Warning: Permanently added '[localhost]:36762' (ECDSA) to the list of known hosts. 2025/08/29 23:48:52 fuzzer started syzkaller login: [ 59.141979] gcc (261) used greatest stack depth: 24688 bytes left 2025/08/29 23:48:53 dialing manager at localhost:43077 [ 60.318520] cgroup: Unknown subsys name 'net' [ 60.402230] cgroup: Unknown subsys name 'cpuset' [ 60.475130] cgroup: Unknown subsys name 'rlimit' 2025/08/29 23:49:04 syscalls: 201 2025/08/29 23:49:04 code coverage: enabled 2025/08/29 23:49:04 comparison tracing: enabled 2025/08/29 23:49:04 extra coverage: enabled 2025/08/29 23:49:04 setuid sandbox: enabled 2025/08/29 23:49:04 namespace sandbox: enabled 2025/08/29 23:49:04 Android sandbox: enabled 2025/08/29 23:49:04 fault injection: enabled 2025/08/29 23:49:04 leak checking: enabled 2025/08/29 23:49:04 net packet injection: enabled 2025/08/29 23:49:04 net device setup: enabled 2025/08/29 23:49:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 23:49:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 23:49:04 USB emulation: enabled 2025/08/29 23:49:04 hci packet injection: enabled 2025/08/29 23:49:04 wifi device emulation: enabled 2025/08/29 23:49:04 802.15.4 emulation: enabled 2025/08/29 23:49:04 fetching corpus: 0, signal 0/0 (executing program) 2025/08/29 23:49:05 starting 8 fuzzer processes 23:49:05 executing program 0: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5a60, 0x52}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004005}, 0x400d0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000240)={0x3f, 0x0, 'client1\x00', 0x4, "a7e31940b4af403d", "d697a084e7716bb5980cb9e658ba9b020d06db29de0525e05aeba601eb26d4e3", 0x9, 0x6}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5b}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000480)={0x3, 0x1, {0x0, 0x0, 0x3, 0x2, 0x2}, 0x3}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000580)=0x3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa5b}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x8ab3ca5d33dda427) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a00)=0xc) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x2200008, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@uid_lt}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfsroot}, {@euid_eq={'euid', 0x3d, r5}}, {@seclabel}]}}) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008081) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c40), 0x400002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000c80)={0x7ff, 0x0, {0xffffffffffffffff, 0x0, 0x1fd6, 0x2, 0x5}, 0x136}) 23:49:05 executing program 1: r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040854}, 0x24040809) socketpair(0x1e, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x144, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5b}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x11, 0x4, 0x7, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x101}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x573}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x20040) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x210000, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880)=0x2, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r7) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r10, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xa2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000000) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 23:49:05 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_complete(0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x3ee, 0x3, 0x7}) r2 = fsopen(&(0x7f0000000100)='overlay\x00', 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000200)=r1, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000240)) r4 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000300)={0x50000005}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)=')\x00', &(0x7f0000000380)='overlay\x00', 0x0) r5 = epoll_create1(0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xe0000001}) select(0x40, &(0x7f0000000440)={0x2, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffe01, 0x679c}, &(0x7f0000000480)={0x80000001, 0x7, 0x1, 0x4, 0x90000000000000, 0xfffffffffffffffb, 0x401, 0xfffffffffffffeff}, &(0x7f00000004c0)={0x9, 0x0, 0x5, 0x2, 0x4, 0x401, 0x4, 0xfffffffffffff800}, &(0x7f0000000500)={0x0, 0xea60}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x800) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x200428c0) epoll_pwait(r0, &(0x7f00000006c0)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000700)={[0x100]}, 0x8) 23:49:05 executing program 3: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xfc, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4805}, 0x24000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0xa84e, 0x6, 0x1, 'queue0\x00', 0x4}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8011}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38}}, 0x8001) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0xb01, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc60d, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000018) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) pipe2$9p(&(0x7f0000000ac0), 0x84000) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000b00)={0x9, 0x4}) 23:49:05 executing program 7: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x144, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x144}}, 0xc1) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd85ed0401ffda50c}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4885}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x8016) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x4084) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x19c, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24004804}, 0x40) r4 = syz_io_uring_complete(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x24}}, 0x20048804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x28020080}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x58}}, 0x4040005) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000d80)=0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) [ 71.958090] audit: type=1400 audit(1756511345.944:7): avc: denied { execmem } for pid=272 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:49:05 executing program 4: socketpair(0x29, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x2, 0x100, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c004093) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000814) socketpair(0xb, 0x1, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x77}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xfffffc00}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x62}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44001}, 0x4040080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000008c0)={0x1, 0x100, 0x8}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x200040c5}, 0x20000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x400000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc99}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) 23:49:06 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x8, 0x8001, 0x81, {0x4, 0x5}, 0x1, 0x45}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x6, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x6f68b6e1, 0x3, {0x0, 0x0, 0x919e, 0x1, 0x2}, 0x6}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7, 0xffffff87, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0xc, [0x2, 0x7f, 0x3, 0xff, 0x1, 0x3]}, @end, @ssrr={0x89, 0xb, 0x30, [@empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x7, 0x0, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x5, [{@local, 0x400}, {@local, 0x686b}]}]}}}}}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000500)={0x3, 