Warning: Permanently added '[localhost]:29994' (ECDSA) to the list of known hosts.
2026/01/14 08:55:09 fuzzer started
2026/01/14 08:55:09 dialing manager at localhost:46753
syzkaller login: [   48.996580] cgroup: Unknown subsys name 'net'
[   49.057484] cgroup: Unknown subsys name 'cpuset'
[   49.075887] cgroup: Unknown subsys name 'rlimit'
2026/01/14 08:55:19 syscalls: 2214
2026/01/14 08:55:19 code coverage: enabled
2026/01/14 08:55:19 comparison tracing: enabled
2026/01/14 08:55:19 extra coverage: enabled
2026/01/14 08:55:19 setuid sandbox: enabled
2026/01/14 08:55:19 namespace sandbox: enabled
2026/01/14 08:55:19 Android sandbox: enabled
2026/01/14 08:55:19 fault injection: enabled
2026/01/14 08:55:19 leak checking: enabled
2026/01/14 08:55:19 net packet injection: enabled
2026/01/14 08:55:19 net device setup: enabled
2026/01/14 08:55:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/14 08:55:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/14 08:55:19 USB emulation: enabled
2026/01/14 08:55:19 hci packet injection: enabled
2026/01/14 08:55:19 wifi device emulation: enabled
2026/01/14 08:55:19 802.15.4 emulation: enabled
2026/01/14 08:55:19 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/14 08:55:19 fetching corpus: 50, signal 35498/38837 (executing program)
2026/01/14 08:55:19 fetching corpus: 100, signal 43571/48347 (executing program)
2026/01/14 08:55:20 fetching corpus: 150, signal 48785/54953 (executing program)
2026/01/14 08:55:20 fetching corpus: 200, signal 57219/64483 (executing program)
2026/01/14 08:55:20 fetching corpus: 250, signal 62696/71160 (executing program)
2026/01/14 08:55:20 fetching corpus: 300, signal 67190/76723 (executing program)
2026/01/14 08:55:20 fetching corpus: 350, signal 70465/81144 (executing program)
2026/01/14 08:55:20 fetching corpus: 400, signal 73698/85428 (executing program)
2026/01/14 08:55:20 fetching corpus: 450, signal 79315/91824 (executing program)
2026/01/14 08:55:20 fetching corpus: 500, signal 82494/95906 (executing program)
2026/01/14 08:55:20 fetching corpus: 550, signal 84911/99246 (executing program)
2026/01/14 08:55:20 fetching corpus: 600, signal 88732/103819 (executing program)
2026/01/14 08:55:21 fetching corpus: 648, signal 90979/106912 (executing program)
2026/01/14 08:55:21 fetching corpus: 698, signal 92525/109390 (executing program)
2026/01/14 08:55:21 fetching corpus: 748, signal 94747/112367 (executing program)
2026/01/14 08:55:21 fetching corpus: 798, signal 97953/116144 (executing program)
2026/01/14 08:55:21 fetching corpus: 846, signal 99461/118454 (executing program)
2026/01/14 08:55:21 fetching corpus: 896, signal 100973/120727 (executing program)
2026/01/14 08:55:21 fetching corpus: 946, signal 106941/126537 (executing program)
2026/01/14 08:55:21 fetching corpus: 996, signal 108359/128692 (executing program)
2026/01/14 08:55:22 fetching corpus: 1046, signal 110687/131506 (executing program)
2026/01/14 08:55:22 fetching corpus: 1096, signal 112092/133527 (executing program)
2026/01/14 08:55:22 fetching corpus: 1144, signal 113744/135716 (executing program)
2026/01/14 08:55:22 fetching corpus: 1192, signal 115585/138035 (executing program)
2026/01/14 08:55:22 fetching corpus: 1242, signal 116431/139611 (executing program)
2026/01/14 08:55:22 fetching corpus: 1292, signal 117754/141462 (executing program)
2026/01/14 08:55:22 fetching corpus: 1342, signal 119197/143417 (executing program)
2026/01/14 08:55:22 fetching corpus: 1392, signal 120414/145197 (executing program)
2026/01/14 08:55:22 fetching corpus: 1442, signal 122506/147487 (executing program)
2026/01/14 08:55:23 fetching corpus: 1492, signal 123681/149126 (executing program)
2026/01/14 08:55:23 fetching corpus: 1542, signal 125472/151171 (executing program)
2026/01/14 08:55:23 fetching corpus: 1591, signal 126864/152951 (executing program)
2026/01/14 08:55:23 fetching corpus: 1641, signal 128275/154733 (executing program)
2026/01/14 08:55:23 fetching corpus: 1690, signal 129072/156002 (executing program)
2026/01/14 08:55:23 fetching corpus: 1740, signal 131467/158380 (executing program)
2026/01/14 08:55:23 fetching corpus: 1790, signal 132932/160108 (executing program)
2026/01/14 08:55:23 fetching corpus: 1840, signal 134166/161556 (executing program)
2026/01/14 08:55:24 fetching corpus: 1890, signal 135561/163197 (executing program)
2026/01/14 08:55:24 fetching corpus: 1940, signal 137102/164889 (executing program)
2026/01/14 08:55:24 fetching corpus: 1989, signal 138209/166290 (executing program)
2026/01/14 08:55:24 fetching corpus: 2039, signal 139159/167517 (executing program)
2026/01/14 08:55:24 fetching corpus: 2088, signal 140110/168704 (executing program)
2026/01/14 08:55:24 fetching corpus: 2138, signal 141351/170071 (executing program)
2026/01/14 08:55:24 fetching corpus: 2188, signal 142124/171218 (executing program)
2026/01/14 08:55:24 fetching corpus: 2238, signal 142795/172238 (executing program)
2026/01/14 08:55:24 fetching corpus: 2288, signal 143516/173253 (executing program)
2026/01/14 08:55:25 fetching corpus: 2338, signal 144470/174416 (executing program)
2026/01/14 08:55:25 fetching corpus: 2387, signal 145178/175449 (executing program)
2026/01/14 08:55:25 fetching corpus: 2437, signal 146079/176560 (executing program)
2026/01/14 08:55:25 fetching corpus: 2487, signal 146790/177557 (executing program)
2026/01/14 08:55:25 fetching corpus: 2536, signal 148231/178847 (executing program)
2026/01/14 08:55:25 fetching corpus: 2585, signal 148975/179822 (executing program)
2026/01/14 08:55:25 fetching corpus: 2634, signal 149527/180657 (executing program)
2026/01/14 08:55:25 fetching corpus: 2684, signal 150351/181634 (executing program)
