0x7f0000000080)={0x23, 0xff, 0x1, 0x8}, 0x10)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10)

11:20:32 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x1e, 0xd, r0)

11:20:32 executing program 1:
unshare(0x20000400)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_dccp_buf(r1, 0x21, 0x1, &(0x7f00000000c0)=""/199, &(0x7f00000001c0)=0xc7)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0xfffffd2b)

11:20:32 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x21, 0xd, r0)

11:20:32 executing program 4:
unshare(0x20000400)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={<r1=>0x0, 0x41, "9a8011de502123e0592a9d1b1f37b188fabffd145e09083de39be8e3e9bde9c976e352295ab73963ca007c7b8b5a6989cf7de65203388fab56b5a846f15ced4507"}, &(0x7f0000000100)=0x49)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x7fff, 0x0, 0x7}, &(0x7f0000000180)=0x10)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10)

11:20:32 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, r0)

11:20:32 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)

11:20:33 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x24, 0xd, r0)

11:20:33 executing program 4:
unshare(0x20000400)
r0 = open(&(0x7f0000000040)='./file0\x00', 0xc142, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x20004000)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x10001}], 0x1)
close(r1)
r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x400, 0x2)
sendmsg$sock(r3, &(0x7f0000001700)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x1, @multicast2}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="d1d4bd5dbfcdc924c81300ecfe5f458746fcd72347ad5825a50da5ff58a22c3643c766b1a358b90ec5280f309580c9edd2e412377d499b0aef3352a37c42854f517a3073e54b9fa16868d6b805c76ebaa725e876beca490caf53", 0x5a}, {&(0x7f00000013c0)="296e73a5fc2613932c015c46be17eaf5b5f1e02aec4c1be362db6bd7f78bc810c91c63c430ffe67876a2e1bf4b5773ac0cf3813932ebf5c2688596ae02fbba7288174e26c17e33204d6de1536d9e226e150b830ea6a78fb010c414a130f1cb2f8ab4920ffee67c1c4995369dfd362f9c61716d2333e2148362cd1ec3f4755e6950ec6a55fdab8b4f2a2436bb5fa4177d2167c5a185bc5543586b683c6189fae7ef79fdc90ac3512df1a924421860b6db7fb53d977a6d0d72f08cacb8a019316d86", 0xc1}, {&(0x7f00000014c0)="64fe9ff193f6d630c47edec243bb214152d65e856fb56b65de0e1bffbb5320a8b407d54494389ead3000f5c4dd3bb4445a7f2d10269d2697f98248bbf1f2291d989ac2ac008ec4be782ab413ecd22b45df99f8c9e5acdc2233012b688ca5886c2deebe0fd377b15a06fdf4c92fa8c796c17c1e9c6564971a3d5e97c21c22e8bee3", 0x81}, {&(0x7f0000001580)="b1b329c73828b2ff5e60fb1f75bfa98204b70357dd542b4a16304af6e74f07c20038a1f01723f331270491a163a2b8511360ce0633be886353a24005046b27d273d6a50b85a2d7bd3724b2cf7ad0e26efd379b82851ce2f022eefdff33bc26b825cec54095401deb606a74fc", 0x6c}, {&(0x7f0000001600)="fe4e82151e15525b1e87e70efbd37839a0018e1a0c0dc71af774fed6cbcd31f63a4185f57d183bce06ccb76e721cb382b3f224e101106e417f3a502f6b133a659ebd7f62dbf1673b035a37", 0x4b}, {&(0x7f00000001c0)="b83f", 0x2}], 0x7}, 0x20004001)
syz_extract_tcp_res(&(0x7f0000001740), 0xffff, 0x9)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)=0x1)

11:20:33 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x25, 0xd, r0)

[  886.092121][   T27] audit: type=1800 audit(1593084033.242:59): pid=14658 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16378 res=0
11:20:33 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x26, 0xd, r0)

[  886.176987][   T27] audit: type=1800 audit(1593084033.282:60): pid=14658 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16378 res=0
11:20:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000080)={0x0, r2}, 0x10)

11:20:33 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x27, 0xd, r0)

11:20:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x4, 0xffffffff, 0x5, {0x2, @sdr={0x432d2a5f, 0xff}}, 0x8})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0xffffffffffffff3c)

11:20:33 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x6)

11:20:33 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x28, 0xd, r0)

11:20:33 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0x8, "a98196136a84ec2bf0d396b129409979c31a80f3735e335006c77926fb1875ed", 0x1, 0x1})

11:20:33 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x29, 0xd, r0)

11:20:33 executing program 4:
unshare(0x30000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:33 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r1, r1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getpid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r5, 0x80000002, &(0x7f0000000100)={0x39})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x0, r1, r3, r4, 0x40, 0x2}, 0x8, 0xfffffffffffffffa, 0x8038, 0x8, 0xffffffffffffffff, r6, 0xfe00})
unshare(0x20000400)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r8=>0xffffffffffffffff})
close(r8)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
read$midi(r8, &(0x7f0000000000)=""/57, 0x39)
r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$isdn_base(r9, &(0x7f00000000c0)={0x22, 0x87, 0x3, 0x80}, 0x6)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r7}, 0x8)

11:20:33 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, r0)

11:20:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)

11:20:34 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x2b, 0xd, r0)

11:20:34 executing program 1:
unshare(0x20000400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x280400, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x101000, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080))
exit_group(0x9)

11:20:34 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x2c, 0xd, r0)

11:20:34 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000))
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x144, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast2}, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9d25, @private1, 0x6}}}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x840}, 0x40844)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:34 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x2f, 0xd, r0)

11:20:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c6530d25b2aa00ae43338651483c76515f3535a54ce2e140657677eea56f5073eb1de471e02803341cec346f9e5b8ac693d106257da22adad4412007a830cb1a66bed"], 0x4a)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:34 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x34, 0xd, r0)

11:20:34 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b630800"], 0x0, 0x0, 0x0})
ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000100)={0x4, 0x0, 0x6, 0x7})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
accept4$tipc(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x80000)

11:20:34 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x35, 0xd, r0)

11:20:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x8c}}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xe1f1959fdd327ffd}, 0x48)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:34 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, r0)

11:20:34 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630f}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/81, 0x51, 0x1, 0x8}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @increfs], 0x0, 0x0, 0x0})
sendmsg$nfc_llcp(r2, &(0x7f00000008c0)={&(0x7f0000000340)={0x27, 0x1, 0x2, 0x1, 0x3f, 0x7f, "62ed5ca12cfa37c28a814a9874859cd157b4252892ab18e41e906999cf46d622ff40d4ad90d53c7d193c7f16a8fe7177b742935c4b258b56d361b40bf2aa8d", 0x29}, 0x60, &(0x7f0000000700)=[{&(0x7f00000003c0)="b2405334693c6414", 0x8}, {&(0x7f0000000400)="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", 0xff}, {&(0x7f0000000500)}, {&(0x7f0000000540)="e7f0c4773b6a1e255c66dafd3b23705c0414691b", 0x14}, {&(0x7f0000000580)="a060549c042e00e99f4cdde14dbc536ac5e64946383a5df6deff810db31d3ffaf0bf490cc7a7e026daf7f142c3fd6044ba053f1d2a9e4241009822c008e317d86f77422372812bbbfc0f71bb", 0x4c}, {&(0x7f0000000600)="fc533ff98e9dce7b8af6a727ba6d5e4b72cd7bd3cbf44cdc96dfdb433b904faad374321fbdb6c6bc03bd62d9c056e8105fdc60b4bbcd2bdbdc35d0e9d2a60f6e32277613faf3f58c8491c9f997f7f99e1556fb4ddc8ed3a5bcb62e0283a690c98f2356cb72ab74cdb85a71cae63940a7d5d37b46fafca06a9d47e8615535d63de67d70d099b257c5e718bd56119518249b7405d4594da408f4a478e61042b50934bd74de1af1dd6b6573ad5b756048931f434dee12f3e159b4daf6d35a3f3e2839204ef029d981483d69b5f5db53c47395fe22326fd18e0dbeabe9f12b9bfe879a9555a6f77f8008e8d81b4b25acff6274e7800407f605", 0xf7}], 0x6, &(0x7f0000000780)={0x108, 0x100, 0x8, "ae371a1c954382866fdbc85f2b63e59fab124f178dc596daf661e0a0511a18ff1c5390c70d1a1be70b4b4e382219be5ef3826899c205aeb96119c374ed387fa1c091187a436d1bfa5d505903b1c5ab5dd89999747f94adaed5fadf25050c4dad1372da67d4a67ade2951656ff94a451ddfd4c92f7fbafb127586f3a9e1ca7efd2039ecf5769eb3ad2d947d2775b8fb2b98b028eedd1f7023ae79fd120a3f34cac434aed972e34a0cdb8b517f69288b5f8e07023f261e9f4ac3e671b167dee59a0cf0c1c79be3eb8e175ecc7d134b06362a1920d443521806ab0fe51b8fb48d1e7984c8ba703f3f634e9ed2e25f5a4db50fc1"}, 0x108, 0x4000001}, 0x40010)
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000000c0)={0x3, 0x165})

11:20:34 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
mkdirat(r1, &(0x7f0000000000)='\x00', 0x133)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

11:20:34 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, r0)

11:20:35 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x2, 0x7, 0x9, 0x9b, "5dec0ebe63affad07cb250f4644532ebb38700e297cd4d62f69a4306218b9f1300dbfb87aefa2cfaf770261fd8a9e710881d381283bbb9e5905d3ab87abfa1", 0x2a}, 0x60)
socket$inet6(0xa, 0x2, 0x1)

11:20:35 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, r0)

11:20:35 executing program 4:
socket$inet(0x2, 0x3, 0xfffffffd)
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0x80000001, "19248994c9d436962dff0a48a9b7e2cb710d2790dc8dabb0afbb1739339f0707", 0x2, 0x400, 0x3f, 0x1b25049f, 0x1, 0x3, 0x0, 0xfffffff8})
ioctl$TCFLSH(r1, 0x540b, 0x0)

11:20:35 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, r0)

11:20:35 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
socket$pppoe(0x18, 0x1, 0x0)