0x100, 0xffffffa1, 0x5, 0x7, 0x800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x700, 0x8000, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @generic={0x86, 0x8, "1e15aee6ca1f"}, @end]}}}}}) r4 = syz_io_uring_setup(0x3705, &(0x7f0000000600)={0x0, 0x4413, 0x2, 0x2, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000700)=r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x110, r4, 0x8000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000740)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2202000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@version_L}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}]}}) syz_io_uring_complete(r5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x5c25, 0xdd834ec, 0x5, {0x1, 0x200}, 0x7fff, 0x4}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000980)=0x5) 23:49:06 executing program 6: r0 = syz_io_uring_complete(0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0xa4}, 0x2f) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x12342, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0x8000000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x301080c, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'full'}}, {@aname={'aname', 0x3d, 'full'}}], [{@uid_eq={'uid', 0x3d, r5}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, '\\].'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x36, 0x63, 0x34, 0x61, 0x66, 0x39], 0x2d, [0x66, 0x61, 0x37, 0x37], 0x2d, [0x30, 0x30, 0x33, 0x64], 0x2d, [0x0, 0x61, 0x31, 0x36], 0x2d, [0x38, 0x37, 0x39, 0x30, 0x38, 0x35, 0x31, 0x33]}}}, {@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) r6 = syz_io_uring_complete(r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x5, 0x44b53c0f, {{0xa, 0x4, 0x2, 0x3c, 0x28, 0x64, 0x0, 0x24, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x13, 0x61, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @multicast2]}]}}}}}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x2004c805) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000540)) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000580)={0x96, "59af2db250b3f7e0a06740c3db9a6abeceee33ae9831be5eb68aad4590a1fb2dd4413ba44abbc3f85035cb58398a1a8af7ac126637bf9ad1a1e8746b1875b109fc718fe677bf69abd53590908dbcd7ed4ed8e8ffbc45b22361021a48e53dfe07db3bd758e0a4bfd01384033bcd9d510f223e33ba50b65cd56c0d1d0fd19de3b5752ccee8e50c4812ad957fef4b0a247f6efa406f2fdd"}) r7 = syz_io_uring_setup(0x4d05, &(0x7f0000000640)={0x0, 0xdb54, 0x35, 0x2, 0x10e, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x810, r7, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$RTC_WIE_OFF(r6, 0x7010) [ 73.115661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.117826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.119875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.123619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.126669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.247715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.253833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.255442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.262757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.270047] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.280595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.283727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.285055] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.290531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.294106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.299431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.302925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.306813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.309010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.315554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.356851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.361007] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.364047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.365932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.367281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.368582] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.369843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.371181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.373509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.378146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.379871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.380706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.382563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.384441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.386938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.389531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.390977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.391762] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.394838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.396615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.150222] Bluetooth: hci0: command tx timeout [ 75.341829] Bluetooth: hci3: command tx timeout [ 75.342965] Bluetooth: hci2: command tx timeout [ 75.343458] Bluetooth: hci1: command tx timeout [ 75.469401] Bluetooth: hci5: command tx timeout [ 75.469920] Bluetooth: hci4: command tx timeout [ 75.471195] Bluetooth: hci7: command tx timeout [ 75.533379] Bluetooth: hci6: command tx timeout [ 77.198435] Bluetooth: hci0: command tx timeout [ 77.389424] Bluetooth: hci1: command tx timeout [ 77.391029] Bluetooth: hci2: command tx timeout [ 77.391514] Bluetooth: hci3: command tx timeout [ 77.517474] Bluetooth: hci5: command tx timeout [ 77.518526] Bluetooth: hci4: command tx timeout [ 77.518925] Bluetooth: hci7: command tx timeout [ 77.581713] Bluetooth: hci6: command tx timeout [ 79.245481] Bluetooth: hci0: command tx timeout [ 79.438709] Bluetooth: hci2: command tx timeout [ 79.439135] Bluetooth: hci3: command tx timeout [ 79.439212] Bluetooth: hci1: command tx timeout [ 79.565490] Bluetooth: hci4: command tx timeout [ 79.565554] Bluetooth: hci7: command tx timeout [ 79.566269] Bluetooth: hci5: command tx timeout [ 79.629855] Bluetooth: hci6: command tx timeout [ 81.294361] Bluetooth: hci0: command tx timeout [ 81.485367] Bluetooth: hci1: command tx timeout [ 81.485392] Bluetooth: hci2: command tx timeout [ 81.485860] Bluetooth: hci3: command tx timeout [ 81.613460] Bluetooth: hci7: command tx timeout [ 81.613933] Bluetooth: hci4: command tx timeout [ 81.614429] Bluetooth: hci5: command tx timeout [ 81.678390] Bluetooth: hci6: command tx timeout [ 109.256540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.257193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.372767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.373393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.622961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.623580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.789579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.790149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:44 executing program 4: socketpair(0x29, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x2, 0x100, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c004093) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000814) socketpair(0xb, 0x1, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x77}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xfffffc00}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x62}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44001}, 0x4040080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000008c0)={0x1, 0x100, 0x8}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x200040c5}, 