2026/01/14 08:55:26 fetching corpus: 2734, signal 151179/182604 (executing program)
2026/01/14 08:55:26 fetching corpus: 2784, signal 151631/183349 (executing program)
2026/01/14 08:55:26 fetching corpus: 2834, signal 152308/184250 (executing program)
2026/01/14 08:55:26 fetching corpus: 2884, signal 152742/184987 (executing program)
2026/01/14 08:55:26 fetching corpus: 2934, signal 153311/185771 (executing program)
2026/01/14 08:55:26 fetching corpus: 2984, signal 154359/186785 (executing program)
2026/01/14 08:55:26 fetching corpus: 3034, signal 155078/187610 (executing program)
2026/01/14 08:55:26 fetching corpus: 3084, signal 155784/188405 (executing program)
2026/01/14 08:55:27 fetching corpus: 3134, signal 156527/189195 (executing program)
2026/01/14 08:55:27 fetching corpus: 3183, signal 157125/189921 (executing program)
2026/01/14 08:55:27 fetching corpus: 3233, signal 157894/190770 (executing program)
2026/01/14 08:55:27 fetching corpus: 3283, signal 158490/191473 (executing program)
2026/01/14 08:55:27 fetching corpus: 3333, signal 159019/192146 (executing program)
2026/01/14 08:55:27 fetching corpus: 3383, signal 159726/192888 (executing program)
2026/01/14 08:55:27 fetching corpus: 3433, signal 160276/193567 (executing program)
2026/01/14 08:55:27 fetching corpus: 3483, signal 160971/194279 (executing program)
2026/01/14 08:55:27 fetching corpus: 3533, signal 161547/194914 (executing program)
2026/01/14 08:55:28 fetching corpus: 3583, signal 162160/195561 (executing program)
2026/01/14 08:55:28 fetching corpus: 3632, signal 162986/196246 (executing program)
2026/01/14 08:55:28 fetching corpus: 3682, signal 163518/196803 (executing program)
2026/01/14 08:55:28 fetching corpus: 3732, signal 164134/197403 (executing program)
2026/01/14 08:55:28 fetching corpus: 3782, signal 164826/197995 (executing program)
2026/01/14 08:55:28 fetching corpus: 3831, signal 165355/198573 (executing program)
2026/01/14 08:55:28 fetching corpus: 3881, signal 165992/199199 (executing program)
2026/01/14 08:55:28 fetching corpus: 3931, signal 166607/199757 (executing program)
2026/01/14 08:55:28 fetching corpus: 3981, signal 167129/200280 (executing program)
2026/01/14 08:55:28 fetching corpus: 4031, signal 167581/200797 (executing program)
2026/01/14 08:55:28 fetching corpus: 4081, signal 168094/201306 (executing program)
2026/01/14 08:55:29 fetching corpus: 4131, signal 168582/201777 (executing program)
2026/01/14 08:55:29 fetching corpus: 4181, signal 169081/202266 (executing program)
2026/01/14 08:55:29 fetching corpus: 4231, signal 169583/202724 (executing program)
2026/01/14 08:55:29 fetching corpus: 4281, signal 170208/203171 (executing program)
2026/01/14 08:55:29 fetching corpus: 4331, signal 170844/203705 (executing program)
2026/01/14 08:55:29 fetching corpus: 4381, signal 171573/204187 (executing program)
2026/01/14 08:55:29 fetching corpus: 4431, signal 171971/204632 (executing program)
2026/01/14 08:55:29 fetching corpus: 4481, signal 172695/205085 (executing program)
2026/01/14 08:55:29 fetching corpus: 4531, signal 173236/205531 (executing program)
2026/01/14 08:55:29 fetching corpus: 4581, signal 173812/205965 (executing program)
2026/01/14 08:55:30 fetching corpus: 4631, signal 174225/206336 (executing program)
2026/01/14 08:55:30 fetching corpus: 4681, signal 174714/206700 (executing program)
2026/01/14 08:55:30 fetching corpus: 4731, signal 175216/207117 (executing program)
2026/01/14 08:55:30 fetching corpus: 4781, signal 175688/207488 (executing program)
2026/01/14 08:55:30 fetching corpus: 4831, signal 176214/207886 (executing program)
2026/01/14 08:55:30 fetching corpus: 4881, signal 176652/208258 (executing program)
2026/01/14 08:55:30 fetching corpus: 4931, signal 177050/208610 (executing program)
2026/01/14 08:55:30 fetching corpus: 4981, signal 177673/208949 (executing program)
2026/01/14 08:55:30 fetching corpus: 5031, signal 178134/209272 (executing program)
2026/01/14 08:55:31 fetching corpus: 5081, signal 178474/209606 (executing program)
2026/01/14 08:55:31 fetching corpus: 5131, signal 178771/209897 (executing program)
2026/01/14 08:55:31 fetching corpus: 5181, signal 179309/210201 (executing program)
2026/01/14 08:55:31 fetching corpus: 5231, signal 179768/210202 (executing program)
2026/01/14 08:55:31 fetching corpus: 5281, signal 180236/210203 (executing program)
2026/01/14 08:55:31 fetching corpus: 5331, signal 180568/210203 (executing program)
2026/01/14 08:55:31 fetching corpus: 5381, signal 181146/210229 (executing program)
2026/01/14 08:55:31 fetching corpus: 5431, signal 181669/210229 (executing program)
2026/01/14 08:55:31 fetching corpus: 5481, signal 182008/210230 (executing program)
2026/01/14 08:55:31 fetching corpus: 5531, signal 182283/210235 (executing program)
2026/01/14 08:55:31 fetching corpus: 5581, signal 182742/210235 (executing program)
2026/01/14 08:55:32 fetching corpus: 5630, signal 183071/210235 (executing program)
2026/01/14 08:55:32 fetching corpus: 5679, signal 183387/210235 (executing program)
2026/01/14 08:55:32 fetching corpus: 5729, signal 183794/210236 (executing program)
2026/01/14 08:55:32 fetching corpus: 5779, signal 184392/210241 (executing program)
2026/01/14 08:55:32 fetching corpus: 5829, signal 184865/210247 (executing program)
2026/01/14 08:55:32 fetching corpus: 5879, signal 185194/210329 (executing program)
2026/01/14 08:55:32 fetching corpus: 5929, signal 185769/210329 (executing program)
2026/01/14 08:55:32 fetching corpus: 5979, signal 186230/210329 (executing program)
2026/01/14 08:55:32 fetching corpus: 6028, signal 186550/210329 (executing program)
2026/01/14 08:55:32 fetching corpus: 6078, signal 186919/210329 (executing program)
