Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts.
2020/05/23 15:32:42 fuzzer started
2020/05/23 15:32:43 dialing manager at 10.128.0.26:38661
2020/05/23 15:32:43 syscalls: 3055
2020/05/23 15:32:43 code coverage: enabled
2020/05/23 15:32:43 comparison tracing: enabled
2020/05/23 15:32:43 extra coverage: enabled
2020/05/23 15:32:43 setuid sandbox: enabled
2020/05/23 15:32:43 namespace sandbox: enabled
2020/05/23 15:32:43 Android sandbox: /sys/fs/selinux/policy does not exist
2020/05/23 15:32:43 fault injection: enabled
2020/05/23 15:32:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/05/23 15:32:43 net packet injection: enabled
2020/05/23 15:32:43 net device setup: enabled
2020/05/23 15:32:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/05/23 15:32:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/05/23 15:32:43 USB emulation: enabled
15:35:00 executing program 0:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="7d5ff4494e413a", 0x7}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

syzkaller login: [  194.319793][ T6850] IPVS: ftp: loaded support on port[0] = 21
15:35:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x1, @dev={[], 0x1c}, 'bridge0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0)

[  194.459199][ T6850] chnl_net:caif_netlink_parms(): no params data found
[  194.611340][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.627207][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.647566][ T6850] device bridge_slave_0 entered promiscuous mode
[  194.666261][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.687281][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.695834][ T6850] device bridge_slave_1 entered promiscuous mode
15:35:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000006c0)={0x800, 0xed1, 0x5, 0x1f, 0x5, [{0x5, 0x8}, {0x2bda, 0x0, 0x2, [], 0x903}, {0x0, 0x400, 0x400, [], 0x1000}, {0x80000001, 0x6, 0xb7af, [], 0x600}, {0x996, 0xffff, 0xffffffffffff0001, [], 0x2000}]})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000280), 0xc, &(0x7f0000002780)={&(0x7f0000000980)=ANY=[], 0x5d4}}, 0x8044)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
gettid()

[  194.725731][ T6980] IPVS: ftp: loaded support on port[0] = 21
[  194.778102][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.820413][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.910133][ T6850] team0: Port device team_slave_0 added
[  194.927738][ T6850] team0: Port device team_slave_1 added
[  194.990121][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.997351][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.025024][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.071204][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.087104][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
15:35:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
keyctl$revoke(0x3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

[  195.114820][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.153652][ T7067] IPVS: ftp: loaded support on port[0] = 21
[  195.168913][ T6980] chnl_net:caif_netlink_parms(): no params data found
[  195.240854][ T6850] device hsr_slave_0 entered promiscuous mode
[  195.297666][ T6850] device hsr_slave_1 entered promiscuous mode
[  195.356746][ T7117] IPVS: ftp: loaded support on port[0] = 21
15:35:02 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

[  195.718694][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.725795][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.735621][ T6980] device bridge_slave_0 entered promiscuous mode
[  195.770831][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.781115][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.789531][ T6980] device bridge_slave_1 entered promiscuous mode
[  195.809790][ T7067] chnl_net:caif_netlink_parms(): no params data found
[  195.858388][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.923558][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.962912][ T7299] IPVS: ftp: loaded support on port[0] = 21
15:35:02 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000040))

[  196.030281][ T6850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  196.115953][ T6850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  196.172202][ T7117] chnl_net:caif_netlink_parms(): no params data found
[  196.192844][ T6980] team0: Port device team_slave_0 added
[  196.207346][ T6850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  196.263309][ T6850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  196.329324][ T6980] team0: Port device team_slave_1 added
[  196.336769][ T7067] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.347133][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.355165][ T7067] device bridge_slave_0 entered promiscuous mode
[  196.385173][ T7436] IPVS: ftp: loaded support on port[0] = 21
[  196.399762][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.412839][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.440703][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.452395][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.460256][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.469146][ T7067] device bridge_slave_1 entered promiscuous mode
[  196.496683][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.505799][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.532362][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.567671][ T7067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.639567][ T7067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.658746][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.665829][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.674491][ T7117] device bridge_slave_0 entered promiscuous mode
[  196.722051][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.729969][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.739858][ T7117] device bridge_slave_1 entered promiscuous mode
[  196.756694][ T7067] team0: Port device team_slave_0 added
[  196.766234][ T7067] team0: Port device team_slave_1 added
[  196.819616][ T6980] device hsr_slave_0 entered promiscuous mode
[  196.847582][ T6980] device hsr_slave_1 entered promiscuous mode
[  196.887091][ T6980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.894884][ T6980] Cannot create hsr debugfs directory
[  196.924462][ T7067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.932086][ T7067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.958604][ T7067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.973483][ T7067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.981012][ T7067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.010124][ T7067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.037145][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.049036][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.163033][ T7117] team0: Port device team_slave_0 added
[  197.189305][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.249845][ T7067] device hsr_slave_0 entered promiscuous mode
[  197.287746][ T7067] device hsr_slave_1 entered promiscuous mode
[  197.327061][ T7067] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.334695][ T7067] Cannot create hsr debugfs directory
[  197.345840][ T7117] team0: Port device team_slave_1 added
[  197.464498][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.471518][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.498433][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.513021][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  197.521806][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.566083][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.583421][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.616825][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.639905][ T6850] 8021q: adding VLAN 0 to HW filter on device team0
[  197.654416][ T7299] chnl_net:caif_netlink_parms(): no params data found
[  197.731616][ T7117] device hsr_slave_0 entered promiscuous mode
[  197.787562][ T7117] device hsr_slave_1 entered promiscuous mode
[  197.827028][ T7117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.834596][ T7117] Cannot create hsr debugfs directory
[  197.851791][ T7436] chnl_net:caif_netlink_parms(): no params data found
[  197.912226][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.924178][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.933909][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.941153][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.005374][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  198.013359][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  198.023493][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  198.032703][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.039964][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.050693][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  198.084630][ T6980] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  198.162607][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  198.171985][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  198.181495][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  198.190427][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  198.200261][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  198.233155][ T6980] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  198.273168][ T6980] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  198.319599][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  198.329793][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  198.340329][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  198.352483][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.360916][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.370109][ T7299] device bridge_slave_0 entered promiscuous mode
[  198.397731][ T6980] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  198.456759][ T6850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.469568][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  198.478966][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.486026][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.495417][ T7299] device bridge_slave_1 entered promiscuous mode
[  198.532539][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  198.542274][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  198.573923][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.595527][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.603784][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.616632][ T7436] device bridge_slave_0 entered promiscuous mode
[  198.626552][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.635865][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.644347][ T7436] device bridge_slave_1 entered promiscuous mode
[  198.686183][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.722338][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.773846][ T7299] team0: Port device team_slave_0 added
[  198.792358][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.824688][ T7299] team0: Port device team_slave_1 added
[  198.860777][ T7436] team0: Port device team_slave_0 added
[  198.870224][ T7067] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  198.899799][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.906761][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.934423][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.950637][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  198.958979][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  198.972838][ T6850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.984321][ T7436] team0: Port device team_slave_1 added
[  199.005429][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.012640][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.040631][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.055203][ T7067] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  199.100507][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.107973][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.134250][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.201277][ T7299] device hsr_slave_0 entered promiscuous mode
[  199.267530][ T7299] device hsr_slave_1 entered promiscuous mode
[  199.337059][ T7299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.344639][ T7299] Cannot create hsr debugfs directory
[  199.361195][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.371927][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.400403][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.412191][ T7067] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  199.470444][ T7067] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  199.633365][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  199.642600][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  199.720968][ T7436] device hsr_slave_0 entered promiscuous mode
[  199.787387][ T7436] device hsr_slave_1 entered promiscuous mode
[  199.826939][ T7436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.834589][ T7436] Cannot create hsr debugfs directory
[  199.845061][ T7117] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  199.889075][ T7117] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  199.925340][ T7117] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  200.017385][ T7117] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  200.108292][ T6850] device veth0_vlan entered promiscuous mode
[  200.142690][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  200.151781][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  200.166133][ T6850] device veth1_vlan entered promiscuous mode
[  200.199274][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  200.212140][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  200.220238][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  200.271578][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.343191][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  200.354170][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.362828][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.372923][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  200.382001][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  200.424633][ T6980] 8021q: adding VLAN 0 to HW filter on device team0
[  200.440037][ T6850] device veth0_macvtap entered promiscuous mode
[  200.491943][ T7067] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.511871][ T7299] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  200.549739][ T7299] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  200.620448][ T7299] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  200.679970][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  200.690337][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.700993][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.713018][   T23] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.720128][   T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.728507][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.736211][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.744280][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.753234][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.762064][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.769293][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.777372][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  200.792902][ T6850] device veth1_macvtap entered promiscuous mode
[  200.812370][ T7299] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  200.872163][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  200.880369][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.888815][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  200.899649][ T7067] 8021q: adding VLAN 0 to HW filter on device team0
[  200.928728][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.948221][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.965436][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.979617][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.990165][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.001649][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  201.011756][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  201.023760][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  201.060354][ T7436] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  201.104967][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  201.113530][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.122687][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.131593][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.138750][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.146660][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.155893][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.164479][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.171631][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.179366][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  201.188777][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  201.197619][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  201.198287][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  201.214148][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.222510][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.231035][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.239658][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.260395][ T7436] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  201.315964][ T7436] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  201.364744][ T7436] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  201.430379][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.442196][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  201.455373][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  201.464979][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  201.475663][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  201.484973][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  201.495661][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  201.557185][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  201.565649][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.576604][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.586077][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.681516][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.703687][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.786454][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.807749][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.815267][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  201.838685][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.873003][ T7117] 8021q: adding VLAN 0 to HW filter on device team0
[  201.922526][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.943261][ T7067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.955850][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.971324][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.986470][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.995914][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.013269][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.023065][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.030221][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state
15:35:08 executing program 0:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="7d5ff4494e413a", 0x7}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