0x20000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x400000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc99}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) 23:49:44 executing program 4: socketpair(0x29, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x2, 0x100, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c004093) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000814) socketpair(0xb, 0x1, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x77}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xfffffc00}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x62}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44001}, 0x4040080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000008c0)={0x1, 0x100, 0x8}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x200040c5}, 0x20000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x400000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc99}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) 23:49:44 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x8, 0x8001, 0x81, {0x4, 0x5}, 0x1, 0x45}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x6, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x6f68b6e1, 0x3, {0x0, 0x0, 0x919e, 0x1, 0x2}, 0x6}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7, 0xffffff87, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0xc, [0x2, 0x7f, 0x3, 0xff, 0x1, 0x3]}, @end, @ssrr={0x89, 0xb, 0x30, [@empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x7, 0x0, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x5, [{@local, 0x400}, {@local, 0x686b}]}]}}}}}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000500)={0x3, 0x100, 0xffffffa1, 0x5, 0x7, 0x800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x700, 0x8000, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @generic={0x86, 0x8, "1e15aee6ca1f"}, @end]}}}}}) r4 = syz_io_uring_setup(0x3705, &(0x7f0000000600)={0x0, 0x4413, 0x2, 0x2, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000700)=r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x110, r4, 0x8000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000740)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2202000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@version_L}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}]}}) syz_io_uring_complete(r5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x5c25, 0xdd834ec, 0x5, {0x1, 0x200}, 0x7fff, 0x4}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000980)=0x5) [ 110.610220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.610928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.656190] kmemleak: Found object by alias at 0x607f1a6396d4 [ 110.656206] CPU: 1 UID: 0 PID: 3747 Comm: iou-sqp-3739 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 110.656224] Tainted: [W]=WARN [ 110.656227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.656235] Call Trace: [ 110.656239] [ 110.656243] dump_stack_lvl+0xca/0x120 [ 110.656271] __lookup_object+0x94/0xb0 [ 110.656293] delete_object_full+0x27/0x70 [ 110.656309] free_percpu+0x30/0x1160 [ 110.656326] ? arch_uprobe_clear_state+0x16/0x140 [ 110.656346] futex_hash_free+0x38/0xc0 [ 110.656361] mmput+0x2d3/0x390 [ 110.656380] do_exit+0x79d/0x2970 [ 110.656397] ? __pfx_do_exit+0x10/0x10 [ 110.656410] ? io_sq_thread+0xfbd/0x1b00 [ 110.656426] ? lock_release+0xc8/0x290 [ 110.656444] io_sq_thread+0xfc9/0x1b00 [ 110.656465] ? __pfx_io_sq_thread+0x10/0x10 [ 110.656481] ? __lock_acquire+0xc65/0x1b70 [ 110.656495] ? __pfx_autoremove_wake_function+0x10/0x10 [ 110.656510] ? __lock_acquire+0xc65/0x1b70 [ 110.656530] ? do_raw_spin_lock+0x123/0x260 [ 110.656546] ? find_held_lock+0x2b/0x80 [ 110.656562] ? __pfx_io_sq_thread+0x10/0x10 [ 110.656577] ? lock_release+0xc8/0x290 [ 110.656591] ? __pfx_io_sq_thread+0x10/0x10 [ 110.656606] ret_from_fork+0x34b/0x430 [ 110.656624] ? __pfx_io_sq_thread+0x10/0x10 [ 110.656639] ret_from_fork_asm+0x1a/0x30 [ 110.656663] [ 110.656667] kmemleak: Object (percpu) 0x607f1a6396d0 (size 8): [ 110.656674] kmemleak: comm "kworker/u10:6", pid 2422, jiffies 4294777481 [ 110.656681] kmemleak: min_count = 1 [ 110.656685] kmemleak: count = 0 [ 110.656688] kmemleak: flags = 0x21 [ 110.656692] kmemleak: checksum = 0 [ 110.656696] kmemleak: backtrace: [ 110.656699] pcpu_alloc_noprof+0x87a/0x1170 [ 110.656714] fib_nh_common_init+0x30/0xd0 [ 110.656727] fib6_nh_init+0x968/0x1a00 [ 110.656737] ip6_route_info_create_nh+0x530/0xf80 [ 110.656747] ip6_route_add.part.0+0x59/0x170 [ 110.656757] ip6_route_add+0x48/0x60 [ 110.656766] addrconf_add_mroute+0x12d/0x190 [ 110.656777] addrconf_add_dev+0x148/0x1c0 [ 110.656790] addrconf_dev_config+0x1e9/0x430 [ 110.656804] addrconf_notify+0xa70/0x1920 [ 110.656820] notifier_call_chain+0xc0/0x360 [ 110.656831] call_netdevice_notifiers_info+0xbe/0x140 [ 110.656844] netif_state_change+0x157/0x330 [ 110.656852] linkwatch_do_dev+0x111/0x150 [ 110.656864] __linkwatch_run_queue+0x2ab/0x710 [ 110.656874] linkwatch_event+0x4e/0x70 [ 110.697882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.698681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:44 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x8, 0x8001, 0x81, {0x4, 0x5}, 0x1, 0x45}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x6, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x6f68b6e1, 0x3, {0x0, 0x0, 0x919e, 0x1, 0x2}, 0x6}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7, 0xffffff87, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0xc, [0x2, 0x7f, 0x3, 0xff, 0x1, 0x3]}, @end, @ssrr={0x89, 0xb, 0x30, [@empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x7, 0x0, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x5, [{@local, 0x400}, {@local, 0x686b}]}]}}}}}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000500)={0x3, 0x100, 0xffffffa1, 0x5, 0x7, 0x800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x700, 0x8000, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @generic={0x86, 0x8, "1e15aee6ca1f"}, @end]}}}}}) r4 = syz_io_uring_setup(0x3705, &(0x7f0000000600)={0x0, 0x4413, 0x2, 0x2, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000700)=r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x110, r4, 0x8000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000740)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2202000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@version_L}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}]}}) syz_io_uring_complete(r5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x5c25, 0xdd834ec, 0x5, {0x1, 0x200}, 0x7fff, 0x4}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000980)=0x5) [ 110.872354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.872946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.913122] kmemleak: Found object by alias at 0x607f1a6396d4 [ 110.913137] CPU: 0 UID: 0 PID: 3758 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 110.913155] Tainted: [W]=WARN [ 110.913159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.913166] Call Trace: [ 110.913170] [ 110.913174] dump_stack_lvl+0xca/0x120 [ 110.913202] __lookup_object+0x94/0xb0 [ 110.913219] delete_object_full+0x27/0x70 [ 110.913235] free_percpu+0x30/0x1160 [ 110.913252] ? arch_uprobe_clear_state+0x16/0x140 [ 110.913271] futex_hash_free+0x38/0xc0 [ 110.913291] mmput+0x2d3/0x390 [ 110.913310] do_exit+0x79d/0x2970 [ 110.913324] ? lock_release+0xc8/0x290 [ 110.913341] ? __pfx_do_exit+0x10/0x10 [ 110.913354] ? find_held_lock+0x2b/0x80 [ 110.913371] ? get_signal+0x835/0x2340 [ 110.913391] do_group_exit+0xd3/0x2a0 [ 110.913406] get_signal+0x2315/0x2340 [ 110.913428] ? __pfx_get_signal+0x10/0x10 [ 110.913444] ? do_futex+0x135/0x370 [ 110.913457] ? __pfx_do_futex+0x10/0x10 [ 110.913469] ? lock_acquire+0x15e/0x2f0 [ 