2026/01/14 08:55:32 fetching corpus: 6128, signal 187653/210330 (executing program)
2026/01/14 08:55:33 fetching corpus: 6178, signal 188158/210336 (executing program)
2026/01/14 08:55:33 fetching corpus: 6227, signal 188814/210354 (executing program)
2026/01/14 08:55:33 fetching corpus: 6276, signal 189326/210354 (executing program)
2026/01/14 08:55:33 fetching corpus: 6326, signal 189651/210354 (executing program)
2026/01/14 08:55:33 fetching corpus: 6376, signal 190059/210357 (executing program)
2026/01/14 08:55:33 fetching corpus: 6426, signal 190482/210361 (executing program)
2026/01/14 08:55:33 fetching corpus: 6476, signal 190838/210362 (executing program)
2026/01/14 08:55:33 fetching corpus: 6526, signal 191226/210362 (executing program)
2026/01/14 08:55:33 fetching corpus: 6576, signal 191582/210362 (executing program)
2026/01/14 08:55:33 fetching corpus: 6626, signal 192064/210362 (executing program)
2026/01/14 08:55:34 fetching corpus: 6676, signal 192327/210372 (executing program)
2026/01/14 08:55:34 fetching corpus: 6726, signal 192851/210424 (executing program)
2026/01/14 08:55:34 fetching corpus: 6776, signal 193088/210424 (executing program)
2026/01/14 08:55:34 fetching corpus: 6826, signal 193522/210456 (executing program)
2026/01/14 08:55:34 fetching corpus: 6876, signal 194034/210494 (executing program)
2026/01/14 08:55:34 fetching corpus: 6926, signal 194348/210501 (executing program)
2026/01/14 08:55:34 fetching corpus: 6976, signal 194753/210512 (executing program)
2026/01/14 08:55:34 fetching corpus: 7026, signal 195124/210512 (executing program)
2026/01/14 08:55:34 fetching corpus: 7076, signal 195548/210513 (executing program)
2026/01/14 08:55:35 fetching corpus: 7126, signal 196015/210513 (executing program)
2026/01/14 08:55:35 fetching corpus: 7176, signal 196240/210522 (executing program)
2026/01/14 08:55:35 fetching corpus: 7226, signal 196551/210529 (executing program)
2026/01/14 08:55:35 fetching corpus: 7276, signal 196774/210549 (executing program)
2026/01/14 08:55:35 fetching corpus: 7326, signal 197094/210549 (executing program)
2026/01/14 08:55:35 fetching corpus: 7376, signal 197338/210568 (executing program)
2026/01/14 08:55:35 fetching corpus: 7426, signal 197597/210568 (executing program)
2026/01/14 08:55:35 fetching corpus: 7476, signal 197966/210569 (executing program)
2026/01/14 08:55:35 fetching corpus: 7526, signal 198269/210569 (executing program)
2026/01/14 08:55:35 fetching corpus: 7576, signal 198578/210569 (executing program)
2026/01/14 08:55:36 fetching corpus: 7626, signal 199015/210569 (executing program)
2026/01/14 08:55:36 fetching corpus: 7676, signal 199293/210576 (executing program)
2026/01/14 08:55:36 fetching corpus: 7726, signal 199603/210577 (executing program)
2026/01/14 08:55:36 fetching corpus: 7774, signal 199873/210577 (executing program)
2026/01/14 08:55:36 fetching corpus: 7824, signal 200261/210577 (executing program)
2026/01/14 08:55:36 fetching corpus: 7874, signal 200526/210577 (executing program)
2026/01/14 08:55:36 fetching corpus: 7924, signal 200810/210577 (executing program)
2026/01/14 08:55:36 fetching corpus: 7974, signal 201079/210587 (executing program)
2026/01/14 08:55:36 fetching corpus: 8024, signal 201320/210587 (executing program)
2026/01/14 08:55:37 fetching corpus: 8074, signal 201619/210620 (executing program)
2026/01/14 08:55:37 fetching corpus: 8124, signal 201905/210620 (executing program)
2026/01/14 08:55:37 fetching corpus: 8174, signal 202180/210620 (executing program)
2026/01/14 08:55:37 fetching corpus: 8224, signal 202556/210621 (executing program)
2026/01/14 08:55:37 fetching corpus: 8274, signal 202933/210623 (executing program)
2026/01/14 08:55:37 fetching corpus: 8323, signal 203212/210623 (executing program)
2026/01/14 08:55:37 fetching corpus: 8372, signal 203614/210644 (executing program)
2026/01/14 08:55:38 fetching corpus: 8422, signal 203883/210644 (executing program)
2026/01/14 08:55:38 fetching corpus: 8472, signal 204259/210644 (executing program)
2026/01/14 08:55:38 fetching corpus: 8521, signal 204603/210644 (executing program)
2026/01/14 08:55:38 fetching corpus: 8570, signal 204802/210645 (executing program)
2026/01/14 08:55:38 fetching corpus: 8620, signal 205090/210646 (executing program)
2026/01/14 08:55:38 fetching corpus: 8670, signal 205452/210664 (executing program)
2026/01/14 08:55:38 fetching corpus: 8719, signal 205709/210664 (executing program)
2026/01/14 08:55:38 fetching corpus: 8768, signal 206023/210664 (executing program)
2026/01/14 08:55:38 fetching corpus: 8818, signal 206244/210664 (executing program)
2026/01/14 08:55:39 fetching corpus: 8868, signal 206498/210665 (executing program)
2026/01/14 08:55:39 fetching corpus: 8918, signal 206725/210696 (executing program)
2026/01/14 08:55:39 fetching corpus: 8968, signal 206994/210696 (executing program)
2026/01/14 08:55:39 fetching corpus: 9018, signal 207519/210696 (executing program)
2026/01/14 08:55:39 fetching corpus: 9068, signal 207844/210696 (executing program)
2026/01/14 08:55:39 fetching corpus: 9118, signal 208213/210696 (executing program)
2026/01/14 08:55:39 fetching corpus: 9168, signal 208556/210696 (executing program)
2026/01/14 08:55:39 fetching corpus: 9218, signal 208818/210712 (executing program)
2026/01/14 08:55:39 fetching corpus: 9268, signal 209079/210712 (executing program)
2026/01/14 08:55:40 fetching corpus: 9287, signal 209180/210712 (executing program)
2026/01/14 08:55:40 fetching corpus: 9287, signal 209180/210712 (executing program)
2026/01/14 08:55:41 starting 8 fuzzer processes
08:55:41 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff59, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x2400c0d1)

