Warning: Permanently added '[localhost]:62919' (ECDSA) to the list of known hosts.
2025/09/01 08:04:19 fuzzer started
2025/09/01 08:04:19 dialing manager at localhost:35473
2025/09/01 08:04:19 checking machine...
2025/09/01 08:04:19 checking revisions...
syzkaller login: [   51.083009] kmemleak: Automatic memory scanning thread ended
2025/09/01 08:04:19 testing simple program...
[   51.139962] cgroup: Unknown subsys name 'net'
[   51.188877] cgroup: Unknown subsys name 'cpuset'
[   51.197890] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
[   61.741451] audit: type=1400 audit(1756713870.187:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   62.814309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.816069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.822594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.827865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.830636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
executing program
[   64.906986] Bluetooth: hci0: command tx timeout
executing program
[   66.954369] Bluetooth: hci0: command tx timeout
executing program
[   69.002357] Bluetooth: hci0: command tx timeout
[   71.050394] Bluetooth: hci0: command tx timeout
executing program
executing program
executing program
[   79.906636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.907839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.965975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.967195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/01 08:04:48 building call list...
[   80.306390] syz-executor.0 (274) used greatest stack depth: 24656 bytes left
executing program
[   83.496400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
executing program
[   84.380075] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
2025/09/01 08:04:54 syscalls: 2214
2025/09/01 08:04:54 code coverage: enabled
2025/09/01 08:04:54 comparison tracing: enabled
2025/09/01 08:04:54 extra coverage: enabled
2025/09/01 08:04:54 setuid sandbox: enabled
2025/09/01 08:04:54 namespace sandbox: enabled
2025/09/01 08:04:54 Android sandbox: enabled
2025/09/01 08:04:54 fault injection: enabled
2025/09/01 08:04:54 leak checking: enabled
2025/09/01 08:04:54 net packet injection: enabled
2025/09/01 08:04:54 net device setup: enabled
2025/09/01 08:04:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 08:04:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 08:04:54 USB emulation: enabled
2025/09/01 08:04:54 hci packet injection: enabled
2025/09/01 08:04:54 wifi device emulation: enabled
2025/09/01 08:04:54 802.15.4 emulation: enabled
2025/09/01 08:04:54 fetching corpus: 0, signal 0/0 (executing program)
2025/09/01 08:04:54 fetching corpus: 0, signal 0/0 (executing program)
2025/09/01 08:04:55 starting 8 fuzzer processes
08:04:55 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:04:55 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

08:04:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

08:04:55 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:04:55 executing program 5:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:04:55 executing program 4:
perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:04:55 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)

08:04:55 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}})

[   88.471021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.473604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.475705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.480093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.482780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.541946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.546530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.548045] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.559568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.562624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.614047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.617065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.619032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.622569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.625061] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.679552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.681647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.684633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.686382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.687564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.690087] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.691153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.695875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.696660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.700839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.704949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.706558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.708209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.708403] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.712536] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.713203] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.715076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.718728] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.720387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.726074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.727802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.733508] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   88.735429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.737962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.743491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.506527] Bluetooth: hci0: command tx timeout
[   90.635198] Bluetooth: hci1: command tx timeout
[   90.698401] Bluetooth: hci2: command tx timeout
[   90.762422] Bluetooth: hci5: command tx timeout
[   90.826444] Bluetooth: hci6: command tx timeout
[   90.827171] Bluetooth: hci4: command tx timeout
[   90.827806] Bluetooth: hci3: command tx timeout
[   90.828255] Bluetooth: hci7: command tx timeout
[   92.556633] Bluetooth: hci0: command tx timeout
[   92.683395] Bluetooth: hci1: command tx timeout
[   92.748325] Bluetooth: hci2: command tx timeout
[   92.810374] Bluetooth: hci5: command tx timeout
[   92.874437] Bluetooth: hci3: command tx timeout
[   92.874866] Bluetooth: hci4: command tx timeout
[   92.876172] Bluetooth: hci7: command tx timeout
[   92.876581] Bluetooth: hci6: command tx timeout
[   94.602447] Bluetooth: hci0: command tx timeout
[   94.730322] Bluetooth: hci1: command tx timeout
[   94.794464] Bluetooth: hci2: command tx timeout
[   94.858361] Bluetooth: hci5: command tx timeout
[   94.922403] Bluetooth: hci7: command tx timeout
[   94.922847] Bluetooth: hci6: command tx timeout
[   94.923224] Bluetooth: hci4: command tx timeout
[   94.924360] Bluetooth: hci3: command tx timeout
[   96.650444] Bluetooth: hci0: command tx timeout
[   96.778341] Bluetooth: hci1: command tx timeout
[   96.843475] Bluetooth: hci2: command tx timeout
[   96.906330] Bluetooth: hci5: command tx timeout
[   96.970353] Bluetooth: hci4: command tx timeout
[   96.970395] Bluetooth: hci3: command tx timeout
[   96.970827] Bluetooth: hci6: command tx timeout
[   96.971258] Bluetooth: hci7: command tx timeout
[  126.017693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.018357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.182692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.183409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.604332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.605758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:05:35 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