110.913484] arch_do_signal_or_restart+0x80/0x790 [ 110.913502] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.913518] ? __x64_sys_futex+0x1c9/0x4d0 [ 110.913530] ? __x64_sys_futex+0x1d2/0x4d0 [ 110.913543] ? __fget_files+0x20d/0x3b0 [ 110.913555] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.913571] ? fdget+0x197/0x220 [ 110.913582] exit_to_user_mode_loop+0x8b/0x110 [ 110.913596] do_syscall_64+0x2f7/0x360 [ 110.913608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.913621] RIP: 0033:0x7f114e117b19 [ 110.913629] Code: Unable to access opcode bytes at 0x7f114e117aef. [ 110.913634] RSP: 002b:00007f114b68d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.913645] RAX: fffffffffffffe00 RBX: 00007f114e22af68 RCX: 00007f114e117b19 [ 110.913653] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f114e22af68 [ 110.913661] RBP: 00007f114e22af60 R08: 0000000000000000 R09: 0000000000000000 [ 110.913668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f114e22af6c [ 110.913675] R13: 00007fff2e8eb8ef R14: 00007f114b68d300 R15: 0000000000022000 [ 110.913691] [ 110.913695] kmemleak: Object (percpu) 0x607f1a6396d0 (size 8): [ 110.913701] kmemleak: comm "kworker/u10:6", pid 2422, jiffies 4294777481 [ 110.913708] kmemleak: min_count = 1 [ 110.913712] kmemleak: count = 0 [ 110.913716] kmemleak: flags = 0x21 [ 110.913720] kmemleak: checksum = 0 [ 110.913723] kmemleak: backtrace: [ 110.913727] pcpu_alloc_noprof+0x87a/0x1170 [ 110.913742] fib_nh_common_init+0x30/0xd0 [ 110.913754] fib6_nh_init+0x968/0x1a00 [ 110.913764] ip6_route_info_create_nh+0x530/0xf80 [ 110.913774] ip6_route_add.part.0+0x59/0x170 [ 110.913784] ip6_route_add+0x48/0x60 [ 110.913793] addrconf_add_mroute+0x12d/0x190 [ 110.913804] addrconf_add_dev+0x148/0x1c0 [ 110.913817] addrconf_dev_config+0x1e9/0x430 [ 110.913831] addrconf_notify+0xa70/0x1920 [ 110.913846] notifier_call_chain+0xc0/0x360 [ 110.913857] call_netdevice_notifiers_info+0xbe/0x140 [ 110.913868] netif_state_change+0x157/0x330 [ 110.913877] linkwatch_do_dev+0x111/0x150 [ 110.913888] __linkwatch_run_queue+0x2ab/0x710 [ 110.913898] linkwatch_event+0x4e/0x70 23:49:44 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x8, 0x8001, 0x81, {0x4, 0x5}, 0x1, 0x45}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x6, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x6f68b6e1, 0x3, {0x0, 0x0, 0x919e, 0x1, 0x2}, 0x6}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7, 0xffffff87, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0xc, [0x2, 0x7f, 0x3, 0xff, 0x1, 0x3]}, @end, @ssrr={0x89, 0xb, 0x30, [@empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x7, 0x0, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x5, [{@local, 0x400}, {@local, 0x686b}]}]}}}}}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000500)={0x3, 0x100, 0xffffffa1, 0x5, 0x7, 0x800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x700, 0x8000, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @generic={0x86, 0x8, "1e15aee6ca1f"}, @end]}}}}}) r4 = syz_io_uring_setup(0x3705, &(0x7f0000000600)={0x0, 0x4413, 0x2, 0x2, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000700)=r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x110, r4, 0x8000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000740)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2202000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@version_L}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}]}}) syz_io_uring_complete(r5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x5c25, 0xdd834ec, 0x5, {0x1, 0x200}, 0x7fff, 0x4}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000980)=0x5) 23:49:45 executing program 4: socketpair(0x29, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x2, 0x100, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c004093) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000814) socketpair(0xb, 0x1, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x77}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xfffffc00}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x62}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44001}, 0x4040080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000008c0)={0x1, 0x100, 0x8}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x200040c5}, 0x20000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x400000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc99}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) [ 111.089339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.089945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.151540] kmemleak: Found object by alias at 0x607f1a6396d4 [ 111.151558] CPU: 0 UID: 0 PID: 3780 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.151576] Tainted: [W]=WARN [ 111.151580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.151587] Call Trace: [ 111.151592] [ 111.151597] dump_stack_lvl+0xca/0x120 [ 111.151625] __lookup_object+0x94/0xb0 [ 111.151642] delete_object_full+0x27/0x70 [ 111.151658] free_percpu+0x30/0x1160 [ 111.151674] ? arch_uprobe_clear_state+0x16/0x140 [ 111.151695] futex_hash_free+0x38/0xc0 [ 111.151709] mmput+0x2d3/0x390 [ 111.151728] do_exit+0x79d/0x2970 [ 111.151741] ? lock_release+0xc8/0x290 [ 111.151758] ? __pfx_do_exit+0x10/0x10 [ 111.151772] ? find_held_lock+0x2b/0x80 [ 111.151789] ? get_signal+0x835/0x2340 [ 111.151809] do_group_exit+0xd3/0x2a0 [ 111.151823] get_signal+0x2315/0x2340 [ 111.151845] ? __pfx_get_signal+0x10/0x10 [ 111.151861] ? do_futex+0x135/0x370 [ 111.151875] ? __pfx_do_futex+0x10/0x10 [ 111.151887] ? lock_acquire+0x15e/0x2f0 [ 111.151902] arch_do_signal_or_restart+0x80/0x790 [ 111.151920] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.151936] ? __x64_sys_futex+0x1c9/0x4d0 [ 111.151948] ? __x64_sys_futex+0x1d2/0x4d0 [ 111.151961] ? __fget_files+0x20d/0x3b0 [ 111.151973] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.151988] ? fdget+0x197/0x220 [ 111.152000] exit_to_user_mode_loop+0x8b/0x110 [ 111.152014] do_syscall_64+0x2f7/0x360 [ 111.152026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.152038] RIP: 0033:0x7f114e117b19 [ 111.152047] Code: Unable to access opcode bytes at 0x7f114e117aef. [ 111.152052] RSP: 002b:00007f114b68d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.152063] RAX: fffffffffffffe00 RBX: 00007f114e22af68 RCX: 00007f114e117b19 [ 111.152071] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f114e22af68 [ 111.152078] RBP: 00007f114e22af60 R08: 0000000000000000 R09: 0000000000000000 [ 111.152085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f114e22af6c [ 111.152092] R13: 00007fff2e8eb8ef R14: 00007f114b68d300 R15: 0000000000022000 [ 111.152108] [ 111.152112] kmemleak: Object (percpu) 0x607f1a6396d0 (size 8): [ 111.152119] kmemleak: comm "kworker/u10:6", pid 2422, jiffies 4294777481 [ 111.152126] kmemleak: min_count = 1 [ 111.152130] kmemleak: count = 0 [ 111.152133] kmemleak: flags = 0x21 [ 111.152137] kmemleak: checksum = 0 [ 111.152141] kmemleak: backtrace: [ 111.152145] pcpu_alloc_noprof+0x87a/0x1170 [ 111.152159] fib_nh_common_init+0x30/0xd0 [ 111.152172] fib6_nh_init+0x968/0x1a00 [ 111.152182] ip6_route_info_create_nh+0x530/0xf80 [ 111.152192] ip6_route_add.part.0+0x59/0x170 [ 111.152201] ip6_route_add+0x48/0x60 [ 111.152210] addrconf_add_mroute+0x12d/0x190 [ 111.152221] addrconf_add_dev+0x148/0x1c0 [ 111.152234] addrconf_dev_config+0x1e9/0x430 [ 111.152248] addrconf_notify+0xa70/0x1920 [ 111.152264] notifier_call_chain+0xc0/0x360 [ 111.152274] call_netdevice_notifiers_info+0xbe/0x140 [ 111.152291] netif_state_change+0x157/0x330 [ 111.152300] linkwatch_do_dev+0x111/0x150 [ 111.152311] __linkwatch_run_queue+0x2ab/0x710 [ 111.152321] linkwatch_event+0x4e/0x70 23:49:45 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x8, 0x8001, 0x81, {0x4, 