08:55:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='{@!(*@\x00')

08:55:41 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004)

08:55:41 executing program 3:
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81201b00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:41 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x12, 0x0, 0x0, @multicast1=0xe0000002}}}}}, 0x0)

[   81.183052] audit: type=1400 audit(1768380941.936:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:55:41 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f00000000c0)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0)

08:55:41 executing program 7:
keyctl$negate(0x2, 0x0, 0x0, 0xfffffffffffffffc)

08:55:42 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delsa={0x28, 0x11, 0x101, 0x0, 0x0, {@in, 0x0, 0x0, 0x32}}, 0x28}}, 0x0)

[   82.290776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.297645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.299441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.308056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.313356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.352316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.355071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.357145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.362563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.365719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.436397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.439138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.458060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.485958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.488391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.491799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.493413] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.494744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.513779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.515117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.518927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.522902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.522937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.529002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.531049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.532916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.536804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.539287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   82.546725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.565516] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.568312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.570268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.571527] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.580788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   82.583097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.597804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   82.600023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.698937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   82.704921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   82.706981] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.384725] Bluetooth: hci1: command tx timeout
[   84.385271] Bluetooth: hci0: command tx timeout
[   84.575746] Bluetooth: hci2: command tx timeout
[   84.640748] Bluetooth: hci5: command tx timeout
[   84.641230] Bluetooth: hci6: command tx timeout
[   84.641797] Bluetooth: hci4: command tx timeout
[   84.703834] Bluetooth: hci3: command tx timeout
[   84.767806] Bluetooth: hci7: command tx timeout
[   86.431723] Bluetooth: hci0: command tx timeout
[   86.431749] Bluetooth: hci1: command tx timeout
[   86.623796] Bluetooth: hci2: command tx timeout
[   86.688698] Bluetooth: hci6: command tx timeout
[   86.688739] Bluetooth: hci4: command tx timeout
[   86.689329] Bluetooth: hci5: command tx timeout
[   86.752723] Bluetooth: hci3: command tx timeout
[   86.815861] Bluetooth: hci7: command tx timeout
[   88.479726] Bluetooth: hci1: command tx timeout
[   88.479787] Bluetooth: hci0: command tx timeout
[   88.671789] Bluetooth: hci2: command tx timeout
[   88.735750] Bluetooth: hci4: command tx timeout
[   88.736165] Bluetooth: hci5: command tx timeout
[   88.736547] Bluetooth: hci6: command tx timeout
[   88.800713] Bluetooth: hci3: command tx timeout
[   88.864683] Bluetooth: hci7: command tx timeout
[   90.527714] Bluetooth: hci0: command tx timeout
[   90.528168] Bluetooth: hci1: command tx timeout
[   90.719702] Bluetooth: hci2: command tx timeout
[   90.783740] Bluetooth: hci6: command tx timeout
[   90.784169] Bluetooth: hci5: command tx timeout
[   90.784553] Bluetooth: hci4: command tx timeout
[   90.847701] Bluetooth: hci3: command tx timeout
[   90.911699] Bluetooth: hci7: command tx timeout
[  117.798277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.798962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.936116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.936791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.114004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.114637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.213939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.214590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.339851] audit: type=1400 audit(1768380979.091:8): avc:  denied  { open } for  pid=3728 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  118.350266] audit: type=1400 audit(1768380979.092:9): avc:  denied  { kernel } for  pid=3728 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
08:56:19 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x12, 0x0, 0x0, @multicast1=0xe0000002}}}}}, 0x0)

08:56:19 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x12, 0x0, 0x0, @multicast1=0xe0000002}}}}}, 0x0)

[  119.116044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.117085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.179252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.180097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.397047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.397739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.498004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.498582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.586029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.586689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.681064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.681684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.794348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.795111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.853254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.853809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.941639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.942303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.990582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.991234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.522709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.523332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.547025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.547636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:56:21 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f00000000c0)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0)

08:56:21 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delsa={0x28, 0x11, 0x101, 0x0, 0x0, {@in, 0x0, 0x0, 0x32}}, 0x28}}, 0x0)

08:56:21 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004)

08:56:21 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='{@!(*@\x00')

08:56:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81201b00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:21 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x12, 0x0, 0x0, @multicast1=0xe0000002}}}}}, 0x0)

08:56:21 executing program 7:
keyctl$negate(0x2, 0x0, 0x0, 0xfffffffffffffffc)

08:56:21 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff59, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x2400c0d1)

08:56:21 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004)

08:56:21 executing program 7:
keyctl$negate(0x2, 0x0, 0x0, 0xfffffffffffffffc)

08:56:21 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delsa={0x28, 0x11, 0x101, 0x0, 0x0, {@in, 0x0, 0x0, 0x32}}, 0x28}}, 0x0)

08:56:21 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff59, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x2400c0d1)

08:56:21 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004)

08:56:21 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='{@!(*@\x00')

08:56:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81201b00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:21 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f00000000c0)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0)

08:56:21 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='{@!(*@\x00')

08:56:21 executing program 7:
keyctl$negate(0x2, 0x0, 0x0, 0xfffffffffffffffc)

08:56:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

08:56:21 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='{@!(*@\x00')

08:56:21 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f00000000c0)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0)

08:56:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81201b00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:21 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='{@!(*@\x00')

08:56:21 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delsa={0x28, 0x11, 0x101, 0x0, 0x0, {@in, 0x0, 0x0, 0x32}}, 0x28}}, 0x0)

08:56:21 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff59, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x2400c0d1)

08:56:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

08:56:21 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2400c861, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10)

08:56:21 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)

08:56:21 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='{@!(*@\x00')

08:56:21 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000000))

08:56:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

08:56:21 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="ec", 0x1}], 0x1, 0x2)

08:56:21 executing program 6:
rt_sigtimedwait(0x0, 0x0, 0x0, 0x8)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

08:56:21 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2400c861, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10)

08:56:21 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)

08:56:21 executing program 1:
prctl$PR_SET_SECUREBITS(0x1c, 0x36)
setuid(0xee01)

08:56:21 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="ec", 0x1}], 0x1, 0x2)

08:56:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

08:56:21 executing program 6:
rt_sigtimedwait(0x0, 0x0, 0x0, 0x8)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

08:56:22 executing program 1:
prctl$PR_SET_SECUREBITS(0x1c, 0x36)
setuid(0xee01)

08:56:22 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="ec", 0x1}], 0x1, 0x2)

08:56:22 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2400c861, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10)

08:56:22 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
statfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)=""/166)