08:05:35 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

[  126.782242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.782910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:05:35 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

[  126.978550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.979132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:05:35 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

[  127.118339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.118973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.195960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.196567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.275813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.276642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.311794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.312522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.372931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.373549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.451647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.452327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.524828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.525490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.606481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.607241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.639571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.640196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.679628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.680246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.753149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.754176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.915938] audit: type=1400 audit(1756713936.360:8): avc:  denied  { open } for  pid=4458 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  127.941769] audit: type=1400 audit(1756713936.360:9): avc:  denied  { kernel } for  pid=4458 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
08:05:36 executing program 5:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:36 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

08:05:36 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}})

08:05:36 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)

08:05:36 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

08:05:36 executing program 4:
perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:05:36 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:36 executing program 4:
perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:05:36 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

08:05:36 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)

08:05:36 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

08:05:36 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}})

08:05:36 executing program 5:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:36 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:36 executing program 4:
perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:05:36 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

08:05:36 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)

08:05:36 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:36 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 5:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:36 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}})

08:05:36 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:36 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

[  128.395916] kmemleak: Found object by alias at 0x607f1a63e9e4
[  128.395941] CPU: 0 UID: 0 PID: 4502 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  128.395960] Tainted: [W]=WARN
[  128.395964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.395972] Call Trace:
[  128.395976]  <TASK>
[  128.395981]  dump_stack_lvl+0xca/0x120
[  128.396013]  __lookup_object+0x94/0xb0
[  128.396031]  delete_object_full+0x27/0x70
[  128.396048]  free_percpu+0x30/0x1160
[  128.396065]  ? arch_uprobe_clear_state+0x16/0x140
[  128.396086]  futex_hash_free+0x38/0xc0
[  128.396101]  mmput+0x2d3/0x390
[  128.396120]  do_exit+0x79d/0x2970
[  128.396134]  ? signal_wake_up_state+0x85/0x120
[  128.396150]  ? zap_other_threads+0x2b9/0x3a0
[  128.396167]  ? __pfx_do_exit+0x10/0x10
[  128.396180]  ? do_group_exit+0x1c3/0x2a0
[  128.396194]  ? lock_release+0xc8/0x290
[  128.396212]  do_group_exit+0xd3/0x2a0
[  128.396227]  __x64_sys_exit_group+0x3e/0x50
[  128.396242]  x64_sys_call+0x18c5/0x18d0
[  128.396258]  do_syscall_64+0xbf/0x360
[  128.396271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.396283] RIP: 0033:0x7f87ea849b19
[  128.396293] Code: Unable to access opcode bytes at 0x7f87ea849aef.
[  128.396298] RSP: 002b:00007ffcacdbfd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  128.396310] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f87ea849b19
[  128.396318] RDX: 00007f87ea7fc72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  128.396325] RBP: 0000000000000000 R08: 0000001b30125fcc R09: 0000000000000000
[  128.396333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.396340] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcacdbfe70
[  128.396355]  </TASK>
[  128.396359] kmemleak: Object (percpu) 0x607f1a63e9e0 (size 8):
[  128.396366] kmemleak:   comm "syz-executor.0", pid 4512, jiffies 4294794994
[  128.396373] kmemleak:   min_count = 1
[  128.396378] kmemleak:   count = 0
[  128.396381] kmemleak:   flags = 0x21
[  128.396385] kmemleak:   checksum = 0
[  128.396389] kmemleak:   backtrace:
[  128.396393]  pcpu_alloc_noprof+0x87a/0x1170
[  128.396409]  perf_trace_event_init+0x366/0xa10
[  128.396423]  perf_trace_init+0x1a4/0x2f0
[  128.396435]  perf_tp_event_init+0xa6/0x120
[  128.396452]  perf_try_init_event+0x140/0x9f0
[  128.396466]  perf_event_alloc.part.0+0x118e/0x45f0
[  128.396483]  __do_sys_perf_event_open+0x719/0x2c20
[  128.396497]  do_syscall_64+0xbf/0x360
[  128.396506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
08:05:36 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:36 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:36 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:36 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