0x5}, 0x1, 0x45}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x6, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x6f68b6e1, 0x3, {0x0, 0x0, 0x919e, 0x1, 0x2}, 0x6}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7, 0xffffff87, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0xc, [0x2, 0x7f, 0x3, 0xff, 0x1, 0x3]}, @end, @ssrr={0x89, 0xb, 0x30, [@empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x7, 0x0, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x5, [{@local, 0x400}, {@local, 0x686b}]}]}}}}}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000500)={0x3, 0x100, 0xffffffa1, 0x5, 0x7, 0x800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x700, 0x8000, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @generic={0x86, 0x8, "1e15aee6ca1f"}, @end]}}}}}) r4 = syz_io_uring_setup(0x3705, &(0x7f0000000600)={0x0, 0x4413, 0x2, 0x2, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000700)=r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x110, r4, 0x8000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000740)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2202000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@version_L}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}]}}) syz_io_uring_complete(r5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x5c25, 0xdd834ec, 0x5, {0x1, 0x200}, 0x7fff, 0x4}) [ 111.348695] kmemleak: Found object by alias at 0x607f1a6396d4 [ 111.348713] CPU: 0 UID: 0 PID: 3806 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.348731] Tainted: [W]=WARN [ 111.348735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.348742] Call Trace: [ 111.348746] [ 111.348751] dump_stack_lvl+0xca/0x120 [ 111.348776] __lookup_object+0x94/0xb0 [ 111.348792] delete_object_full+0x27/0x70 [ 111.348808] free_percpu+0x30/0x1160 [ 111.348824] ? arch_uprobe_clear_state+0x16/0x140 [ 111.348845] futex_hash_free+0x38/0xc0 [ 111.348861] mmput+0x2d3/0x390 [ 111.348880] do_exit+0x79d/0x2970 [ 111.348898] ? __pfx_do_exit+0x10/0x10 [ 111.348912] ? find_held_lock+0x2b/0x80 [ 111.348929] ? get_signal+0x835/0x2340 [ 111.348949] do_group_exit+0xd3/0x2a0 [ 111.348964] get_signal+0x2315/0x2340 [ 111.348981] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 111.348998] ? __pfx_get_signal+0x10/0x10 [ 111.349014] ? __schedule+0xe91/0x3590 [ 111.349034] arch_do_signal_or_restart+0x80/0x790 [ 111.349052] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.349068] ? __x64_sys_futex+0x1c9/0x4d0 [ 111.349080] ? __x64_sys_futex+0x1d2/0x4d0 [ 111.349094] ? __fget_files+0x20d/0x3b0 [ 111.349106] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.349124] exit_to_user_mode_loop+0x8b/0x110 [ 111.349137] do_syscall_64+0x2f7/0x360 [ 111.349149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.349161] RIP: 0033:0x7f114e117b19 [ 111.349170] Code: Unable to access opcode bytes at 0x7f114e117aef. [ 111.349175] RSP: 002b:00007f114b68d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.349186] RAX: 0000000000000001 RBX: 00007f114e22af68 RCX: 00007f114e117b19 [ 111.349194] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f114e22af6c [ 111.349201] RBP: 00007f114e22af60 R08: 0000000000000009 R09: 0000000000000000 [ 111.349209] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f114e22af6c [ 111.349216] R13: 00007fff2e8eb8ef R14: 00007f114b68d300 R15: 0000000000022000 [ 111.349232] [ 111.349236] kmemleak: Object (percpu) 0x607f1a6396d0 (size 8): [ 111.349242] kmemleak: comm "kworker/u10:6", pid 2422, jiffies 4294777481 [ 111.349249] kmemleak: min_count = 1 [ 111.349253] kmemleak: count = 0 [ 111.349257] kmemleak: flags = 0x21 [ 111.349260] kmemleak: checksum = 0 [ 111.349264] kmemleak: backtrace: [ 111.349268] pcpu_alloc_noprof+0x87a/0x1170 [ 111.349288] fib_nh_common_init+0x30/0xd0 [ 111.349300] fib6_nh_init+0x968/0x1a00 [ 111.349310] ip6_route_info_create_nh+0x530/0xf80 [ 111.349320] ip6_route_add.part.0+0x59/0x170 [ 111.349330] ip6_route_add+0x48/0x60 [ 111.349339] addrconf_add_mroute+0x12d/0x190 [ 111.349350] addrconf_add_dev+0x148/0x1c0 [ 111.349362] addrconf_dev_config+0x1e9/0x430 [ 111.349377] addrconf_notify+0xa70/0x1920 [ 111.349392] notifier_call_chain+0xc0/0x360 [ 111.349403] call_netdevice_notifiers_info+0xbe/0x140 [ 111.349415] netif_state_change+0x157/0x330 [ 111.349424] linkwatch_do_dev+0x111/0x150 [ 111.349435] __linkwatch_run_queue+0x2ab/0x710 [ 111.349444] linkwatch_event+0x4e/0x70 23:49:45 executing program 4: socketpair(0x29, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x2, 0x100, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c004093) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000814) socketpair(0xb, 0x1, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x77}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xfffffc00}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x62}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44001}, 0x4040080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000008c0)={0x1, 0x100, 0x8}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x200040c5}, 0x20000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x400000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc99}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) [ 112.414247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.415172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.435517] kmemleak: Cannot insert 0x607f1a6396d4 into the object search tree (overlaps existing) [ 112.435533] CPU: 0 UID: 0 PID: 283 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.435550] Tainted: [W]=WARN [ 112.435554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.435561] Call Trace: [ 112.435565] [ 112.435570] dump_stack_lvl+0xca/0x120 [ 112.435597] __link_object+0x190/0x210 [ 112.435615] __create_object+0x48/0x80 [ 112.435633] pcpu_alloc_noprof+0x87a/0x1170 [ 112.435658] alloc_netdev_mqs+0x131/0x1360 [ 112.435675] ? __pfx_ieee80211_if_setup+0x10/0x10 [ 112.435695] ieee80211_if_add+0x1d9/0x1510 [ 112.435713] ? ieee80211_init_rate_ctrl_alg+0x83/0x650 [ 112.435728] ieee80211_register_hw+0x3538/0x3e00 [ 112.435749] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 112.435763] ? net_generic+0x25/0x2a0 [ 112.435781] ? find_held_lock+0x2b/0x80 [ 112.435801] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 112.435817] ? __hrtimer_setup+0x1a4/0x2c0 [ 112.435837] mac80211_hwsim_new_radio+0x2758/0x4ef0 [ 112.435859] ? __nla_validate_parse+0x2e6/0x2880 [ 112.435877] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 112.435895] hwsim_new_radio_nl+0xb0d/0x1250 [ 112.435907] ? kasan_save_track+0x14/0x30 [ 112.435923] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 112.435942] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 112.435955] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 112.435971] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 112.435983] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 112.436001] ? security_capable+0x2f/0x90 [ 112.436017] ? ns_capable+0xe2/0x120 [ 112.436036] genl_rcv_msg+0x532/0x7e0 [ 112.436049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.436061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 112.436077] ? __lock_acquire+0x694/0x1b70 [ 112.436092] netlink_rcv_skb+0x147/0x430 [ 112.436109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.436121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.436146] ? netlink_deliver_tap+0x1ae/0xce0 [ 112.436161] ? selinux_netlink_send+0x507/0x880 [ 112.436174] ? is_vmalloc_addr+0x86/0xa0 [ 112.436194] genl_rcv+0x28/0x40 [ 112.436203] netlink_unicast+0x5a7/0x870 [ 112.436222] ? __pfx_netlink_unicast+0x10/0x10 [ 112.436246] netlink_sendmsg+0x8ac/0xd80 [ 112.436265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.436294] __sys_sendto+0x506/0x570 [ 