08:56:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

[  121.343253] 
[  121.343438] =====================================
[  121.343873] WARNING: bad unlock balance detected!
[  121.344309] 6.19.0-rc5-next-20260114 #1 Not tainted
[  121.344746] -------------------------------------
[  121.345159] syz-executor.2/3988 is trying to release lock (rcu_read_lock) at:
[  121.346449] [<ffffffff81c1cd75>] __wait_on_freeing_inode+0x105/0x350
[  121.347853] but there are no more locks to release!
[  121.348555] 
[  121.348555] other info that might help us debug this:
[  121.350385] 4 locks held by syz-executor.2/3988:
[  121.351566]  #0: ffff88800f6763f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  121.353024]  #1: ffff88805217ecb8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  121.353770]  #2: ffff88800fad2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  121.354431]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  121.355109] 
[  121.355109] stack backtrace:
[  121.355450] CPU: 0 UID: 0 PID: 3988 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  121.355465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.355472] Call Trace:
[  121.355476]  <TASK>
[  121.355481]  dump_stack_lvl+0xca/0x120
[  121.355508]  ? __wait_on_freeing_inode+0x105/0x350
[  121.355523]  print_unlock_imbalance_bug+0x118/0x130
[  121.355538]  ? __wait_on_freeing_inode+0x105/0x350
[  121.355553]  lock_release+0x1ee/0x270
[  121.355569]  __wait_on_freeing_inode+0x10a/0x350
[  121.355584]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  121.355600]  ? __pfx_var_wake_function+0x10/0x10
[  121.355618]  ? lock_is_held_type+0x9e/0x120
[  121.355638]  insert_inode_locked+0x25f/0x890
[  121.355656]  __ext4_new_inode+0x223d/0x4cd0
[  121.355675]  ? __pfx___ext4_new_inode+0x10/0x10
[  121.355690]  ? __pfx___dquot_initialize+0x10/0x10
[  121.355709]  ? __pfx_avc_has_perm+0x10/0x10
[  121.355726]  ext4_symlink+0x623/0xb40
[  121.355747]  ? __pfx_ext4_symlink+0x10/0x10
[  121.355763]  ? security_inode_permission+0x72/0xe0
[  121.355778]  vfs_symlink+0x44b/0x840
[  121.355795]  do_symlinkat+0x153/0x440
[  121.355809]  ? __pfx_do_symlinkat+0x10/0x10
[  121.355823]  ? strncpy_from_user+0x21b/0x2f0
[  121.355841]  __x64_sys_symlink+0x79/0xa0
[  121.355855]  do_syscall_64+0xbf/0x420
[  121.355868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.355880] RIP: 0033:0x7f276efac427
[  121.355889] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.355901] RSP: 002b:00007ffc12c350c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  121.355912] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f276efac427
[  121.355919] RDX: 00007ffc12c351a3 RSI: 00007f276f00702f RDI: 00007ffc12c35190
[  121.355927] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc12c34f60
[  121.355934] R10: 00007ffc12c34e17 R11: 0000000000000202 R12: 0000000000000001
[  121.355941] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc12c35190
[  121.355953]  </TASK>
[  121.370127] ------------[ cut here ]------------
[  121.370476] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.2/3988
[  121.371322] Modules linked in:
[  121.371598] CPU: 0 UID: 0 PID: 3988 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  121.372380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.373029] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  121.373467] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9
[  121.374830] RSP: 0018:ffff888051d9f9a0 EFLAGS: 00010286
[  121.375224] RAX: 00000000ffffffff RBX: ffff88805350b700 RCX: ffffffff81565a27
[  121.375787] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff88805350bafc
[  121.376322] RBP: ffff88805350b700 R08: 0000000000000000 R09: fffffbfff0ba6ffc
[  121.376897] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88805350b700
[  121.377422] R13: 0000000000000001 R14: ffffffff85c0eaf0 R15: ffff888052180318
[  121.377988] FS:  0000555566527400(0000) GS:ffff8880e5343000(0000) knlGS:0000000000000000
[  121.378576] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.379048] CR2: 00007ffe88a10c38 CR3: 0000000052b94000 CR4: 0000000000350ef0
[  121.379572] Call Trace:
[  121.379842]  <TASK>
[  121.380475]  __wait_on_freeing_inode+0x10f/0x350
[  121.381151]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  121.382196]  ? __pfx_var_wake_function+0x10/0x10
[  121.383387]  ? lock_is_held_type+0x9e/0x120
[  121.384465]  insert_inode_locked+0x25f/0x890
[  121.386065]  __ext4_new_inode+0x223d/0x4cd0
[  121.388478]  ? __pfx___ext4_new_inode+0x10/0x10
[  121.389701]  ? __pfx___dquot_initialize+0x10/0x10
[  121.390403]  ? __pfx_avc_has_perm+0x10/0x10
[  121.392160]  ext4_symlink+0x623/0xb40
[  121.394383]  ? __pfx_ext4_symlink+0x10/0x10
[  121.395382]  ? security_inode_permission+0x72/0xe0
[  121.397079]  vfs_symlink+0x44b/0x840
[  121.398387]  do_symlinkat+0x153/0x440
[  121.399511]  ? __pfx_do_symlinkat+0x10/0x10
[  121.400288]  ? strncpy_from_user+0x21b/0x2f0
[  121.402184]  __x64_sys_symlink+0x79/0xa0
[  121.402906]  do_syscall_64+0xbf/0x420
[  121.403694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.404178] RIP: 0033:0x7f276efac427
[  121.404577] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.406238] RSP: 002b:00007ffc12c350c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  121.406971] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f276efac427
[  121.407600] RDX: 00007ffc12c351a3 RSI: 00007f276f00702f RDI: 00007ffc12c35190
[  121.408284] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc12c34f60
[  121.408977] R10: 00007ffc12c34e17 R11: 0000000000000202 R12: 0000000000000001
[  121.409538] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc12c35190
[  121.412205]  </TASK>
[  121.412432] irq event stamp: 475
[  121.412787] hardirqs last  enabled at (475): [<ffffffff84d16a9c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  121.413741] hardirqs last disabled at (474): [<ffffffff84d167f3>] _raw_spin_lock_irqsave+0x53/0x60
[  121.414553] softirqs last  enabled at (470): [<ffffffff813c2868>] do_softirq+0x48/0x80
[  121.415846] softirqs last disabled at (391): [<ffffffff813c2868>] do_softirq+0x48/0x80
[  121.416515] ---[ end trace 0000000000000000 ]---
08:56:22 executing program 6:
rt_sigtimedwait(0x0, 0x0, 0x0, 0x8)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

08:56:22 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000000))

08:56:22 executing program 1:
prctl$PR_SET_SECUREBITS(0x1c, 0x36)
setuid(0xee01)

08:56:22 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
statfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)=""/166)

08:56:22 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)

08:56:22 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="ec", 0x1}], 0x1, 0x2)

08:56:22 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2400c861, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10)

08:56:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 6:
rt_sigtimedwait(0x0, 0x0, 0x0, 0x8)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

08:56:22 executing program 1:
prctl$PR_SET_SECUREBITS(0x1c, 0x36)
setuid(0xee01)

08:56:22 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
statfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)=""/166)

08:56:22 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)

08:56:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 6:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80010180)

08:56:22 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

08:56:22 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000000))

08:56:22 executing program 6:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80010180)

08:56:22 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
statfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)=""/166)

08:56:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

08:56:22 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb21}, 0x14}}, 0x0)

08:56:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 6:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80010180)

08:56:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@multicast]})

08:56:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@multicast]})

08:56:22 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

08:56:22 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000000))

08:56:22 executing program 6:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80010180)

08:56:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 7:
getcwd(0x0, 0x0)

[  121.910599] perf: interrupt took too long (3980 > 3972), lowering kernel.perf_event_max_sample_rate to 50000
[  121.949419] perf: interrupt took too long (4987 > 4975), lowering kernel.perf_event_max_sample_rate to 40000
[  121.963975] perf: interrupt took too long (6247 > 6233), lowering kernel.perf_event_max_sample_rate to 32000
08:56:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@multicast]})

08:56:22 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

[  122.171411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
08:56:22 executing program 1:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

08:56:22 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
r2 = epoll_create1(0x0)
r3 = eventfd(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
io_submit(r1, 0x1, &(0x7f0000001980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])

08:56:22 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

08:56:22 executing program 7:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@multicast]})

08:56:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r0, r0, 0x0, 0x5)

08:56:22 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

08:56:22 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0)

08:56:22 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
r2 = epoll_create1(0x0)
r3 = eventfd(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
io_submit(r1, 0x1, &(0x7f0000001980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])

08:56:22 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

08:56:23 executing program 7:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@multicast]})

08:56:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000)

[  122.479205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
08:56:23 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
r2 = epoll_create1(0x0)
r3 = eventfd(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
io_submit(r1, 0x1, &(0x7f0000001980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])