[  128.579075] kmemleak: Found object by alias at 0x607f1a63e9e4
[  128.579098] CPU: 0 UID: 0 PID: 4527 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  128.579117] Tainted: [W]=WARN
[  128.579121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.579129] Call Trace:
[  128.579133]  <TASK>
[  128.579138]  dump_stack_lvl+0xca/0x120
[  128.579174]  __lookup_object+0x94/0xb0
[  128.579192]  delete_object_full+0x27/0x70
[  128.579209]  free_percpu+0x30/0x1160
[  128.579226]  ? arch_uprobe_clear_state+0x16/0x140
[  128.579246]  futex_hash_free+0x38/0xc0
[  128.579261]  mmput+0x2d3/0x390
[  128.579281]  do_exit+0x79d/0x2970
[  128.579295]  ? signal_wake_up_state+0x85/0x120
[  128.579311]  ? zap_other_threads+0x2b9/0x3a0
[  128.579327]  ? __pfx_do_exit+0x10/0x10
[  128.579340]  ? do_group_exit+0x1c3/0x2a0
[  128.579354]  ? lock_release+0xc8/0x290
[  128.579372]  do_group_exit+0xd3/0x2a0
[  128.579387]  __x64_sys_exit_group+0x3e/0x50
[  128.579401]  x64_sys_call+0x18c5/0x18d0
[  128.579418]  do_syscall_64+0xbf/0x360
[  128.579431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.579443] RIP: 0033:0x7f87ea849b19
[  128.579452] Code: Unable to access opcode bytes at 0x7f87ea849aef.
[  128.579458] RSP: 002b:00007ffcacdbfd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  128.579469] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f87ea849b19
[  128.579478] RDX: 00007f87ea7fc72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  128.579485] RBP: 0000000000000000 R08: 0000001b301243e4 R09: 0000000000000000
[  128.579493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.579500] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcacdbfe70
[  128.579515]  </TASK>
[  128.579519] kmemleak: Object (percpu) 0x607f1a63e9e0 (size 8):
[  128.579526] kmemleak:   comm "syz-executor.0", pid 4529, jiffies 4294795157
[  128.579533] kmemleak:   min_count = 1
[  128.579538] kmemleak:   count = 0
[  128.579541] kmemleak:   flags = 0x21
[  128.579545] kmemleak:   checksum = 0
[  128.579549] kmemleak:   backtrace:
[  128.579553]  pcpu_alloc_noprof+0x87a/0x1170
[  128.579569]  perf_trace_event_init+0x366/0xa10
[  128.579583]  perf_trace_init+0x1a4/0x2f0
[  128.579595]  perf_tp_event_init+0xa6/0x120
[  128.579612]  perf_try_init_event+0x140/0x9f0
[  128.579627]  perf_event_alloc.part.0+0x118e/0x45f0
[  128.579644]  __do_sys_perf_event_open+0x719/0x2c20
[  128.579657]  do_syscall_64+0xbf/0x360
[  128.579667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
08:05:37 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:37 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:37 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:37 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:37 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

08:05:37 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

08:05:37 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}})

08:05:37 executing program 0:
setresuid(0xee01, 0xee00, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

08:05:37 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:37 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)

08:05:37 executing program 2:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 4:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 6:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}})

08:05:37 executing program 0:
setresuid(0xee01, 0xee00, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00')

08:05:37 executing program 3:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 7:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}})

08:05:37 executing program 6:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 2:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 4:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 0:
setresuid(0xee01, 0xee00, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 6:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 5:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 7:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 2:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 3:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:05:37 executing program 5:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 0:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 4:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 5:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:05:37 executing program 3:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 0:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 7:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x41, &(0x7f0000ffe000/0x2000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1600, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0)