11:20:35 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x3a, 0xd, r0)

11:20:35 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
sync()

11:20:35 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x4}, 0x8)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:35 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x59616d61, 0xd, r0)

11:20:35 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00')
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20044868)

11:20:35 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xc, r0)

[  888.384121][ T7771] net_ratelimit: 3698 callbacks suppressed
[  888.384128][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:35 executing program 4:
unshare(0x2a010400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:35 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xf, r0)

11:20:35 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$9p(r0, &(0x7f00000000c0)="d5236d90e3863edd5af6d09a55bfb41113fe37eecd7e8e1bcbf06738cbf2ae31c3f195bd077690b569791938435358111e578725fbff364b842fd44cf4d82608a5e63ac8c4aa99d2aba552309ab845bf4ce6f0b9a5c8fc1de5c80a2ad67cfc6214df644b49c5a6ef53826fff28d39fa4f7b55bcda7868bcd577e9ed3c16ccb321f742c25782fd123d28e23933418a13dee4917558c17ed0be3d4bb6d29773773e805b6e0ed60d4cde595c2366ac0bd42cf3b213062a5d06bd3285e72956ed5a98838552d054c839c685865e44fdd0ef2e9d03a366f8e62c57e4f12fbc3c8397e5b35510ff11ce8bb0a", 0xe9)
unshare(0xd2bfaa6dec28a8e9)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

11:20:35 executing program 4:
unshare(0x20000400)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x240580, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400100, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r6, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="99e8710000000000ff7f0000000000000500000000400000", @ANYRES32=r3, @ANYBLOB="00000000c6cf00"/28, @ANYRES32=r1, @ANYBLOB="000000000600"/28, @ANYRES32=r4, @ANYBLOB="00000000000000000100"/28, @ANYRES32=r5, @ANYBLOB="00000000d67400"/28, @ANYRES32=r6, @ANYBLOB='\x00'/28])
close(r1)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)

11:20:36 executing program 1:
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r0)
setpriority(0x0, r0, 0x10000)
unshare(0x20000400)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xffffffc0, 0x5, 0xc6e, 0x4}})

11:20:36 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x4c, 0x0, "9ecbd009613fa7c2d971a799e0b534c8fcd915450f6bdec6d2b5e7b89653bcefbe87127f04a39092d1ea908b538fc8dceebfac3f1d20a57f8a340de0da9fd373bfd4e093d44bf4847dac0c163becaedc"}, 0xd8)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000280)="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")
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f630c400000000989000000000000000b630000690ccbf35642a7d87980c71008a83535958ab86016d46a84c9b7423a06a73b52cd897ed861c076f9cf85a5ac9e599c1bd2ecf42f1e60f747e80943b186b05d31db2b538207625e40df0fa9ed9e73354b9d13fe0eafecfb598412fbd12186ae16"], 0x0, 0x0, 0x0})
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000080)='net/raw6\x00')
getsockname$ax25(r5, &(0x7f0000000000)={{0x3, @bcast}, [@null, @bcast, @rose, @netrom, @remote, @rose, @rose, @netrom]}, &(0x7f00000001c0)=0x48)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TCGETX(r6, 0x5432, &(0x7f0000000180))

[  888.945082][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.953388][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.961951][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.024068][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.032443][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.041175][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.050493][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.059999][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.060159][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:36 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x108, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20040800)
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)

11:20:36 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000100)="e04ac39f3f4ba64f6d3361e8266faeac442d293768ccdadc5e576d2c7eafc2392bc3890adaaf37b991c9cdb32a14c543c74219ca2ac3c482393d39275ee71d9bff1c47c3175dc13cbb035c362ac7d0ccdf2bd5a5ae2c0da0852fceb4a0165dd4b5a0037ee325f947b4d723462534dd6044da0fbcc76864d46dfd8489b19777e56492437b178edcd306fd77e9f977abc4a5870300b7d8109e6408fe854a865559b2d09eec986de5c8860739bb40a5c6c8c89bcac7c1d8377186b50fc3b6a678153b22b653c3defcc1bc49c4f6859a1533782aac2f30")
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x401)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x1, r0})
ioctl$TIOCSTI(r1, 0x5412, 0x2)
close(r0)
r4 = shmget$private(0x0, 0x800000, 0x8, &(0x7f00007fd000/0x800000)=nil)
shmctl$IPC_RMID(r4, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:36 executing program 4:
unshare(0x400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:36 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x6, 0x8, [0xfff, 0x4fac, 0x7, 0x5, 0x43c, 0x2, 0x800, 0x1]}, 0x18)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:36 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/207)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x2, [0xf2bc, 0x3]}, 0x10)

11:20:36 executing program 5:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="09000100677261640000dfff140002001000038cfc558b603bc463acf4429148"], 0x44}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008041}, 0x40)
unshare(0x20000400)
r6 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r7, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000100))

11:20:36 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c48000000741900000047d31e2852980d98"], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000080)={0x0}, 0x6b)

[  889.872414][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
11:20:37 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
close(r0)
syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0xf4, 0x200202)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x1, 0x2, [], &(0x7f0000000000)=0x20})
getsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000100)=""/204, &(0x7f0000000200)=0xcc)

[  889.932642][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
11:20:37 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r3, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
write$P9_RREAD(r2, &(0x7f0000000040)={0x15, 0x75, 0x1, {0xa, "37fc1539f64fa920e23d"}}, 0x15)

11:20:37 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = dup2(r3, r2)
sendmsg$qrtr(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x2a, 0x3, 0x3fff}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000100)="0b233aa7ee2e422fff88c26c6d44987b99a6dc984bb369b7f8ff81668e6bab8195e8ce672fd43cee18c7a88b5e8cc7a417379f34cbc605a670bbff7525dff4e399dd843d9ed9062b51320bc3588fab2fe3addefe4c12d66bdc63035bd37d0870ee420887cbb5c37feecf9990c5972d934cf5b38ba9967944bc6c90e56ec2971549ea328c66131e73926d27a14b406878f27eb8a8133cc2a7f5616b02d84d0ff9f46ad21616c18a11061ccf5959626d4346a25c0787", 0xb5}, {&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000000040)="f32fc83873915348000e7bf6347e65563f12f991812f476c8569b2156d1ee826b81eac88415d2f5ff7570f337be2a1747f4cabbaa97e7fde0d64e5a76a857f1775750a277d37e101501e36100eb823d4c65be31d38cff3d48b790e9c9fd435309085f854c710a1f28c62c8544ad7d08c34fd8754e54a4a89e094", 0x7a}, {&(0x7f00000001c0)="429891599ef9a53d942018b5c63d8575498d33b5cbaf767922a1a1", 0x1b}], 0x4, &(0x7f0000000380), 0x0, 0xc001}, 0x38)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:37 executing program 1:
unshare(0x26070180)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)

11:20:37 executing program 4:
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1)
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:37 executing program 1:
unshare(0x20000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0xff89, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x400000}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0x0, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8820}, 0x2004a880)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000000)=0x1)

11:20:37 executing program 4:
unshare(0x20000400)
close(0xffffffffffffffff)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f630c4000000000000000000000ff03000000000205b249bc59d3a182a496a5a191efd0d22bfe464ec116f9d80714af23be2e938a97c6"], 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
close(0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000140)=<r3=>0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
io_submit(r3, 0x3, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x0])
clock_gettime(0x0, &(0x7f00000001c0)={<r5=>0x0, <r6=>0x0})
io_pgetevents(r3, 0x2, 0x3, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000280)={r5, r6+60000000}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
close(r7)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000140)={0x1, 0x3, 0x8, 0x2, 0x7})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r2], 0x4}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0}, 0x10)

11:20:37 executing program 5:
unshare(0x20000400)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/vsock\x00', 0x4000, 0x0)
ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001c80)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default})
write$P9_RREADDIR(r0, &(0x7f0000001b80)={0xe4, 0x29, 0x1, {0x10001, [{{0x80, 0x2, 0x4}, 0x7, 0x1, 0x7, './file0'}, {{0x1, 0x3, 0x7}, 0x3f, 0x4, 0x7, './file0'}, {{0x4, 0x4, 0x7}, 0x7fff, 0x2, 0x7, './file0'}, {{0x4, 0x2, 0x5}, 0x6, 0x4, 0x7, './file0'}, {{0x20, 0x0, 0x1}, 0x100000000, 0x4, 0x7, './file0'}, {{0x0, 0x1, 0x2}, 0x7, 0x9, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0xc0000000, 0x81, 0x7, './file0'}]}}, 0xe4)
r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/direct\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
socket$pppl2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
geteuid()
geteuid()
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x40000000008, &(0x7f0000000240))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r3, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001fe3e9ffffffffffffff0000000000000000"], 0x5c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x54, r3, 0x0, 0x70bd29, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, [], 0x1}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x34040811)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44035)
syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403)

11:20:38 executing program 5:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2)
getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

11:20:38 executing program 5:
unshare(0x20000400)
openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

11:20:38 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:38 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f630c40fb71e2e4c9001500000000f25378a78a55a2b17558"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000000000000000002000000b639000"], 0x0, 0x0, 0x0})
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={<r5=>0x0, 0x5e, "9ba77aa8d7e12a6f8c065519939ffd0dae06628598fcd448a9d69c55977e945c0a7a696db26627d2f32d7cb3587294719ef0cd9b99b0cc80de8e0dfb3131f795439e7f0a95b45a80393304336dba1c9ed222b818e1577178f1d9c4fe0d45"}, &(0x7f0000000080)=0x66)
syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7, 0xc4000)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xb1cb, 0x3, 0x4, 0x2, 0xffffffff, 0x10001, 0x2, 0x400, r5}, 0x20)

