r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0)
r3 = syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x1dc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0)
syz_io_uring_setup(0x69cd, &(0x7f0000000140)={0x0, 0x95c1, 0x10, 0x2, 0x29d, 0x0, r3}, &(0x7f0000000000/0xc00000)=nil, &(0x7f00001ea000/0x4000)=nil, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff)
fallocate(r0, 0x0, 0x0, 0x1000002)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x2, 0x4, 0x1, 0x5c, 0x0, 0x7, 0x43680, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0xbc4ad1c099504496, @perf_bp={&(0x7f0000000280), 0x8}, 0x1045, 0x4, 0x4, 0x9, 0x7, 0xeb69, 0x4, 0x0, 0x1, 0x0, 0x4})
read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
socket$netlink(0x10, 0x3, 0x0)
r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r5, 0x0, 0x0, 0x4)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8005, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3ff, 0xfffffffffffffffc}, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000840)=@updsa={0x1cc, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xee00}, {@in=@empty, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x78}, [@algo_auth_trunc={0xd9, 0x14, {{'sha256\x00'}, 0x468, 0x0, "1d1f958b3fdfaf0f7b51de1193e9515a3486496c5c101552582512f2ad70a9db0235ddaf97758e81fe94580bcd13cd170d61003014689c7a8a1f708f04dd55e9780f74bf3e6a5f3551693c15374ad036c1679c84c1ffcadc9d3aa68306b5c6819eb39e4bb1737d334056241fdb82c0a034468d5d14bd057b201cdd1c26bd3417c5c699400d117268648f2211c1"}}]}, 0x1cc}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0x11, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)