[  202.118839][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.129526][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.138200][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.146327][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  202.158036][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  202.166636][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.173795][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.184746][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.193954][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  202.222400][ T7299] 8021q: adding VLAN 0 to HW filter on device team0
15:35:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  202.305826][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.316643][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.334426][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.344383][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.353636][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  202.365602][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
15:35:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  202.488214][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.497294][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.520033][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.538251][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  202.546667][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.577540][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.586261][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.608131][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.615228][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.623491][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  202.633321][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  202.642311][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.649468][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
15:35:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  202.726485][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.734843][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.767684][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.792737][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.818496][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  202.832086][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.849916][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0
15:35:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  202.933807][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  202.942458][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.953530][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  202.964171][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.980060][ T6980] device veth0_vlan entered promiscuous mode
[  203.006927][ T7067] device veth0_vlan entered promiscuous mode
[  203.028656][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  203.038930][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  203.048552][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  203.056504][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  203.073684][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.086176][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.096406][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  203.107222][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  203.125960][ T6980] device veth1_vlan entered promiscuous mode
[  203.140440][ T7436] 8021q: adding VLAN 0 to HW filter on device team0
15:35:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  203.199726][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  203.211765][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.255353][ T7067] device veth1_vlan entered promiscuous mode
[  203.273944][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  203.284394][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  203.292260][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.301810][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.310602][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.319985][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.329122][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.336266][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.344806][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.354443][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.371271][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.378486][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.389734][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.404731][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0
15:35:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  203.474955][ T7299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  203.493670][ T7299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.512035][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.521079][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.529872][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.548708][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.567773][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.576124][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.599733][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.697094][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.716068][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.732863][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.744160][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.763151][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  203.773612][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  203.789014][ T6980] device veth0_macvtap entered promiscuous mode
[  203.824919][ T7436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  203.848067][ T7436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.861470][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.871153][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.880008][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.888785][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.897424][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  203.905870][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  203.915736][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  203.924593][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  203.933534][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.942093][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.953307][ T7067] device veth0_macvtap entered promiscuous mode
[  203.985049][ T6980] device veth1_macvtap entered promiscuous mode
[  203.998495][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  204.006526][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.015701][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  204.024085][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.031823][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.042091][ T7067] device veth1_macvtap entered promiscuous mode
[  204.052886][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.066616][ T7117] device veth0_vlan entered promiscuous mode
[  204.103426][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  204.112756][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  204.125306][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  204.134972][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.142766][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.164069][ T7117] device veth1_vlan entered promiscuous mode
[  204.181597][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.198245][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  204.206142][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  204.216085][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  204.231623][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  204.250017][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.262228][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.288901][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  204.308288][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  204.322927][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  204.340743][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.352824][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.362877][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  204.374076][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.385383][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  204.396530][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.408893][ T7067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.424391][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  204.435098][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.445368][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  204.456961][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.468847][ T7067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.476312][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  204.487841][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  204.496434][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  204.505862][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  204.515620][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  204.524516][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  204.568245][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  204.581318][ T2557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  204.707359][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  204.716100][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  204.727571][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  204.735801][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  204.883636][ T7436] device veth0_vlan entered promiscuous mode
[  204.899832][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  204.908771][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  204.928259][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  204.948007][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  205.042554][ T7117] device veth0_macvtap entered promiscuous mode
[  205.074534][ T7299] device veth0_vlan entered promiscuous mode
[  205.143720][ T7436] device veth1_vlan entered promiscuous mode
[  205.175449][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
15:35:11 executing program 1:
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000600)={0x81, 0x0, "c4ed350d91b35757f25f5a87733c6c2fe63c633f8264b6627730177a6e0f5338dcb12f2a3bd32f87a7853ca22030b22e01e830bbe3346e3922f04c5968a49652d084d069544393b7e1509fe6c188f7f3f404ccc3fd40f00db0a6cfde98365c3ae4eed279a20df6feed200d0e9fbc4f1633da2153ef315e84d7"}, 0x0)

15:35:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  205.200460][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  205.237488][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  205.247674][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  205.264822][ T7299] device veth1_vlan entered promiscuous mode
[  205.301864][ T7117] device veth1_macvtap entered promiscuous mode
[  205.318868][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  205.333103][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  205.352872][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  205.377654][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  205.385668][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  205.544062][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  205.582204][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.594884][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  205.614555][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.625343][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  205.636599][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.651097][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.672945][ T7299] device veth0_macvtap entered promiscuous mode
[  205.686232][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  205.695789][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  205.705103][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  205.714302][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  205.723695][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  205.732615][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  205.744838][ T7436] device veth0_macvtap entered promiscuous mode
[  205.761646][ T7299] device veth1_macvtap entered promiscuous mode
[  205.772946][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  205.784215][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.794151][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  205.804841][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.815056][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  205.825681][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.838305][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.845653][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  205.854684][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  205.862969][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  205.872343][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  205.881345][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  205.895620][ T7436] device veth1_macvtap entered promiscuous mode
[  205.939583][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  205.950668][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.961089][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  205.971747][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.981617][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  205.992826][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.002916][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  206.014441][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.025933][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.034170][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  206.045506][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.055481][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  206.066296][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.082829][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  206.093354][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.103249][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  206.113729][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.125056][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  206.136185][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.149146][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.160358][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.170956][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.180849][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.191309][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.201202][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.211660][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.221522][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.234361][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.246258][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.257872][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  206.267745][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.276272][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.286406][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.297040][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.305695][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  206.316306][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  206.327915][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.340289][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.350486][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.361222][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.371340][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.381844][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.392539][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.403015][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.412896][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  206.423359][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.434691][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.455973][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  206.465229][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
15:35:13 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:13 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x10, 0x0, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})

15:35:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000c00)=""/75, 0x4b}, {&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/181, 0xb5}, {0x0}, {&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/86, 0x56}, {&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000980)=""/136, 0x88}], 0x8}, 0x7ff}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
keyctl$revoke(0x3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

15:35:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa80, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

15:35:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:13 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00f40c442848cb166b002ee8dc4da7ae20d7c965d4fab6ad71c03cb2aa506b39b663e1c4c87d263fc05a6a042b6feba7da240eb2ca83e630e3b925b24361dc"}, 0x60)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0xa8}}], 0x1, 0x0)

15:35:13 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000c00)=""/75, 0x4b}, {&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/181, 0xb5}, {0x0}, {&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/86, 0x56}, {&(0x7f0000000900)=""/69, 0x45}], 0x7}, 0x7ff}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa80, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

15:35:13 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:14 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0)

15:35:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:14 executing program 2:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000000), 0x43578cf5)
write$P9_RREADDIR(r1, &(0x7f0000000340)={0xb}, 0xb)

15:35:14 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @multicast1}, "e25a86ce2ad0f3e6"}}}}}, 0x0)

15:35:14 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

15:35:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:14 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:14 executing program 4:
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008010)

15:35:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/8, 0x8}], 0x1, &(0x7f0000000480)=""/144, 0x90}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005f40)=@generic, 0x80, 0x0}, 0x1}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000006c0)={0x800, 0xed1, 0x5, 0x1f, 0x5, [{0x5, 0x8}, {0x2bda, 0x0, 0x2, [], 0x903}, {0x8, 0x400, 0x400, [], 0x1000}, {0x80000001, 0x6, 0xb7af, [], 0x600}, {0x996, 0xffff, 0xffffffffffff0001, [], 0x2000}]})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000280), 0xc, &(0x7f0000002780)={&(0x7f0000000980)=ANY=[], 0x5d4}}, 0x8044)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
gettid()

15:35:14 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:14 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x13a8, 0x0, 0x0, 0x1208, 0x108, 0x108, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408)

15:35:14 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  207.873610][ T8260] x_tables: duplicate underflow at hook 2
[  207.952142][ T8269] x_tables: duplicate underflow at hook 2
15:35:14 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x13a8, 0x0, 0x0, 0x1208, 0x108, 0x108, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)

15:35:14 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:14 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:14 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:14 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0x9)
writev(r1, &(0x7f0000001900)=[{&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f00000009c0)="c384a235c07e956b29b267882cfb178ce04249deacee3abfac8f28ae462fb6194d2f3aa45c47f460f355269a3a64677c88bea56e51f0430f966e6d04a53b1b08fc5078250e8552cf4741c9cb0d637bf35b12c12a9b93507ca951ea11d3ec305a2c0f2b4b5784550e15b7a00b6d51ed5bfe50a63002b993f7b8676258a966ade2643976713293611c05f4839a36f8e3ed150481df4d7a5a75dcf11304449f402c7149ef0eb79e04d74e3324822e", 0xad}], 0x3)
write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='|'], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xe00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

15:35:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:15 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:15 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  208.536066][ T8295] FAT-fs (loop4): bogus number of FAT sectors
[  208.546224][ T8295] FAT-fs (loop4): Can't find a valid FAT filesystem
15:35:15 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

[  208.621372][ T8301] x_tables: duplicate underflow at hook 2
15:35:15 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2')
bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0)

15:35:15 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:15 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10)

15:35:15 executing program 3:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:15 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:15 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:15 executing program 3:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:15 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:15 executing program 4:
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @random=' \n\x00\x00\x00@', @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

15:35:15 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:15 executing program 3:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:15 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x4d)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000140), &(0x7f00000000c0)=0x4)

15:35:15 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:15 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x5eb05a)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004e80)=[{0x10, 0x10d, 0x9}], 0x10}}], 0x2, 0x0)

15:35:15 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:15 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:16 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:16 executing program 2:
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00004cd4000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48045}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000001100000129bd7000fbdbdf25fc010000000000000000000000000000000004d60200320008001f00", @ANYRES32=r8, @ANYBLOB="2c001300ac14140b000000000000000000000000fe800000000000000000000000000020000000000a0000002c001300ac1414aa000000000000000000000000fc010000000000000000000000000001000000000a00000010000a0026bd700029bd7000010000000800180006000000376c84021a68bf1845b01cd8d0c93426dc7464f0ee7ff73b47e6be6f1825c085b3b730b4fe03ef73e3d676"], 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x44004)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000ce)

15:35:16 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

15:35:16 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:16 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:16 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

[  209.656274][ T8376] device veth0_to_bridge entered promiscuous mode
15:35:16 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

[  209.737476][ T8376] device batadv0 entered promiscuous mode
15:35:16 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:16 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "400600", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

15:35:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:16 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:16 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:16 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a1401060009000000000000080001"], 0x20}}, 0x0)

15:35:16 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f00000002c0)="b7", 0x1, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000001a40)=[{0x0}], 0x1)

15:35:16 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:16 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:16 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