11:20:38 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:20:39 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0xa8}}, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="8c8829a5cbc548e867f22a3613b8160d46d16fa3ff98dc7251d5fc15421f1e08f9c78615", 0x24}, {&(0x7f0000000040)="82556121b7d6fb16c723ab2ec09b928f0bffeb199f73dae44d4979ab01acd5698d5a0b3731ef1a99521968b5267daf0eeda8038f55a4f88aa86768d809c015d34e71dc343b0f429148fbf136873e3a06154665f547e3d059ca1c3713be8a80520c80bf5e118e8c", 0x67}, {&(0x7f00000000c0)="33b2b917f8abac6da8c324bb731fecb2cc2fbafff1e175b9d0c7b749075a9ad6e7948d21aca2bb1df10b21bbff94ef0915a07009aae78abebc6160df3f691196ce95a2a0979f815b4d412199bf8b26932ff498c0b68aee564fa025496afc1f0c327706f894b5e8f3c098cc2c5d5c2ea61560c930d8449d78fcbad5cbfbfe691171a4f4b3b7a47d61185772a0f1a32702", 0x90}, {&(0x7f0000000180)="eacfb6e82e1b91d36d29a71bb189ddf1a441f79cec0c8745f46517e7a2496ef4fef7c07c5750dfb2d647b2501d753598f6eecf825a2598861f36bf8c3b524dfd8b23da2d7333b54a851f5c2ab836baef6694ae61014f4ca921f2ab6d7222a733239538156f431b1a2fc31ff63c5e4e77d49ee99a1cf69ac16127bb614aab110c22b053f60cd19cf1969c4700612fe313cf55d98b1a2b34963d8eb095f8f108bbddc91fc5052e1d8d9634e1e51e81a01c6a79ee5ef60674a5a1548672abeafb92a989245aa34c18d3f8115d55a6d911fe63f64a3a0abecf1112a1", 0xda}, {&(0x7f0000000280)="dc1a39ce1d43ea5633adfa307a5c8a679092bb236698c2d46b457420859b50c0d533f7d3777a1834314c21d5695c1f2ee7c16b5fca5e579ff4a9586649d27707b2aee2c2243909311afc13bacb8b66a0df7fadb0d5536bfa8e0e5742e26c3ed8461a015e3ed73674845bab", 0x6b}, {&(0x7f0000000300)="055dabf64c9667952b036f48f86aa42756f13e4c93f6ce1603c3230722a538b9cf19a1e342c6b3a1370189e28ff513106970e75ffa4d3d2c44a6542789dcfa79d4c900", 0x43}], 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xc8}, 0x6004040)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
clock_gettime(0x0, &(0x7f00000031c0)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f00000030c0)=[{{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000600)=""/128, 0x80}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/247, 0xf7}, {&(0x7f00000019c0)=""/125, 0x7d}, {&(0x7f0000001a40)=""/42, 0x2a}, {&(0x7f0000001a80)=""/111, 0x6f}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/74, 0x4a}], 0x9, &(0x7f0000002c40)=""/185, 0xb9}, 0x9}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002d00)=""/42, 0x2a}, {&(0x7f0000002d40)=""/17, 0x11}, {&(0x7f0000002d80)=""/117, 0x75}, {&(0x7f0000002e00)=""/178, 0xb2}], 0x4}, 0xc8f}, {{&(0x7f0000002f00)=@un=@abs, 0x80, &(0x7f0000002f80)}, 0x100}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)=""/2, 0x2}], 0x1, &(0x7f0000003040)=""/112, 0x70}, 0x7}], 0x4, 0x20, &(0x7f0000003200)={r4, r5+10000000})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r6)
r8 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0xfffffffffffeffff)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r8}, @register_looper], 0x0, 0x0, 0x0})
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000440)=r6)

[  893.991972][ T3835] net_ratelimit: 3106 callbacks suppressed
[  893.991979][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.144698][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.153245][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.163485][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.310081][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.318620][ T2627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.465527][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.783904][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.797233][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.797751][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:45 executing program 2:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$FIONCLEX(r1, 0x5450)
close(r0)
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xd7)
r2 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x2, 0x20000)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$kcm(r2, &(0x7f0000001d40)={&(0x7f0000001700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x0, 0x0, {0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00', 0x3ff}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001780)="694423fde7de42d9d237063b8167842c8db173e5a1837ea2f7ffd2f84e34afe30a8ad0b86b3c81996ce3ab4e3b05981b52c8ce64f0b4d7e577d8f5cfd81520c1c9ac4b46a128094bb4c8d44c60dde179b9be8693ab22851ab1c58f7e93fe7a0b38903a6e12a96a8b549b6331627b32402988d51a966e78d9c27775f7e1d3dea1a17078ee2e9ab37955616167478063172e3cb7758ae1741fd130b634d00b30d31d7f43715f60f47621a7c649cd6f54bee98b897c8dc8c82b72646750d166aba9c487cfe7c660c23da0a8a861b034ff8620a254a627aded9aa0064e518f4ab40aade0b49028c767ce02", 0xe9}, {&(0x7f0000001880)="a73d6fbc5e6d1a4fa78246fcfe9d4593afe3aa99ddc59329186f19ab34965e16d8a082cc3b2d9cb145f63cda7c898bba8e47ea92342ebc59", 0x38}, {&(0x7f00000018c0)="19162c3e81ba01eb02d687e4b61d88caba21334f91699572e212fcb0c87a10652822cb7c0d4285c39ab0719723653bdee42f8a4848b3dd99ac29d37ef05ddb871f4ba95e0165c842a8fa73e98c481d9ee59af7a91ce2c13727da86d8aa416e307131efc6b878eafde6a15d409f341b54825790182d026e0a81082b5140953f39d5a41d9d4c4fb4e32f36abae8afddf533c799b2f7532d58c77cbfe202415098e6c854ff3d46df9922eeff5982b42e9596df316d42bed121269966863f06c14d725da18f65756b104b13d3938521f", 0xce}, {&(0x7f00000019c0)="95fe70dc6ca7c9f23c4bf8e8e213991c0dc2055cc3931a99cc600436b30a35024b8cd97da9a68c1e93d3d0ee1c84913af39c8f0c229271590813e88f08bacfa704db4e3e637da50ac59f1ec5b2fc716aabb188aee566", 0x56}, {&(0x7f0000001a40)="31bd046e654e9d6e25134d17276f2ddfd36f7e02a814b01b35c5caaf380a265e9db91f73db7e7e1f1da1ad3514ac4c33cb2b55c9cab60ac84646e5227add8aefa8eac95f1953a84926bf9fce99ab", 0x4e}, {&(0x7f0000001ac0)="a4e1c83e66084a2bdc790ae4e7c33f8ebefd631b5aeb9a339b304ac9c01bc0701ac133686aa7d7ddcc92f06516b600a018b6928ee251e3fb47d4a84b9a339f67e4c7c6f662aecf557d1bab512940a54ddeeed2e034a855914cc6638684213180aa97b31395cdfd5b483d4cc066b27dc6c886b1ab3e0b807413d6c26e3cdf209c47cb967648d6abf4ed8ab2a92dacc1e87af89c0a1f324142ee1f57d69d1e3abca311566f88d29b0c14f67bd23a0478e0efc548f8f86f08f14537918f00f113e25ad57387118233cd3bebee9af4aa5a7b85b5743f83913aa7f054129aca3f541af6fe1041f494aa5e9f5baf2016", 0xed}], 0x6, &(0x7f0000001c40)=[{0xb, 0x11b, 0x6, "73c633022592335c382a100a1da622969293749057a3911197bd7f1cd8eb3ba594f93400f88d72bb8eaafc63ded24e059f80f9af54278cf03dd94b5a25c3001340aab4c0bfa5313c91e00718e21a79ba3fe882808ab5d2326bf78e742e0cb5d8c5f2dd9c7b46b6bacddf0ba87607500e682dd07a12d9"}, {0x60, 0x10d, 0x72a, "80d0549d2cd4b9c88ab4f0e43bec801fdb9cc412c31525d8e60c732ff94a379945d05b88da58720fc32f02c61dd10be8819d44c4774f70c9d2d9e11405320d4d09cbac28cd5118180e"}], 0xe8}, 0x40044)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=""/4096})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @bcast, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xfd}}})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000000)={0x2, 0x8, 0x4, 0x4000, 0x4, {0x77359400}, {0x3, 0xc, 0x16, 0x3f, 0x5, 0x8a, "65d23323"}, 0x9, 0x3, @offset=0x3, 0x7, 0x0, r6})

11:20:45 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x40080, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000ffffffff181b0000", @ANYRES32=r1, @ANYBLOB="0000007f5662ea7badea000000000021075061223b46cc102b3200"/37], &(0x7f0000000000)='GPL\x00', 0x400005, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x4}, 0x10, 0x0, r0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xc0, &(0x7f0000000140)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="8561646600000000050000000000000002000000000000000100000000000000852a646600000000", @ANYRES32, @ANYBLOB="00000000bb00000000000000852a62770a1000000300"/36], &(0x7f0000000480)={0x0, 0x20, 0x38}}}, @register_looper], 0x0, 0x0, 0x0})
accept4$unix(r4, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000540), 0x0, 0x2, 0x2a}, @fd, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}, 0x400}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x8, 0x0, 0x1, 0x1, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000003c0)={r7})
close(r5)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:45 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, r2)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x39dfd3ae, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:45 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x30, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x2}, @request_death={0x400c630e, 0x2}, @increfs={0x40046304, 0x4}], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)

11:20:46 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200c00, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000003c0)="373a9d91cc947f1cec848850277aa84b054fa23e45c8d0ef143829328867e48becb7a5211c2bf346915f708aa60544980fe6b05b64ff573774171cdde01bd48ae6ce36c9a3d2a6fc7fa037b59068e22273069dc8a67a47f67366e6c49d81a1ecbd4b76e8740906eaa71387bf9b8f788b9287f49e60465a8901f8a6a337ea61af0f53c68185eaee77d297684dad5d7d1ed7bc20ac157d4d1ed61a7caed2b1aa415131a52ed7c5ec3381466ee8152bcebdc7fa1f9c7b8baa0215c900a9b2b45676d61c54013a4f0767dae41e289aca39c85ea64e65e613b306d6383532")
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
close(r7)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
connect$tipc(r7, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x4}}, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r5, @ANYBLOB="300029bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
clock_gettime(0x0, &(0x7f0000000300)={<r8=>0x0, <r9=>0x0})
mq_timedreceive(r6, &(0x7f0000000280)=""/17, 0x11, 0x7f, &(0x7f0000000340)={r8, r9+60000000})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