08:56:23 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

08:56:23 executing program 6:
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

08:56:23 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0)

08:56:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@multicast]})

08:56:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000)

08:56:23 executing program 7:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@multicast]})

08:56:23 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0)

08:56:23 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0)

[  122.574068] process 'syz-executor.6' launched './file1' with NULL argv: empty string added
08:56:23 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
r2 = epoll_create1(0x0)
r3 = eventfd(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
io_submit(r1, 0x1, &(0x7f0000001980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])

08:56:23 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

08:56:23 executing program 6:
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

08:56:23 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0)

08:56:23 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0)

08:56:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000)

08:56:23 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x67)

08:56:23 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x67)

08:56:23 executing program 5:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x400000000000}], 0x0)

08:56:23 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0))

08:56:23 executing program 6:
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

08:56:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000)

08:56:23 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0)

08:56:23 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
sync_file_range(r0, 0x0, 0x0, 0x6)

08:56:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

08:56:23 executing program 5:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x400000000000}], 0x0)

08:56:23 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x67)

08:56:23 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

08:56:23 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0))

08:56:23 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
sync_file_range(r0, 0x0, 0x0, 0x6)

08:56:23 executing program 5:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x400000000000}], 0x0)

08:56:23 executing program 6:
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

08:56:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

08:56:23 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0))

08:56:23 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x67)

08:56:23 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

08:56:23 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0))

08:56:23 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

08:56:23 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
sync_file_range(r0, 0x0, 0x0, 0x6)

08:56:23 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80)

08:56:23 executing program 5:
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x400000000000}], 0x0)

08:56:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

08:56:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x3f00}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))

08:56:23 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

08:56:23 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

08:56:23 executing program 6:
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eaf0da7e4"], 0x1b2)

08:56:23 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000))

[  123.233192] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
08:56:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

[  123.269030] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260
[  123.269063] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260
[  123.272801] Bluetooth: hci7: Malformed LE Event: 0x0d
[  123.274310] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260
[  123.274333] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260
[  123.276324] Bluetooth: hci7: Malformed LE Event: 0x0d
08:56:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x3f00}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))

08:56:24 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
sync_file_range(r0, 0x0, 0x0, 0x6)

08:56:24 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

08:56:24 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getuid()

08:56:24 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

08:56:24 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000))

08:56:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000cc0))

08:56:24 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80)

08:56:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x3f00}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))

08:56:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x31, &(0x7f0000000080), 0x4)

08:56:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000cc0))

08:56:24 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000))

08:56:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x31, &(0x7f0000000080), 0x4)

08:56:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getuid()

08:56:24 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000))

08:56:24 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80)

08:56:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000cc0))

08:56:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x3f00}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))

08:56:24 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x31, &(0x7f0000000080), 0x4)

08:56:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x31, &(0x7f0000000080), 0x4)

08:56:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000cc0))

08:56:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
listen(0xffffffffffffffff, 0x0)

08:56:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff812010c0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:24 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80)

08:56:24 executing program 0:
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}}}, 0x7)

08:56:24 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x180}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)

08:56:24 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
listen(0xffffffffffffffff, 0x0)

08:56:24 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getuid()

08:56:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0)

08:56:24 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
listen(0xffffffffffffffff, 0x0)

08:56:24 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:24 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getuid()

08:56:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:24 executing program 2:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001100))

08:56:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff812010c0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:24 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
listen(0xffffffffffffffff, 0x0)

[  124.120339] audit: type=1400 audit(1768380984.873:10): avc:  denied  { read } for  pid=4286 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  124.176526] audit: type=1400 audit(1768380984.929:11): avc:  denied  { write } for  pid=4286 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
08:56:25 executing program 4:
getgroups(0x2, &(0x7f0000000000)=[0xee00, <r0=>0xee00])
setregid(r0, 0x0)
setregid(0x0, 0x0)

08:56:25 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0)

08:56:25 executing program 6:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

08:56:25 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff812010c0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f00000001c0)=[{r0}, {r1}], 0x2, 0x0)

08:56:25 executing program 2:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001100))

08:56:25 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0)

08:56:25 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0)

08:56:25 executing program 2:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001100))

08:56:25 executing program 4:
getgroups(0x2, &(0x7f0000000000)=[0xee00, <r0=>0xee00])
setregid(r0, 0x0)
setregid(0x0, 0x0)

08:56:25 executing program 6:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

08:56:25 executing program 2:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001100))

08:56:25 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff812010c0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:25 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0)

08:56:25 executing program 4:
getgroups(0x2, &(0x7f0000000000)=[0xee00, <r0=>0xee00])
setregid(r0, 0x0)
setregid(0x0, 0x0)

08:56:25 executing program 6:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

08:56:25 executing program 2:
getgroups(0x2, &(0x7f0000000000)=[0xee00, <r0=>0xee00])
setregid(r0, 0x0)
setregid(0x0, 0x0)

08:56:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0)

08:56:25 executing program 6:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

08:56:25 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0)

08:56:25 executing program 2:
getgroups(0x2, &(0x7f0000000000)=[0xee00, <r0=>0xee00])
setregid(r0, 0x0)
setregid(0x0, 0x0)

08:56:25 executing program 4:
getgroups(0x2, &(0x7f0000000000)=[0xee00, <r0=>0xee00])
setregid(r0, 0x0)
setregid(0x0, 0x0)

08:56:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 6:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

08:56:25 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

08:56:25 executing program 6:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

08:56:25 executing program 2:
getgroups(0x2, &(0x7f0000000000)=[0xee00, <r0=>0xee00])
setregid(r0, 0x0)
setregid(0x0, 0x0)

08:56:25 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

[  124.967824] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
08:56:25 executing program 6:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  124.993854] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
08:56:25 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clone(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

08:56:25 executing program 6:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

08:56:25 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0)

08:56:25 executing program 3:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

08:56:25 executing program 2:
perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
acct(&(0x7f0000000000)='./file1\x00')

08:56:25 executing program 4:
r0 = io_uring_setup(0x44a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2672, 0x0, 0x0, 0x0, 0x0)

08:56:25 executing program 6:
timer_create(0x3, 0x0, &(0x7f0000000100))
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000740)={{0x77359400}}, 0x0)

08:56:25 executing program 3:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  125.107462] Process accounting resumed
08:56:25 executing program 6:
timer_create(0x3, 0x0, &(0x7f0000000100))
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000740)={{0x77359400}}, 0x0)

[  125.131548] Process accounting resumed
08:56:25 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

08:56:25 executing program 3:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

08:56:25 executing program 2:
perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
acct(&(0x7f0000000000)='./file1\x00')

08:56:25 executing program 4:
r0 = io_uring_setup(0x44a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2672, 0x0, 0x0, 0x0, 0x0)

08:56:25 executing program 6:
timer_create(0x3, 0x0, &(0x7f0000000100))
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000740)={{0x77359400}}, 0x0)