[  210.182474][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
15:35:16 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:16 executing program 2:
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x200488c4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x9000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40000000)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x20000844)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb57f004f26fb0971d0e6adfefcf1f7f7faf75e0f226bd9174879607171fa2fcf52bf4a9142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000000000000000000000000000000000020000001068000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efded67b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f7da31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34894202ad97843e9f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b10392a912ff028d103e3f9cd16286744f83a83f138f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bda14490000000001000000de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d462357b22515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63b66c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e7131421c0f39113be7664e08bdd7114d61afcb718cf3c4d24b2f6c7a84a4e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e9134991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24ab9d6a3d75d9235cd1d48aeaccd77f8e1e91b12684e9cb8436bb84cb41f62e09a3bf5f3aea2cc47adfbb11d1f525bf643be7ddbda87f8905bcd6ef280eede33b8c8aafba83623ab9ec0f342d9a0e22b658cfa803121a513ad8b72115fa4c0ae01ed441fc21dda4ef1c29d57214360c9cc2551afab09393fe631997091dca1609f3c66f77804199c7ca79e443806393183e9caf824930cd3fdbeb1100135e6a303bb9dd11361f5e500644d224233ed04ea722e8da03ae02ceb9c3d838baedc09998c926b335cfa895811b4d042d96c9d4162f25bba22f873874e20571d573576217c5fac7b3a2819c820f0aaa2844fffb790c038a599b61051e86a2a039a73a8757697fe0417f1ddc69844443386473865c383979837ef413c328d94ddf7a33d599fd197b88b195771b5761ae4cca7f30ea0f48737417fb64b8048ba230633598cf48091284fa98d20aa9e1cbee6bc2ed5b4075138ee61620b0d602d8f11c51588fb83704564ae2c2cd52d13e10551a787441309c5aa0000000000000000004cfbc352eb25a00ebeeac9e183084c16d052ae1ecc920acab272075539ac10479558dd5e2eb79b19e9b6fa497d99d2158349e0cc54e6e376ddd274702bd823b519624d066f5a1f24614184f30ad90b6948e181f580d846808b295eba08d0f132e329701575d8b4658c9b585c7c691ef42e18a3ddf6256a4c"], &(0x7f0000000140)='GPL\x00'}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x19, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f506f41ce307c9f598e201bcc308feb2f29d410ae43b3c8347a654d7426861b87b56c98d57f6218c9065c2f1f1fce9b477c4f687f364afd43541506b3c76"], &(0x7f0000000140)='GPL\x00', 0x186b, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xf, 0x0, 0x7f}, 0x10}, 0x78)
socket$kcm(0x29, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0)
sendmsg(r4, &(0x7f0000000680)={&(0x7f0000000240)=@generic={0x1f, "e47ef2af37279115e9b8cc02fab87712c4551936408ebcfded8bdbc68dd8151c14c383d3f80916b2e45ab990fc70804b701d80a6d67814a052c67e48289d0ad84f217e6cf87e5253d05601b64ecc2db97eacdf04e95b7aaa2417773c91d6682e2f7347e89c50000b37cf98798207032ef8564f5b8307b1c5c38df17f1770"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)="d8b63e183b74227c2caedc618c6371556913c7fe5774eb91d8f6c6364961a22c22b12663c19e01214359e1003628e9ad9e850e0b8ae7d835cc5c4cedfa72ddf6b0540a0bb4d892ded1d9e155fc2717136be7a8a14920d5c67d773bd89cf00f08bceeed20980f6cd7b92713f4b4b30976a26d15796da46d4e18d851ceda86800008559dd7fa14ad1c90cb7b9ef1b018d835cef92e6ff3166f4807033170", 0x9d}, {&(0x7f0000000400)="177e01a9cc2792d4a7d5026af7f7f0da23f485eda7dfe525db59ad45dca27f2ea44a5991bf1bef7fc3ed4e020e72246899e812cec5d74b787b221a6430346de424609f42a9c131138dc3d8d2517930b035ed38e89b9d2f330fc7eb662ad0fcb571a90ae2c1d5d3266e52f050a0f2ed4131707d7e761c763aa5cbb90f9ccb1ef0544ec02c2d10f2316902a6e52dbe0d8705c3f2ffb0", 0x95}, {&(0x7f00000004c0)="76d82e3416da73fdb7f783cce524860eba41fa2d7e48e572b4caa8213355f4e6c2f5717efbab45a53505c7c9ec889d1238ae144cb898", 0x36}, {&(0x7f0000001e40)="3cb7a3ccf53c0970c3c8479ab86575dc30f78dfba8815bdc2b132d436edec90c7f8c33fb0cb13fb77edc3039098b2cff37d9858a306b9e22db39887126b1f4254156960c19d50cad83c110fe61bcc631efee674a54814bb9e9f5a565d7eb001e043e56c8ed3aacb35ef072e78d64d3a0c17a28b77ea34e72339a2c28864ea425b31d9c30349df7a166d9f5e614fd04a83e04eaccf656bf30804737d74851a38be9beab3588541c4e0b5cc8a0c1715a39b0c2d04ecc1e2c8871f8728e48aa23dab0c86b5045872fc33f6ad415a005f62456c4fd367f4a31b87edc5c2c6d2acf80bea8498f721605262ab8b5e75ae6bd29f2e2e39555d120949e57fde26c00afb8fd031f3ed71a7508fee55dae5ac50ae7a8a07841cd17806352c3ff6f836604fbeb3b8174d4dd4eb729190da021648e1d178b410c8dea831899d3d858511df714a8d823a660f6e8155eb3d679802f6ee21261eea578f08e34c17775c407d85f3346685c0bb7a39a230ab8d02ce5d8f356bcdc386b7609cb772ffde222ff669aa299efea1bceedec5676650a70e11b6522265de9c4c20844cca4d0d1ecd7ef21f92e2cabcab21b3218dec523da5677f6ede47a7ec62407170a9d0d6b3bc42a0a424c7e88a89a45994ea2d629a7fb2cce8379f2712d825915f39b12bb4e46503be45c3e609a65b35af9a4e5062d29229b788ba16a1e63998458167b58a7d49b182ea67058000b9077eb4eadf3c8005d54fd7829312f30088377aee4121cbce2caced9a75029f9038d589286dadae3801dfb7fb721a5fae3988fb257975685931958c639be970074ac788a18cf849ef652fddb71c4ab43722f972aaa6b6e60b6b0ab9ab62de3e2826052fd08122e297cb4902ad464048d1280c53638fb3f0aaee573e2f0d7441cb5c14a535f37ebae2b66d17c1e7a1a866c0fc790fed73122d641a679bd69029acfb6c78db4cf32a89d2010e79576004bfdd51b0e842afbc55796fa2b3b436c01d0ba76fa10f5f9a098caccbd7436064ce9b8cde8cfffaff59f5282a11623a6ca79fa7bcc91f9d04b4bf979e8470b56f124e4da41dbbc4f7eccad843737d6f2737fe88fb5df1b1a192ed5c8f176bf251e3718e8e4c03b3b72243705c6e47a76b660cbc3e283f9b321b2062092d7ddd0732bbc0c35efb24705b201dca3c84694bb0009c247673ef13c43bd0c3baace146821094ad087fa3c844dae4f00faaf9cc5b97a2d7c8859c6336b9d584b12f7fafb62e6b315fc7796942d779fccab4938e2dbcaa9df44d81ca498ccfdff24fc652f9fce5b1d2cb78809a53f0eaa9fc5da116f826e7a6677576091b954076763e2f22904773f0378d60a08d1677943a02ea3e521e0d3dfb010d4b9ad52d763a6b976cc48ea74dd33f45f3a3b63bba79004f4383f2e32f340e0cb5ac278df8adbe5af0f459e4c9d7dd0c06d4427a69411bd72233dc29f65b512c674b992ffb5fefbf98a89869d201ae04424712146791f5a6ab786bbbf0d67376841a7b1f83811fccfcc5367d69ed140045d97635ef2714283ce2560f13b1cdc69a02a8d7d0ee7aa2e40591f3ea00f128d5471637c94aadaa4df0c57f8c350fb99d94b2779322ae0a4493029128fa416a8fd3977ff9c3cf1fe88bb7839efd75a16b128f756ee51431b7a6a7c00769b5eb0bdf09236bebbfdd9db185873edb0557f5ba31b7f6f4b094d4006ad18e6d4d80e103d530a344b4664537b017f5231a153be98fb3cdd482d4023ab5818cf1fbabeb92c9043afa8c36f37169b49abc9e120c50cb78236c217710400cf2d092463b70c003b36498d75b465d7d3531ccf266ee17d2cbc1c945dbb473f4c47ca607a695c6fe5cd4221ffccb40184969219ba790ef02e967c806b4323846f8bbebd5dd7bac349c71bdedc75c9481ff8cf6e1d8bfdd77faa6949636667a8663bad8b9ba8162562c454005a2a17d00eff59ba2841621d62da3cb9c812bdc8f11834ffc31fd1de110cf4a8e140700d13ac0c42c6c9af1ecb4edc6cb01cba94f068ec36dc0c188dccbf9d830d44253db2e43f68d7a16dc92c3c05d2241ee326e9e06d2934a32eaba3162f0b11c2c86e833672ac0844ab698865022e46a84b0690fef7e8c6cfcb5e64a785162a090bcd8a9cf1ecc3528ab72bb43f14d7633e9234c80134d28760d4b7574710d386f4727a35a56184f4706107a3992b809eb8dd17d6cbf2da2e3f48f66f5d4a3842dd27122bf7da343317af474973fc98cc149e7561c98779f5b471acd6268174a48351b762cc9e88b79a33a3d3a2008decbb6895bd76a02f8ad0257d14bc27bb87a42a47cbf0bf511062a82417c250fae5b39d6d2f193afe4cb28463dbf997247f997987fe806c6805c782d6491ef078ad94d8e3b17e4c472360127cbebf1fef7e421b862c85c8a07d37a50bdaa647b14d9d447b52f352f62c12d146c0e6df76032b3a1eac3068c20dee5625d54010b05af2f18012db8855057d226825a1f32dcf64c44080d552ff78f7c2b552f9c932a47387ce0137509c81431dedea6f3ceeb37c9706217857b32d2a7b5426a2505d138da28b610a7e6f9531c36b3beedf90d319ba5c69086d4699c73b84d4b88b8b5cee3540e24bb298ee60a7f2f6f1376ccfe3b0e8212aaaa73f016cf4e2993ef378a4527ec1862f5595b7d669ec6117b5f3c38ebbb18d9c0f1007fce29aa819e303c7f071112c6b29ae7f48766639c21cafe63833ff49d4b30d3ce11be05c64da4703080546bcdd4422c8104af128fa6641f5b4d1b3209bd844fbe0bde60823865726a85633b72071b7a2996a60db0071c91dac43d50d1b93594975ab8379aef234cc1c5253acf48894ec0062197e21512167069e8c55a1510423497045915210e864552c2cb7b25f1706c48152d6060d57e1256c0d6a0ff10a4b6f59f2bc945bd1d96577734aadfae2d9ce928332b313258210d8fd0e12c21bffba296d6a3488dbdaaab85451ce3d11f72be30aeae294962979d132ce0e0523a58c5c320bc99aaa621878e955fc320813b9c33bf36dc4e7eb1f8824220b24c6f6be790318e1b56ed0db6587a367cb4f59fe6c3fe5e05cc02bd91c69eb609f405dc691ea62d28f314d5c9afd86c2ca687ee9b84262d0095e99bb6bd1e44494de566ce4ecf1b6e622aa8a7147534f25a86978f47a0ec3ab2a816e7347f20930d460c6b12cb0d5e625668adb5d0f0c6846dead51a41a9e2e8bad541ad3bf14f94f17c24a800af6cee5f94bb71cd99cc5b117a007306581d05203ea82b1f5572f96bd119e279a8753ab9b5c785f5f603c04db923040d23397860cf812a8dc0dbbe939fea4d294e20e06170223b38663183f3e68e0cb609804ed9f1a2a8ea6504634d3ad7edcd31c87081ef87a09826b9048419376cc6ff97c16416839f141092a5c8468df668c50815189768092a292a1568962fa67e3a8b4cf282d446ef5ea00928addd324cb713c4af66bbc671b844fffe850bc8321cfa273e2367dc5a82e02ccd573cb51805549adb0187cf2013ada4bb4c0594504a7a9aab0663bffe4635f2da44c139c93f2c6721af37f9fb31cb7b01cd62debefcd84cc5e9a8a2432c319a528f98ead09f5e63294b29ad7b00437c25f61b3727b7038c499cafed8b7b1e1c192d5870f54ebd8f6fa5a1d3ad2660fd230277279280c517157df31867bf3ba857a8716aaefc56864a25e4bbe9d64a2a7ea9b1822f4e504760cb58e7855d7683c88aeae711d71806842cc47e24105684cf9550054e2e173682e8b05e5187476dcb89b853260cacb567bb9dc849f3ceb042b16ec111aa076036262748fa564aea111b3cf649c6c848f79e181963c32fbf8bd6ee8bd06600766c3c79d8a7620a8f58b4483c84cbb79048b5b20d2c2da36168599aebebf443d34cc383c9ffd2501d10a2ec37126ba15798516eddf66afb2b82b118bf87df0b2f24c375c6b00525c1576adc090be7effd229f89711e7fc2c988ee03bf07e125380edff847f1c44e28d2e444ea5286292e24f0b125227dc594b39864f95d3ff155a646ea21043033b6f98e254224f0e32b7fc333d4192e43a9833cb2b30481d5015b9bd320bd296b3b969341c2219c3cafdc1c3d167151b897fdd90df13f3edc38453c57e3c3a709c255e977d9adc368c0fc5a7ea65465579516ee9db5866f850d74e8d62b8925b252503cfe980f429a68e058516faf2bda4ec09f17e30fca05924aaa46f28e78366cfa53c4abbda8d68265e3ed120f60669e9880210f2c1c9d1bb6dc54d61dcec37ba7e64ff3b0f4096c7ab4dcbde329f7c8a330496a71adb893ea6ca84e2ca67413d96fe355769b93ba85d089e77f0505245663330e25f60f2e108a6bd3f3fe9c8020b5a32bb46c7c004986af185baf690974d8789534cd20c43488b0af6b58709fe974d23e3879a71304ee40e562cfbb35745c5ce43f0d4db915286576f05ac896291c27835262f50e5c85394e20f0958131b1da79893518764c8c09b8919f7dc1c5564a033fecbe3bedf70ff51a34943cd4cd011a6a72da8e4eff72d665900dbf3d88493cb1dce5cf2369a4cff1d34020fc11bf2dd65f89fb24394fe6bd25bf92d9bb7629ba17d099cf0f186b02e4fd06024a5912d9c4df696b16423ea956ce222850e3571bc8c1f4d744949ec9dc8f162d16a761adb8643f8291fdc7043e0418d3e026932139e6b03202860c114c560ffab7ebc3cb7711fff70fb9314979945de89e9fb7d9dd8647d3c28797f1a76ff4d9bba18f10083fc8c3cd409efabbbc79bc611f9b00d624b925a366a71a56740350f2345a0d33a8cbe68aa500fa889102a0506568cc2efa60589ea983e6b31451843cdb3f7487aaf3de44cd3b027f29787576ac2d0fa2634d76fdb12c366724316a2a4fa74331426482d82814254deb8dbb0a0f361b4dae5a4172d38c04a93980ebf04b5dce96ee416af68a61f95d0ee6c44dd3e0ba030f6617615fc13875cdbd6bd7acb558865015c616f2dc021ca752ff7a2406d64295dbb3d9cc9693f0ebe510b60679b690d646edbd702dc47c3edf431baea6a438214487d3f19cf2ee7cc4a7ebc3365d36cc215a78f5147457b95053bf63a96ca1f987e3d411c891b0183cee09adcbd476f94d242898a566c51317db19bf62832974aa7d908b33b8f2746fa9f5cb8138c97a1f25dde1835d8e7a4d734447aaf5a0fe3eac60622415ffbce775e35e9b5ecb4d1afab472ad728343350727689f9be087e47a7d6d28ea7b88ae40fe1bd0fa2076a7d6279d1c74b7070db63c588820ea545752d3bd8ad3d0735fea17ee4e335906b382b6f9c3e6cd4f52ad03839dc0b3953ac6a444ab529eee40989ec76d25d2894bf21129e150b6378303b5eaec9216c23e1cc60c0d1096498c2ff0948e89b0c0d4cb36b02226a1a0297d59e2c846ac6009a0827d61f104ad3ae1023975062e33457dc7babec2a28146702e157d5e2dc08b3062e407f9715dbbaabcc23d6e4c0b64ae2612bb1f5fd2308dc150c994a66bd091c8c76271e5eb302e728b5d2ae758f74c6b578f61cd0b484fd088ecbb2f79ac11bbda02dfa38e65056f18032217a0e54e55a1bbadaa5d9586059b3868e51310ed725c7444e2781cf0b8b688a7dbb94bb1cb1c57e496f5350f60891cb71ee99c4b3cdea772e8ba57ffea9665bbd9b63ad1f7d4b81374e323b05f70ba7d3dc95f522c3ae086fb1ec38f8842f8156bb7738f93df472a8c0753b734cbc70f891ff039a34d504874e791ad535d2e1de48b551634da314afc2404862f36afdc280b02579eb2b4db50228c29b8b7a", 0x1000}, {&(0x7f0000000500)="dcb002ae476bf0feb7178c4f2f38805945aa6dd98f324805fed2e2cd37e03ae438692334ee624a0c44d35ceb3a88ff417cf3e6accb6bc0b34e2e6944b075a6aed498e01f68beea0b53e4bcd292f9", 0x4e}], 0x5, &(0x7f0000000600)=[{0x58, 0x108, 0x7, "306e6238750c42516c05e5a8903e214790874a51b9f84c9601e336bb5e73b9f33c17faf622247498627b34957fa5336a01b39a21c7636ec4d0ec55a59069f3acae"}], 0x58}, 0x20008000)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000003c0)={r2, r3})
close(r1)