08:05:37 executing program 6:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 2:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 5:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:05:37 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:37 executing program 2:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 0:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:37 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4)

08:05:37 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 6:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:38 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:05:38 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 2:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:38 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4)

08:05:38 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4)

08:05:38 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4)

08:05:38 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4)

08:05:38 executing program 6:
r0 = getpgid(0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000080))
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:05:38 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4)

08:05:38 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x29, 0x3e, &(0x7f0000000100), 0x4)

08:05:38 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flistxattr(r0, 0x0, 0x0)

08:05:38 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROMREADMODE1(r0, 0x309, 0x0)

08:05:38 executing program 4:
eventfd2(0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0)

08:05:38 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0)

08:05:38 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0)

08:05:38 executing program 4:
eventfd2(0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0)

08:05:38 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flistxattr(r0, 0x0, 0x0)

08:05:38 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flistxattr(r0, 0x0, 0x0)

08:05:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flistxattr(r0, 0x0, 0x0)

[  130.258839] BUG: unable to handle page fault for address: ffffed10212c9b2e
[  130.259573] #PF: supervisor read access in kernel mode
[  130.260069] #PF: error_code(0x0000) - not-present page
[  130.260594] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  130.261792] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  130.262845] CPU: 0 UID: 0 PID: 4722 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  130.265071] Tainted: [W]=WARN
[  130.266167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  130.267772] RIP: 0010:perf_tp_event+0x175/0xe70
[  130.268952] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  130.270361] RSP: 0018:ffff888018eb7780 EFLAGS: 00010016
[  130.270771] RAX: 1ffff110212c9b2e RBX: ffff88810964d780 RCX: ffffc90008f3c000
[  130.271326] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964d970
[  130.271871] RBP: ffff888018eb79f0 R08: ffff88806ce31340 R09: ffffe8ffffc169e0
[  130.272423] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  130.272972] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  130.273522] FS:  00007f87e7dbf700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  130.274147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.274597] CR2: ffffed10212c9b2e CR3: 000000000c830000 CR4: 0000000000350ef0
[  130.275145] Call Trace:
[  130.275351]  <TASK>
[  130.275534]  ? __pfx_perf_tp_event+0x10/0x10
[  130.275883]  ? __asan_memcpy+0x3d/0x60
[  130.276192]  ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150
[  130.276674]  ? perf_trace_run_bpf_submit+0xef/0x180
[  130.277067]  ? perf_trace_run_bpf_submit+0xef/0x180
[  130.277460]  ? css_rstat_updated+0x1b8/0x4d0
[  130.277825]  ? __pfx_css_rstat_updated+0x10/0x10
[  130.278200]  ? lock_is_held_type+0x9e/0x120
[  130.278549]  ? __cgroup_account_cputime+0x88/0xc0
[  130.278933]  ? perf_trace_run_bpf_submit+0xef/0x180
[  130.279335]  perf_trace_run_bpf_submit+0xef/0x180
[  130.279718]  perf_trace_preemptirq_template+0x259/0x430
[  130.280134]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  130.280591]  ? _raw_spin_lock_irqsave+0x53/0x60
[  130.280960]  trace_irq_disable.constprop.0+0xa6/0x100
[  130.281360]  _raw_spin_lock_irqsave+0x53/0x60
[  130.281722]  try_to_wake_up+0xa0/0x11d0
[  130.282043]  ? __pfx_try_to_wake_up+0x10/0x10
[  130.282401]  ? plist_del+0x122/0x270
[  130.282699]  ? find_held_lock+0x2b/0x80