08:56:25 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x127e, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "305fddc8c0b5e09b4f5caef187af375f9702628ad9eb4f845f2fc2d9e663f582be7b495568459694c4e4e4760675c02bdeb94dd871b1f97cb9a0c8d6027651e1", "48385d44c04484558dac53e8c424c832e55e34f7988ddb03c81e0c96782be6e5"})

08:56:25 executing program 0:
r0 = io_uring_setup(0x44a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2672, 0x0, 0x0, 0x0, 0x0)

08:56:25 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x5, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000200)="e1", 0x1}])

[  125.247611] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  125.268926] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
08:56:26 executing program 0:
r0 = io_uring_setup(0x44a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2672, 0x0, 0x0, 0x0, 0x0)

[  125.314507] Process accounting resumed
08:56:26 executing program 4:
r0 = io_uring_setup(0x44a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2672, 0x0, 0x0, 0x0, 0x0)

08:56:26 executing program 6:
timer_create(0x3, 0x0, &(0x7f0000000100))
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000740)={{0x77359400}}, 0x0)

08:56:26 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x301}, 0x14}}, 0x0)
syz_emit_vhci(0x0, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)

08:56:26 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

08:56:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x127e, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "305fddc8c0b5e09b4f5caef187af375f9702628ad9eb4f845f2fc2d9e663f582be7b495568459694c4e4e4760675c02bdeb94dd871b1f97cb9a0c8d6027651e1", "48385d44c04484558dac53e8c424c832e55e34f7988ddb03c81e0c96782be6e5"})

08:56:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x5, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000200)="e1", 0x1}])

08:56:26 executing program 4:
r0 = io_uring_setup(0x44a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2672, 0x0, 0x0, 0x0, 0x0)

08:56:26 executing program 2:
perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
acct(&(0x7f0000000000)='./file1\x00')

08:56:26 executing program 0:
r0 = io_uring_setup(0x44a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2672, 0x0, 0x0, 0x0, 0x0)

[  125.472511] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  125.510030] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
08:56:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x127e, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "305fddc8c0b5e09b4f5caef187af375f9702628ad9eb4f845f2fc2d9e663f582be7b495568459694c4e4e4760675c02bdeb94dd871b1f97cb9a0c8d6027651e1", "48385d44c04484558dac53e8c424c832e55e34f7988ddb03c81e0c96782be6e5"})

08:56:26 executing program 6:
pread64(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000, 0x5)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x376defa6578008a5, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

08:56:26 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x301}, 0x14}}, 0x0)
syz_emit_vhci(0x0, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)

08:56:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x5, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000200)="e1", 0x1}])

08:56:26 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

[  125.602040] Process accounting resumed
08:56:26 executing program 2:
perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
acct(&(0x7f0000000000)='./file1\x00')

08:56:26 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

[  125.666807] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  125.689900] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  125.744393] Process accounting resumed
08:56:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x127e, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "305fddc8c0b5e09b4f5caef187af375f9702628ad9eb4f845f2fc2d9e663f582be7b495568459694c4e4e4760675c02bdeb94dd871b1f97cb9a0c8d6027651e1", "48385d44c04484558dac53e8c424c832e55e34f7988ddb03c81e0c96782be6e5"})

08:56:26 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

08:56:26 executing program 7:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

08:56:26 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/191, &(0x7f0000000100)=0xbf)

08:56:26 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x301}, 0x14}}, 0x0)
syz_emit_vhci(0x0, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)

08:56:26 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x5, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000200)="e1", 0x1}])

08:56:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000300))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @dev, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000300))
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)

08:56:26 executing program 6:
pread64(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000, 0x5)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x376defa6578008a5, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

08:56:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000300))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @dev, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000300))
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)

08:56:26 executing program 7:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

08:56:26 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

08:56:26 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

08:56:26 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/191, &(0x7f0000000100)=0xbf)

08:56:26 executing program 6:
pread64(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000, 0x5)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x376defa6578008a5, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

08:56:26 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

08:56:26 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x301}, 0x14}}, 0x0)
syz_emit_vhci(0x0, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)

08:56:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000300))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @dev, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000300))
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)

08:56:26 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000300))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @dev, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000300))
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)

08:56:26 executing program 7:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

08:56:26 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

08:56:26 executing program 6:
pread64(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000, 0x5)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x376defa6578008a5, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

08:56:26 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/191, &(0x7f0000000100)=0xbf)

08:56:26 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

08:56:26 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000300))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @dev, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000300))
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)

08:56:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000300))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @dev, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000300))
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)

08:56:26 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

08:56:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

08:56:26 executing program 7:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

08:56:26 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000300))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @dev, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000300))
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)

08:56:27 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4011013, r1, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)

08:56:27 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/191, &(0x7f0000000100)=0xbf)

08:56:27 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

08:56:27 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r0 = inotify_init()
r1 = inotify_init()
creat(&(0x7f0000000140)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b)
inotify_add_watch(r1, &(0x7f0000000600)='./file0\x00', 0x52000108)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

08:56:27 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

08:56:27 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1)
fcntl$setstatus(r1, 0x4, 0x2000)
vmsplice(r0, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0)

08:56:27 executing program 7:
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0101000000000000e42be19d0569b93adf0558"], 0x1b2)
syz_emit_vhci(0x0, 0x0)

