mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0))
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0)
r3 = syz_io_uring_complete(0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000100)=0x800, 0x2, 0x3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c000000009499c3cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000081926ccf000000000000000000000000000000000000000000000000000000000000000000000000006eaa765c7d6f8e3a4620f021431f8b67483c6f163b33423ec8dfce0a8e5ae84209d3732fbbd33683a73ba74659ef3b747f1427ff54d438a4f92908f3edbf3a681add44b451de8c014e4eb12ab6924063c30914c21b4ffb8d691a2c316b00a001262fd58a44355cf94365c73bc44a1ab594a8c0ade0be239c0080000000000000553066fe667c702c3b213c38fab043341b1bae64d283963944c851d5ee3d70547347873be67812068c90af736d1fc63ab81cb06553febc27a741c3b73b362e28bc3220d97d2af7859d4436b20960441b88ce79133f0b838d28b44b8fc2e70a7e11472e3d75eff522ba890359f82c531f39ca7165a87ef22719a6cfa0cc53d8d488a5647e348e973f8de900f3186d625b8c27441751ae41cb1b56f06879db9b22dfb92053d2fc15cb6ed8bedb52e52378c01ea127588aa15a38236ceb71c576db3cf8d28775381d11ffe4713a39ecb513958107deda59dde180a3b53dad5d5d3f1b8fd285ec452aa57ca012992030c81b74e78237f8754a8fb008d2caffc1819755aace61cec76a6c2d906e51e37f3e4a04a120f83df431ab965753c7cfdfe31911514a6da9b4b83d558cb6f7235593a8c82c447641a4edb34e979f5a4d0fef7ae5caec609e6fff32256b5d30415958047e5ad7ec0995430a17"], 0xb8}}, 0x8000)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
dup2(r0, r4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0)