15:35:16 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x2, 0x800000000000004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0xb00, 0x1}, 0x40)

15:35:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:16 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:17 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:17 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @private, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@broadcast}, {@broadcast}, {@multicast2}, {@private}, {@broadcast}, {}]}, @rr={0x7, 0x3}]}}}}}}}, 0x0)

15:35:17 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:17 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:17 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:17 executing program 2:
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @private, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@broadcast}, {}]}, @rr={0x7, 0x3}, @end, @cipso={0x86, 0x55, 0x0, [{0x0, 0x11, "e6c2788936623965ae3a094610c45d"}, {0x0, 0xc, "0227029caccf20083257"}, {0x0, 0x5, "1fa53a"}, {0x0, 0x4, "c547"}, {0x0, 0x8, "de699ceb8424"}, {0x0, 0xb, "8611383c93fe4a2b83"}, {0x0, 0xe, "3843cafd776f4afc9ed56abc"}, {0x0, 0x3, "e1"}, {0x0, 0x5, "62fdbb"}]}]}}}}}}}, 0x0)

15:35:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(0xffffffffffffffff, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x2c}}, 0x0)

15:35:17 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:17 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x10, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x4, 0x11}]}], {0x14}}, 0x68}}, 0x0)

15:35:17 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(0xffffffffffffffff, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:17 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000a060108000000001a000000000000001c0007801800018014000240fc01000000000000000000000000000005000100070000000900020073797a30"], 0x44}}, 0x0)

15:35:17 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:17 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:17 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:17 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:17 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

15:35:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(0xffffffffffffffff, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:17 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:17 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:17 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:17 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:17 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:17 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:17 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65)

15:35:18 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:18 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

15:35:18 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:18 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:18 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)

15:35:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:18 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:18 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

15:35:18 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:18 executing program 5:
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(0xffffffffffffffff, 0x7041, 0x0)

15:35:18 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)

15:35:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:18 executing program 4:
syz_emit_ethernet(0x0, 0x0, 0x0)

15:35:18 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

15:35:18 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:18 executing program 5:
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(0xffffffffffffffff, 0x7041, 0x0)

15:35:18 executing program 4:
syz_emit_ethernet(0x0, 0x0, 0x0)

15:35:18 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)

15:35:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:18 executing program 5:
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(0xffffffffffffffff, 0x7041, 0x0)

15:35:18 executing program 2:
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))

15:35:18 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:18 executing program 4:
syz_emit_ethernet(0x0, 0x0, 0x0)

15:35:18 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)

15:35:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:18 executing program 2:
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))

15:35:18 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:19 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:19 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:19 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:19 executing program 2:
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))

15:35:19 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:19 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:19 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:19 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)

15:35:19 executing program 2:
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))

15:35:19 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:19 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:19 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:19 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:19 executing program 2:
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))

15:35:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:19 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:20 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:20 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:20 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)

15:35:20 executing program 2:
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))

15:35:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:20 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:20 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:20 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:20 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:20 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

15:35:20 executing program 4:
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}]}}}}}}}, 0x0)

15:35:20 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:21 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:21 executing program 4:
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}]}}}}}}}, 0x0)

15:35:21 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:21 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

15:35:21 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:21 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:21 executing program 4:
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}]}}}}}}}, 0x0)

15:35:21 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

15:35:21 executing program 4:
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

15:35:21 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

15:35:21 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:21 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:21 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0)

[  215.582957][ T8682] FAT-fs (loop3): bogus number of FAT sectors
[  215.613323][ T8682] FAT-fs (loop3): Can't find a valid FAT filesystem
15:35:22 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:22 executing program 4:
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

15:35:22 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000c1401060009000000000000080001"], 0x20}}, 0x0)

15:35:22 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, 0x0)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, 0x0, 0x0)

[  215.694498][ T8682] FAT-fs (loop3): bogus number of FAT sectors
[  215.725971][ T8682] FAT-fs (loop3): Can't find a valid FAT filesystem
15:35:22 executing program 4:
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

15:35:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, 0x0, 0x0)

[  215.876186][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
15:35:22 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x14}], {0x14}}, 0x3c}}, 0x0)

15:35:22 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, 0x0)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:22 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:22 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, 0x0)
setreuid(0x0, r2)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:22 executing program 4:
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{}]}]}}}}}}}, 0x0)

15:35:22 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, 0x0, 0x0)

15:35:22 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa4000960)

15:35:22 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6)
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:22 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:22 executing program 4:
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{}]}]}}}}}}}, 0x0)

15:35:23 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:23 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

15:35:23 executing program 4:
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{}]}]}}}}}}}, 0x0)

15:35:23 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6)
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

15:35:23 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:23 executing program 4:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:23 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

15:35:23 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6)
setreuid(0x0, 0x0)
ioctl$TCSBRKP(r0, 0x7041, 0x0)

15:35:23 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

15:35:23 executing program 4:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

15:35:23 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:23 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a3)

15:35:23 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(0xffffffffffffffff, 0x7041, 0x0)

15:35:23 executing program 4:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:23 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:23 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(0xffffffffffffffff, 0x7041, 0x0)

15:35:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0)

15:35:23 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:23 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

15:35:23 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:23 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
clone(0x20002004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
setreuid(0x0, r1)
ioctl$TCSBRKP(0xffffffffffffffff, 0x7041, 0x0)

15:35:24 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0)

15:35:24 executing program 3:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10083)
close(r0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x3af4701e)

15:35:24 executing program 5:

15:35:24 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:24 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:24 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0)

15:35:24 executing program 3:

15:35:24 executing program 5:

15:35:24 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:24 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x0)

15:35:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x5450, 0x0)

15:35:24 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32], 0x5c}}, 0x0)

15:35:24 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f}}, 0x0)

15:35:24 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

[  218.199782][ T8827] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:25 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x0, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:25 executing program 3:
r0 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