112.436311] ? __pfx___sys_sendto+0x10/0x10 [ 112.436325] ? finish_task_switch.isra.0+0x294/0x840 [ 112.436353] ? __pfx___schedule+0x10/0x10 [ 112.436370] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 112.436387] ? fput_close_sync+0x114/0x240 [ 112.436403] ? __pfx_fput_close_sync+0x10/0x10 [ 112.436418] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 112.436434] ? trace_csd_function_exit+0x134/0x190 [ 112.436455] __x64_sys_sendto+0xe1/0x1c0 [ 112.436469] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 112.436483] do_syscall_64+0xbf/0x360 [ 112.436495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.436507] RIP: 0033:0x7f893b2d58ac [ 112.436516] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 112.436527] RSP: 002b:00007ffc22b1dd70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 112.436539] RAX: ffffffffffffffda RBX: 00007f893c36e320 RCX: 00007f893b2d58ac [ 112.436547] RDX: 0000000000000024 RSI: 00007f893c36e370 RDI: 0000000000000003 [ 112.436554] RBP: 0000000000000000 R08: 00007ffc22b1ddc4 R09: 000000000000000c [ 112.436561] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.436568] R13: 00007f893c36e370 R14: 0000000000000003 R15: 0000000000000000 [ 112.436584] [ 112.437015] kmemleak: Kernel memory leak detector disabled [ 112.437019] kmemleak: Object (percpu) 0x607f1a6396d0 (size 8): [ 112.437025] kmemleak: comm "kworker/u10:6", pid 2422, jiffies 4294777481 [ 112.437033] kmemleak: min_count = 1 [ 112.437036] kmemleak: count = 0 [ 112.437040] kmemleak: flags = 0x21 [ 112.437044] kmemleak: checksum = 0 [ 112.437047] kmemleak: backtrace: [ 112.437051] pcpu_alloc_noprof+0x87a/0x1170 [ 112.437066] fib_nh_common_init+0x30/0xd0 [ 112.437078] fib6_nh_init+0x968/0x1a00 [ 112.437089] ip6_route_info_create_nh+0x530/0xf80 [ 112.437099] ip6_route_add.part.0+0x59/0x170 [ 112.437108] ip6_route_add+0x48/0x60 [ 112.437117] addrconf_add_mroute+0x12d/0x190 [ 112.437129] addrconf_add_dev+0x148/0x1c0 [ 112.437142] addrconf_dev_config+0x1e9/0x430 [ 112.437156] addrconf_notify+0xa70/0x1920 [ 112.437172] notifier_call_chain+0xc0/0x360 [ 112.437182] call_netdevice_notifiers_info+0xbe/0x140 [ 112.437192] netif_state_change+0x157/0x330 [ 112.437201] linkwatch_do_dev+0x111/0x150 [ 112.437211] __linkwatch_run_queue+0x2ab/0x710 [ 112.437221] linkwatch_event+0x4e/0x70 [ 112.488458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.489040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.526526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.527101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.575737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.576369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.720351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.720967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.735604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.736167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.844598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.845219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.863509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.864075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.028983] kmemleak: Automatic memory scanning thread ended 23:49:47 executing program 4: socketpair(0x29, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x2, 0x100, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c004093) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000814) socketpair(0xb, 0x1, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x77}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xfffffc00}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x62}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44001}, 0x4040080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000008c0)={0x1, 0x100, 0x8}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x6f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x200040c5}, 0x20000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x400000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc99}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) 23:49:47 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x8, 0x8001, 0x81, {0x4, 0x5}, 0x1, 0x45}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x6, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x6f68b6e1, 0x3, {0x0, 0x0, 0x919e, 0x1, 0x2}, 0x6}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7, 0xffffff87, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0xc, [0x2, 0x7f, 0x3, 0xff, 0x1, 0x3]}, @end, @ssrr={0x89, 0xb, 0x30, [@empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x7, 0x0, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x5, [{@local, 0x400}, {@local, 0x686b}]}]}}}}}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000500)={0x3, 0x100, 0xffffffa1, 0x5, 0x7, 0x800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x700, 0x8000, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @generic={0x86, 0x8, "1e15aee6ca1f"}, @end]}}}}}) r4 = syz_io_uring_setup(0x3705, &(0x7f0000000600)={0x0, 0x4413, 0x2, 0x2, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000700)=r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x110, r4, 0x8000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000740)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2202000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@version_L}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}]}}) syz_io_uring_complete(r5) 23:49:47 executing program 0: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5a60, 0x52}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004005}, 0x400d0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000240)={0x3f, 0x0, 'client1\x00', 0x4, "a7e31940b4af403d", "d697a084e7716bb5980cb9e658ba9b020d06db29de0525e05aeba601eb26d4e3", 0x9, 0x6}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5b}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000480)={0x3, 0x1, {0x0, 0x0, 0x3, 0x2, 0x2}, 0x3}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000580)=0x3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa5b}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x8ab3ca5d33dda427) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a00)=0xc) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x2200008, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@uid_lt}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfsroot}, {@euid_eq={'euid', 0x3d, r5}}, {@seclabel}]}}) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008081) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c40), 0x400002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000c80)={0x7ff, 0x0, {0xffffffffffffffff, 0x0, 0x1fd6, 0x2, 0x5}, 0x136}) 23:49:47 executing program 3: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xfc, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4805}, 0x24000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0xa84e, 0x6, 0x1, 'queue0\x00', 0x4}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8011}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38}}, 0x8001) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0xb01, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc60d, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000018) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) pipe2$9p(&(0x7f0000000ac0), 0x84000) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000b00)={0x9, 0x4}) 23:49:47 executing program 1: r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040854}, 0x24040809) socketpair(0x1e, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x144, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5b}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x11, 0x4, 0x7, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x101}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x573}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x20040) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x210000, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880)=0x2, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r7) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r10, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xa2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000000) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 23:49:47 executing program 6: r0 = syz_io_uring_complete(0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0xa4}, 0x2f) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x12342, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0x8000000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x301080c, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'full'}}, {@aname={'aname', 0x3d, 'full'}}], [{@uid_eq={'uid', 0x3d, r5}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, '\\].'