[  899.107231][ T3841] net_ratelimit: 35 callbacks suppressed
[  899.107239][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.122967][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.132963][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.146574][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:46 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8)
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000100)={0xc3, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000180))

11:20:46 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)

[  899.343549][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.351843][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.361413][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.423314][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.505303][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.524561][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:46 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="2222d9ea8d75aa39b710b1adc91350bd33cee8c4b1e0c965807050cdc794c175241d27a8d709c74f72800263768009e91f6bb3f7650ebd9f73c7effff8e1c0ce91a17bab8443bfcb2c2522b78777f5697564dc829dcd3ed0f74d73d81fec4b845df173b7d5e6b27dfafb83666996e741526029eb301eee3c2b79e3e1280f3da6dcc8c05f0794fb01f036e2d3ccfae795e3590e5aaf5027fc1a97c48f5c9c3d4297852ee4139d9ad24a0cfe5a253a61fcb3907a198fcba2641880f67f", 0xbc, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="ddff0cdbb115347c7e032e852efa8bb866dd0e88a7828a98a226a96ba01bad8f9f3d8eef520a", 0x26, r1})
pipe(&(0x7f0000000200))
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x3, 0x40, "c8adc68440e450ddbf04be6fc1299fddc52cc9", 0x6, 0x4820})
splice(0xffffffffffffffff, &(0x7f0000000000), r2, 0x0, 0x0, 0x0)

11:20:46 executing program 3:
unshare(0x20000400)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', r3})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4002, 0x0)
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000040)={0x2, 0xfffffffe, 0x8})
openat(r5, &(0x7f0000000080)='./file0\x00', 0x80000, 0x5)
close(r4)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)

11:20:47 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f630c400000000000000000000000000b630000cea9dc52cdc841e6d8a64e1bd75422636007a25c5fc64fe78562d6b86edca4c6585c675fd48a599d379dcf241e81d77753bab990acd3322fa9cede876935e4ca27cfa3963708dc493a0b883eae31d1cfa79c39a0bf3113a166506ded243cbb35a2a12cf75b9cf7a9d67045f262c8a960f34ead8596d1f9645aafe1439449d99df43b81dc6b82ea986582548fe9c9b424c34ee65af2163336f29f0cc12dda0000000000000000"], 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x718a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004018)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000400)=""/4096)

11:20:47 executing program 3:
unshare(0x20000400)
personality(0x8000006)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000)
ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000040)=0x3)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:47 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:47 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, 0x13, 0x400, 0x70bd2a, 0x25dfdbfb, {0x8, 0x4, 0x40, 0xd5, {0x4e22, 0x4e22, [0x10000, 0x3d, 0xa7d7, 0x5], [0xfff, 0x38c, 0xe2, 0x97], 0x0, [0x1, 0x5]}, 0x1, 0xfffffff8}}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x8040)
setuid(r6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x4e23, 0x0, 0x4e22, 0x71a, 0x2, 0xa0, 0x80, 0x32, r4, r6}, {0x783, 0x0, 0x4, 0x7ff, 0x6, 0x3, 0x2, 0x7}, {0x0, 0x6c, 0x735, 0x6}, 0x337a, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@private2={0xfc, 0x2, [], 0x1}, 0x4d3, 0xff}, 0x2, @in=@empty, 0x0, 0x3, 0x0, 0x5, 0x6c, 0x7f, 0x5}}, 0xe8)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:48 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x15, 0x1000012, 0x6d, &(0x7f0000000240)="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"})

11:20:48 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100, 0x109080)
openat$cgroup_ro(r2, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0)
r3 = getpid()
rt_tgsigqueueinfo(r3, r1, 0x80000002, &(0x7f0000000100)={0x39})
r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/bnep\x00')
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040))

11:20:48 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000001c0)={0x1, 0x1, [@empty]})
close(r2)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x62800, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f00000000c0)={0x3, 0xff})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=<r5=>0x0)
r6 = fcntl$getown(0xffffffffffffffff, 0x9)
rt_tgsigqueueinfo(r5, r6, 0x28, &(0x7f0000000140)={0x3e, 0x6, 0x1})
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000280))
accept$alg(r1, 0x0, 0x0)

11:20:48 executing program 3:
unshare(0x7c77a77f00fdcdba)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:48 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0fe30c400000000400000000000000000b630000"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:48 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x4}, 0x2)

11:20:49 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0xff5a)

11:20:49 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200002, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r3, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f00000000c0)="1b06e9e8ddef90b6baefcd02ca3853be8309cd38ac479f391be0140dc5715ac4b834d5255d1f8f07a78d95718f049a9078015a5e8b5c1710a88ae7a5ba7c63017133a2466b68ff8e1676c549b02f4609969ba6c00d3f87867af1f08cc686dc027fb93db385d4c23e9cbd2a4c39c8746bfd8d97e3998bbd6fa35134eae3ba2c1830eb430eefc86fa88516ff94804de817366cee1448536c526626613766c30a1e5ff8a0ffbbc1fd24a4646c1aa914f283267e32626245562b035ce86df8", 0xbd}, {&(0x7f0000001280)="17e5daf58ce5b21303e4f8a3dcac3e423196d3e60f24d5bf6f44cbe385a60c0d70863ea9b47a2f45672b8c08621337d67643033e3548d49e25b43e5f0faff3389c086d555275cbeeadc6abce7c33ca3905806442ee9c42d6936124471d4d5a5942eb7792f2bb968c2098fb91d1252499290ee8909f9d46d3bf3913def2a1d3f9da70e51ef7d92d894d4a23d148d2816c55e3861dcfba69388935e509c5191d99bcb0b9b98e175dd9e42a", 0xaa}], 0x3, &(0x7f0000001340)=[@rthdr={{0x58, 0x29, 0x39, {0x84, 0x8, 0x0, 0x8, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts={{0x20, 0x29, 0x37, {0x1d, 0x0, [], [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0x1d0, 0x29, 0x36, {0x0, 0x36, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @padn, @pad1, @generic={0x9, 0x9b, "bbed8be87857430c95d0a78b8cff48c4a0156c88bd36f08b825a68e6ab2c11f263f4e48127b3455ec2d0acd2edb1a281a86d3df240d043afdbcf7eb8699858c86db0f057addf55f00c1757596f99d37419ec42876b4b4af9bb3286c30ea4c64ac9804ee172706c02a124f7b2a4a36b37c099244a93b4a16aee0980974f6ba1333054a960dfb5f2b1274297e4e84ce86c37551abb9c6dac5869368c"}, @calipso={0x7, 0x40, {0x1, 0xe, 0xf6, 0x300, [0xfba, 0x6, 0x9, 0x1, 0x9, 0x101, 0x5]}}, @generic={0x6, 0xa9, "d52f9a5a59254f3bbb2820894df6a81861d5011335bff06394847092827da33c351aea72105cd3a3dec96d0ff47f6aa6ca28b9e8b466752ab96142c98d683294f6916992e528492994fe6989d8864acdd4240e18d78afd60fcd61e21fdb212f6544d8b3f555803b03702f6565529acbf58f82e3cd11f90f9902e31ba0fb6a67f55accd147cfdd406ed1e2edfc6aee97dad5c0188b2c66a8c3343a910f9f8584b628e87d60ab5899b0e"}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x3c, 0x4, [], [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x43}}, @enc_lim={0x4, 0x1, 0xe0}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x2a0}}], 0x1, 0x20000080)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)

11:20:49 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x5, &(0x7f0000001400)=[{&(0x7f0000000080)="55fd9c731a8c1b1cda2197b97111b68a09956c4ecb7ebf3975cde12d185e6319adcaf48328668e3758ae2e9c83091335dd57f1fed761295a05d453aa9a92b8aca4e28ba9b02f2460593f16c298912100133ffa6c6218040fc2e3e7548b72e24584bbe63096889472d04a257e5379c7532b572a9196a2c078c6cfd09c32ed1cefffecdf245533c839b8261ac00b4b2bb57eba1a3366f9b315255359a17b45", 0x9e}, {&(0x7f0000000240)="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", 0x1000, 0x401}, {&(0x7f0000000140)="523d0c520bf718a9573053b2177d2cb823a748fcfc41d37189f83416aed46c3cd67ec73821bc879f19ba2c64bdf01cb912d1cb668ebdb760c80f5be103a8f50a9525b9888f5dce53deff8edd92946e2e67b358b927511be5fb4238de65cf57092a7a79a2a13015eb51c7bf6aa4f491f1eb461a6643152fa24c5d73f4ee", 0x7d, 0x5}, {&(0x7f0000001240)="7e753e71f96bccd319a91437b8467a62eb9c0720cba5ff24085b15307342c48809c54866a0bf2bc070216309f0fb1f4adca4ffa5baa28d26f4244c9a153af8d56e0655b0419756d328076511cd8fc72594b9b7b1be64d6adb220d8e1c0e31e6fdaad101c80c7dfe1153610e4bee6e55e017583a15743c6e08c80c1e28c166977c241bee90f693dcdac3179ebd17fc758b0787019b10d812859dabf54f2de658b6f1334deb656ca1c317dde7695270505313d3c35a9c473e3ffd142b75b1305857b049050fa2bc34e4c790645ec502c42b45cbbc4d417582a47", 0xd9, 0x200}, {&(0x7f0000001340)="2d6eeaa372c4c7e9a6e88b6b59e2f89809583e43be34a034fced933fcb1f49d095f2a27b791ebcad912ad113e9d4fd7be08377e556db21a01895b635241c5db7ab7662a3568538f5f8de900d6bf0687c781cb74006e27f14a0df72d3d917f52b7824177526eee74405ac49fdde8362595dd58a67bd6f3d14e112356e1dd6caa64dbafd7d931e8ffbf9a040e834ccc855f9d855d342b75b100a81ad8a943e97461b1bae0cd2fb8ff361a7f3a123d3fa4eb3219af6213739d81119d133d87cc95b", 0xc0, 0x3}], 0x200c80, &(0x7f0000001480)={[{@overriderock='overriderockperm'}, {@map_acorn='map=acorn'}, {@check_relaxed='check=relaxed'}, {@cruft='cruft'}], [{@audit='audit'}, {@pcr={'pcr', 0x3d, 0x24}}, {@subj_user={'subj_user'}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}]})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:49 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x3)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x2)
sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x24000080)
setresgid(r3, r3, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, r3)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)
close(r0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x9)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:50 executing program 3:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={<r4=>r3, @in={{0x2, 0x4e24, @multicast1}}, [0x7, 0x8, 0x1, 0x400, 0x6, 0x0, 0x8, 0x9, 0x8, 0x0, 0x8, 0x10001, 0x80, 0x7, 0x3]}, &(0x7f0000000240)=0x100)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r4, 0x10001, 0x1dde, 0x2}, &(0x7f00000002c0)=0x10)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
close(r5)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x20002)
ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r7, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$FIONCLEX(r6, 0x5450)
ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000000000))