15:35:25 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff808fdb003d88c8f00018ee1ba1d7bfb57f47ec00b60b6101d2850c1e05a64ae4833b3accfb4bd24b1352b0707e16576392e6cb38e5609cf111171a60687229aed66ba28dba358335f479e83d5f9a9193588530372ff378280dcec2efaee5be64e4ce95c17536f7a58453a85a84f46c46a76249f27ea55322e43c1387213dafed266cd6363e29ddb4049106cb1976365999c5f68c28168f9185751cac1e3b61111dba702003564b39c09ab41bb1999b356ff7fa1a7e3544c00cca81de66d7e81ac13ef700567f722c1bbd246c5f2d1a746c567be123924fed02de3bc8d165d12cfbc6e94ba751639d80f40a79fd120e1cbe98dd6abf3dde7814ca4358d59a50ec3cd22d086a50b5aa0ebed38bbb8833c2f40dff661b81f2816db86060c850000000000000000000867d7e6297ac23b132fa5157daa903b07df592601f6e618eef9dd04202f8f8a3e023a45f548e"], 0x12f}}, 0x0)

15:35:25 executing program 5:

15:35:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32], 0x5c}}, 0x0)

15:35:25 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

[  218.494391][ T8838] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:25 executing program 5:

15:35:25 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:25 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff808fdb003d88c8f00018ee1ba1d7bfb57f47ec00b60b6101d2850c1e05a64ae4833b3accfb4bd24b1352b0707e16576392e6cb38e5609cf111171a60687229aed66ba28dba358335f479e83d5f9a9193588530372ff378280dcec2efaee5be64e4ce95c17536f7a58453a85a84f46c46a76249f27ea55322e43c1387213dafed266cd6363e29ddb4049106cb1976365999c5f68c28168f9185751cac1e3b61111dba702003564b39c09ab41bb1999b356ff7fa1a7e3544c00cca81de66d7e81ac13ef700567f722c1bbd246c5f2d1a746c567be123924fed02de3bc8d165d12cfbc6e94ba751639d80f40a79fd120e1cbe98dd6abf3dde7814ca4358d59a50ec3cd22d086a50b5aa0ebed38bbb8833c2f40dff661b81f2816db86060c850000000000000000000867d7e6297ac23b132fa5157daa903b07df592601f6e618eef9dd04202f8f8a3e023a45f548e"], 0x12f}}, 0x0)

15:35:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32], 0x5c}}, 0x0)

15:35:25 executing program 3:

15:35:25 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x0, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:25 executing program 5:

15:35:25 executing program 3:

[  218.773003][ T8851] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:25 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x0, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:25 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:25 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, 0x0, 0x0)

15:35:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB], 0x5c}}, 0x0)

15:35:25 executing program 5:

15:35:25 executing program 3:

15:35:25 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:25 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

[  219.072467][ T8865] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:25 executing program 5:

15:35:25 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, 0x0, 0x0)

15:35:25 executing program 3:

15:35:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB], 0x5c}}, 0x0)

15:35:25 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:25 executing program 5:

15:35:25 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:25 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, 0x0, 0x0)

[  219.320027][ T8877] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:25 executing program 3:

15:35:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB], 0x5c}}, 0x0)

15:35:26 executing program 5:

15:35:26 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

15:35:26 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:26 executing program 3:

[  219.608399][ T8890] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:26 executing program 5:

15:35:26 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

15:35:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a0004"], 0x5c}}, 0x0)

15:35:26 executing program 3:

15:35:26 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:26 executing program 5:

15:35:26 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

[  219.872433][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:26 executing program 3:

15:35:26 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

[  219.924746][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

15:35:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a0004"], 0x5c}}, 0x0)

15:35:26 executing program 5:

15:35:26 executing program 3:

15:35:26 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:26 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12f}}, 0x0)

15:35:26 executing program 5:

[  220.225969][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:26 executing program 3:

15:35:26 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a0004"], 0x5c}}, 0x0)

15:35:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12f}}, 0x0)

15:35:27 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @remote, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:27 executing program 5:

15:35:27 executing program 3:

15:35:27 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:27 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12f}}, 0x0)

15:35:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000"], 0x5c}}, 0x0)

15:35:27 executing program 5:

15:35:27 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:27 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0x8, 0x0, 0x100, 0x4, 0x1})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x2, 0x1}, 0x2c)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
r5 = socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x2c, 0x0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0xfffffecc, 0x0, 0x410, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbc1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048011}, 0x44000)
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000080)={0xfffffc00, 0x6, 0x4, 0x0, 0x3f, {}, {0x1, 0x0, 0x6, 0x81, 0x98, 0x3f, "403926fa"}, 0x2, 0x4, @fd, 0x40, 0x0, r5})
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000000), &(0x7f0000000140)=""/130}, 0x18)
pipe(0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
pipe(0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)

15:35:27 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:27 executing program 5:

15:35:27 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x12f}}, 0x0)

15:35:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000"], 0x5c}}, 0x0)

15:35:27 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:27 executing program 5:

15:35:27 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x0, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

[  220.932093][ T8956] __nla_validate_parse: 5 callbacks suppressed
[  220.932103][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:27 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x12f}}, 0x0)

15:35:27 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @dev, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:27 executing program 5:

[  221.018532][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000"], 0x5c}}, 0x0)

[  221.280887][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  221.309425][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:28 executing program 3:

15:35:28 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x12f}}, 0x0)

15:35:28 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x0, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:28 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:28 executing program 5:

15:35:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa00000800010010000000080003000000"], 0x5c}}, 0x0)

15:35:28 executing program 5:

15:35:28 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:28 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x0, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

[  222.289265][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:28 executing program 3:

15:35:28 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x12f}}, 0x0)

15:35:29 executing program 5:

15:35:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa00000800010010000000080003000000"], 0x5c}}, 0x0)

15:35:29 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:29 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @multicast2, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:29 executing program 5:

15:35:29 executing program 3:

15:35:29 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x12f}}, 0x0)

[  222.579808][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:29 executing program 5:

15:35:29 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:29 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa00000800010010000000080003000000"], 0x5c}}, 0x0)

15:35:29 executing program 3:

15:35:29 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x12f}}, 0x0)

15:35:29 executing program 5:

15:35:29 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

[  222.862269][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:29 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:29 executing program 3:

15:35:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00"], 0x5c}}, 0x0)

15:35:29 executing program 5:

15:35:29 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @dev, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:29 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff808fdb003d88c8f00018ee1ba1d7bfb57f47ec00b60b6101d2850c1e05a64ae4833b3accfb4bd24b1352b0707e16576392e6cb38e5609cf111171a60687229aed66ba28dba358335f479e83d5f9a9193588530372ff378280dcec2efaee5be64e4ce95c17536f7a58453a85a84f46c46a76249f27ea55322e43c1387213dafed266cd6363e29ddb4049106cb1976365999c5f68c28168f9185751cac1e3b61111dba70"], 0x12f}}, 0x0)

15:35:29 executing program 3:

15:35:29 executing program 5:

15:35:29 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:29 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00"], 0x5c}}, 0x0)

15:35:29 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x12f}}, 0x0)

15:35:29 executing program 3:

15:35:29 executing program 5:

15:35:30 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:30 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00"], 0x5c}}, 0x0)

15:35:30 executing program 3:

15:35:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x12f}}, 0x0)

15:35:30 executing program 5:

15:35:30 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@multicast1, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:30 executing program 3:

15:35:30 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

15:35:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a000100"], 0x5c}}, 0x0)

15:35:30 executing program 5:

15:35:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x12f}}, 0x0)

15:35:30 executing program 3:

15:35:30 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a000100"], 0x5c}}, 0x0)

15:35:30 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

15:35:30 executing program 5:

15:35:30 executing program 3:

15:35:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff808fdb003d88c8f00018ee1ba1d7bfb57f47ec00b60b6101d2850c1e05a64ae4833b3accfb4bd24b1352b0707e16576392e6cb38e5609cf111171a60687229aed66ba28dba358335f479e83d5f9a"], 0x12f}}, 0x0)

15:35:30 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a000100"], 0x5c}}, 0x0)

15:35:30 executing program 5:

15:35:30 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x27, 0x0, [@dev, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

15:35:30 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

15:35:30 executing program 3:

15:35:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x12f}}, 0x0)

15:35:30 executing program 5:

15:35:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:30 executing program 4:

15:35:30 executing program 3:

15:35:30 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

15:35:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x12f}}, 0x0)

15:35:31 executing program 5:

15:35:31 executing program 4:

15:35:31 executing program 3:

[  224.447837][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:31 executing program 1:

15:35:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x12f}}, 0x0)

15:35:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:31 executing program 5:

15:35:31 executing program 4:

15:35:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff808fdb003d88c8f00018ee1ba1d7bfb57f47ec00b60b6101d2850c1e05a64ae4833b3acc"], 0x12f}}, 0x0)

15:35:31 executing program 3:

15:35:31 executing program 1:

[  224.739137][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:31 executing program 4:

15:35:31 executing program 5:

15:35:31 executing program 3:

15:35:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507010000090000000000000000", @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:31 executing program 1:

15:35:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x12f}}, 0x0)

15:35:31 executing program 5:

15:35:31 executing program 3:

15:35:31 executing program 4:

15:35:31 executing program 1:

15:35:31 executing program 5:

[  225.066520][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:31 executing program 3:

15:35:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x12f}}, 0x0)

15:35:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:31 executing program 4:

15:35:31 executing program 1:

15:35:31 executing program 5:

15:35:31 executing program 3:

15:35:31 executing program 4:

15:35:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x12f}}, 0x0)

15:35:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:32 executing program 5:

15:35:32 executing program 3:

15:35:32 executing program 1:

15:35:32 executing program 4:

15:35:32 executing program 3:

15:35:32 executing program 5:

15:35:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff808fdb003d88c8f00018ee1ba1d7bf"], 0x12f}}, 0x0)

15:35:32 executing program 1:

15:35:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:32 executing program 4:

15:35:32 executing program 1:

15:35:32 executing program 5:

15:35:32 executing program 3:

15:35:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x12f}}, 0x0)

15:35:32 executing program 4:

15:35:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:32 executing program 1:

15:35:32 executing program 5:

15:35:32 executing program 3:

15:35:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x12f}}, 0x0)

15:35:32 executing program 4:

15:35:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:32 executing program 5:

15:35:32 executing program 3:

15:35:32 executing program 1:

15:35:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x12f}}, 0x0)

15:35:32 executing program 4:

15:35:32 executing program 5:

15:35:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:32 executing program 3:

15:35:32 executing program 1:

15:35:32 executing program 4:

15:35:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff808fdb003d"], 0x12f}}, 0x0)

15:35:32 executing program 5:

15:35:33 executing program 3:

15:35:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100005070100", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:33 executing program 4:

15:35:33 executing program 1:

15:35:33 executing program 5:

15:35:33 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000"], 0x12f}}, 0x0)

15:35:33 executing program 3:

15:35:33 executing program 4:

[  226.596247][ T9211] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:33 executing program 1:

15:35:33 executing program 5:

15:35:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100005070100", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:33 executing program 3:

15:35:33 executing program 4:

15:35:33 executing program 3:

15:35:33 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000"], 0x12f}}, 0x0)

[  226.833115][ T9222] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:33 executing program 1:

15:35:33 executing program 5:

15:35:33 executing program 4:

15:35:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100005070100", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:33 executing program 3:

15:35:33 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000"], 0x12f}}, 0x0)

15:35:33 executing program 1:

15:35:33 executing program 5:

15:35:33 executing program 4:

15:35:33 executing program 3:

[  227.142392][ T9235] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:33 executing program 1:

15:35:33 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff"], 0x12f}}, 0x0)

15:35:33 executing program 4:

15:35:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000050701000009000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:33 executing program 3:

15:35:33 executing program 5:

15:35:33 executing program 1:

15:35:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000"], 0x12f}}, 0x0)

15:35:34 executing program 5:

15:35:34 executing program 3:

15:35:34 executing program 1:

15:35:34 executing program 4:

[  227.471579][ T9249] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:34 executing program 4:

15:35:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000050701000009000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000"], 0x12f}}, 0x0)

15:35:34 executing program 5:

15:35:34 executing program 3:

15:35:34 executing program 1:

[  227.714406][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:34 executing program 4:

15:35:34 executing program 1:

15:35:34 executing program 5:

15:35:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000050701000009000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:34 executing program 3:

15:35:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000"], 0x12f}}, 0x0)

15:35:34 executing program 5:

15:35:34 executing program 4:

15:35:34 executing program 3:

15:35:34 executing program 1:

15:35:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301"], 0x12f}}, 0x0)

15:35:34 executing program 5:

[  228.012037][ T9272] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:34 executing program 3:

15:35:34 executing program 4:

15:35:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000050701000009000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:34 executing program 1:

15:35:34 executing program 5:

15:35:34 executing program 3:

15:35:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301"], 0x12f}}, 0x0)

15:35:34 executing program 4:

15:35:34 executing program 5:

[  228.323449][ T9286] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:34 executing program 1:

15:35:35 executing program 3:

15:35:35 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301"], 0x12f}}, 0x0)

15:35:35 executing program 5:

15:35:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000050701000009000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:35 executing program 4:

15:35:35 executing program 3:

15:35:35 executing program 1:

15:35:35 executing program 5:

15:35:35 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017f"], 0x12f}}, 0x0)

15:35:35 executing program 4:

[  228.647395][ T9302] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:35 executing program 3:

15:35:35 executing program 1:

15:35:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000050701000009000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:35 executing program 5:

15:35:35 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017f"], 0x12f}}, 0x0)

15:35:35 executing program 3:

15:35:35 executing program 1:

15:35:35 executing program 4:

[  228.944768][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:35 executing program 3:

15:35:35 executing program 5:

15:35:35 executing program 1:

15:35:35 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017f"], 0x12f}}, 0x0)

15:35:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100005070100000900000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:35 executing program 4:
syz_usb_connect(0x0, 0xcf, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aeee19403b76bf7116a4000000010902bd000100ff00000904a400000e0100000624060000c2a515cab923d0836d74e0aac4207fad296467929e6f8fcd925306d882aef449a6c473e89e0376b0dd69c726287318071ff5ead0fe977b3df2ff2bdf475e3c0a7adc1220b0c3dc40ddd6f0c62e5d74d6f8c8c55f5fb7"], 0x0)

15:35:35 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000380)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0}}], 0x1, 0x40)

15:35:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x10000000)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)

15:35:35 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

15:35:35 executing program 2:

[  229.227455][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
15:35:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100005070100000900000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:36 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x80000001, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  229.494874][    T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd
15:35:36 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100005070100000900000000000000", @ANYRES32, @ANYBLOB="0000001300000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a00010004"], 0x5c}}, 0x0)

15:35:36 executing program 5:
syz_usb_connect(0x0, 0xcf, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000aeee19403b76bf7116a4000000010902bd000100ff00000904a400000e0100000624060000c2a515cab923d0836d74e0aac4207fad296467929e6f8fcd925306d882aef449a6c473e89e0376b0dd69c726287318071ff5ead03e977b3df2ff2bdf"], 0x0)

15:35:36 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x80000001, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}}, {{&(0x7f0000000780)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0x9, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {&(0x7f0000003cc0)=""/66, 0x42}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x164, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x80, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3f}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, [], 0x1}}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '/dev/fuse\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_ADT={0xa8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffff800}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000084}, 0x20090)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, 0x0, 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:36 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x80000001, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  229.855499][    T5] usb 5-1: config 0 has an invalid interface number: 164 but max is 0
[  229.873634][    T5] usb 5-1: config 0 has no interface number 0
[  229.899528][    T5] usb 5-1: New USB device found, idVendor=763b, idProduct=71bf, bcdDevice=a4.16
[  229.933966][    C1] hrtimer: interrupt took 30344 ns
[  229.984716][ T3272] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  229.995339][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.059035][    T5] usb 5-1: config 0 descriptor??
[  230.344939][    T5] usb 5-1: string descriptor 0 read error: -71
[  230.352792][    T5] uvcvideo: Found UVC 0.00 device <unnamed> (763b:71bf)
[  230.364971][ T3272] usb 6-1: config 0 has an invalid interface number: 164 but max is 0
[  230.378947][ T3272] usb 6-1: config 0 has no interface number 0
[  230.396969][    T5] uvcvideo: No valid video chain found.
[  230.398049][ T3272] usb 6-1: New USB device found, idVendor=763b, idProduct=71bf, bcdDevice=a4.16
[  230.425142][    T5] usb 5-1: USB disconnect, device number 2
[  230.480494][ T3272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.514774][ T3272] usb 6-1: config 0 descriptor??
[  230.794239][ T3272] usb 6-1: string descriptor 0 read error: -71
[  230.804736][ T3272] uvcvideo: Found UVC 0.00 device <unnamed> (763b:71bf)
[  230.819614][ T3272] uvcvideo: No valid video chain found.
[  230.839354][ T3272] usb 6-1: USB disconnect, device number 2
[  231.194122][ T3275] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  231.534207][ T3270] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  231.554766][ T3275] usb 5-1: config 0 has an invalid interface number: 164 but max is 0
[  231.562958][ T3275] usb 5-1: config 0 has no interface number 0
[  231.585652][ T3275] usb 5-1: New USB device found, idVendor=763b, idProduct=71bf, bcdDevice=a4.16
[  231.596042][ T3275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.610783][ T3275] usb 5-1: config 0 descriptor??
15:35:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:38 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000080)={{0x1}})

15:35:38 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x80000001, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
getpid()
sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
modify_ldt$write(0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
fcntl$setpipe(r2, 0x407, 0x3f)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, r3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8052, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
r4 = gettid()
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="230228efb4a24fe84689000080cb000000005d6fe0eb92552fba4784466ebedbcc3e06000000000000006c0e09d1ede6c1f37b9c352f8950dfa3cae7e6b0b8861b8ab2cc4c2ef85800004380a8cf359a30a74dc68c37cfbef5c16f3e64880800000000000000bf08002a74e3e6236e1882c601f2b49e32098f6919c7030000000000000005005de2be4e7b3881c92986a5419456919956cfba8240afd19e8f003e80efbe0b10d442ddd904000000000000004b03ba06656f9029509bed808fcaa86c8dc50de43149543b911caf5e9ccd3c36c4fbffffffffffffffc6933bef175b6dcfcb5c2c428f750e12bf08cf6a46df9b9e5b00c8de1d6687f10b410b852cc7c6dba25ce854d650dc3a13984b627b85d0809e6a420000a9027b413acacb65253484b86864a9a35fa81fd3408387306360480834bc1bee1f2d34137b74920371226fd9e796f5586d354ba2edab762282359053a77689cb40982409000000f10fba67eb0a0da7369052f97b8caebd4786bce825d47510a349a27b0000000000000000000000acb2c6eb2ecd04970e9b7869f8a7cdf5f079df0d1ace61c54b95fd12d059fa37e1c4770b39ac61c35fcc1d6c1a40781864d1d900000000000000000000000000000000002b06c72df9d359d5a6cdb1b38ad641ea5b7dc7d16cee656f106bba9899a7252f178725695ecfe42beaea7fc99e7b58565c136c2f51bbdece70c61db82660c2302efdc15cef88aba26b108405b443d273"], 0x187)
inotify_init1(0x0)
dup(0xffffffffffffffff)
close(r5)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

15:35:38 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="bb"], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @local, @local}, &(0x7f0000000080)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0)

[  231.894379][ T3270] usb 6-1: config 0 has an invalid interface number: 164 but max is 0
[  231.902592][ T3270] usb 6-1: config 0 has no interface number 0
[  231.918104][ T3275] usb 5-1: string descriptor 0 read error: -71
[  231.948484][ T3275] uvcvideo: Found UVC 0.00 device <unnamed> (763b:71bf)
[  231.984777][ T3270] usb 6-1: New USB device found, idVendor=763b, idProduct=71bf, bcdDevice=a4.16
[  232.004521][ T3275] uvcvideo: No valid video chain found.
15:35:38 executing program 0:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x5f, 0x60, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)

[  232.048041][ T3275] usb 5-1: USB disconnect, device number 3
[  232.063061][ T3270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
15:35:38 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:38 executing program 1:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1)
ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812})
io_setup(0x7, &(0x7f0000000280)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xbd00000000000000}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
dup3(r3, r4, 0x0)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x15)

[  232.195000][ T3270] usb 6-1: config 0 descriptor??
15:35:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:39 executing program 0:
unshare(0x2040400)
r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x8040}, {r1}], 0x2, 0x0)

15:35:39 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:39 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x60, 0x2e, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)

[  232.505109][ T3270] usb 6-1: string descriptor 0 read error: -71
[  232.518701][ T3270] uvcvideo: Found UVC 0.00 device <unnamed> (763b:71bf)
[  232.564385][ T3270] uvcvideo: No valid video chain found.
[  232.590519][ T3270] usb 6-1: USB disconnect, device number 3
15:35:39 executing program 5:
syz_usb_connect(0x0, 0xcf, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000aeee19403b76bf7116a42d000001090250000100ff00000904a400000e010000062406"], 0x0)

15:35:39 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:39 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x1}, 0x20)

15:35:39 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:39 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:39 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:39 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x3, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x0, 0x0)
dup(r2)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:39 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:39 executing program 3:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2e, 0x5f, 0x5f, 0x52, 0x2e, 0x60, 0x5f]}, 0x40)

15:35:39 executing program 1:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2e, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f, 0x3]}, 0x40)

[  233.224010][ T3270] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  233.724492][ T3270] usb 6-1: config 0 has an invalid interface number: 164 but max is 0
[  233.743044][ T3270] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.772069][ T3270] usb 6-1: config 0 has no interface number 0
[  233.854715][ T3270] usb 6-1: New USB device found, idVendor=763b, idProduct=71bf, bcdDevice=a4.16
[  233.872046][ T3270] usb 6-1: New USB device strings: Mfr=45, Product=0, SerialNumber=0
[  233.906713][ T3270] usb 6-1: Manufacturer: syz
[  233.930430][ T3270] usb 6-1: config 0 descriptor??
[  234.236307][ T3270] usb 6-1: USB disconnect, device number 4
[  235.013697][ T3275] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  235.373911][ T3275] usb 6-1: config 0 has an invalid interface number: 164 but max is 0
[  235.382258][ T3275] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.413643][ T3275] usb 6-1: config 0 has no interface number 0
[  235.494347][ T3275] usb 6-1: New USB device found, idVendor=763b, idProduct=71bf, bcdDevice=a4.16
[  235.524484][ T3275] usb 6-1: New USB device strings: Mfr=45, Product=0, SerialNumber=0
[  235.532618][ T3275] usb 6-1: Manufacturer: syz
[  235.541612][ T3275] usb 6-1: config 0 descriptor??
15:35:42 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
pipe(&(0x7f0000000040))
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:35:42 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:42 executing program 3:
gettid()
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1ef, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x10000000)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)
socket$key(0xf, 0x3, 0x2)