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x36, 0x63, 0x34, 0x61, 0x66, 0x39], 0x2d, [0x66, 0x61, 0x37, 0x37], 0x2d, [0x30, 0x30, 0x33, 0x64], 0x2d, [0x0, 0x61, 0x31, 0x36], 0x2d, [0x38, 0x37, 0x39, 0x30, 0x38, 0x35, 0x31, 0x33]}}}, {@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) r6 = syz_io_uring_complete(r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x5, 0x44b53c0f, {{0xa, 0x4, 0x2, 0x3c, 0x28, 0x64, 0x0, 0x24, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x13, 0x61, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @multicast2]}]}}}}}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x2004c805) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000540)) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000580)={0x96, "59af2db250b3f7e0a06740c3db9a6abeceee33ae9831be5eb68aad4590a1fb2dd4413ba44abbc3f85035cb58398a1a8af7ac126637bf9ad1a1e8746b1875b109fc718fe677bf69abd53590908dbcd7ed4ed8e8ffbc45b22361021a48e53dfe07db3bd758e0a4bfd01384033bcd9d510f223e33ba50b65cd56c0d1d0fd19de3b5752ccee8e50c4812ad957fef4b0a247f6efa406f2fdd"}) r7 = syz_io_uring_setup(0x4d05, &(0x7f0000000640)={0x0, 0xdb54, 0x35, 0x2, 0x10e, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x810, r7, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$RTC_WIE_OFF(r6, 0x7010) 23:49:47 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_complete(0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x3ee, 0x3, 0x7}) r2 = fsopen(&(0x7f0000000100)='overlay\x00', 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000200)=r1, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000240)) r4 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000300)={0x50000005}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)=')\x00', &(0x7f0000000380)='overlay\x00', 0x0) r5 = epoll_create1(0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xe0000001}) select(0x40, &(0x7f0000000440)={0x2, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffe01, 0x679c}, &(0x7f0000000480)={0x80000001, 0x7, 0x1, 0x4, 0x90000000000000, 0xfffffffffffffffb, 0x401, 0xfffffffffffffeff}, &(0x7f00000004c0)={0x9, 0x0, 0x5, 0x2, 0x4, 0x401, 0x4, 0xfffffffffffff800}, &(0x7f0000000500)={0x0, 0xea60}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x800) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x200428c0) epoll_pwait(r0, &(0x7f00000006c0)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000700)={[0x100]}, 0x8) 23:49:47 executing program 7: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x144, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x144}}, 0xc1) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd85ed0401ffda50c}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4885}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x8016) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x4084) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x19c, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24004804}, 0x40) r4 = syz_io_uring_complete(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x24}}, 0x20048804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x28020080}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x58}}, 0x4040005) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000d80)=0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 23:49:47 executing program 0: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5a60, 0x52}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004005}, 0x400d0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000240)={0x3f, 0x0, 'client1\x00', 0x4, "a7e31940b4af403d", "d697a084e7716bb5980cb9e658ba9b020d06db29de0525e05aeba601eb26d4e3", 0x9, 0x6}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5b}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000480)={0x3, 0x1, {0x0, 0x0, 0x3, 0x2, 0x2}, 0x3}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000580)=0x3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa5b}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x8ab3ca5d33dda427) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a00)=0xc) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x2200008, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@uid_lt}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfsroot}, {@euid_eq={'euid', 0x3d, r5}}, {@seclabel}]}}) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008081) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c40), 0x400002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000c80)={0x7ff, 0x0, {0xffffffffffffffff, 0x0, 0x1fd6, 0x2, 0x5}, 0x136}) 23:49:47 executing program 1: r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040854}, 0x24040809) socketpair(0x1e, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x144, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5b}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x11, 0x4, 0x7, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x101}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x573}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x20040) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x210000, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880)=0x2, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r7) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r10, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xa2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000000) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 23:49:47 executing program 6: r0 = syz_io_uring_complete(0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0xa4}, 0x2f) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x12342, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0x8000000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x301080c, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'full'}}, {@aname={'aname', 0x3d, 'full'}}], [{@uid_eq={'uid', 0x3d, r5}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, '\\].'