11:20:50 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6(0xa, 0x80003, 0x4)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0xd3993834613275c8, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a01010000000000000000000000000900020073797a3200000000140011800c0001007061796c6f61640004000073797a310000000008000a40000000000800054000000034140000001000010000000000000000000000000af5016dc29a26980bde141c2ad98d1d54369e807ac46446249b7730f8137740c0dbc4447555a1a51bed60b12371c190df49957479b1e4d2ffa10133d4acb85d9d6a694853d0555e3181ef8b7491d92ad72138b19f8beab45c"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000140), 0x4000000000002c7, 0x800)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="3a9a7e19f001cb3f448efa11df662c336804f77e78f055f5db90e02469606e228f01c877c93ee7ab07551c403d2df6f4a40ff7552d36cd9e0406b0962fa6ee3da2a6c52d01d10098a9a37ab27d349b8dc62d7dcfd7", 0x55, 0x1, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x2e}, 0x6}, 0x1c)
socket$inet6(0xa, 0x4, 0x7)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))

[  903.241407][T15060] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'.
[  903.312964][T15061] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
11:20:51 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000000))
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
truncate(&(0x7f00000000c0)='./file0\x00', 0x0)
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)

[  904.223331][   T38] net_ratelimit: 34 callbacks suppressed
[  904.223368][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.238306][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.249450][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:51 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000), 0x2)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:51 executing program 3:
unshare(0x24010080)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:51 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xb, @pix_mp}})
ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000000)={0x5, "68ef6aaff58afee9e8daa744976e6b4d75e9fc780ecd34831c1a46607d614d9b", 0x3, 0x20, 0x5, 0x10001, 0x2, 0x1, 0x8, 0x7ff})

[  904.543371][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.551943][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.561747][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.703767][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.714606][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:52 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
r3 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r3, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x400, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000080))
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)={0x67, 0x2, 0x0, 0x21, 0x0, [@loopback]}, 0x18)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  904.949742][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.024280][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:52 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c4000000000000000000000000006630000"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r3, 0x1})

11:20:52 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x32, @multicast1, 0x4e23, 0x4, 'lblc\x00', 0x8, 0x4, 0x5f}, {@empty, 0x4e24, 0x331fd212c44019df, 0x3, 0x9, 0x40}}, 0x44)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0)

11:20:52 executing program 3:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000480)=[{&(0x7f0000000080)="048228dee23e9722226fac0f1c36efb8404004d9e4156ecb47814bdb8b8909909a457e6b3b2a9e0828839d51da29b3f22ab1820245d0ff8ffb3c227e87c53f", 0x3f, 0x10001}, {&(0x7f00000000c0)="22d4dc21583379b576738d429bd0356549cc778d192035baf6601876b7ba228c122716a678dd9228c60ee9e081d1f452c78962975ebc1d674383bcc29900fb35567eab2e3f249adfa612ee430494a7de3e44d96321543fa2c1556c929a5c8fab781005414d1d43941f80b9a76fd0777c23dbf216930b77bfa3b037585f5f65da5691e0b11526224950900c1311ec04fa3b27a11cb783d0b5e6828ac699378639cb27c801eae84035da6c2565a99eebcb03", 0xb1, 0xfffffffffffffff8}, {&(0x7f0000000180)="a576110535", 0x5, 0xffffffff}, {&(0x7f0000000240)="39f5e4e36e0a7fa407535a72cf62fdcec8e5bc7699fc3c982bcc2b9367e73696c963f75b09739cf89b671b1ae93c2a21ae99a11fb778fc3b1917b8ae9d865376f0db1d276d4db153a20b5aea073319a255dba3d0ba0d56e02f815b3781c972572fb982f4bf6b6aedbb09119ee0a55697e8aafc851cec8fae3e13173fa70b35a588dad1ff50e24aff3abbd1368b72472055f8e28eddc3e19a5f6df4e9f36855fcb215dcea5503ceaa58f1e7bb551828b8ddcf2ff24fd2d3685d07cf2c9ebd6cfc8e644f72ea0170d0eef66902d99ca77604cf430a11a9873317", 0xd9, 0xffff}, {&(0x7f0000000340)="2c6b84ac80aee0f32a98e8f4fabb8762faa5f9b743ca04dfe2778bec06470d87b735c195a98e51dfb4506713e8acdd2b34a9d1f4f6d549926513aac1ab5e9850dc3e6a874ee7f59dcdac41e8733a0fc72917b5b08d3dbe9edebbabfec5461bbded8aea602d3e1c89a40a2653f9937a7304fc0aace4d37611b86a06", 0x7b, 0xfffffffffffffffd}, {&(0x7f00000003c0)="cf7c2127b0cc37c30bd302f27437ee2fea0973153ea662790a5848c29a2dffcaecec1fa97a3696c66d4b37215ba415328287fc220f98f38ebeebfc97c985252aaef946e32ce58202139e10f2132e53a110255abd7f078d3433aa517eecb8107420c6262fe669668b5adbd33f1121110bebfca5266ca29842fd37871c16be870ea55165715bb204653b0c3f8edce7be06e13b2b26f0f86ce605388fda081ba214c92ec0eddfd1f80b9763c5eabebf0f9420fb83e4e2", 0xb5, 0x405f}], 0x82a, &(0x7f0000000540)=ANY=[@ANYBLOB="61636c2c6661756c745f696e6a656374696f6e3d3078303030303030303030303030323037622c6e6f757365725f78617474722c6661756c745f696e6a656374696f6e3d3078303030303030303030303030666666662c6e6f61636c2c6e6f61636c2c7375626a5f726f6c653d232b5d2d2e2d2c7063723d30303030303030303030303030303030303031352c7365636c6162656c2c736d61636b66736861743d79a72d2c6673636f6e746578743d726f6f742c666f776e65723c", @ANYRESDEC=r2, @ANYBLOB="2c9f65066964", @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000021,fsname=)$-,mask=^MAY_APPEND,\x00'])

11:20:52 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000))

11:20:52 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x10, &(0x7f0000000180)={&(0x7f0000000000)=""/44, 0x2c, <r1=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=""/188, 0xbc, r1}}, 0x10)

11:20:52 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000040)=[0x1, 0x5, 0x3], &(0x7f0000000080)=[0x6, 0x4, 0xef1], 0x44, 0x2, 0x3, &(0x7f0000000100)=[0x10001, 0x5], &(0x7f0000000140)=[0x7, 0x6e0e, 0x1f]})

11:20:52 executing program 1:
unshare(0x20600)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

11:20:53 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)

11:20:53 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "82f17ec5ba25127075ee18539506803d828be17739b832020a58ef349b98"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x3ff, 0x2}}}, {{@arp={@empty, @multicast2, 0xffffffff, 0x0, 0x4, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x7f, 0xff, 0xff]}}, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x2, 0xf23a, 0xfe01, 0x3ff, 0x9, 'virt_wifi0\x00', 'macsec0\x00', {}, {0xff}, 0x0, 0xa}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000080)=0x10)

11:20:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)

11:20:53 executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10300, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/38)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)

11:20:53 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x258, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, [0xffffffff, 0xff, 0x0, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'bond_slave_1\x00', 'veth1_to_team\x00', {}, {}, 0x3c, 0x40, 0x5, 0x14}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@inet=@esp={{0x30, 'esp\x00'}, {[0x4d4, 0x4d5], 0x1}}, @common=@ah={{0x30, 'ah\x00'}, {[0x4d6, 0x4d6], 0x200, 0x80}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x1000, 0x6e9f, 0x80000001, 0x400, 0xffff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x34}, 'veth1_to_hsr\x00', {0x800}}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d5, 0x4d6], 0x7, 0x6, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x5, {0x6}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

11:20:53 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x9)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000340)=[@dead_binder_done, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0xa6000000, 0x3b, 0x8], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x101})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getpeername$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @remote, @bcast, @null, @bcast, @remote, @rose]}, &(0x7f0000000300)=0x48)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000000000000000000e30a6300007caae2913106dddd21be847034da94ee97a8beb45b4c96e6cc367df898fa154b818f987161478169fac3bff8814c5374c50bd9e89a8c5d27f96deefbb30dbecaca38db8acc13191538e632942b36eb9988919a51e7239c67f916245368306c68fedec63ef3d055312b541c803fee2282b58e2e82c1dbcf1e1c83d59d4bd6"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\vc\x00\x00'], 0x0, 0x0, 0x0})
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0xffffffffffffffba)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x5, 0x0, 0x5, 0x101000}, 0x10)

11:20:53 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x1000, 0x2)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:53 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x10}}, 0x14}, 0x1, 0xa00000000000000}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa78d25d106aad713}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2b90}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x1}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x8c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44091}, 0x4052)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd99}]}, 0x30}, 0x1, 0x6c}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x80000001, 0xd95e]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x814)