[  130.283021]  ? futex_wake+0x474/0x540
[  130.283325]  wake_up_q+0xa1/0x130
[  130.283610]  futex_wake+0x47e/0x540
[  130.283899]  ? __pfx_futex_wake+0x10/0x10
[  130.284228]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  130.284627]  ? lock_release+0xc8/0x290
[  130.284935]  do_futex+0x26d/0x370
[  130.285212]  ? __pfx_do_futex+0x10/0x10
[  130.285526]  ? perf_trace_run_bpf_submit+0xef/0x180
[  130.285932]  __x64_sys_futex+0x1c9/0x4d0
[  130.286254]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  130.286707]  ? __pfx___x64_sys_futex+0x10/0x10
[  130.287070]  do_syscall_64+0xbf/0x360
[  130.287371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.287778] RIP: 0033:0x7f87ea849b19
[  130.288077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  130.289468] RSP: 002b:00007f87e7dbf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  130.290063] RAX: ffffffffffffffda RBX: 00007f87ea95cf68 RCX: 00007f87ea849b19
[  130.290609] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87ea95cf6c
[  130.291155] RBP: 00007f87ea95cf60 R08: 000000000000000e R09: 0000000000000000
[  130.291702] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f87ea95cf6c
[  130.292254] R13: 00007ffcacdbfb5f R14: 00007f87e7dbf300 R15: 0000000000022000
[  130.292805]  </TASK>
[  130.292991] Modules linked in:
[  130.293248] CR2: ffffed10212c9b2e
[  130.293518] ---[ end trace 0000000000000000 ]---
[  130.293888] RIP: 0010:perf_tp_event+0x175/0xe70
[  130.294257] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  130.295649] RSP: 0018:ffff888018eb7780 EFLAGS: 00010016
[  130.296059] RAX: 1ffff110212c9b2e RBX: ffff88810964d780 RCX: ffffc90008f3c000
[  130.296611] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964d970
[  130.297159] RBP: ffff888018eb79f0 R08: ffff88806ce31340 R09: ffffe8ffffc169e0
[  130.297716] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  130.298267] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  130.298817] FS:  00007f87e7dbf700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  130.299437] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.299886] CR2: ffffed10212c9b2e CR3: 000000000c830000 CR4: 0000000000350ef0
[  130.300438] note: syz-executor.5[4722] exited with irqs disabled
[  130.300976] BUG: unable to handle page fault for address: ffffed10212c9b2e
[  130.301512] #PF: supervisor read access in kernel mode
[  130.301920] #PF: error_code(0x0000) - not-present page
[  130.302323] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  130.302763] Oops: Oops: 0000 [#2] SMP KASAN NOPTI
[  130.303143] CPU: 0 UID: 0 PID: 4722 Comm: syz-executor.5 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  130.304057] Tainted: [D]=DIE, [W]=WARN
[  130.304356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  130.304985] RIP: 0010:perf_tp_event+0x175/0xe70
[  130.305359] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  130.306755] RSP: 0018:ffff88806ce08b40 EFLAGS: 00010016
[  130.307169] RAX: 1ffff110212c9b2e RBX: ffff88810964d780 RCX: 0000000000000002
[  130.307718] RDX: ffff88801a388000 RSI: ffffffff8189a4e7 RDI: ffff88810964d970
[  130.308264] RBP: ffff88806ce08db0 R08: ffff88806ce313e8 R09: ffffe8ffffc169e0
[  130.308812] R10: 0000000000000000 R11: ffff88803e8af898 R12: dffffc0000000000
[  130.309361] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[  130.309920] FS:  00007f87e7dbf700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  130.310544] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.311005] CR2: ffffed10212c9b2e CR3: 000000000c830000 CR4: 0000000000350ef0
[  130.311557] Call Trace:
[  130.311771]  <IRQ>
[  130.311946]  ? __pfx_perf_tp_event+0x10/0x10
[  130.312296]  ? reweight_entity+0x3ad/0x800
[  130.312630]  ? update_cfs_group+0x11d/0x260
[  130.312968]  ? kvm_sched_clock_read+0x16/0x30
[  130.313327]  ? enqueue_task_fair+0xded/0x1e00
[  130.313680]  ? check_preempt_wakeup_fair+0x6e/0x950
[  130.314081]  ? wakeup_preempt+0x140/0x2a0
[  130.314404]  ? lock_release+0x1c7/0x290
[  130.314718]  ? lock_release+0x1c7/0x290
[  130.315032]  ? do_raw_spin_unlock+0x53/0x220
[  130.315382]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[  130.315782]  ? try_to_wake_up+0x8ae/0x11d0
[  130.316118]  ? perf_trace_run_bpf_submit+0xef/0x180
[  130.316510]  ? lock_release+0x1c7/0x290
[  130.316823]  perf_trace_run_bpf_submit+0xef/0x180
[  130.317205]  perf_trace_preemptirq_template+0x259/0x430