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x36, 0x63, 0x34, 0x61, 0x66, 0x39], 0x2d, [0x66, 0x61, 0x37, 0x37], 0x2d, [0x30, 0x30, 0x33, 0x64], 0x2d, [0x0, 0x61, 0x31, 0x36], 0x2d, [0x38, 0x37, 0x39, 0x30, 0x38, 0x35, 0x31, 0x33]}}}, {@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) r6 = syz_io_uring_complete(r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x5, 0x44b53c0f, {{0xa, 0x4, 0x2, 0x3c, 0x28, 0x64, 0x0, 0x24, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x13, 0x61, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @multicast2]}]}}}}}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x2004c805) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000540)) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000580)={0x96, "59af2db250b3f7e0a06740c3db9a6abeceee33ae9831be5eb68aad4590a1fb2dd4413ba44abbc3f85035cb58398a1a8af7ac126637bf9ad1a1e8746b1875b109fc718fe677bf69abd53590908dbcd7ed4ed8e8ffbc45b22361021a48e53dfe07db3bd758e0a4bfd01384033bcd9d510f223e33ba50b65cd56c0d1d0fd19de3b5752ccee8e50c4812ad957fef4b0a247f6efa406f2fdd"}) r7 = syz_io_uring_setup(0x4d05, &(0x7f0000000640)={0x0, 0xdb54, 0x35, 0x2, 0x10e, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x810, r7, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$RTC_WIE_OFF(r6, 0x7010) 23:49:47 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_complete(0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x3ee, 0x3, 0x7}) r2 = fsopen(&(0x7f0000000100)='overlay\x00', 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000200)=r1, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000240)) r4 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000300)={0x50000005}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)=')\x00', &(0x7f0000000380)='overlay\x00', 0x0) r5 = epoll_create1(0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xe0000001}) select(0x40, &(0x7f0000000440)={0x2, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffe01, 0x679c}, &(0x7f0000000480)={0x80000001, 0x7, 0x1, 0x4, 0x90000000000000, 0xfffffffffffffffb, 0x401, 0xfffffffffffffeff}, &(0x7f00000004c0)={0x9, 0x0, 0x5, 0x2, 0x4, 0x401, 0x4, 0xfffffffffffff800}, &(0x7f0000000500)={0x0, 0xea60}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x800) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x200428c0) epoll_pwait(r0, &(0x7f00000006c0)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000700)={[0x100]}, 0x8) 23:49:47 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x8, 0x8001, 0x81, {0x4, 0x5}, 0x1, 0x45}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x6, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x6f68b6e1, 0x3, {0x0, 0x0, 0x919e, 0x1, 0x2}, 0x6}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7, 0xffffff87, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0xc, [0x2, 0x7f, 0x3, 0xff, 0x1, 0x3]}, @end, @ssrr={0x89, 0xb, 0x30, [@empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x7, 0x0, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x5, [{@local, 0x400}, {@local, 0x686b}]}]}}}}}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000500)={0x3, 0x100, 0xffffffa1, 0x5, 0x7, 0x800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x700, 0x8000, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @generic={0x86, 0x8, "1e15aee6ca1f"}, @end]}}}}}) r4 = syz_io_uring_setup(0x3705, &(0x7f0000000600)={0x0, 0x4413, 0x2, 0x2, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000700)=r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x110, r4, 0x8000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000740)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2202000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@version_L}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@appraise_type}]}}) syz_io_uring_complete(r5) 23:49:47 executing program 3: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xfc, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4805}, 0x24000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0xa84e, 0x6, 0x1, 'queue0\x00', 0x4}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8011}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38}}, 0x8001) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0xb01, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc60d, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000018) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) pipe2$9p(&(0x7f0000000ac0), 0x84000) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000b00)={0x9, 0x4}) 23:49:47 executing program 6: r0 = syz_io_uring_complete(0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0xa4}, 0x2f) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x12342, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0x8000000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x301080c, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'full'}}, {@aname={'aname', 0x3d, 'full'}}], [{@uid_eq={'uid', 0x3d, r5}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, '\\].'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x36, 0x63, 0x34, 0x61, 0x66, 0x39], 0x2d, [0x66, 0x61, 0x37, 0x37], 0x2d, [0x30, 0x30, 0x33, 0x64], 0x2d, [0x0, 0x61, 0x31, 0x36], 0x2d, [0x38, 0x37, 0x39, 0x30, 0x38, 0x35, 0x31, 0x33]}}}, {@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) r6 = syz_io_uring_complete(r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x5, 0x44b53c0f, {{0xa, 0x4, 0x2, 0x3c, 0x28, 0x64, 0x0, 0x24, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x13, 0x61, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @multicast2]}]}}}}}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x2004c805) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000540)) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000580)={0x96, "59af2db250b3f7e0a06740c3db9a6abeceee33ae9831be5eb68aad4590a1fb2dd4413ba44abbc3f85035cb58398a1a8af7ac126637bf9ad1a1e8746b1875b109fc718fe677bf69abd53590908dbcd7ed4ed8e8ffbc45b22361021a48e53dfe07db3bd758e0a4bfd01384033bcd9d510f223e33ba50b65cd56c0d1d0fd19de3b5752ccee8e50c4812ad957fef4b0a247f6efa406f2fdd"}) r7 = syz_io_uring_setup(0x4d05, &(0x7f0000000640)={0x0, 0xdb54, 0x35, 0x2, 0x10e, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x810, r7, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$RTC_WIE_OFF(r6, 0x7010) 23:49:47 executing program 7: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x144, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x144}}, 0xc1) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd85ed0401ffda50c}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4885}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x8016) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x4084) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x19c, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24004804}, 0x40) r4 = syz_io_uring_complete(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x24}}, 0x20048804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x28020080}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x58}}, 0x4040005) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000d80)=0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) SYZFAIL: failed to write(kmemleak, "scan") (errno 1: Operation not permitted) BUG: leak checking failed VM DIAGNOSIS: 23:49:47 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffff110012c2f24 RDX=dffffc0000000000 RSI=000000008301a466 RDI=ffff88806ce31850 RBP=ffff888009617920 RSP=ffff888009617808 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888009617928 R13=ffff888009617910 R14=ffff888009617909 R15=ffff8880096178c8 RIP=ffffffff813584d4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005cb07d8 CR3=000000000d32d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffff0f0e0d0c0b0a0908070605 XMM03=32706f6f6c2f6b636f6c622f6c617574 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000ff0000ff0000 XMM10=00000000000000000000200000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0b08559 RBX=dffffc0000000000 RCX=ffffffff81834aa6 RDX=0000000000000000 RSI=ffffffff81830cd4 RDI=ffffffff85842ac8 RBP=ffff88800f677d18 RSP=ffff88800f677c50 R8 =0000000000000000 R9 =ffffed1001f38a06 R10=0000000040000003 R11=0000000000000000 R12=0000000000000095 R13=ffff88800f677d50 R14=ffffc900006c70e8 R15=0000000000000095 RIP=ffffffff81830d0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f17c67a58c0 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f194a69e3b8 CR3=000000000df9c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055a2e9a00560000055a2e9a00540 XMM06=000055a2e99fbe0000000003ffffffff XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000