11:20:53 executing program 3:
unshare(0x20050d40)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setlease(r1, 0x400, 0x1)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:20:54 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f630c4000000000000000000fd54b310b4f0000281bf4f5bc44dde8fcd431b568fd500fb703fa1e425ac5a8f1247cf83abd89b754c6d9ca03ec424fbeb872053a470cfd2d701d1df0b1c02bcaa21690e8c19eb6b72c240cfb304d3fac100ba34a0a7bf0de45498fe49c6a8b8dcba1d94ecb878f0599b0ef621f87d5db00b1e0deed19aae8557364d4ee52ddb21b538b298d4237721da50e1180601482695cdc983867a73a5dfd6deb5a89274546bb165a11bd5ba9acbd2795fbac90f600ca5d62ee0ab731927c0decd82aceb2ec15eecf56e2fb1c318d5a7bab08f7d17e0153b836014e8406b6d4a3d7"], 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x20, 0x84, &(0x7f0000000180)="cdbbe5b09e80c7106539d9b7c524f4c8f7441edf69d8a14e3c78a122a5875424", &(0x7f0000000280)=""/132, 0x1, 0x0, 0xf1, 0xe, &(0x7f0000000400)="0584c03cffc7790421674e7f2101582269495eba902f9a01f64e991fcbdff97c69693ff44a2254254b834d29fd4b71d89cd2bc43a34751f1b047d4bf1c357c7ec3d310d1c3e73f32acaf6cd957c086eaef93e579ca4c361d0851a548e3b59a4a9c011191f05def661cdca66d31ae083db121295e7d6d4491fe00179f38f50010f1ce54d0fea8db7c9d8565965a17335c62407b313d1de966c5aa339d048acdc8011e0b222d2b932d1bd951c73266c3181fe1a0a06acb2319c5c052fea0628d3f78bacdd1535d5b9c1c03305fb18860702cf7b4c4a49fec15d92a404a2b85318e94af56467c4a876a7c3dbb8cff970158d3", &(0x7f00000001c0)="c4441bfa8b02a2b7bd735e99c8b5"}, 0x40)
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000080)={0x1, [0xc7b3, 0x8001, 0x1ff], [{0x3, 0x7, 0x1, 0x0, 0x0, 0x1}, {0xbf, 0xff, 0x0, 0x0, 0x0, 0x1}, {0x200, 0x800, 0x0, 0x1}, {0x5, 0xfffffffc, 0x1, 0x1, 0x1, 0x1}, {0x101, 0x7, 0x0, 0x1, 0x1}, {0x8, 0xfffffffe, 0x0, 0x1, 0x0, 0x1}, {0x69, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x1f0, 0x400, 0x0, 0x0, 0x1}, {0x1000, 0x134, 0x0, 0x1}, {0x0, 0x68c, 0x1, 0x1}, {0xc9, 0x9e, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x800, 0x1}], 0xf4e})
r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/revoke-subject\x00', 0x2, 0x0)
write$smackfs_label(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="307d84b4a8b84d4c7bf55a61b9280987023903f56db0db6de35eb00c396a00000000"], 0x1)

11:20:54 executing program 4:
unshare(0x20000400)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r1, r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r3, r3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r5, r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r7, r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r9, r9, 0x0)
getgroups(0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, r1, r3, r5, r7, r9])
pipe(&(0x7f0000000200)={<r10=>0xffffffffffffffff})
close(r10)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r10}, 0x10)

11:20:54 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x101000, 0x0)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0xb0000)
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f6310be400000000000000000000000000b6300000000000000007458116d2a72762459d623004eb466690fcea3a8cb0fc16a46779ad6c319a327495c675cf1c910a988e6ed16ba2f9e0c7cf1f6cb34fcb359974dd51f005ae8ea0fd7aaf8e9d9f449e7b5810ca66b5ab5779cd038"], 0x0, 0x0, 0x0})
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
listen(r3, 0x19ac)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

11:20:54 executing program 4:
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
sync()
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:54 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:54 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7)

11:20:54 executing program 4:
unshare(0x28040c00)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x488c01)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4}, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={<r5=>r4, 0xbf, 0x4, [0x9, 0x8, 0x0, 0x0]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r5, 0x8940, 0xbd, "42bb0d5305bca3ea1f8e4edfe4b5c617f08abdf390415887ceb07f83c4f558255613928ccac73b9036fc364c8e1642495386a6ad70ebc0c41c8cbe2630b2341dbe4bdbd23248118c9ea354067934dab9d914d343e6eb4b59dc24208f34c6347f933f79ee889b689a0aa2f39560e0713a3a1142001cf69ce5f6ccd6df68a539e2c7faef197553456ebf0f18d31610ba7f2c92cefed06e2d3808d226a63b391480bf224e1b226360441d3a23790f987524a720af91edd2f4a64a0028859b"}, 0xc5)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:55 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7f)
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @exit_looper], 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r4, 0x390c179b360adb45}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200400c0}, 0x8002)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000001c0)={0x3, 0x1})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r5}, 0x8)

11:20:55 executing program 1:
unshare(0x6000c00)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000000))
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)

11:20:55 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000000000008000000000000b630000"], 0x0, 0x0, 0x0})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r2, r3/1000+10000}, {0x77359400}}, 0x0)

11:20:55 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000))

11:20:55 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
close(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/219)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
setresuid(r4, r6, r8)
close(r3)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r3}, 0x10)

11:20:56 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:56 executing program 4:
unshare(0x30060100)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r2, r3}, &(0x7f0000000480)=""/220, 0xdc, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-avx\x00'}})
keyctl$get_security(0x11, r2, &(0x7f0000000240)=""/192, 0xc0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_getoverrun(r1)
r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000100)={0x2, 0x70, 0x6, 0x9, 0x5, 0x81, 0x0, 0x1, 0x20, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x2, 0x6}, 0x10020, 0x4, 0x7, 0x2, 0x691, 0x5, 0xfdd1})

11:20:56 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="630100000966ba1b"], 0x20}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="1c0000005e00", 0x6)
write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
close(r6)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000240))
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r6}, 0x10)

[  909.342958][   T38] net_ratelimit: 3101 callbacks suppressed
[  909.342966][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.363195][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.371915][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.502655][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.511873][ T9541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.529730][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.540021][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.664135][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.744409][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.753821][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:20:57 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:57 executing program 4:
unshare(0x5a040100)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:57 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000000)={0x0, r0}, 0x10)

11:20:57 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
r1 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="573ff3ed9f4954520ae032d11a38514d58275d743ef711f33360a155e0880f5082c68446e61c397356dfcf86bdbbd56d2347ce047e739c44b6e01c31668641002e972d1fcd25b3db9f9ed82e", 0x4c, 0xfffffffffffffff8)
r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c819f695e07c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa94359926022b8753a188748c569f3c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d40b6561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba97554d833bcd4c6743efe9cbe2f3c009d308bd73f400"/198, 0xc6, r1)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r2, r3}, &(0x7f0000000480)=""/220, 0xdc, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-avx\x00'}})
r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0xc, 0x0, r6, r5, 0x0)
signalfd4(r0, &(0x7f0000000100)={[0x9]}, 0x8, 0x800)
r7 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$instantiate(0xc, r4, &(0x7f0000000000)=ANY=[@ANYBLOB="75706461746520fd89efcb7056667320757365723a00"], 0x16, r7)

11:20:57 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCSBRK(r1, 0x5427)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x10, 0x70bd28, 0x25dfdbfb, {0xa, 0x80, 0x14, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x400}, [@RTA_IIF={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000)

11:20:58 executing program 4:
unshare(0x28000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TCGETS(r2, 0x5401, &(0x7f0000000140))
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00"/24], 0x0, 0x0, 0x0})
ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000080)={0x401, 0x3, 0x100, 0x0, 0x1f, 0x6})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc)

11:20:58 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0xdb28944, 0x8, &(0x7f0000000000)=[0x8, 0x8, 0x5, 0x0, 0x4, 0x7fff, 0x4, 0x7], &(0x7f0000000040)=[0x3, 0x4cb], &(0x7f0000000080)=[0x3]})

11:20:58 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(r4, 0x125d, &(0x7f0000000040))
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
write(r3, 0x0, 0x0)
close(r3)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x242, 0x0)

11:20:58 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000))
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:20:58 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8)
unshare(0x20000400)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(r1, 0x125d, &(0x7f0000000040))
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0x1})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
close(r2)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000040)={0x1, 0x1, 0x7})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10)

11:20:59 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x80, 0x3, 0x1, 0x4, 0x5, 0x3, 0x4, 0x3, 0x3, 0xf8, 0x3, 0x20, 0x4, 0x2}, 0xe)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(r1, 0x125d, &(0x7f0000000040))
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000000)=""/172)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10)

11:20:59 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@empty, @empty, <r3=>0x0}, &(0x7f00000005c0)=0xc)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x35)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2103528d6928bd7000fedbdf250400000008000300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="05002d000000000008003b00fffffeff0a000900000000000000000008000300", @ANYRES32=r7, @ANYBLOB="080031000000000005002d0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40081}, 0x8000)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:21:00 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x7)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000240)=0x4)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000100)=""/223, &(0x7f0000000000)=0xdf)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r3}, 0x10)

11:21:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0)
close(r2)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:21:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x80000002, &(0x7f0000000100)={0x39})
ptrace(0xffffffffffffffff, r2)
sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:21:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r3, 0x101, 0x0, 0xd8, 0x8}, &(0x7f0000000040)=0x18)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$RTC_VL_CLR(r4, 0x7014)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000580)={@local, @remote, r5}, 0xc)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
fdatasync(r6)

11:21:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
inotify_init1(0x80800)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:21:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:21:01 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000))
close(r0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

[  914.622501][ T7771] net_ratelimit: 6178 callbacks suppressed
[  914.622509][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.637269][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.647197][  T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.663522][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.673370][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.943389][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.951882][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.960335][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.108425][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.116949][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:21:02 executing program 4:
unshare(0xa040400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000280)=[@exit_looper, @free_buffer], 0x0, 0x0, 0x0})
getpeername$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10)
close(r0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80183, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@free_buffer, @register_looper], 0x0, 0x0, 0x0})
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
ioctl$RTC_WIE_OFF(r3, 0x7010)
ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000040)=0x4)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x109100, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000100)={0x0, r2}, 0xfffffffffffffefb)

11:21:02 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = msgget$private(0x0, 0x10)
write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1f, 0x0, 0x5, 0x1002, 0x2, 0x3, 0x0, 0x234, 0x38, 0x38d, 0x10000, 0x4, 0x20, 0x1, 0x476c, 0xe102, 0x8}, [{0x3, 0x8, 0x5, 0x7, 0x1, 0x1, 0x0, 0x7f}], "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", [[], [], [], []]}, 0x1458)
msgctl$IPC_RMID(r2, 0x0)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:21:02 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x7, 0x401})
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
bind$can_raw(r1, &(0x7f0000000000), 0x10)