15:35:42 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:42 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r1, 0x2081fc)
fcntl$setstatus(r0, 0x4, 0x6100)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x149042, 0x0)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x4003fe)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x0, 0x0, 0x3})
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x80001d00c0d0)

15:35:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  235.786814][ T3275] usb 6-1: USB disconnect, device number 5
15:35:42 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:42 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:42 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  236.178361][   T29] audit: type=1804 audit(1590248142.757:2): pid=9575 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir014460396/syzkaller.p0zSVk/88/bus" dev="sda1" ino=15966 res=1
15:35:42 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0xc)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:42 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

[  236.489846][   T29] audit: type=1800 audit(1590248143.067:3): pid=9575 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=15928 res=0
[  236.576289][   T29] audit: type=1804 audit(1590248143.107:4): pid=9575 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir014460396/syzkaller.p0zSVk/88/bus" dev="sda1" ino=15966 res=1
15:35:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x4, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000003a40)={0xa, 0x4e25, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xbb8)

15:35:43 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:43 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

15:35:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:43 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

15:35:43 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:43 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:43 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

[  237.261074][ T9668] fuse: Bad value for 'fd'
[  237.267653][ T2557] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  237.513380][ T2557] usb 2-1: Using ep0 maxpacket: 32
[  237.633964][ T2557] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
15:35:44 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2e, 0x5f, 0x60, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)

15:35:44 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:44 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:44 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

[  237.864149][ T2557] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  237.892194][ T9697] fuse: Bad value for 'fd'
[  237.929419][ T2557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.944295][ T2557] usb 2-1: Product: syz
[  237.948601][ T2557] usb 2-1: Manufacturer: syz
[  237.955521][ T2557] usb 2-1: SerialNumber: syz
[  238.208277][ T2557] usb 2-1: USB disconnect, device number 2
15:35:45 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0x35}, {0x6, 0x0, 0x0, 0x50000}]})

15:35:45 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:45 executing program 5:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3, 0xffffa569}})
mmap(&(0x7f000009b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

15:35:45 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:45 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

[  238.938799][ T9736] fuse: Bad value for 'fd'
15:35:45 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
unshare(0x44020600)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x2817e, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x2}, {{r1}}]})

15:35:45 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r4, 0x0}])

15:35:45 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:45 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

[  239.272688][ T9757] IPVS: ftp: loaded support on port[0] = 21
[  239.285190][   T29] audit: type=1804 audit(1590248145.867:5): pid=9771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir014460396/syzkaller.p0zSVk/91/bus/file0" dev="sda1" ino=15993 res=1
[  239.294776][ T9767] overlayfs: failed to resolve './bus': -2
15:35:45 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:46 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:46 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:46 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  239.537743][   T29] audit: type=1804 audit(1590248146.117:6): pid=9771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir014460396/syzkaller.p0zSVk/91/bus/file0" dev="sda1" ino=15993 res=1
[  239.606414][ T9767] IPVS: ftp: loaded support on port[0] = 21
[  239.721091][ T9371] tipc: TX() has been purged, node left!
15:35:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:46 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:46 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:46 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:46 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
dup(r2)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:46 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:46 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r4, 0x0}])

15:35:46 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:46 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:46 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:46 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:47 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
dup(r2)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:47 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:47 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:47 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
dup(r2)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:47 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:47 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r4, 0x0}])

15:35:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:47 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
socket(0x1e, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:47 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:47 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:47 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
socket(0x1e, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:48 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:48 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:48 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
socket(0x1e, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:48 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r4, 0x0}])

15:35:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:48 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:48 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:48 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:48 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:49 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:49 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:49 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:49 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:49 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

15:35:49 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:49 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:49 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:49 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:49 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:49 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:50 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:50 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:50 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

[  243.491550][T10027] binder: 10023:10027 ioctl c0306201 0 returned -14
15:35:50 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

15:35:50 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:50 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:50 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:50 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:50 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:50 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  244.053897][T10052] binder: 10048:10052 ioctl c0306201 0 returned -14
15:35:50 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:50 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:50 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

[  244.374634][T10085] binder: 10080:10085 ioctl c0306201 0 returned -14
15:35:51 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

15:35:51 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:51 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:51 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:51 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:51 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:51 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:51 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:51 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:51 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:52 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
open(&(0x7f0000000400)='./bus\x00', 0x16103e, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r3, 0x0}])

15:35:52 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:52 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:52 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:52 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:52 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:52 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:52 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:52 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:52 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:52 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:52 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r3, 0x0}])

15:35:53 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:53 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:53 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:53 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:53 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:53 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:53 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r3, 0x0}])

15:35:53 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:53 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:53 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:54 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:54 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:54 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:54 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  247.634373][ T9371] tipc: TX() has been purged, node left!
15:35:54 executing program 1:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:54 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:54 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:54 executing program 1:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:54 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:54 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

15:35:54 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  248.020559][T10274] binder: 10265:10274 ioctl c0306201 0 returned -14
15:35:54 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

15:35:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:54 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:54 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  248.210152][T10285] binder: 10284:10285 ioctl c0306201 0 returned -14
15:35:54 executing program 1:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:54 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

15:35:54 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:54 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

[  248.456044][T10303] binder: 10296:10303 ioctl c0306201 0 returned -14
15:35:55 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8150000, 0x0})

15:35:55 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:55 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8150000, 0x0})

15:35:55 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:55 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x10, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8150000, 0x0})

15:35:55 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:55 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death], 0x0, 0x8150000, 0x0})

15:35:55 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x10, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:55 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:56 executing program 5:
io_setup(0x202, &(0x7f00000004c0)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(r0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:56 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x10, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death], 0x0, 0x8150000, 0x0})

15:35:56 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:56 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death], 0x0, 0x8150000, 0x0})

15:35:56 executing program 5:
io_setup(0x202, &(0x7f00000004c0)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(r0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:56 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:56 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @clear_death], 0x0, 0x8150000, 0x0})

15:35:56 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 5:
io_setup(0x202, &(0x7f00000004c0)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(r0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:56 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @clear_death], 0x0, 0x8150000, 0x0})

15:35:56 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:56 executing program 5:
r0 = creat(0x0, 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:57 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:57 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x0, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @clear_death], 0x0, 0x8150000, 0x0})

15:35:57 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x0, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:57 executing program 5:
r0 = creat(0x0, 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:57 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x0, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:57 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:57 executing program 5:
r0 = creat(0x0, 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:57 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:57 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:57 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:58 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:58 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death], 0x0, 0x8150000, 0x0})

15:35:58 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:58 executing program 0:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0x1e, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x2}})

15:35:58 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:58 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:58 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x120, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

15:35:58 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:58 executing program 0:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2}})

15:35:58 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:35:58 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, 0x0)

15:35:58 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:58 executing program 0:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1)
ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812})
io_setup(0x7, &(0x7f0000000280)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
dup3(r3, r4, 0x0)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x15)

15:35:58 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:58 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, 0x0)

15:35:59 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:59 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, 0x0)

15:35:59 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:59 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:59 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)

15:35:59 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:59 executing program 0:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1)
ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812})
io_setup(0x7, &(0x7f0000000280)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
dup3(r3, r4, 0x0)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x15)

15:35:59 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:35:59 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:35:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/timer\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={0xffc}, 0x0, 0x0)

15:35:59 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:35:59 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:35:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:00 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:00 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:36:00 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x10, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:00 executing program 0:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2e, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x60]}, 0x40)

15:36:00 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x10, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:00 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:36:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

15:36:00 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:00 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x10, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x10000015, 0x5, 0x0, 0x0, {0x2}, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}}, 0x0)

15:36:00 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r2, 0x0}])

15:36:00 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:01 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0x1}}, 0xe8)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0)

15:36:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:01 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:01 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:01 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

15:36:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

15:36:01 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000e80))
recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:01 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

15:36:01 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:01 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x0, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:01 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_procfs(0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x4, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000003a40)={0xa, 0x4e25, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xbb8)

15:36:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

15:36:01 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x0, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:01 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x0, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:01 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

15:36:01 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

15:36:01 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x0, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:02 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:02 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:36:02 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x0, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:02 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='time_offset='])

15:36:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:02 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x0, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:02 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:36:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

15:36:02 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x0, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

15:36:02 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
socket(0x1e, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  256.189336][T10882] FAT-fs (loop0): Unrecognized mount option "time_offset=" or missing value
15:36:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
pipe(&(0x7f0000000e80))
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08010000000000002900000036000000331de514c9f00000c910ff0100000000000000000000000000010401020401e5c810fe800000000000001800000000100012050200090712b4734e5d81752c887d3878db2f002b512fb557f5a9c40843b38fbdcbc2c7454e2b9f36f94217d5160b1eb27c60662bf40ec5956c2c269e7a0f28e3bb0c07d8f6de7fc2dad631f0508ea25819e05798f2d937ad3e7d58e5fed16f5493ed4efd8c34297a3dfd8c45916f4dc93eaa21886c57d492d9fdf7573bc5a2707914a485aefbf7a2cb42cd4715fed9710a7f8d11172ed86e4c6aab5672039181e091955bf07c871fca0502ffffc20404000004c204000000700000000000000029000000040000002c0a000000000000e710fe80000000000000000000000000001c0740781f6af40e01ff00040000000000000003000000000000008000000000000000ff0000000000000001000000000000000300000000000000810000000000000004010900700000000000000029000000370d3685fe1cdb4f2ac950f38bc5eec91c173320ea9f440cd0fc3ab6d91832a985ef46c88a755ca69209e4158cf16e74b2421eb27b0f6f24764f1c2235227991c49fac44dcdda15c68e60ef9cbf73a21361ea2b8bd49f2ebaeffec65a744244daad344a3cd759bf915d6b5d3e8bdeaa8b2f5c1e2066b3f313184c871d2680e718dbb42c3f1aad67905dd2f453b34efba1e7f5ead227c62a51fd3c8cc388741a22eff1ea6992db43aa60a87"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:02 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x3e8, 0x5, 0x0, r1, 0x0}])

15:36:02 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x0, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:03 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
socket(0x1e, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  256.372548][T10882] FAT-fs (loop0): Unrecognized mount option "time_offset=" or missing value
15:36:03 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)

15:36:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x4000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

15:36:03 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
socket(0x1e, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
pipe(&(0x7f0000000e80))
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

15:36:03 executing program 5:
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000004c0)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
io_submit(r0, 0x0, 0x0)