[  130.317621]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  130.318080]  ? read_tsc+0x9/0x20
[  130.318356]  ? ktime_get+0x16d/0x270
[  130.318656]  ? __pfx_lapic_next_deadline+0x10/0x10
[  130.319046]  ? clockevents_program_event+0x135/0x360
[  130.319448]  ? _raw_spin_lock_irq+0x42/0x50
[  130.319787]  trace_irq_disable.constprop.0+0xa6/0x100
[  130.320188]  _raw_spin_lock_irq+0x42/0x50
[  130.320518]  run_timer_softirq+0x10f/0x210
[  130.320857]  handle_softirqs+0x1b1/0x770
[  130.321187]  __irq_exit_rcu+0xc4/0x100
[  130.321499]  irq_exit_rcu+0x9/0x20
[  130.321786]  sysvec_apic_timer_interrupt+0x70/0x80
[  130.322176]  </IRQ>
[  130.322358]  <TASK>
[  130.322538]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  130.322948] RIP: 0010:make_task_dead+0xa2/0x3b0
[  130.323315] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 <e8> e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de
[  130.324701] RSP: 0018:ffff888018eb7f28 EFLAGS: 00000246
[  130.325114] RAX: 0000000000000001 RBX: ffff88801a388000 RCX: ffffffff817c3ab6
[  130.325682] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  130.326249] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  130.326807] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff88801a388000
[  130.327364] R13: 0000000000000009 R14: ffff888018eb7760 R15: 0000000000000000
[  130.327925]  ? trace_irq_enable.constprop.0+0x26/0x100
[  130.328341]  ? make_task_dead+0x214/0x3b0
[  130.328691]  ? make_task_dead+0x214/0x3b0
[  130.329024]  ? do_syscall_64+0xbf/0x360
[  130.329355]  rewind_stack_and_make_dead+0x16/0x20
[  130.329757] RIP: 0033:0x7f87ea849b19
[  130.330049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  130.331483] RSP: 002b:00007f87e7dbf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  130.332073] RAX: ffffffffffffffda RBX: 00007f87ea95cf68 RCX: 00007f87ea849b19
[  130.332639] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87ea95cf6c
[  130.333207] RBP: 00007f87ea95cf60 R08: 000000000000000e R09: 0000000000000000
[  130.333775] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f87ea95cf6c
[  130.334328] R13: 00007ffcacdbfb5f R14: 00007f87e7dbf300 R15: 0000000000022000
[  130.334891]  </TASK>
[  130.335077] Modules linked in:
[  130.335331] CR2: ffffed10212c9b2e
[  130.335601] ---[ end trace 0000000000000000 ]---
[  130.335964] RIP: 0010:perf_tp_event+0x175/0xe70
[  130.336338] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  130.337759] RSP: 0018:ffff888018eb7780 EFLAGS: 00010016
[  130.338172] RAX: 1ffff110212c9b2e RBX: ffff88810964d780 RCX: ffffc90008f3c000
[  130.338728] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964d970
[  130.339285] RBP: ffff888018eb79f0 R08: ffff88806ce31340 R09: ffffe8ffffc169e0
[  130.339841] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  130.340397] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  130.340953] FS:  00007f87e7dbf700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  130.341580] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.342044] CR2: ffffed10212c9b2e CR3: 000000000c830000 CR4: 0000000000350ef0
[  130.342601] Kernel panic - not syncing: Fatal exception in interrupt
[  130.343294] Kernel Offset: disabled
[  130.343582] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
08:05:38  Registers:
info registers vcpu 0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888018eb6fc8
R8 =0000000000000000 R9 =ffffed10014ed046 R10=0000000000000033 R11=3a6465746e696154
R12=0000000000000033 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f87e7dbf700 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed10212c9b2e CR3=000000000c830000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f87ea9307c000007f87ea9307c8
XMM02=00007f87ea9307e000007f87ea9307c0 XMM03=00007f87ea9307c800007f87ea9307c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffffffff85e982e0 RCX=0000000000000001 RDX=1ffffffff0bd305c
RSI=0000000000000001 RDI=ffff8880176f14bc RBP=0000000000000001 RSP=ffff888014697c08
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=ffff8880176f0000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff825df9df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0f610de8c0 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000c007dd74b0 CR3=000000000b902000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005591426366600000559142636640
XMM06=00005591426023300000000000000002 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000