11:21:02 executing program 4:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x410080, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)

11:21:04 executing program 0:
unshare(0x20000400)
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x2)
write(r1, 0x0, 0xffffffffffffff0e)
r2 = fcntl$dupfd(r0, 0x406, r1)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x728}}, 0x18)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000180)={0x101})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r3, &(0x7f0000000000), r4, 0x0, 0x1, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x170, r7, 0x30, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdd7a}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff6a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x200000c4}, 0x44084)
close(r5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000080))

11:21:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(r2, 0x125d, &(0x7f0000000040))
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

11:21:04 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200))
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0xe6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000100)={0x5d7, 0x1000})
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip6_vti0\x00', {0x2a, 0x4}})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r2, &(0x7f0000000040)=0x81, r2, 0x0, 0xe061, 0x4)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
nanosleep(&(0x7f00000001c0)={r3, r4+60000000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
accept(r5, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80)

11:21:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c4000000000000000000800000014630000"], 0x0, 0x0, 0x0})
ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000040)=""/81)

11:21:05 executing program 0:
unshare(0x20000400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKRAGET(r0, 0x125d, &(0x7f0000000040))
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x42)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000003c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}}, 0xc001)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c400000000000000000000d00000b630000ee5058b33f4fcb19d2a85dcac7fa995505655782e9f5d8d601057985ab37cd43990875b2701fe93671768bcc0e3e61d2d2fd35b55199f07df7244bb1bb9595f1702d97637855bb5c9f49d87e3e89ee49eaffc020a856b144c03abc"], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180)=0x7, 0x4)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00')
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f0000000080)={{0x0, @name="e4da9cc1040a3b5909b6000000000000000000000800000000008e5700000200"}, "3950750d922f5ae66cab74c5586dcbab341e2800", 0x2})

11:21:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200))
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
splice(r1, &(0x7f0000000000), r0, 0x0, 0x1, 0x0)

11:21:05 executing program 0:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r0, 0x0, 0x7f, 0x1)

11:21:06 executing program 0:
unshare(0x3b7c3387c494cdf3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$TIOCSIG(r0, 0x40045436, 0xe)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r1, &(0x7f0000000000), r2, 0x0, 0x1, 0x0)

11:21:06 executing program 0:
unshare(0x20100)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2)
splice(r0, &(0x7f0000000000), r1, 0x0, 0x1, 0x0)

[  919.742037][ T7771] net_ratelimit: 36 callbacks suppressed
[  919.742044][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.756053][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.142213][T20114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.150668][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.161304][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.382055][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.403655][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.701929][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.184197][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.194282][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:21:09 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x80c0)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:09 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c40fa0000003248352a850a71eb0b63e500"], 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000000)
unshare(0x20000400)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
mq_timedreceive(r2, &(0x7f00000000c0)=""/91, 0x5b, 0x20, &(0x7f0000000000)={0x0, 0x989680})

11:21:09 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c711bd8d30b110a317d807f61aff6a2a940"], 0x0, 0x0, 0x0})
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

11:21:09 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)

11:21:09 executing program 1:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000002c0))
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000280))
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10040, 0x0)
socket$inet6(0xa, 0x1, 0x8)
openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x41, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_delrule={0x50, 0x21, 0x300, 0x70bd2d, 0x25dfdbff, {0x2, 0x20, 0x20, 0x81, 0xfb, 0x0, 0x0, 0x2, 0x4}, [@FRA_FLOW={0x8, 0xb, 0x20}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_FLOW={0x8, 0xb, 0x2}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x4}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_SRC={0x8, 0x2, @loopback}]}, 0x50}}, 0x48040)
r4 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r4, 0x0, 0x0)
dup3(r2, r4, 0x0)

11:21:09 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
sched_yield()
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f, 0x2}, @register_looper], 0x0, 0x0, 0x0})
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000380))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0xffffffffffffffd0, <r3=>0x0, 0x1, 0x3ff})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000400)={0x80000000, r3, 0x10000, 0x5})
r4 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r5, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x81}, 0x20000005)

11:21:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:10 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x8, 0x0, [{0x7, 0x2, 0x0, 0x0, @irqchip={0x10000, 0x8440}}, {0xffffff80, 0x4, 0x0, 0x0, @sint={0x24000, 0x1f}}, {0x80, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0xffff, 0x80000001}}, {0x5d, 0x3, 0x0, 0x0, @msi={0x1, 0x9, 0x8000, 0xa0}}, {0x9, 0x2, 0x0, 0x0, @irqchip={0x66a, 0x8002}}, {0x9be1, 0x2, 0x0, 0x0, @irqchip={0x9, 0xffffffff}}, {0x0, 0x4, 0x0, 0x0, @sint={0x5, 0xfff}}, {0x7b0e7612, 0x3, 0x0, 0x0, @msi={0x26a, 0x7ff, 0x0, 0xfa19}}]})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x2, 0x2, 0x2, 0x0, 0x5}})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:21:10 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002abd70251a0000000400cc000400cc000400cc00060021006200000007002100616100000500920009000000080001000100000008009a00020000007ef27b35f891da788588269707d18bd22047ae663559bf2f8d78edca0686ffb5440f97057963d7c664cd7f594c8a6a467af46c0bf4f7bde05747efd91e3f785cf1efc1c4d0c870f65ef9726ee0dc05614328ca347fe093361398cea90c0986bf3b8d90921a1211efea802bb6056c070000009bd8d64ffa663096323c83b182cd783bcf697d13749bb82aef8248f967a9929dcfd1048cd2cd4c78e82743636d7d00000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
close(r2)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x4, 0x3f, 0x7, 0x0, 0x1, 0x18, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x42800, 0xfff, 0xfffffff7, 0x4, 0xfff, 0x1, 0x1}, r3, 0x2, r4, 0x3)

11:21:10 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:10 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffffd, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/80)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
close(r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x2, r2, 0x1})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:21:10 executing program 3:
unshare(0x20000400)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/54, 0x36)
close(0xffffffffffffffff)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x7, {0xffff}}, 0x18)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:21:10 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:10 executing program 5:
unshare(0x24010900)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:21:10 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)

11:21:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@request_death={0x400c630f}, @register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0xfffffffffffffffb, 0x1})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={<r3=>r2, 0x2}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x5, 0x30}, 0xc)

11:21:10 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}]}], {0x14, 0x10}}, 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'dummy0\x00', {}, 0x5})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:21:10 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
fchdir(r0)

11:21:10 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
fchdir(r0)

11:21:10 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000080)
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:10 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
fchdir(r0)

11:21:11 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/revoke-subject\x00', 0x2, 0x0)

11:21:11 executing program 1:
unshare(0x20000400)
close(0xffffffffffffffff)
fchdir(0xffffffffffffffff)

11:21:11 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x1000)
sendfile(r0, r1, &(0x7f0000000040), 0x5)

11:21:11 executing program 1:
unshare(0x20000400)
close(0xffffffffffffffff)
fchdir(0xffffffffffffffff)

11:21:11 executing program 1:
unshare(0x20000400)
close(0xffffffffffffffff)
fchdir(0xffffffffffffffff)

11:21:11 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
close(r0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x0, 0x2, 'client0\x00', 0xffffffff80000000, "a8574055b43892c9", "5a75fa7607c91f309842b48bba2448581cf10356c032a7ba6e7f8db92186931d", 0x3, 0x92})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:11 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f610c4000000000000b630000"], 0x0, 0x0, 0x0})
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r6, r6, 0x0)
r7 = getpid()
r8 = getpid()
rt_tgsigqueueinfo(r8, r7, 0x80000002, &(0x7f0000000100)={0x39})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)={0x48c, 0x29, 0x428, 0x70bd2d, 0x25dfdbfd, "", [@generic="4c974704cfc29944e12c078b72e80ff32405f4a80adeee46cd6ab08b99133f8fdb08f1b85648fb944e4c6814000ad0adfdd3", @generic="cf637f91215b6f02f073d3b1c034c751b6d27f07fc035baad8cccab447b77e0bde4b22857101f438a9fd4aaed81bf7893da7051409d6a8058dd54dc5a86ba3c87346abb30d62b0dc45e11aa3fa60b79debce28eff4817ad8764a392c9625c73c0702db", @generic="55a8a0201edcd090ad76d4104b57abd6804b1ef0cdece314490d55e5fc6957ddb64cdbfcf3d1e5572e56fe5d17e2e7ccc5d0309ec894a138ed8f2d0de37cbdbd2aaac6f0a4ab09b67f6272e10eb74742ebffd44c008f78371d755f23d078547630833378fb569d9ec9f3e94a9ba977513b796ac78cad19e0ac6d0f46d96fd97d8c066375d88d8c57ac0e5ae45cdd", @nested={0xd4, 0x36, 0x0, 0x1, [@generic="96ae3072575311f492bdd45ec8c6bce1b144b4682c5b25de50216ccd104a7d62735690fc269d6cfb37f6da0da469efb7b83bc1e504c65bc590cf72360725db21d56ff76ef7971b6f8ef12e2217ab4c137fa6bc0bd064a35c3a78500276a17be7ea252133c84916", @generic="fda4a7cc90191bafc1c731446b674e3f375ba55b94e6d0dcafa90164b256a1b364e6536c245167755d7e550d12129cd01d3e1dbd89ccfe1aced3f1a82b184797c5db9812a179523ea9469d3d58d31c0c", @generic="55d82a77cde7cace5d9282f8060b372780589856d8e14c060e"]}, @nested={0x5d, 0x54, 0x0, 0x1, [@typed={0x9, 0x91, 0x0, 0x0, @str='.).\'\x00'}, @generic="32415ebc4cf3e38e07f3735b66006460c08a10d84cd8ae1469dcdc470d88cacc6a607bd01635119cb8b3d2e00c16a65582988799867bee5cfbceb5af48ddfd86a672719eda9a546bd864ee5d6d"]}, @nested={0x180, 0x94, 0x0, 0x1, [@typed={0x6, 0x78, 0x0, 0x0, @str=',\x00'}, @typed={0x1f, 0x5a, 0x0, 0x0, @binary="4897b423b3abdc3ba020c2bc6aee68b1fc1853522f983cebe4e685"}, @generic="5cd08a1ce06afc1a82bf2f3252f32c40cb7df5bba857f4ee0e4f4eca1e7551732eeba2d519a45413bb379b46de78f1f8dc56b1902ae876cf78bd4a197b8350e4ea1f8135d53d94bf30be0353ea1ca2a88bc5111b41dd15f81a3fb9d12b2abdaac3a404150907", @typed={0xc, 0x46, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@remote}, @generic="89d1dcb436ba930cc5d404b107a5cf3057237343bb9bf43addc2beb599603fef52f0162eff258efdfb547ce8527ac40a2c3adbe1a360d99ee24c4cb57f21f6c50485e79613b494ed34a9f1e98d97db5c2df44779f473a0b1a5389bb948ce4729cca4f8ee48c2fb6e59d8f5553b1d126b6417fd862589172f7f3824321f792e516dabe352dd1c6d76807ad288737cd72f6010b9265324d28f8d6b7d42411e71a2937d1622d798641ab2c64e18d5b733ee345315dbec7c06ad2cb8", @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@local}]}, @generic="863db3f13e86cb156586ecbfe7a8829ae740f7e3cb0be7e4e972c182855cb7a58f5c468cc02112e81666a98712c197c882d1e4109563d2bfe1889fffaa2fbf68821162b229bb44db43e36a42e7764a26ce468a966644b627e950ff2ed53c745a3fed19087bc784d2aa6199dfeedd3ab0de1e7a6c1d3f60adcc8270534029db87f729644571a7ec016d9b4913cdc6d4a56327f95ea7f4c48ad6c242f04f8b29db5ed0212691"]}, 0x48c}, {&(0x7f0000000000)={0x38, 0x1, 0x100, 0x70bd2b, 0x25dfdbff, "", [@nested={0x25, 0x36, 0x0, 0x1, [@typed={0x18, 0x69, 0x0, 0x0, @str='/sys/fs/smackfs/doi\x00'}, @generic="77bf0a869f3bb14aba"]}]}, 0x38}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, 0xffffffffffffffff}}}, @rights={{0x10}}], 0xc8, 0x10004800}, 0x24040000)