15:36:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  256.686823][T10920] input: syz0 as /devices/virtual/input/input5
[  256.757166][T10917] ==================================================================
[  256.765658][T10917] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0
[  256.772861][T10917] Read of size 8 at addr ffff88809f12a158 by task syz-executor.0/10917
[  256.781091][T10917] 
[  256.783429][T10917] CPU: 1 PID: 10917 Comm: syz-executor.0 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0
[  256.793443][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  256.803494][T10917] Call Trace:
[  256.806893][T10917]  dump_stack+0x18f/0x20d
[  256.811231][T10917]  ? __mutex_lock+0x1033/0x13c0
[  256.816083][T10917]  ? __mutex_lock+0x1033/0x13c0
[  256.821021][T10917]  print_address_description.constprop.0.cold+0xd3/0x413
[  256.828154][T10917]  ? cdev_device_del+0x69/0x80
[  256.833055][T10917]  ? evdev_disconnect+0x3d/0xb0
[  256.837953][T10917]  ? __input_unregister_device+0x1b0/0x430
[  256.843763][T10917]  ? input_unregister_device+0xb4/0xf0
[  256.849275][T10917]  ? uinput_destroy_device+0x1e2/0x240
[  256.854837][T10917]  ? vprintk_func+0x97/0x1a6
[  256.859434][T10917]  ? __mutex_lock+0x1033/0x13c0
[  256.864298][T10917]  kasan_report.cold+0x1f/0x37
[  256.869075][T10917]  ? __mutex_lock+0x1033/0x13c0
[  256.873927][T10917]  __mutex_lock+0x1033/0x13c0
[  256.878606][T10917]  ? evdev_cleanup+0x21/0x190
[  256.883318][T10917]  ? print_usage_bug+0x240/0x240
[  256.888291][T10917]  ? trace_hardirqs_off+0x50/0x220
[  256.893405][T10917]  ? mutex_trylock+0x2c0/0x2c0
[  256.898199][T10917]  ? mark_held_locks+0x9f/0xe0
[  256.902965][T10917]  ? kfree+0x1eb/0x2b0
[  256.907038][T10917]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  256.913112][T10917]  ? kfree_const+0x51/0x60
[  256.917538][T10917]  ? evdev_cleanup+0x21/0x190
[  256.922217][T10917]  evdev_cleanup+0x21/0x190
[  256.926726][T10917]  evdev_disconnect+0x45/0xb0
[  256.931407][T10917]  __input_unregister_device+0x1b0/0x430
[  256.937132][T10917]  input_unregister_device+0xb4/0xf0
[  256.942416][T10917]  uinput_destroy_device+0x1e2/0x240
[  256.947794][T10917]  ? uinput_destroy_device+0x240/0x240
[  256.953249][T10917]  uinput_release+0x37/0x50
[  256.957757][T10917]  __fput+0x33e/0x880
[  256.961843][T10917]  task_work_run+0xf4/0x1b0
[  256.966369][T10917]  exit_to_usermode_loop+0x2fa/0x360
[  256.971659][T10917]  do_syscall_64+0x6b1/0x7d0
[  256.976250][T10917]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  256.982137][T10917] RIP: 0033:0x416621
[  256.986029][T10917] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  257.005636][T10917] RSP: 002b:00007ffd1b4c50b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  257.014048][T10917] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416621
[  257.022018][T10917] RDX: 0000000000000000 RSI: 00000000000000d0 RDI: 0000000000000004
[  257.030160][T10917] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4
[  257.038131][T10917] R10: 00007ffd1b4c51a0 R11: 0000000000000293 R12: 000000000078c900
[  257.046126][T10917] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c
[  257.054114][T10917] 
15:36:03 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x0, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x19}], 0x10}}], 0x1, 0x0)

15:36:03 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

15:36:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  257.056445][T10917] Allocated by task 10920:
[  257.060861][T10917]  save_stack+0x1b/0x40
[  257.065016][T10917]  __kasan_kmalloc.constprop.0+0xbf/0xd0
[  257.070649][T10917]  kmem_cache_alloc_trace+0x153/0x7d0
[  257.076025][T10917]  evdev_connect+0x80/0x4d0
[  257.080530][T10917]  input_attach_handler+0x194/0x200
[  257.085727][T10917]  input_register_device.cold+0xf5/0x246
[  257.091362][T10917]  uinput_ioctl_handler.isra.0+0x1210/0x1d80
[  257.097414][T10917]  ksys_ioctl+0x11a/0x180
[  257.101750][T10917]  __x64_sys_ioctl+0x6f/0xb0
[  257.106341][T10917]  do_syscall_64+0xf6/0x7d0
[  257.110846][T10917]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  257.116727][T10917] 
[  257.119050][T10917] Freed by task 10917:
[  257.123119][T10917]  save_stack+0x1b/0x40
[  257.127289][T10917]  __kasan_slab_free+0xf7/0x140
[  257.132137][T10917]  kfree+0x109/0x2b0
[  257.136128][T10917]  device_release+0x71/0x200
[  257.140720][T10917]  kobject_put+0x1c8/0x2f0
[  257.145151][T10917]  cdev_device_del+0x69/0x80
[  257.149743][T10917]  evdev_disconnect+0x3d/0xb0
15:36:03 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x10}})
r1 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00')

[  257.154457][T10917]  __input_unregister_device+0x1b0/0x430
[  257.160111][T10917]  input_unregister_device+0xb4/0xf0
[  257.165424][T10917]  uinput_destroy_device+0x1e2/0x240
[  257.170711][T10917]  uinput_release+0x37/0x50
[  257.175212][T10917]  __fput+0x33e/0x880
[  257.179258][T10917]  task_work_run+0xf4/0x1b0
[  257.183762][T10917]  exit_to_usermode_loop+0x2fa/0x360
[  257.189043][T10917]  do_syscall_64+0x6b1/0x7d0
[  257.193669][T10917]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  257.199548][T10917] 
[  257.201878][T10917] The buggy address belongs to the object at ffff88809f12a000
[  257.201878][T10917]  which belongs to the cache kmalloc-2k of size 2048
[  257.215933][T10917] The buggy address is located 344 bytes inside of
[  257.215933][T10917]  2048-byte region [ffff88809f12a000, ffff88809f12a800)
[  257.229283][T10917] The buggy address belongs to the page:
[  257.235965][T10917] page:ffffea00027c4a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0
[  257.245066][T10917] flags: 0xfffe0000000200(slab)
[  257.249924][T10917] raw: 00fffe0000000200 ffffea00022d3148 ffffea000285a688 ffff8880aa000e00
[  257.258515][T10917] raw: 0000000000000000 ffff88809f12a000 0000000100000001 0000000000000000
[  257.267090][T10917] page dumped because: kasan: bad access detected
[  257.273497][T10917] 
[  257.275821][T10917] Memory state around the buggy address:
[  257.281452][T10917]  ffff88809f12a000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.289598][T10917]  ffff88809f12a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.297656][T10917] >ffff88809f12a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
15:36:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
pipe(&(0x7f0000000e80))
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000580)=""/58, 0x3a}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0xb}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/209, 0xd1}, {&(0x7f00000023c0)=""/242, 0xf2}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)=""/216, 0xd8}], 0xa, &(0x7f0000002840)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000e80)}, {&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {&(0x7f0000000c40)=""/35, 0x23}, {0x0}, {&(0x7f0000003d40)=""/240, 0xf0}], 0x9, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)}], 0x2}, 0x5}], 0x5, 0x120, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0))
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e28, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x187}, 0x4000085)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)

[  257.305712][T10917]                                                     ^
[  257.312644][T10917]  ffff88809f12a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.320703][T10917]  ffff88809f12a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.328771][T10917] ==================================================================
[  257.336825][T10917] Disabling lock debugging due to kernel taint
15:36:04 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x8150000, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  257.399807][T10917] Kernel panic - not syncing: panic_on_warn set ...
[  257.406433][T10917] CPU: 1 PID: 10917 Comm: syz-executor.0 Tainted: G    B             5.7.0-rc6-next-20200522-syzkaller #0
[  257.417702][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  257.427772][T10917] Call Trace:
[  257.431061][T10917]  dump_stack+0x18f/0x20d
[  257.435395][T10917]  ? __mutex_lock+0xf50/0x13c0
[  257.440250][T10917]  panic+0x2e3/0x75c
[  257.444149][T10917]  ? __warn_printk+0xf3/0xf3
[  257.448793][T10917]  ? preempt_schedule_common+0x5e/0xc0
[  257.454246][T10917]  ? __mutex_lock+0x1033/0x13c0
[  257.459095][T10917]  ? __mutex_lock+0x1033/0x13c0
[  257.464040][T10917]  ? preempt_schedule_thunk+0x16/0x18
[  257.469406][T10917]  ? trace_hardirqs_on+0x55/0x230
[  257.474434][T10917]  ? __mutex_lock+0x1033/0x13c0
[  257.479277][T10917]  ? __mutex_lock+0x1033/0x13c0
[  257.484122][T10917]  end_report+0x4d/0x53
[  257.488279][T10917]  kasan_report.cold+0xd/0x37
[  257.493132][T10917]  ? __mutex_lock+0x1033/0x13c0
[  257.497976][T10917]  __mutex_lock+0x1033/0x13c0
[  257.502649][T10917]  ? evdev_cleanup+0x21/0x190
[  257.507322][T10917]  ? print_usage_bug+0x240/0x240
[  257.512256][T10917]  ? trace_hardirqs_off+0x50/0x220
[  257.517362][T10917]  ? mutex_trylock+0x2c0/0x2c0
[  257.522122][T10917]  ? mark_held_locks+0x9f/0xe0
[  257.526881][T10917]  ? kfree+0x1eb/0x2b0
[  257.530945][T10917]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  257.536924][T10917]  ? kfree_const+0x51/0x60
[  257.541348][T10917]  ? evdev_cleanup+0x21/0x190
[  257.546025][T10917]  evdev_cleanup+0x21/0x190
[  257.550527][T10917]  evdev_disconnect+0x45/0xb0
[  257.555210][T10917]  __input_unregister_device+0x1b0/0x430
[  257.560840][T10917]  input_unregister_device+0xb4/0xf0
[  257.566120][T10917]  uinput_destroy_device+0x1e2/0x240
[  257.571402][T10917]  ? uinput_destroy_device+0x240/0x240
[  257.576856][T10917]  uinput_release+0x37/0x50
[  257.581362][T10917]  __fput+0x33e/0x880
[  257.585341][T10917]  task_work_run+0xf4/0x1b0
[  257.589843][T10917]  exit_to_usermode_loop+0x2fa/0x360
[  257.595134][T10917]  do_syscall_64+0x6b1/0x7d0
[  257.599723][T10917]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  257.605606][T10917] RIP: 0033:0x416621
[  257.609495][T10917] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  257.629094][T10917] RSP: 002b:00007ffd1b4c50b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  257.637500][T10917] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416621
[  257.645730][T10917] RDX: 0000000000000000 RSI: 00000000000000d0 RDI: 0000000000000004
[  257.653696][T10917] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4
[  257.661660][T10917] R10: 00007ffd1b4c51a0 R11: 0000000000000293 R12: 000000000078c900
[  257.669633][T10917] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c
[  257.679219][T10917] Kernel Offset: disabled
[  257.683534][T10917] Rebooting in 86400 seconds..