08:56:27 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

[  126.375412] audit: type=1400 audit(1768380987.127:12): avc:  denied  { watch_reads } for  pid=4524 comm="syz-executor.6" path="/syzkaller-testdir054074400/syzkaller.Mkuz1y/38" dev="sda" ino=15990 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
[  126.382909] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  126.382929] Bluetooth: hci3: unexpected subevent 0x01 length: 430 > 18
[  126.385548] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  126.385564] Bluetooth: hci3: unexpected subevent 0x01 length: 430 > 18
[  126.387153] debugfs: '0' already exists in 'hci3'
[  126.387612] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  126.388700] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:2 Tainted: G        W           6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  126.388720] Tainted: [W]=WARN
[  126.388723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  126.388731] Workqueue: hci3 hci_rx_work
[  126.388757] Call Trace:
[  126.388761]  <TASK>
[  126.388765]  dump_stack_lvl+0xfa/0x120
[  126.388781]  sysfs_warn_dup+0x80/0xa0
[  126.388798]  sysfs_create_dir_ns+0x23b/0x2a0
[  126.388813]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  126.388829]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.388847]  ? lock_release+0x1c7/0x270
[  126.388862]  ? do_raw_spin_unlock+0x53/0x220
[  126.388879]  kobject_add_internal+0x24c/0x9a0
[  126.388895]  kobject_add+0x157/0x240
[  126.388910]  ? __pfx_kobject_add+0x10/0x10
[  126.388924]  ? lock_release+0x1c7/0x270
[  126.388938]  ? do_raw_spin_unlock+0x53/0x220
[  126.388954]  ? kobject_put+0xaa/0x260
[  126.388970]  device_add+0x32d/0x1830
[  126.388988]  ? __pfx_device_add+0x10/0x10
[  126.389003]  ? hci_debugfs_create_conn+0x10f/0x240
[  126.389017]  ? mgmt_send_event_skb+0x2f3/0x460
[  126.389035]  ? __pfx_hci_debugfs_create_conn+0x10/0x10
[  126.389049]  hci_conn_add_sysfs+0x117/0x1c0
[  126.389062]  le_conn_complete_evt+0x1246/0x1e40
[  126.389081]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  126.389097]  ? __pfx_bt_warn+0x10/0x10
[  126.389114]  hci_le_conn_complete_evt+0x22a/0x2c0
[  126.389133]  hci_le_meta_evt+0x34b/0x530
[  126.389149]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  126.389167]  hci_event_packet+0x66c/0x10e0
[  126.389184]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  126.389200]  ? __pfx_hci_event_packet+0x10/0x10
[  126.389219]  ? rwsem_mark_wake+0x4b0/0xb50
[  126.389238]  ? trace_hardirqs_on+0x16/0x110
[  126.389255]  hci_rx_work+0x65b/0x8b0
[  126.389273]  process_one_work+0x8e1/0x1960
[  126.389291]  ? __pfx_process_one_work+0x10/0x10
[  126.389306]  ? lock_release+0x1c7/0x270
[  126.389320]  ? __pfx_hci_rx_work+0x10/0x10
[  126.389338]  worker_thread+0x67e/0xe90
[  126.389352]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  126.389371]  ? __pfx_worker_thread+0x10/0x10
[  126.389385]  kthread+0x385/0x490
[  126.389399]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  126.389413]  ? __pfx_kthread+0x10/0x10
[  126.389426]  ret_from_fork+0x67a/0x7a0
[  126.389439]  ? __pfx_ret_from_fork+0x10/0x10
[  126.389451]  ? __switch_to+0x759/0x1030
[  126.389468]  ? __pfx_kthread+0x10/0x10
[  126.389481]  ret_from_fork_asm+0x1a/0x30
[  126.389501]  </TASK>
[  126.389515] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  126.410786] Bluetooth: hci3: failed to register connection device
08:56:27 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r0 = inotify_init()
r1 = inotify_init()
creat(&(0x7f0000000140)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b)
inotify_add_watch(r1, &(0x7f0000000600)='./file0\x00', 0x52000108)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

08:56:27 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = dup(r0)
fsmount(r1, 0x0, 0x0)

08:56:27 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1)
fcntl$setstatus(r1, 0x4, 0x2000)
vmsplice(r0, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0)

08:56:27 executing program 7:
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0101000000000000e42be19d0569b93adf0558"], 0x1b2)
syz_emit_vhci(0x0, 0x0)

[  126.474524] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  126.474544] Bluetooth: hci3: unexpected subevent 0x01 length: 430 > 18
[  126.476296] debugfs: '0' already exists in 'hci3'
[  126.476824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  126.477492] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:2 Tainted: G        W           6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  126.477511] Tainted: [W]=WARN
[  126.477515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  126.477523] Workqueue: hci3 hci_rx_work
[  126.477548] Call Trace:
[  126.477552]  <TASK>
[  126.477556]  dump_stack_lvl+0xfa/0x120
[  126.477571]  sysfs_warn_dup+0x80/0xa0
[  126.477588]  sysfs_create_dir_ns+0x23b/0x2a0
[  126.477604]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  126.477619]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.477638]  ? lock_release+0x1c7/0x270
[  126.477656]  ? do_raw_spin_unlock+0x53/0x220
[  126.477673]  kobject_add_internal+0x24c/0x9a0
[  126.477689]  kobject_add+0x157/0x240
[  126.477704]  ? __pfx_kobject_add+0x10/0x10
[  126.477718]  ? lock_release+0x1c7/0x270
[  126.477732]  ? do_raw_spin_unlock+0x53/0x220
[  126.477749]  ? kobject_put+0xaa/0x260
[  126.477764]  device_add+0x32d/0x1830
[  126.477782]  ? __pfx_device_add+0x10/0x10
[  126.477797]  ? hci_debugfs_create_conn+0x10f/0x240
[  126.477812]  ? mgmt_send_event_skb+0x2f3/0x460
[  126.477829]  ? __pfx_hci_debugfs_create_conn+0x10/0x10
[  126.477844]  hci_conn_add_sysfs+0x117/0x1c0
[  126.477856]  le_conn_complete_evt+0x1246/0x1e40
[  126.477876]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  126.477892]  ? __pfx_bt_warn+0x10/0x10
[  126.477909]  hci_le_conn_complete_evt+0x22a/0x2c0
[  126.477928]  hci_le_meta_evt+0x34b/0x530
[  126.477944]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  126.477962]  hci_event_packet+0x66c/0x10e0
[  126.477979]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  126.477995]  ? __pfx_hci_event_packet+0x10/0x10
[  126.478011]  ? rwsem_mark_wake+0x4b0/0xb50
[  126.478029]  ? trace_hardirqs_on+0x16/0x110
[  126.478046]  hci_rx_work+0x65b/0x8b0
[  126.478064]  process_one_work+0x8e1/0x1960
[  126.478082]  ? __pfx_process_one_work+0x10/0x10
[  126.478098]  ? lock_release+0x1c7/0x270
[  126.478112]  ? __pfx_hci_rx_work+0x10/0x10
[  126.478129]  worker_thread+0x67e/0xe90
[  126.478144]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  126.478163]  ? __pfx_worker_thread+0x10/0x10
[  126.478177]  kthread+0x385/0x490
[  126.478191]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  126.478205]  ? __pfx_kthread+0x10/0x10
[  126.478218]  ret_from_fork+0x67a/0x7a0
[  126.478231]  ? __pfx_ret_from_fork+0x10/0x10
[  126.478244]  ? __switch_to+0x759/0x1030
[  126.478261]  ? __pfx_kthread+0x10/0x10
[  126.478274]  ret_from_fork_asm+0x1a/0x30
[  126.478294]  </TASK>
[  126.495779] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  126.499957] Bluetooth: hci3: failed to register connection device
08:56:27 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r0 = inotify_init()
r1 = inotify_init()
creat(&(0x7f0000000140)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b)
inotify_add_watch(r1, &(0x7f0000000600)='./file0\x00', 0x52000108)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

08:56:27 executing program 7:
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0101000000000000e42be19d0569b93adf0558"], 0x1b2)
syz_emit_vhci(0x0, 0x0)

[  126.525097] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  126.525837] sr
VM DIAGNOSIS:
08:56:22  Registers:
info registers vcpu 0
RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff888051d9f4a8
R8 =0000000000000000 R9 =ffffed10013c3046 R10=000000000000006f R11=6e6920726568746f
R12=000000000000006f R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0
RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555566527400 00000000 00000000
GS =0000 ffff8880e5343000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe88a10c38 CR3=0000000052b94000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=fffffbfff0b82d10 RBX=fffffbfff0b82d11 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=fffffbfff0b82d10 RSP=ffff888019137af8
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11003226f64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888019137b50
RIP=ffffffff81b3c231 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555560317400 00000000 00000000
GS =0000 ffff8880e5443000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555560328c98 CR3=000000001f769000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000