11:21:11 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xfff, 0x80, 0x8, 0x4}, {0x5, 0x0, 0x1, 0x6}, {0x9, 0x7, 0x5b, 0x3}, {0x6, 0x5, 0x1, 0xff}, {0x5, 0x2, 0x9, 0x1ff}, {0x3f, 0x93, 0x0, 0x80000001}, {0x0, 0x3f, 0x7, 0x4}]}, 0x10)

11:21:11 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)

11:21:11 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000000)="e04ac39f3f4ba64fa53361e8266faeac442d193768ccdadc5e576d2c7eafc2")
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="e04ac314960ba1a8249f3d5543c89f3f4ba64f61e8266faeac442d1927dcd2056d8063f8c6c307a4e64034d894b1af428e3f1127510eeed6f0f2f6cff2e4972f24280fd13644")
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/75)

11:21:11 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0xf58, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x40, "bbdd39659deef7b091645ce6f636ae43bbcc146637de107664f2fc240f53786e8819732e6e8e7d4274c0573bacec267ec7dfc345478daa98efdcfd704510d685"}, &(0x7f00000000c0)=0x64)
write(r1, 0x0, 0x0)
fchmod(r1, 0x18e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:11 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)

11:21:11 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000180)=[@request_death={0x400c630f}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1100, 0x1}, @flat=@handle={0x73682a85, 0x0, 0x100003}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth0_to_hsr\x00', 0xca7, 0x6, 0x3ff})

11:21:11 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)

11:21:11 executing program 1:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)

[  924.861869][ T7771] net_ratelimit: 26 callbacks suppressed
[  924.861876][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.876117][ T3841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.886511][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:21:12 executing program 1:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)

11:21:12 executing program 1:
unshare(0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(r0)

11:21:12 executing program 3:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
userfaultfd(0x80800)
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r2, 0x0, 0x0)
close(r2)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

11:21:12 executing program 1:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
fchdir(0xffffffffffffffff)

11:21:12 executing program 1:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
fchdir(0xffffffffffffffff)

11:21:12 executing program 1:
unshare(0x20000400)
pipe(0x0)
close(0xffffffffffffffff)
fchdir(0xffffffffffffffff)

11:21:12 executing program 5:
unshare(0x20000400)
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = semget$private(0x0, 0x3, 0x0)
semop(r2, &(0x7f0000000380)=[{0x0, 0xffff}, {}], 0x2)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000180)=""/54)
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100))
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r5, r5, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r9, r9, 0x0)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000140)={{0x3, r3, r5, r7, r9, 0x184, 0x2}, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

11:21:12 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
fchdir(r0)

11:21:12 executing program 3:
unshare(0x20000400)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x228041, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r1, 0x0, 0x0)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r3, 0x0, 0x0)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1)
r5 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r5, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r6, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r7, 0x0, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
write(r8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r2, r3, r4, r5, r6, r7, r8], 0x8)
pipe(&(0x7f0000000200)={<r9=>0xffffffffffffffff})
close(r9)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, 0x0, 0x0)

[  925.341922][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.350250][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.358671][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.471563][T15538] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN
[  925.483407][T15538] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  925.492085][T15538] CPU: 0 PID: 15538 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0
[  925.500841][T15538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  925.511091][T15538] RIP: 0010:qrtr_endpoint_post+0x8f/0x1110
[  925.516901][T15538] Code: 44 89 ee ba 20 0a 00 00 e8 ce 43 50 fe 48 85 c0 0f 84 5c 02 00 00 49 89 c7 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <8a> 04 08 84 c0 0f 85 7d 09 00 00 4d 8d 77 28 41 0f b6 1c 24 48 89
[  925.536766][T15538] RSP: 0018:ffffc90001c47d10 EFLAGS: 00010202
[  925.542835][T15538] RAX: 0000000000000002 RBX: ffff88808a7e4408 RCX: dffffc0000000000
[  925.550807][T15538] RDX: ffffc90010047000 RSI: 0000000000000070 RDI: ffff8880a861b0f8
[  925.558783][T15538] RBP: ffff8880a3ab3c00 R08: ffffffff865f757c R09: ffffed100b19ac5d
[  925.567118][T15538] R10: ffffed100b19ac5d R11: 0000000000000000 R12: 0000000000000010
[  925.575172][T15538] R13: 0000000000000000 R14: ffffc90001c47dc8 R15: ffff8880a861b040
[  925.583383][T15538] FS:  00007f6ed05c7700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  925.592313][T15538] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  925.598901][T15538] CR2: 000000000078c000 CR3: 00000000a122f000 CR4: 00000000001426f0
[  925.606947][T15538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  925.614920][T15538] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  925.622895][T15538] Call Trace:
[  925.626187][T15538]  ? __kmalloc+0x2b/0x330
[  925.630527][T15538]  ? __check_object_size+0x2fd/0x3f0
[  925.635817][T15538]  qrtr_tun_write_iter+0xc6/0x120
[  925.641452][T15538]  __vfs_write+0x52f/0x6e0
[  925.645883][T15538]  vfs_write+0x274/0x580
[  925.650134][T15538]  ksys_write+0x11b/0x220
[  925.654470][T15538]  do_syscall_64+0xf3/0x1b0
[  925.658980][T15538]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  925.664879][T15538] RIP: 0033:0x45ca59
[  925.668772][T15538] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  925.689155][T15538] RSP: 002b:00007f6ed05c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  925.697569][T15538] RAX: ffffffffffffffda RBX: 000000000050b680 RCX: 000000000045ca59
[  925.705541][T15538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  925.713603][T15538] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  925.721577][T15538] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  925.729721][T15538] R13: 0000000000000c8c R14: 00000000004ca5a6 R15: 00007f6ed05c76d4
[  925.737696][T15538] Modules linked in:
[  925.753237][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.755305][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.769852][ T2478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:21:13 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
fchdir(r0)

11:21:13 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
fchdir(r0)

[  925.911920][T15538] ---[ end trace 61c7d5174f66938d ]---
[  925.918062][T15538] RIP: 0010:qrtr_endpoint_post+0x8f/0x1110
[  925.924253][T15538] Code: 44 89 ee ba 20 0a 00 00 e8 ce 43 50 fe 48 85 c0 0f 84 5c 02 00 00 49 89 c7 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <8a> 04 08 84 c0 0f 85 7d 09 00 00 4d 8d 77 28 41 0f b6 1c 24 48 89
[  925.944566][T15538] RSP: 0018:ffffc90001c47d10 EFLAGS: 00010202
[  925.950765][T15538] RAX: 0000000000000002 RBX: ffff88808a7e4408 RCX: dffffc0000000000
[  925.959286][T15538] RDX: ffffc90010047000 RSI: 0000000000000070 RDI: ffff8880a861b0f8
[  925.970630][T15538] RBP: ffff8880a3ab3c00 R08: ffffffff865f757c R09: ffffed100b19ac5d
[  925.978973][T15538] R10: ffffed100b19ac5d R11: 0000000000000000 R12: 0000000000000010
[  925.989490][T15538] R13: 0000000000000000 R14: ffffc90001c47dc8 R15: ffff8880a861b040
[  925.998168][T15538] FS:  00007f6ed05c7700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  926.009622][T15538] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
11:21:13 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(0xffffffffffffffff)

[  926.039156][T15538] CR2: 00000000004db310 CR3: 00000000a122f000 CR4: 00000000001426e0
11:21:13 executing program 1:
unshare(0x20000400)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
fchdir(0xffffffffffffffff)

[  926.081403][T15538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  926.089603][T15538] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  926.116301][T15538] Kernel panic - not syncing: Fatal exception
[  926.124187][T15538] Kernel Offset: disabled
[  926.128528][T15538] Rebooting in 86400 seconds..